This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/Ke9JZJzAeU2y3MAj67Y-ezxLtDU.roa File: Ke9JZJzAeU2y3MAj67Y-ezxLtDU.roa (raw, json) Hash identifier: ol9IiLjFY9gZ/Hu0WdjazLtITNLeMCgHDACJrZ2QFng= Subject key identifier: 29:EF:49:64:9C:C0:79:4D:B2:DC:C0:23:EB:B6:3E:7B:3C:4B:B4:35 Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf Certificate serial: 019B775896F0FD3126F67314367157EA9433 Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/Ke9JZJzAeU2y3MAj67Y-ezxLtDU.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210147 IP address blocks: 213.109.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:96:f0:fd:31:26:f6:73:14:36:71:57:ea:94:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29ef49649cc0794db2dcc023ebb63e7b3c4bb435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:98:37:a3:12:fe:97:b8:3c:94:0e:c3:65: 21:82:1b:84:ae:f8:f6:ab:65:ae:5c:b8:cb:cd:d3: d8:7b:76:e9:3e:5f:77:2d:13:0b:a1:0f:4c:bb:30: b2:1b:27:df:e0:f6:e8:d9:25:f2:96:b7:0b:3b:a9: fb:01:b8:65:ed:40:ba:cd:9c:bd:41:00:68:f8:29: 52:d8:4a:70:a2:35:6f:f1:aa:48:5a:c8:bd:b7:44: 2f:a4:d4:b5:79:ba:f5:0f:21:8c:09:25:06:db:06: d1:cd:a0:34:7a:70:0d:18:d0:42:0e:44:c4:30:fd: b1:72:cc:28:71:ec:e5:a8:50:b1:ea:d1:91:26:6a: d0:bf:7f:2f:11:c1:ed:03:5b:c4:46:a4:41:ae:c8: ea:a6:44:83:76:d3:f3:cd:53:1a:4f:c1:77:65:3a: 3f:37:ee:c1:23:c1:96:b4:32:7c:e1:a0:33:0c:38: e0:0b:0e:ba:5f:29:7c:4c:34:43:dc:df:80:cb:e0: 14:17:5f:60:98:dd:3c:31:31:bd:4d:e6:18:b8:af: dd:4f:b6:5d:42:e7:27:50:5e:14:e9:94:e9:04:49: 00:a1:c6:27:69:90:48:be:88:0c:e5:ba:45:6c:43: 4a:d4:1d:a6:92:c3:59:ac:b9:7b:df:4a:2d:d5:87: 1e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EF:49:64:9C:C0:79:4D:B2:DC:C0:23:EB:B6:3E:7B:3C:4B:B4:35 X509v3 Authority Key Identifier: keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/Ke9JZJzAeU2y3MAj67Y-ezxLtDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.197.0/24 Signature Algorithm: sha256WithRSAEncryption 15:09:5a:5f:a9:91:f8:27:41:18:8a:1a:99:0e:49:c1:9b:bb: e2:fd:46:1c:22:f4:40:9b:bc:7b:3f:58:74:dc:cb:c6:a5:e0: e5:23:d4:b0:eb:2a:4e:1b:b3:2b:52:8c:c0:49:ae:b2:f2:0a: 55:ab:57:96:7a:03:be:9f:48:fb:62:8b:be:06:f9:d0:5f:1e: 63:d6:41:2e:c2:5b:ea:ad:03:7b:a3:35:7e:30:20:30:88:66: 7d:85:39:08:1a:04:f5:91:6f:cb:b7:ac:bb:5f:d9:c8:54:f0: 87:6c:7e:e1:3b:6a:80:03:ae:c4:b2:17:e6:84:3e:cb:e1:55: 4a:e4:ca:e1:47:ae:77:c9:c2:fe:b9:15:0c:52:c6:44:22:4f: a1:66:ad:de:6b:37:b2:3c:18:3e:73:2b:10:1c:b5:46:97:b4: 87:45:91:a8:1b:8d:c4:9f:d2:d6:30:06:c1:32:ef:93:e5:8b: 2b:04:1d:2f:9b:b0:66:a2:0a:e3:84:b7:90:5d:14:dc:8a:2b: a0:45:36:75:f8:84:c0:1a:d5:c7:a0:40:d1:ef:95:f5:3f:5f: ee:0d:26:63:04:ba:14:fe:c6:35:a2:aa:7d:32:92:bb:a2:b7: e3:e9:1c:b5:8b:e3:6f:7a:d8:ea:7d:a6:1f:e4:93:c0:1f:93: 24:67:36:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJbw/TEm9nMUNnFX6pQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYTk4OWMxN2IyZGEwYzUxNDMxNTU4MjBlYmM1NmJmZTcz YTNhZGYwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWVmNDk2NDljYzA3OTRkYjJkY2MwMjNlYmI2M2U3YjNjNGJiNDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxleYN6MS/pe4PJQOw2UhghuErvj2 q2WuXLjLzdPYe3bpPl93LRMLoQ9MuzCyGyff4Pbo2SXylrcLO6n7Abhl7UC6zZy9 QQBo+ClS2EpwojVv8apIWsi9t0QvpNS1ebr1DyGMCSUG2wbRzaA0enANGNBCDkTE MP2xcswocezlqFCx6tGRJmrQv38vEcHtA1vERqRBrsjqpkSDdtPzzVMaT8F3ZTo/ N+7BI8GWtDJ84aAzDDjgCw66Xyl8TDRD3N+Ay+AUF19gmN08MTG9TeYYuK/dT7Zd QucnUF4U6ZTpBEkAocYnaZBIvogM5bpFbENK1B2mksNZrLl730ot1YcelwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCnvSWScwHlNstzAI+u2Pns8S7Q1MB8GA1UdIwQY MBaAFJOpicF7LaDFFDFVgg68Vr/nOjrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQt NjM3YjI2MWFiMTc5LzEvS2U5SlpKekFlVTJ5M01BajY3WS1lenhMdERVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQtNjM3YjI2MWFiMTc5 LzEvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W3FMA0G CSqGSIb3DQEBCwUAA4IBAQAVCVpfqZH4J0EYihqZDknBm7vi/UYcIvRAm7x7P1h0 3MvGpeDlI9Sw6ypOG7MrUozASa6y8gpVq1eWegO+n0j7You+BvnQXx5j1kEuwlvq rQN7ozV+MCAwiGZ9hTkIGgT1kW/Lt6y7X9nIVPCHbH7hO2qAA67EshfmhD7L4VVK 5MrhR653ycL+uRUMUsZEIk+hZq3eazeyPBg+cysQHLVGl7SHRZGoG43En9LWMAbB Mu+T5YsrBB0vm7BmogrjhLeQXRTciiugRTZ1+ITAGtXHoEDR75X1P1/uDSZjBLoU /sY1oqp9MpK7orfj6Ry1i+NvetjqfaYf5JPAH5MkZzYi -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:43 2026 by rpki-client