This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/s931y6R-0zlx2ez42IiM1gBgTIo.roa File: s931y6R-0zlx2ez42IiM1gBgTIo.roa (raw, json) Hash identifier: RTrkv7ongNF6gWxBGWrH9pDs7qZjN5vjg1SAtV6G9Y8= Subject key identifier: B3:DD:F5:CB:A4:7E:D3:39:71:D9:EC:F8:D8:88:8C:D6:00:60:4C:8A Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7 Certificate serial: 019B7EA57E037A2F98DDBEEA23094A999BAA Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/s931y6R-0zlx2ez42IiM1gBgTIo.roa Signing time: Fri 02 Jan 2026 12:18:53 +0000 ROA not before: Fri 02 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209464 IP address blocks: 212.138.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7e:03:7a:2f:98:dd:be:ea:23:09:4a:99:9b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7 Validity Not Before: Jan 2 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3ddf5cba47ed33971d9ecf8d8888cd600604c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:86:e4:10:91:f7:fa:f4:bb:80:cd:71:13: b3:f4:02:48:c8:c1:3b:85:51:25:ea:4c:85:17:cb: cf:16:b7:17:c0:94:5d:d1:91:86:d3:e8:ff:ff:60: c3:6b:b8:72:1f:85:42:98:5a:99:91:11:db:e8:3d: 7f:0e:ea:dd:3c:7e:02:0a:c1:99:20:30:1c:df:16: 57:e0:46:ff:e5:50:5f:6f:59:be:b0:87:36:bc:7b: db:65:31:fa:3c:ef:75:ef:c8:62:8b:63:8e:1e:e9: 16:5c:ad:cd:d4:c8:07:2a:9e:f5:32:d0:83:0f:4d: 27:95:57:b9:97:b9:ec:d4:11:16:86:30:0b:7f:58: ac:95:3b:01:c5:01:2a:75:96:d7:e7:4f:a9:ec:c8: d2:39:a3:e9:8b:6b:aa:48:6e:c1:7b:35:b2:64:6b: 23:f0:10:70:c5:af:7c:4d:0d:a0:3f:6e:c0:68:7d: fe:64:2f:73:50:69:c3:30:88:fc:6e:9c:23:61:77: 66:e7:43:47:a6:13:18:44:03:f1:d2:ff:48:ef:24: 0e:99:67:8d:48:89:92:6d:71:7f:b4:de:34:75:a8: 0a:37:d1:2e:65:cc:d7:dd:20:80:f9:7c:08:ab:df: b6:2c:ce:9d:e1:9c:e2:ff:3e:85:de:a2:63:86:db: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DD:F5:CB:A4:7E:D3:39:71:D9:EC:F8:D8:88:8C:D6:00:60:4C:8A X509v3 Authority Key Identifier: keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/s931y6R-0zlx2ez42IiM1gBgTIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.138.180.0/24 Signature Algorithm: sha256WithRSAEncryption b3:d1:10:5e:46:96:e1:3d:72:35:8f:eb:45:55:ec:94:ff:70: 54:04:3c:da:b0:6f:a1:9a:a1:98:c6:80:57:d8:8e:31:88:bc: fe:68:14:6d:e0:5d:28:a5:1f:e2:80:d0:06:55:c6:f8:82:c2: 46:f0:a7:18:2e:c3:bb:5d:d7:1d:a5:19:10:1b:b6:e9:d1:0d: 5c:4b:65:3a:bb:e7:7e:15:06:da:7d:33:79:1c:39:88:c8:9c: 37:43:42:5e:ff:94:c5:b4:98:54:e1:49:1d:a8:5e:19:a3:5a: d1:22:bf:2b:f4:ea:c3:df:ac:3f:1c:0f:36:5b:a6:5d:94:8f: 43:4e:02:de:24:59:26:a3:c7:d9:65:dd:64:65:f1:01:e1:da: 02:27:5a:7f:fd:7c:6c:ea:96:54:73:88:5a:af:ef:53:1c:4c: 4a:ef:39:9e:79:7c:32:c6:29:c0:86:a8:28:22:28:31:15:95: 32:fb:9e:8c:20:45:62:e6:00:b2:02:ae:68:3c:07:32:aa:f3: d2:36:8e:a5:2a:cf:7c:69:68:84:b4:09:b9:a5:28:7f:6f:5e: b7:1e:17:34:e6:12:a4:ef:c7:10:99:76:7c:b6:20:49:b8:34: e7:79:c7:20:f7:54:27:f4:50:93:d3:4a:d3:54:cf:dc:1b:8f: 8a:05:92:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pX4Dei+Y3b7qIwlKmZuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2 NzA3ZjcwHhcNMjYwMTAyMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2RkZjVjYmE0N2VkMzM5NzFkOWVjZjhkODg4OGNkNjAwNjA0YzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA086G5BCR9/r0u4DNcROz9AJIyME7 hVEl6kyFF8vPFrcXwJRd0ZGG0+j//2DDa7hyH4VCmFqZkRHb6D1/DurdPH4CCsGZ IDAc3xZX4Eb/5VBfb1m+sIc2vHvbZTH6PO9178hii2OOHukWXK3N1MgHKp71MtCD D00nlVe5l7ns1BEWhjALf1islTsBxQEqdZbX50+p7MjSOaPpi2uqSG7BezWyZGsj 8BBwxa98TQ2gP27AaH3+ZC9zUGnDMIj8bpwjYXdm50NHphMYRAPx0v9I7yQOmWeN SImSbXF/tN40dagKN9EuZczX3SCA+XwIq9+2LM6d4Zzi/z6F3qJjhtu76wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLPd9cukftM5cdns+NiIjNYAYEyKMB8GA1UdIwQY MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt OTRjMmZkYTM5ZWFkLzEvczkzMXk2Ui0wemx4MmV6NDJJaU0xZ0JnVElvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Iq0MA0G CSqGSIb3DQEBCwUAA4IBAQCz0RBeRpbhPXI1j+tFVeyU/3BUBDzasG+hmqGYxoBX 2I4xiLz+aBRt4F0opR/igNAGVcb4gsJG8KcYLsO7XdcdpRkQG7bp0Q1cS2U6u+d+ FQbafTN5HDmIyJw3Q0Je/5TFtJhU4UkdqF4Zo1rRIr8r9OrD36w/HA82W6ZdlI9D TgLeJFkmo8fZZd1kZfEB4doCJ1p//Xxs6pZUc4har+9THExK7zmeeXwyxinAhqgo IigxFZUy+56MIEVi5gCyAq5oPAcyqvPSNo6lKs98aWiEtAm5pSh/b163Hhc05hKk 78cQmXZ8tiBJuDTneccg91Qn9FCT00rTVM/cG4+KBZKy -----END CERTIFICATE-----Generated at Sun Jan 25 17:49:22 2026 by rpki-client