This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/_PXhlZCjQvwPQ3-H5--9ECU2Un8.roa File: _PXhlZCjQvwPQ3-H5--9ECU2Un8.roa (raw, json) Hash identifier: +OxXVp7CCvXwGvmdylv8hYCUGBTiCJtYUdC1nBHjCGU= Subject key identifier: FC:F5:E1:95:90:A3:42:FC:0F:43:7F:87:E7:EF:BD:10:25:36:52:7F Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019B7E391CE26CCFED53C0A80F6CDAAF8F06 Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/_PXhlZCjQvwPQ3-H5--9ECU2Un8.roa Signing time: Fri 02 Jan 2026 10:20:30 +0000 ROA not before: Fri 02 Jan 2026 10:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 213.232.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1c:e2:6c:cf:ed:53:c0:a8:0f:6c:da:af:8f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcf5e19590a342fc0f437f87e7efbd102536527f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:70:4a:48:cf:26:c0:08:49:c0:2e:6d:d8: 1c:43:70:e4:e4:48:a0:05:aa:87:53:a9:29:33:ce: b5:2e:52:d7:25:5b:cd:cf:1d:26:17:f6:17:53:4e: 77:23:40:c1:54:2b:55:ef:df:cb:97:b8:26:10:86: 7c:6e:a8:f2:7e:40:ab:2c:aa:a1:6f:3f:d2:c1:8e: b9:f0:e6:69:04:eb:9b:74:b1:52:3c:d4:6e:7c:0f: 55:af:09:f4:7a:db:9c:50:84:b6:3c:da:de:f9:47: 77:fc:32:ed:cd:e1:63:aa:e0:62:96:d6:a4:23:c1: 0c:1e:af:1a:4f:a2:c8:fc:42:2b:21:44:9e:27:6d: fd:7a:56:de:94:01:1b:8e:51:4c:b6:b0:a6:ba:58: c5:29:04:cd:92:91:c9:f4:a9:a1:db:b9:67:2d:a4: 54:a3:d8:f1:a3:65:13:ee:17:61:97:48:67:03:62: fa:42:7c:46:02:0e:e5:d8:cb:1d:f4:d8:66:9a:2d: e9:67:63:26:15:3e:a8:d4:24:bb:b6:67:e7:8e:b0: 3a:6f:05:f3:be:a4:13:12:5e:f1:0e:12:59:9f:70: c2:4c:06:f7:62:ef:ad:51:53:f5:5d:45:de:fc:f7: 04:9a:4e:7d:3f:03:39:1b:c2:4b:26:10:ac:89:3d: da:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F5:E1:95:90:A3:42:FC:0F:43:7F:87:E7:EF:BD:10:25:36:52:7F X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/_PXhlZCjQvwPQ3-H5--9ECU2Un8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.232.236.0/24 Signature Algorithm: sha256WithRSAEncryption 52:1c:75:2e:45:a4:a0:b3:32:3b:cc:99:f9:5f:09:1c:ab:b2: bd:c0:88:d1:4a:6a:d5:a7:23:25:b1:ba:67:f9:ea:3c:ff:b8: fb:51:de:bd:61:82:fb:da:f7:1d:00:5a:4a:c7:4b:90:1c:8e: d3:13:49:d7:eb:0a:36:93:49:9c:cd:1e:fb:50:d9:2b:ab:c7: cd:0d:bd:02:29:a7:24:63:19:36:b4:df:50:28:27:7c:ee:af: ac:e0:0e:65:29:5e:b5:dd:13:07:3a:c3:37:93:f9:56:c1:42: 01:bc:52:70:f8:1a:87:98:50:14:30:e9:c5:c5:e8:d3:3b:e6: c4:8e:58:a8:fc:b4:da:50:17:91:d2:52:77:be:72:a2:aa:62: b6:de:c6:82:20:35:86:5a:b4:98:a0:22:e1:ac:09:49:f3:be: c7:93:ca:a8:d3:35:49:96:1d:db:6a:81:84:90:7b:30:1b:67: 15:51:4d:99:b8:b4:8b:78:b5:aa:7e:5d:14:60:84:fb:0c:29: 25:bf:a6:11:ca:62:75:63:a1:e4:0d:58:2f:13:a7:0d:7f:fc: 1c:9e:00:96:6f:df:9b:d4:2c:5f:a7:f2:f6:a7:3a:3b:10:66: 20:25:b0:39:3e:82:15:ac:c0:33:e3:a9:f1:fc:9a:02:11:92: de:94:e7:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORzibM/tU8CoD2zar48GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2Y1ZTE5NTkwYTM0MmZjMGY0MzdmODdlN2VmYmQxMDI1MzY1MjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgZwSkjPJsAIScAubdgcQ3Dk5Eig BaqHU6kpM861LlLXJVvNzx0mF/YXU053I0DBVCtV79/Ll7gmEIZ8bqjyfkCrLKqh bz/SwY658OZpBOubdLFSPNRufA9Vrwn0etucUIS2PNre+Ud3/DLtzeFjquBiltak I8EMHq8aT6LI/EIrIUSeJ239elbelAEbjlFMtrCmuljFKQTNkpHJ9Kmh27lnLaRU o9jxo2UT7hdhl0hnA2L6QnxGAg7l2Msd9Nhmmi3pZ2MmFT6o1CS7tmfnjrA6bwXz vqQTEl7xDhJZn3DCTAb3Yu+tUVP1XUXe/PcEmk59PwM5G8JLJhCsiT3aaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPz14ZWQo0L8D0N/h+fvvRAlNlJ/MB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvX1BYaGxaQ2pRdndQUTMtSDUtLTlFQ1UyVW44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ejsMA0G CSqGSIb3DQEBCwUAA4IBAQBSHHUuRaSgszI7zJn5Xwkcq7K9wIjRSmrVpyMlsbpn +eo8/7j7Ud69YYL72vcdAFpKx0uQHI7TE0nX6wo2k0mczR77UNkrq8fNDb0CKack Yxk2tN9QKCd87q+s4A5lKV613RMHOsM3k/lWwUIBvFJw+BqHmFAUMOnFxejTO+bE jlio/LTaUBeR0lJ3vnKiqmK23saCIDWGWrSYoCLhrAlJ877Hk8qo0zVJlh3baoGE kHswG2cVUU2ZuLSLeLWqfl0UYIT7DCklv6YRymJ1Y6HkDVgvE6cNf/wcngCWb9+b 1Cxfp/L2pzo7EGYgJbA5PoIVrMAz46nx/JoCEZLelOfY -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:34 2026 by rpki-client