This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/elt9hjDVTMaGilS1Vken352luHo.roa File: elt9hjDVTMaGilS1Vken352luHo.roa (raw, json) Hash identifier: r+EfhHZcyWbDYjq7nLvvCEX6mT7J9uU4yaMlXGkh+FM= Subject key identifier: 7A:5B:7D:86:30:D5:4C:C6:86:8A:54:B5:56:47:A7:DF:9D:A5:B8:7A Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA53947D4355B9F34BC38F00A3A93ED Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/elt9hjDVTMaGilS1Vken352luHo.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47771 IP address blocks: 213.91.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:39:47:d4:35:5b:9f:34:bc:38:f0:0a:3a:93:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a5b7d8630d54cc6868a54b55647a7df9da5b87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:49:5f:02:f5:f5:08:57:ff:fa:ac:05:4c:5b: 4a:92:2c:09:7b:69:5a:b0:50:20:99:53:31:b4:b5: 49:d6:b9:f7:92:24:70:b7:7f:4a:30:8c:2e:84:0f: 38:30:92:cd:b2:f0:42:2e:3c:43:4c:77:db:8f:b3: 1b:58:8b:d1:67:6c:44:d0:84:66:f9:db:86:ae:35: 5c:f8:58:30:c4:49:63:ae:33:5b:47:16:da:27:35: f6:57:d8:77:0d:ad:ad:1b:da:59:da:99:c7:1f:ff: 74:42:a2:96:4e:0e:d2:0f:ff:dc:0d:a4:98:15:80: f4:92:97:ae:1d:0a:fa:8d:22:91:b5:96:73:31:ae: f3:da:86:7e:aa:db:6f:b8:18:33:b3:47:b0:af:c9: 66:ca:af:ac:72:78:ea:16:ce:a7:ac:b4:9e:65:99: ec:55:45:36:73:79:06:58:4e:e7:c5:f3:4e:18:a2: 61:24:1e:59:29:af:98:c0:e3:e4:da:fd:67:35:8a: 34:34:43:76:ec:3a:17:6b:fb:c4:69:48:eb:0f:6f: 26:f2:30:2b:f2:f8:70:a0:56:ce:5a:3d:99:b4:60: 8d:38:4c:3e:40:42:b7:f3:ed:40:a9:94:d5:34:2b: ae:38:d5:f1:fe:56:7c:9a:5b:a9:bf:05:25:83:2d: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5B:7D:86:30:D5:4C:C6:86:8A:54:B5:56:47:A7:DF:9D:A5:B8:7A X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/elt9hjDVTMaGilS1Vken352luHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.91.215.0/24 Signature Algorithm: sha256WithRSAEncryption 79:70:d3:fa:ee:a5:b9:8c:e3:de:57:e8:8f:f3:a0:92:41:42: c5:5b:44:a3:1d:85:78:f9:c2:c1:dc:0b:3b:b1:94:b6:20:60: 07:e5:ee:dc:67:79:4e:88:29:bc:6b:1e:cb:7f:64:81:b9:ae: 2d:81:9f:53:26:80:8d:51:3e:fc:aa:87:23:40:25:45:a5:e2: 2e:d9:66:63:f9:21:13:c6:5d:df:61:80:08:6a:3b:23:f9:b0: d3:d4:96:f6:1a:9d:69:a3:c9:56:2e:ea:76:1e:07:9c:b1:d7: 5a:a5:08:74:84:6f:b9:97:1a:23:7e:bc:90:50:64:c0:ee:d9: 7b:f4:85:5d:13:a4:54:9a:5e:8e:33:06:f0:e9:44:ae:8f:f0: 55:d7:74:e6:80:bf:77:1c:f6:e0:42:c7:6e:60:f5:ba:1b:6a: 89:9a:02:0b:a0:d1:f0:5e:12:91:6a:e7:84:8c:fe:03:98:8c: a2:60:f0:bd:79:e6:d6:e1:fd:60:ee:eb:07:d0:f4:97:4c:bb: 47:d5:61:72:4c:c0:4d:63:3d:fa:78:a0:bb:8c:c3:45:8b:e7: d8:65:5c:37:ad:81:fe:4f:69:6d:ab:23:07:c6:c6:78:46:99: 8b:74:84:c4:11:cd:78:29:d4:fe:50:09:7d:cd:6b:bc:3e:ab: 6b:6a:c8:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTlH1DVbnzS8OPAKOpPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTViN2Q4NjMwZDU0Y2M2ODY4YTU0YjU1NjQ3YTdkZjlkYTViODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ElfAvX1CFf/+qwFTFtKkiwJe2la sFAgmVMxtLVJ1rn3kiRwt39KMIwuhA84MJLNsvBCLjxDTHfbj7MbWIvRZ2xE0IRm +duGrjVc+FgwxEljrjNbRxbaJzX2V9h3Da2tG9pZ2pnHH/90QqKWTg7SD//cDaSY FYD0kpeuHQr6jSKRtZZzMa7z2oZ+qttvuBgzs0ewr8lmyq+scnjqFs6nrLSeZZns VUU2c3kGWE7nxfNOGKJhJB5ZKa+YwOPk2v1nNYo0NEN27DoXa/vEaUjrD28m8jAr 8vhwoFbOWj2ZtGCNOEw+QEK38+1AqZTVNCuuONXx/lZ8mlupvwUlgy30nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHpbfYYw1UzGhopUtVZHp9+dpbh6MB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvZWx0OWhqRFZUTWFHaWxTMVZrZW4zNTJsdUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VvXMA0G CSqGSIb3DQEBCwUAA4IBAQB5cNP67qW5jOPeV+iP86CSQULFW0SjHYV4+cLB3As7 sZS2IGAH5e7cZ3lOiCm8ax7Lf2SBua4tgZ9TJoCNUT78qocjQCVFpeIu2WZj+SET xl3fYYAIajsj+bDT1Jb2Gp1po8lWLup2HgecsddapQh0hG+5lxojfryQUGTA7tl7 9IVdE6RUml6OMwbw6USuj/BV13TmgL93HPbgQsduYPW6G2qJmgILoNHwXhKRaueE jP4DmIyiYPC9eebW4f1g7usH0PSXTLtH1WFyTMBNYz36eKC7jMNFi+fYZVw3rYH+ T2ltqyMHxsZ4RpmLdITEEc14KdT+UAl9zWu8Pqtrasj/ -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:53 2026 by rpki-client