This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/NDSds1zweD0ntatyUwleIAzeIJM.roa File: NDSds1zweD0ntatyUwleIAzeIJM.roa (raw, json) Hash identifier: +ZrwYT4v0e9jZWWQ6oW4TJF+kc5mZHurMYfZvW1kcaw= Subject key identifier: 34:34:9D:B3:5C:F0:78:3D:27:B5:AB:72:53:09:5E:20:0C:DE:20:93 Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Certificate serial: 019B7DC9E0BE299F2348D93628F87EB7470F Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/NDSds1zweD0ntatyUwleIAzeIJM.roa Signing time: Fri 02 Jan 2026 08:19:00 +0000 ROA not before: Fri 02 Jan 2026 08:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15829 IP address blocks: 213.180.224.0/24 maxlen: 24 213.180.227.0/24 maxlen: 24 213.180.232.0/22 maxlen: 22 213.180.236.0/22 maxlen: 22 213.180.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e0:be:29:9f:23:48:d9:36:28:f8:7e:b7:47:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Validity Not Before: Jan 2 08:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34349db35cf0783d27b5ab7253095e200cde2093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:74:c9:e0:ca:0d:c9:13:1e:38:22:d7:8a:76: e1:61:e4:e9:6b:db:8a:8e:d6:c6:35:f9:f1:9f:f4: 87:59:39:a8:f1:35:44:24:77:7f:f8:22:24:92:a3: 39:c9:1e:09:e4:fb:7f:ed:56:be:73:e2:e0:f5:5d: 4e:a9:35:d3:86:7a:6b:bb:44:d5:9d:ab:f9:58:36: c4:b0:fc:25:42:30:bf:45:90:6e:91:c9:c2:9f:66: a4:9f:20:a9:97:63:b6:ca:b0:5e:b6:41:61:9c:ea: 0e:0e:ae:60:6f:af:ec:3a:bd:96:89:60:6d:1c:09: c0:17:75:20:a9:20:0b:01:64:91:eb:55:67:2a:af: c2:6b:cd:3d:eb:54:62:56:b0:7c:eb:db:9e:c6:8a: cb:28:93:e7:e4:30:b7:19:6c:7f:68:9f:0d:91:f9: 93:4e:34:6c:a5:31:04:e3:77:23:44:4b:77:40:c7: 8d:ca:6d:ce:69:74:59:69:de:a6:1c:bc:ca:09:f6: 79:e4:ef:92:18:f3:fe:63:48:25:d6:e5:c4:f3:b3: 47:c2:dc:ec:62:ce:e2:cf:87:ee:f4:d1:05:91:83: 3d:88:f1:fe:ca:39:8f:79:25:42:2f:34:ba:66:5a: 9a:8d:0e:89:20:30:bf:70:96:21:ab:eb:45:87:8c: a4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:34:9D:B3:5C:F0:78:3D:27:B5:AB:72:53:09:5E:20:0C:DE:20:93 X509v3 Authority Key Identifier: keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/NDSds1zweD0ntatyUwleIAzeIJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.180.224.0/24 213.180.227.0/24 213.180.232.0/21 213.180.248.0/22 Signature Algorithm: sha256WithRSAEncryption 45:c0:4f:5f:30:c7:56:4b:47:70:f9:87:81:1b:57:d6:30:b1: 95:65:33:25:6d:26:dd:f9:45:3f:d0:9b:76:ef:2e:42:29:fa: d3:15:cb:7c:46:f3:a5:7d:41:5c:31:4f:16:e8:6a:ce:67:2c: e8:e0:e9:4f:8e:9b:25:ff:81:41:94:2a:92:85:0f:06:a0:d0: c7:ed:0e:15:ef:d6:c4:33:75:8c:e0:11:90:63:c6:08:cb:e1: 85:74:d8:1b:ca:99:4f:66:18:1d:0e:c1:6b:5a:7a:d2:67:d5: f8:db:c0:2d:de:cf:ab:8b:40:8f:da:6b:b2:71:a4:39:4a:dd: 69:89:37:e9:97:15:25:ab:0d:40:04:73:e2:90:ff:cb:b8:76: 93:4a:88:c2:b8:86:e9:54:ff:38:af:0d:3b:66:72:bf:43:36: 83:0e:11:b8:9e:82:09:fa:fb:3c:25:2f:44:f3:0e:48:ba:7b: 86:5e:ce:df:f7:0e:af:0b:23:8d:43:a5:80:34:75:4c:36:60: ac:48:e9:30:00:4c:63:83:e9:d3:59:ae:bc:7b:cd:b9:36:c1: f8:e7:50:5c:9f:6b:ec:6b:9a:fd:76:3c:a7:12:1b:a2:b8:03: e4:0c:b4:91:26:ef:1b:59:31:b7:7c:71:2c:7f:da:88:7d:0d: d3:69:82:2e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yeC+KZ8jSNk2KPh+t0cPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl ZDhjMWMwHhcNMjYwMTAyMDgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDM0OWRiMzVjZjA3ODNkMjdiNWFiNzI1MzA5NWUyMDBjZGUyMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HTJ4MoNyRMeOCLXinbhYeTpa9uK jtbGNfnxn/SHWTmo8TVEJHd/+CIkkqM5yR4J5Pt/7Va+c+Lg9V1OqTXThnpru0TV nav5WDbEsPwlQjC/RZBukcnCn2aknyCpl2O2yrBetkFhnOoODq5gb6/sOr2WiWBt HAnAF3UgqSALAWSR61VnKq/Ca80961RiVrB869uexorLKJPn5DC3GWx/aJ8NkfmT TjRspTEE43cjREt3QMeNym3OaXRZad6mHLzKCfZ55O+SGPP+Y0gl1uXE87NHwtzs Ys7iz4fu9NEFkYM9iPH+yjmPeSVCLzS6ZlqajQ6JIDC/cJYhq+tFh4ykJwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDQ0nbNc8Hg9J7WrclMJXiAM3iCTMB8GA1UdIwQY MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt YmQ5MGEzZjA2ZTE2LzEvTkRTZHMxendlRDBudGF0eVV3bGVJQXplSUpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2 LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1bTgAwQA 1bTjAwQD1bToAwQC1bT4MA0GCSqGSIb3DQEBCwUAA4IBAQBFwE9fMMdWS0dw+YeB G1fWMLGVZTMlbSbd+UU/0Jt27y5CKfrTFct8RvOlfUFcMU8W6GrOZyzo4OlPjpsl /4FBlCqShQ8GoNDH7Q4V79bEM3WM4BGQY8YIy+GFdNgbyplPZhgdDsFrWnrSZ9X4 28At3s+ri0CP2muycaQ5St1piTfplxUlqw1ABHPikP/LuHaTSojCuIbpVP84rw07 ZnK/QzaDDhG4noIJ+vs8JS9E8w5IunuGXs7f9w6vCyONQ6WANHVMNmCsSOkwAExj g+nTWa68e825NsH451Bcn2vsa5r9djynEhuiuAPkDLSRJu8bWTG3fHEsf9qIfQ3T aYIu -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:46 2026 by rpki-client