This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JWk1hCl4CSxzpTLejw0uG7BsODo.roa File: JWk1hCl4CSxzpTLejw0uG7BsODo.roa (raw, json) Hash identifier: xUnFhpy7BvO2nAhV/+kT90lV4NBgkWQopxBwurWIA44= Subject key identifier: 25:69:35:84:29:78:09:2C:73:A5:32:DE:8F:0D:2E:1B:B0:6C:38:3A Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA5328429CC7FCD0528AD27D1550728 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JWk1hCl4CSxzpTLejw0uG7BsODo.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34577 IP address blocks: 213.16.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:32:84:29:cc:7f:cd:05:28:ad:27:d1:55:07:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=256935842978092c73a532de8f0d2e1bb06c383a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:a8:b9:35:40:3e:39:f0:79:5a:0b:46:d7: 47:82:f6:24:5d:35:e5:8b:8f:8d:44:62:8b:c4:18: ad:87:97:93:0c:7c:2e:dc:95:71:2e:01:59:7b:92: 2e:4e:50:26:51:d9:9a:ff:26:41:60:eb:cd:0f:f1: 55:4c:de:b6:62:e5:b9:89:b9:e1:6a:da:cd:76:02: ee:ff:c6:98:62:e6:70:76:ff:c2:a0:bb:fc:60:e9: 4d:0b:50:32:ce:17:3f:22:29:b9:a2:04:17:f7:8e: 13:8d:9c:85:d8:a9:cd:2a:0e:79:70:68:4f:74:a3: 09:41:b3:3a:2f:67:be:ad:2e:4e:24:a7:71:f8:02: e3:9d:46:f5:26:4b:91:a3:00:1f:12:7b:7f:d6:bc: d3:64:0b:b5:df:bc:36:a2:26:d0:07:a6:8d:97:b0: 77:4a:b4:cc:88:5e:52:85:60:82:96:08:0b:4b:fc: ad:f9:62:b5:f5:3d:8f:33:be:c0:54:fe:54:e8:5f: ea:56:9b:b4:6b:8b:48:62:f6:5c:bf:28:bf:4a:19: de:90:8d:91:4e:0d:5e:3d:43:d0:b5:4c:1f:ea:e2: 5c:49:24:f3:ac:b9:d1:61:83:77:85:f1:2c:4c:be: 9b:ae:fa:ea:f2:a4:eb:ad:9d:e0:b0:bb:0d:72:90: 77:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:69:35:84:29:78:09:2C:73:A5:32:DE:8F:0D:2E:1B:B0:6C:38:3A X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JWk1hCl4CSxzpTLejw0uG7BsODo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.16.56.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:00:d7:77:d7:e8:49:72:12:5b:c0:d8:0f:3e:22:87:8b:92: d5:e7:06:8c:4a:2a:0b:4c:38:71:b7:86:b3:62:05:a9:8f:3a: 02:7f:c7:5d:47:34:a6:8b:bb:93:4d:34:7a:e5:f9:46:f5:73: 0a:2a:76:ba:8d:19:0b:1d:64:45:83:f8:0d:56:f7:d0:89:08: ac:77:47:b3:c3:f4:13:e9:ee:42:97:b4:d9:e7:23:da:86:a4: e9:1e:bd:b5:1b:59:2b:49:3e:05:fb:ce:7b:3e:0c:b7:28:c4: 69:d4:e0:11:ad:b9:df:81:9f:75:4f:9d:32:75:1b:05:b5:f8: 28:04:fc:03:37:b1:d6:d4:09:c2:05:50:fe:29:2b:f2:38:72: 13:0a:ec:26:b2:e1:5d:1c:53:b2:e8:56:00:59:11:55:5e:17: 59:de:a4:a8:bc:f3:86:17:1a:03:67:02:ed:8f:c2:11:67:54: 0e:6c:fb:57:e7:86:e8:05:36:bb:2c:c0:d4:af:0d:ba:62:54: 8e:73:91:6a:cc:74:71:dc:9e:f0:8c:74:a3:3e:aa:85:49:78: 74:82:53:a0:a2:b5:d4:b0:a7:e6:65:cf:d9:07:ab:34:fd:6e: d1:9b:1e:66:72:ee:08:ef:c2:3a:0b:80:e9:68:fe:98:9e:82: 6f:e1:ff:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTKEKcx/zQUorSfRVQcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTY5MzU4NDI5NzgwOTJjNzNhNTMyZGU4ZjBkMmUxYmIwNmMzODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucWouTVAPjnweVoLRtdHgvYkXTXl i4+NRGKLxBith5eTDHwu3JVxLgFZe5IuTlAmUdma/yZBYOvND/FVTN62YuW5ibnh atrNdgLu/8aYYuZwdv/CoLv8YOlNC1Ayzhc/Iim5ogQX944TjZyF2KnNKg55cGhP dKMJQbM6L2e+rS5OJKdx+ALjnUb1JkuRowAfEnt/1rzTZAu137w2oibQB6aNl7B3 SrTMiF5ShWCClggLS/yt+WK19T2PM77AVP5U6F/qVpu0a4tIYvZcvyi/ShnekI2R Tg1ePUPQtUwf6uJcSSTzrLnRYYN3hfEsTL6brvrq8qTrrZ3gsLsNcpB3DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCVpNYQpeAksc6Uy3o8NLhuwbDg6MB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvSldrMWhDbDRDU3h6cFRMZWp3MHVHN0JzT0RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RA4MA0G CSqGSIb3DQEBCwUAA4IBAQBPANd31+hJchJbwNgPPiKHi5LV5waMSioLTDhxt4az YgWpjzoCf8ddRzSmi7uTTTR65flG9XMKKna6jRkLHWRFg/gNVvfQiQisd0ezw/QT 6e5Cl7TZ5yPahqTpHr21G1krST4F+857Pgy3KMRp1OARrbnfgZ91T50ydRsFtfgo BPwDN7HW1AnCBVD+KSvyOHITCuwmsuFdHFOy6FYAWRFVXhdZ3qSovPOGFxoDZwLt j8IRZ1QObPtX54boBTa7LMDUrw26YlSOc5FqzHRx3J7wjHSjPqqFSXh0glOgorXU sKfmZc/ZB6s0/W7Rmx5mcu4I78I6C4DpaP6YnoJv4f8+ -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:10 2026 by rpki-client