This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eTO2SAT1FNU3GA29G2jYr8tlWiQ.roa File: eTO2SAT1FNU3GA29G2jYr8tlWiQ.roa (raw, json) Hash identifier: i33NX56++1RzU4ka8lnevft7Ri7Iegh1AZj01BkY9HY= Subject key identifier: 79:33:B6:48:04:F5:14:D5:37:18:0D:BD:1B:68:D8:AF:CB:65:5A:24 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C75BB96DA3492AFF5EE9E6A85D0F84 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eTO2SAT1FNU3GA29G2jYr8tlWiQ.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6850 IP address blocks: 212.109.168.0/24 maxlen: 24 212.109.169.0/24 maxlen: 24 212.109.170.0/24 maxlen: 24 212.109.171.0/24 maxlen: 24 212.109.172.0/24 maxlen: 24 212.109.173.0/24 maxlen: 24 212.109.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5b:b9:6d:a3:49:2a:ff:5e:e9:e6:a8:5d:0f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7933b64804f514d537180dbd1b68d8afcb655a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5d:23:a2:54:ad:ee:2c:26:fe:18:fd:1d:33: 7f:40:eb:0a:e7:ea:ec:de:aa:9f:93:1b:af:0d:3e: b9:17:ed:89:96:4d:b8:8d:4a:dd:fe:17:d2:94:0b: 4d:af:3a:88:cf:40:95:92:76:21:b0:83:2d:09:7f: 7b:d5:fe:d0:56:d2:c4:b0:88:d9:11:bc:90:1f:5c: 7c:6e:05:da:b5:27:8c:e3:69:eb:c9:7d:23:5d:db: 29:da:a4:e8:2b:63:00:77:f8:66:bb:37:d8:ff:b3: d5:af:e9:d3:21:f8:3f:8d:f9:a7:e9:d3:52:b8:b3: b6:9e:8d:37:4c:2f:b6:fe:c0:36:67:6d:c3:ba:c2: 94:1e:48:3c:b7:57:2d:9a:05:d7:81:bb:02:75:54: 6c:e9:fe:e5:db:4e:ad:e9:e7:0d:83:57:5d:c3:8f: 18:26:2d:45:41:3a:be:67:b4:87:79:56:5c:e4:7c: 66:f1:7b:70:c6:fc:05:7b:7c:f7:5a:bb:20:ad:c9: e1:c5:f8:ee:53:3e:4f:2f:d4:99:2b:ba:e9:5f:91: c2:da:63:a3:0c:93:a3:ca:19:0e:ef:dd:de:f9:4b: 60:51:13:8d:2d:27:aa:c9:ad:b8:9d:b2:4c:2e:d8: 46:ed:b3:0d:6f:75:5a:cf:4e:93:22:c6:a2:de:99: 39:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:33:B6:48:04:F5:14:D5:37:18:0D:BD:1B:68:D8:AF:CB:65:5A:24 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eTO2SAT1FNU3GA29G2jYr8tlWiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.109.168.0-212.109.174.255 Signature Algorithm: sha256WithRSAEncryption 7d:46:8b:23:71:8e:8c:75:63:a7:a3:e5:b1:33:9b:0d:60:41: 32:78:c5:37:86:84:5e:ef:85:f9:ef:26:4b:47:e3:7d:d2:6d: 67:96:8d:fb:9b:7a:76:52:a8:59:fa:7d:ba:65:35:de:05:e3: f4:15:cf:75:83:c2:40:0e:29:93:c2:ce:2c:ce:e7:2c:12:0a: 44:74:97:1d:87:de:c0:7e:54:17:55:0f:e1:9d:2f:3c:8e:06: 5b:d2:1c:a2:37:59:4a:b8:da:fc:28:2f:42:21:6f:d0:32:41: 29:56:19:78:56:fc:f3:b1:6d:c0:04:6a:37:37:78:ab:9c:ae: c2:af:87:45:25:d5:0a:d4:c5:cd:6d:d8:c8:ad:4f:f8:47:d3: 75:76:28:26:1b:ac:4f:40:09:44:a6:41:a1:b5:f8:0f:7e:ec: 6f:c1:dc:d2:ae:3d:ef:fe:b9:95:53:4a:d4:5b:13:3f:21:4c: 7b:3e:20:2f:66:9c:8b:fd:4c:f9:57:7e:7c:60:78:4f:87:84: 31:60:66:ce:f1:f3:d9:1b:99:f6:d6:38:0a:be:9c:12:5d:64: 96:d9:77:c2:80:79:15:0d:b2:7d:44:b5:3f:cc:4f:f2:2b:40: 95:f7:33:b9:13:0e:5f:15:e8:36:ec:08:15:3f:31:87:53:86: 84:bc:86:6f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3x1u5baNJKv9e6eaoXQ+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTMzYjY0ODA0ZjUxNGQ1MzcxODBkYmQxYjY4ZDhhZmNiNjU1YTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl0jolSt7iwm/hj9HTN/QOsK5+rs 3qqfkxuvDT65F+2Jlk24jUrd/hfSlAtNrzqIz0CVknYhsIMtCX971f7QVtLEsIjZ EbyQH1x8bgXatSeM42nryX0jXdsp2qToK2MAd/hmuzfY/7PVr+nTIfg/jfmn6dNS uLO2no03TC+2/sA2Z23DusKUHkg8t1ctmgXXgbsCdVRs6f7l206t6ecNg1ddw48Y Ji1FQTq+Z7SHeVZc5Hxm8XtwxvwFe3z3WrsgrcnhxfjuUz5PL9SZK7rpX5HC2mOj DJOjyhkO793e+UtgURONLSeqya24nbJMLthG7bMNb3Vaz06TIsai3pk5AQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHkztkgE9RTVNxgNvRto2K/LZVokMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvZVRPMlNBVDFGTlUzR0EyOUcyallyOHRsV2lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPUbagD BADUba4wDQYJKoZIhvcNAQELBQADggEBAH1GiyNxjox1Y6ej5bEzmw1gQTJ4xTeG hF7vhfnvJktH433SbWeWjfubenZSqFn6fbplNd4F4/QVz3WDwkAOKZPCzizO5ywS CkR0lx2H3sB+VBdVD+GdLzyOBlvSHKI3WUq42vwoL0Ihb9AyQSlWGXhW/POxbcAE ajc3eKucrsKvh0Ul1QrUxc1t2MitT/hH03V2KCYbrE9ACUSmQaG1+A9+7G/B3NKu Pe/+uZVTStRbEz8hTHs+IC9mnIv9TPlXfnxgeE+HhDFgZs7x89kbmfbWOAq+nBJd ZJbZd8KAeRUNsn1EtT/MT/IrQJX3M7kTDl8V6DbsCBU/MYdThoS8hm8= -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:07 2026 by rpki-client