This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa File: pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa (raw, json) Hash identifier: fiAhIReHkKJDspHClaY6l1S5vNnjpZ4eQPqh1G/RGnQ= Subject key identifier: A6:7A:0D:0E:70:71:11:F0:B6:63:47:8E:4A:ED:D9:2E:FA:09:F1:B1 Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84 Certificate serial: 019B7F1559FC433840610D0BF3EC2493AD1B Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa Signing time: Fri 02 Jan 2026 14:21:04 +0000 ROA not before: Fri 02 Jan 2026 14:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201178 IP address blocks: 213.128.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:59:fc:43:38:40:61:0d:0b:f3:ec:24:93:ad:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84 Validity Not Before: Jan 2 14:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a67a0d0e707111f0b663478e4aedd92efa09f1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:73:8d:7a:e4:fc:cf:cb:de:71:b9:b2:e8:db: 43:25:22:4e:9c:80:c8:6b:36:06:01:c2:51:11:6e: 27:0d:1b:7e:ad:5c:fd:2f:f7:76:98:77:5b:dc:18: 51:ad:5f:f3:78:98:23:61:e9:89:7b:20:05:65:83: e5:ef:42:09:71:64:75:43:f0:eb:2c:dc:5a:fe:49: 67:2f:d0:ff:1c:85:2c:08:e9:52:b4:62:38:3d:f8: 1d:51:a9:eb:32:f0:3d:5b:16:22:e3:fd:4a:42:b5: 5a:ce:e4:2d:d1:41:58:55:00:82:cc:98:94:fa:41: ca:23:10:24:79:75:dc:4d:c5:19:65:c4:a0:a8:de: 79:77:f6:68:68:6a:95:bb:48:84:1d:d7:54:71:88: 6f:86:83:ef:07:b0:46:13:ef:ab:e1:20:f9:f3:f4: 65:5e:49:40:b0:13:7e:67:8d:69:cb:66:41:86:15: fe:ed:05:a8:52:b2:dd:fc:29:2c:43:be:86:37:85: 5c:1c:15:56:99:e7:2a:5e:16:37:d0:c3:ea:35:c4: 16:1c:23:ad:e3:fa:20:89:29:34:d4:a8:ac:3c:4c: 03:c5:9e:56:3d:28:6f:b2:ed:9f:54:93:d0:1a:48: b4:ee:97:c4:74:07:97:74:ff:2f:46:dc:9b:8e:b7: ac:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7A:0D:0E:70:71:11:F0:B6:63:47:8E:4A:ED:D9:2E:FA:09:F1:B1 X509v3 Authority Key Identifier: keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.128.70.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:8b:9d:7d:d5:ad:76:38:ee:7e:7a:4a:eb:31:9a:ae:f6:33: 19:80:2a:70:51:26:b7:25:38:c9:f6:5f:3f:24:61:4d:e3:86: f4:3a:02:b9:e9:5a:24:93:3a:b9:c8:d3:de:2b:32:51:62:7f: 9d:bf:45:ee:76:c4:f3:14:63:e0:de:6b:82:bd:ec:68:1b:cf: df:d3:49:df:27:d5:97:b4:85:2c:ec:cc:31:f4:da:01:3d:2a: 58:44:67:be:0a:d2:20:23:cd:f5:32:f8:14:48:34:29:81:1b: b4:04:9b:d3:03:e1:b4:8f:62:be:55:d5:d0:6d:8f:80:f5:4c: 29:c2:d7:6b:87:84:40:79:6d:5b:bd:4f:b3:a6:3b:ab:ac:94: 65:aa:21:87:24:1a:73:18:d7:38:a1:ce:31:a4:96:fa:e7:01: 55:08:b6:24:ca:de:87:cd:97:e8:c4:8c:00:4e:f0:a7:18:6c: 36:b4:b4:72:51:b6:a6:f6:c4:a6:ab:43:54:b0:87:64:4e:43: b3:0f:93:fb:38:d6:d0:d8:77:ef:91:59:b4:f7:e0:15:df:41: b5:5b:fb:2e:6c:bf:c8:5d:49:4a:c2:13:5d:0d:e7:8b:a0:7c: b4:eb:8b:6d:63:10:34:f7:d6:ea:01:f1:3e:ea:92:05:70:42: b1:5c:0b:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVn8QzhAYQ0L8+wkk60bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NzFiYmYxZDNkM2MwZWZlMzZkZTExMDM5MmJlMGM3YWM0 NDdhODQwHhcNMjYwMTAyMTQyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjdhMGQwZTcwNzExMWYwYjY2MzQ3OGU0YWVkZDkyZWZhMDlmMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnONeuT8z8vecbmy6NtDJSJOnIDI azYGAcJREW4nDRt+rVz9L/d2mHdb3BhRrV/zeJgjYemJeyAFZYPl70IJcWR1Q/Dr LNxa/klnL9D/HIUsCOlStGI4PfgdUanrMvA9WxYi4/1KQrVazuQt0UFYVQCCzJiU +kHKIxAkeXXcTcUZZcSgqN55d/ZoaGqVu0iEHddUcYhvhoPvB7BGE++r4SD58/Rl XklAsBN+Z41py2ZBhhX+7QWoUrLd/CksQ76GN4VcHBVWmecqXhY30MPqNcQWHCOt 4/ogiSk01KisPEwDxZ5WPShvsu2fVJPQGki07pfEdAeXdP8vRtybjrespwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKZ6DQ5wcRHwtmNHjkrt2S76CfGxMB8GA1UdIwQY MBaAFPVxu/HT08Dv423hEDkr4MesRHqEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYt YTk2NTdlYjFmOGQ3LzEvcG5vTkRuQnhFZkMyWTBlT1N1M1pMdm9KOGJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYtYTk2NTdlYjFmOGQ3 LzEvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YBGMA0G CSqGSIb3DQEBCwUAA4IBAQAti5191a12OO5+ekrrMZqu9jMZgCpwUSa3JTjJ9l8/ JGFN44b0OgK56Vokkzq5yNPeKzJRYn+dv0XudsTzFGPg3muCvexoG8/f00nfJ9WX tIUs7Mwx9NoBPSpYRGe+CtIgI831MvgUSDQpgRu0BJvTA+G0j2K+VdXQbY+A9Uwp wtdrh4RAeW1bvU+zpjurrJRlqiGHJBpzGNc4oc4xpJb65wFVCLYkyt6HzZfoxIwA TvCnGGw2tLRyUbam9sSmq0NUsIdkTkOzD5P7ONbQ2HfvkVm09+AV30G1W/subL/I XUlKwhNdDeeLoHy064ttYxA099bqAfE+6pIFcEKxXAtm -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:13 2026 by rpki-client