This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa File: cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa (raw, json) Hash identifier: mbO9zdERKtIWiDiD8x4e0EjpaANpcC71gfDZ39R7GH8= Subject key identifier: 70:AA:76:39:99:CC:43:A8:1F:B9:57:45:04:8A:40:01:EF:AD:2F:31 Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Certificate serial: 019B7834B7442448D5EB9DF37CD7BA192B82 Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa Signing time: Thu 01 Jan 2026 06:17:59 +0000 ROA not before: Thu 01 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 327712 IP address blocks: 213.140.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b7:44:24:48:d5:eb:9d:f3:7c:d7:ba:19:2b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70aa763999cc43a81fb95745048a4001efad2f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:f4:a6:ec:01:ed:fe:7d:ce:af:3b:92:0c: 34:ae:db:49:cc:3d:9f:c3:5a:05:7f:4e:fd:9f:3d: a3:6e:c6:1a:8c:63:79:68:ab:12:7a:10:03:c1:37: 4b:e6:ed:8f:b2:fc:8b:de:2e:30:0e:b2:94:62:09: 7f:6b:01:fd:81:94:79:e0:19:c5:b4:16:e2:9b:84: 22:c3:85:6b:a0:8e:33:92:23:cc:0b:b8:5b:ef:48: 02:ee:15:86:5a:10:dc:67:4c:b2:56:75:4c:22:c0: d6:8a:63:05:54:15:8a:fa:27:1e:50:b0:dd:1d:e1: 99:e1:bc:4c:6f:85:d5:74:da:1f:55:71:f9:17:1e: 37:14:d5:e0:48:4b:ac:71:17:84:13:90:84:39:1e: eb:27:27:bf:1e:b2:7d:9a:3b:da:8d:a6:8c:e8:73: 4c:bb:8d:30:4c:50:9b:4d:74:1a:bc:c5:e6:35:31: 04:e5:f2:4b:20:0c:8e:d8:3f:8b:a0:89:0b:f0:cc: 69:6f:e0:2e:de:78:5e:46:99:56:ab:76:30:48:59: f5:c2:7f:05:4e:5d:1c:97:d0:d6:9a:ff:a0:62:52: 8b:a9:7d:50:be:26:97:0d:99:71:68:63:7f:aa:f2: ae:4f:d1:6a:33:cb:04:ac:d1:cf:09:e4:3e:a4:55: de:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AA:76:39:99:CC:43:A8:1F:B9:57:45:04:8A:40:01:EF:AD:2F:31 X509v3 Authority Key Identifier: keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.140.59.0/24 Signature Algorithm: sha256WithRSAEncryption 41:ec:61:c3:a5:55:ed:6b:d1:87:7b:ae:ea:08:60:d1:3d:07: 24:d4:83:41:5d:3a:76:66:77:52:2c:0b:0b:95:5e:a0:42:d6: 8f:90:b2:99:24:53:c8:3d:11:55:d7:c8:08:76:43:fd:93:9a: 70:13:1f:d1:a4:f1:ec:38:39:a4:36:2f:42:46:2e:0e:0a:28: 91:7e:88:d3:38:7f:73:15:ed:da:37:8a:ba:a9:11:60:47:95: 72:c3:18:4b:5c:bf:09:a4:05:b5:cb:19:24:d7:05:66:28:25: 01:47:66:49:e9:ee:0c:58:1d:2b:41:b4:29:58:b5:b5:1f:21: 1a:b5:98:eb:1f:b7:34:36:72:4d:52:68:10:e1:f8:39:fa:a3: 9f:64:3f:ab:15:c2:bb:e5:8b:94:b3:05:52:3d:f0:6c:ac:9b: 23:f2:39:c4:7b:02:f5:16:f3:a8:e4:43:a7:3d:46:1f:a4:5a: c3:25:92:96:12:72:58:6e:9c:ec:01:d9:18:e8:f3:7a:28:59: 73:1d:44:68:0d:19:b0:fc:34:ae:fb:b3:01:df:0f:32:d3:65: 01:61:6e:01:11:b6:1a:30:f1:09:3c:61:eb:50:01:27:ec:ff: 4a:53:21:2e:1c:77:8d:25:26:09:6b:a7:b0:9b:17:c8:cd:f4: 22:48:74:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLdEJEjV653zfNe6GSuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj ZTVhNGEwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGFhNzYzOTk5Y2M0M2E4MWZiOTU3NDUwNDhhNDAwMWVmYWQyZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrP0puwB7f59zq87kgw0rttJzD2f w1oFf079nz2jbsYajGN5aKsSehADwTdL5u2PsvyL3i4wDrKUYgl/awH9gZR54BnF tBbim4Qiw4VroI4zkiPMC7hb70gC7hWGWhDcZ0yyVnVMIsDWimMFVBWK+iceULDd HeGZ4bxMb4XVdNofVXH5Fx43FNXgSEuscReEE5CEOR7rJye/HrJ9mjvajaaM6HNM u40wTFCbTXQavMXmNTEE5fJLIAyO2D+LoIkL8Mxpb+Au3nheRplWq3YwSFn1wn8F Tl0cl9DWmv+gYlKLqX1QviaXDZlxaGN/qvKuT9FqM8sErNHPCeQ+pFXe4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHCqdjmZzEOoH7lXRQSKQAHvrS8xMB8GA1UdIwQY MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct ZDQ1YWI3ZGYyZGUxLzEvY0twMk9abk1RNmdmdVZkRkJJcEFBZS10THpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Yw7MA0G CSqGSIb3DQEBCwUAA4IBAQBB7GHDpVXta9GHe67qCGDRPQck1INBXTp2ZndSLAsL lV6gQtaPkLKZJFPIPRFV18gIdkP9k5pwEx/RpPHsODmkNi9CRi4OCiiRfojTOH9z Fe3aN4q6qRFgR5VywxhLXL8JpAW1yxkk1wVmKCUBR2ZJ6e4MWB0rQbQpWLW1HyEa tZjrH7c0NnJNUmgQ4fg5+qOfZD+rFcK75YuUswVSPfBsrJsj8jnEewL1FvOo5EOn PUYfpFrDJZKWEnJYbpzsAdkY6PN6KFlzHURoDRmw/DSu+7MB3w8y02UBYW4BEbYa MPEJPGHrUAEn7P9KUyEuHHeNJSYJa6ewmxfIzfQiSHRh -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:25 2026 by rpki-client