This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/tHi9DAB3Y1vLkftGdVyKjQSwm5A.roa File: tHi9DAB3Y1vLkftGdVyKjQSwm5A.roa (raw, json) Hash identifier: mpFHipJK/P9rN0BxP+4w7cLyVyzH1RstDtW3ozp+qIA= Subject key identifier: B4:78:BD:0C:00:77:63:5B:CB:91:FB:46:75:5C:8A:8D:04:B0:9B:90 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15C42EC53F63C2F015A4116D537082 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/tHi9DAB3Y1vLkftGdVyKjQSwm5A.roa Signing time: Fri 02 Jan 2026 14:21:31 +0000 ROA not before: Fri 02 Jan 2026 14:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207904 IP address blocks: 213.0.76.0/24 maxlen: 24 213.0.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c4:2e:c5:3f:63:c2:f0:15:a4:11:6d:53:70:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b478bd0c0077635bcb91fb46755c8a8d04b09b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:8b:25:98:e5:b2:e2:e0:f5:ae:11:d0:56: b5:12:d6:d9:ff:a8:fd:7a:b7:39:f3:0e:28:89:f5: b2:16:ea:51:0f:56:5e:87:b0:4a:12:f8:c3:c7:85: f5:dd:8c:af:e7:3e:5a:1a:b4:ae:fd:60:c7:f3:36: 28:8c:f2:90:14:a1:47:12:d2:81:c9:ae:85:f9:ca: 82:a9:68:5f:80:d4:e4:3c:ef:e6:15:73:42:d0:57: 26:70:f4:0b:5a:a8:44:76:4a:a3:3e:95:67:c9:c9: f1:bb:c6:d4:bc:05:d2:80:e6:45:54:78:29:27:d1: 9b:4b:a0:91:82:ab:f2:19:1b:49:70:42:13:8a:d9: fb:b8:c7:fb:29:f0:06:18:b9:50:99:65:0f:14:db: ba:f6:5a:f7:d3:9b:cf:cd:ca:55:05:28:8a:9b:cd: 43:f1:97:fd:63:43:07:fa:11:39:df:b8:c9:d5:50: 0f:67:b4:4f:5f:9d:ff:84:f2:f2:a2:d0:11:7a:71: 04:03:20:10:47:29:fa:c6:e5:6c:fa:72:8b:43:42: 7d:04:8c:ff:bf:b3:44:a9:55:f1:96:da:38:d3:c2: bf:34:ed:9a:18:26:13:70:a4:75:00:3d:d4:41:0f: 7b:9f:6c:93:1a:9f:56:7b:35:37:b1:8b:47:39:51: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:78:BD:0C:00:77:63:5B:CB:91:FB:46:75:5C:8A:8D:04:B0:9B:90 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/tHi9DAB3Y1vLkftGdVyKjQSwm5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.0.76.0/23 Signature Algorithm: sha256WithRSAEncryption 53:e7:36:dc:ce:8f:13:0a:3d:97:fd:a0:94:df:da:d9:3f:2b: 54:4e:5b:df:61:f8:4a:87:fd:25:2a:95:82:3e:65:d6:63:d0: e6:8b:50:b1:c9:c3:fe:44:3f:48:23:98:7f:79:12:15:00:33: 94:ab:ea:d7:8e:40:28:09:b4:f9:2d:37:b6:4c:c7:f5:2a:35: 73:c3:b4:33:a9:5f:14:5f:8a:d1:c1:09:1a:0e:4b:71:2e:27: 7b:3b:80:03:4d:c8:64:77:c3:a7:1a:64:22:dd:5d:14:dc:77: 2f:e9:f0:c8:f5:a4:8b:f0:e7:ed:d2:36:eb:c5:d1:44:ef:f4: f6:7b:9c:88:16:0f:03:6d:05:dd:98:b7:b8:f3:14:02:8c:ec: a5:89:73:c9:82:17:68:49:c4:ef:a4:d9:b8:cd:b8:89:ed:b5: b3:0a:7f:d6:19:dd:31:cc:e5:d9:f0:eb:df:00:9d:a0:f9:43: 8c:bc:4c:59:50:a3:e8:c3:4f:2c:58:60:9c:f7:98:ef:3c:32: 5d:35:37:16:a1:22:87:7b:41:2d:9a:5d:42:02:17:bc:9f:6f: b4:84:07:1c:aa:be:95:bd:da:ca:6c:5a:b5:92:68:2c:2b:27: d5:d7:e2:2d:84:c4:18:0a:0c:31:86:bb:54:3f:70:f8:06:6a: fe:11:4f:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcQuxT9jwvAVpBFtU3CCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDc4YmQwYzAwNzc2MzViY2I5MWZiNDY3NTVjOGE4ZDA0YjA5YjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tKLJZjlsuLg9a4R0Fa1EtbZ/6j9 erc58w4oifWyFupRD1Zeh7BKEvjDx4X13Yyv5z5aGrSu/WDH8zYojPKQFKFHEtKB ya6F+cqCqWhfgNTkPO/mFXNC0FcmcPQLWqhEdkqjPpVnycnxu8bUvAXSgOZFVHgp J9GbS6CRgqvyGRtJcEITitn7uMf7KfAGGLlQmWUPFNu69lr305vPzcpVBSiKm81D 8Zf9Y0MH+hE537jJ1VAPZ7RPX53/hPLyotARenEEAyAQRyn6xuVs+nKLQ0J9BIz/ v7NEqVXxlto408K/NO2aGCYTcKR1AD3UQQ97n2yTGp9WezU3sYtHOVGr2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLR4vQwAd2Nby5H7RnVcio0EsJuQMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvdEhpOURBQjNZMXZMa2Z0R2RWeUtqUVN3bTVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1QBMMA0G CSqGSIb3DQEBCwUAA4IBAQBT5zbczo8TCj2X/aCU39rZPytUTlvfYfhKh/0lKpWC PmXWY9Dmi1CxycP+RD9II5h/eRIVADOUq+rXjkAoCbT5LTe2TMf1KjVzw7QzqV8U X4rRwQkaDktxLid7O4ADTchkd8OnGmQi3V0U3Hcv6fDI9aSL8Oft0jbrxdFE7/T2 e5yIFg8DbQXdmLe48xQCjOyliXPJghdoScTvpNm4zbiJ7bWzCn/WGd0xzOXZ8Ovf AJ2g+UOMvExZUKPow08sWGCc95jvPDJdNTcWoSKHe0Etml1CAhe8n2+0hAccqr6V vdrKbFq1kmgsKyfV1+IthMQYCgwxhrtUP3D4Bmr+EU/s -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:51 2026 by rpki-client