This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/0yT0OXiNw9csRLbDIHPuRhRNJuA.roa File: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (raw, json) Hash identifier: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s= Subject key identifier: D3:24:F4:39:78:8D:C3:D7:2C:44:B6:C3:20:73:EE:46:14:4D:26:E0 Certificate issuer: /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4 Certificate serial: 019BB99C2DC249CB1242CE2FC925EA00EBEF Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/0yT0OXiNw9csRLbDIHPuRhRNJuA.roa Signing time: Tue 13 Jan 2026 23:06:18 +0000 ROA not before: Tue 13 Jan 2026 23:06:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207709 IP address blocks: 213.177.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b9:9c:2d:c2:49:cb:12:42:ce:2f:c9:25:ea:00:eb:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4 Validity Not Before: Jan 13 23:06:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d324f439788dc3d72c44b6c32073ee46144d26e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:d8:c3:e3:b8:a3:b5:95:8e:e7:69:22:b9: 4f:eb:bc:eb:21:25:54:39:df:94:93:92:6f:a2:49: d2:47:11:76:cb:b8:7f:7d:48:84:e9:be:8c:0a:20: a2:3d:57:dd:0c:dc:68:bd:b0:59:fb:ae:59:3a:b3: ec:cd:9c:a8:6e:8a:64:04:72:2b:99:a2:f1:a2:7e: cd:06:8c:3f:3a:09:20:1b:f7:79:f5:6a:9e:83:bd: bd:e8:d8:a9:18:c9:de:d0:90:51:7c:cb:84:4d:40: 6f:79:30:b9:cb:f7:d1:73:0b:f2:e0:2d:98:28:37: 10:8a:27:39:20:56:39:bd:58:3b:81:c2:5a:ac:73: f9:dd:78:1a:b5:81:6f:4a:67:ea:89:ce:ff:9a:62: 5e:ac:79:b8:05:19:00:dd:1b:98:f0:99:36:ab:49: b5:6b:a6:c7:17:5c:81:11:f4:77:96:09:71:43:15: 38:d4:7e:fa:2a:e6:c8:ed:ea:b9:8c:8e:f7:e9:97: 08:1b:47:04:8c:e7:d1:ed:4d:e4:e6:ca:dc:e4:18: f2:0d:63:34:32:00:32:28:89:d4:64:1e:80:8e:5e: d6:c5:fb:cc:51:56:5c:25:ad:88:c5:d6:33:30:13: f6:a9:0b:7c:e8:42:c8:84:dd:18:b6:c3:c9:65:39: 25:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:24:F4:39:78:8D:C3:D7:2C:44:B6:C3:20:73:EE:46:14:4D:26:E0 X509v3 Authority Key Identifier: keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/0yT0OXiNw9csRLbDIHPuRhRNJuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.177.186.0/24 Signature Algorithm: sha256WithRSAEncryption ce:2f:48:99:64:ad:a4:40:e7:f6:e6:c2:17:a1:8f:f4:88:42: ef:ff:88:10:dd:7d:c8:b2:f0:35:4a:b9:8f:33:7a:91:5f:33: 2f:e0:41:b6:4b:38:3f:e5:da:c9:dd:9d:bc:1c:a7:8c:28:7c: 5f:b6:a9:ab:c3:cf:9b:f6:7d:f5:96:ec:4b:50:ac:31:97:90: e7:e9:13:39:ff:93:bb:df:f2:1d:39:8b:17:0b:f7:8f:4d:8c: 11:2d:39:7e:24:ca:cc:c2:2d:c9:4d:fe:c2:be:c6:0f:86:d5: a3:d4:d9:c4:9b:fa:3e:d8:9d:66:3e:7a:65:41:5d:19:79:13: 07:ba:42:26:2c:41:d4:cc:29:b5:b1:f4:61:0f:f9:b9:f6:36: 48:66:08:81:85:0e:c7:7a:61:aa:e4:03:45:7e:44:01:8e:59: 9a:42:64:95:0e:51:11:22:18:31:33:30:f2:d3:66:bf:7e:90: d0:28:ac:d5:c0:89:10:4c:af:f5:35:9e:d2:7d:a3:96:3a:05: 58:7c:d2:b3:0c:8b:75:cc:fd:d6:2c:92:3c:da:f8:5d:3c:02: f3:95:0c:b0:33:f1:c3:f1:9c:aa:c5:b6:c8:26:16:92:f0:7f: 39:a3:d9:35:56:d2:80:4f:67:09:ae:75:35:14:6f:99:72:bf: 73:da:d1:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu5nC3CScsSQs4vySXqAOvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMTdlYjdkNWYwNGQyNzE1NWYyMDE3ODZmMzkwZmI0MDhh NmFhZTQwHhcNMjYwMTEzMjMwNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzI0ZjQzOTc4OGRjM2Q3MmM0NGI2YzMyMDczZWU0NjE0NGQyNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaLYw+O4o7WVjudpIrlP67zrISVU Od+Uk5JvoknSRxF2y7h/fUiE6b6MCiCiPVfdDNxovbBZ+65ZOrPszZyobopkBHIr maLxon7NBow/OgkgG/d59Wqeg7296NipGMne0JBRfMuETUBveTC5y/fRcwvy4C2Y KDcQiic5IFY5vVg7gcJarHP53XgatYFvSmfqic7/mmJerHm4BRkA3RuY8Jk2q0m1 a6bHF1yBEfR3lglxQxU41H76KubI7eq5jI736ZcIG0cEjOfR7U3k5src5BjyDWM0 MgAyKInUZB6Ajl7WxfvMUVZcJa2IxdYzMBP2qQt86ELIhN0YtsPJZTklPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNMk9Dl4jcPXLES2wyBz7kYUTSbgMB8GA1UdIwQY MBaAFLoX631fBNJxVfIBeG85D7QIpqrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWhmcmZWOEUwbkZWOGdGNGJ6a1B0QWltcXVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xM2QxNzUtZjY3NS00YjJlLWE0YjAt MzBhZTEyNjQ2NGY3LzEvMHlUME9YaU53OWNzUkxiRElIUHVSaFJOSnVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xM2QxNzUtZjY3NS00YjJlLWE0YjAtMzBhZTEyNjQ2NGY3 LzEvdWhmcmZWOEUwbkZWOGdGNGJ6a1B0QWltcXVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bG6MA0G CSqGSIb3DQEBCwUAA4IBAQDOL0iZZK2kQOf25sIXoY/0iELv/4gQ3X3IsvA1SrmP M3qRXzMv4EG2Szg/5drJ3Z28HKeMKHxftqmrw8+b9n31luxLUKwxl5Dn6RM5/5O7 3/IdOYsXC/ePTYwRLTl+JMrMwi3JTf7CvsYPhtWj1NnEm/o+2J1mPnplQV0ZeRMH ukImLEHUzCm1sfRhD/m59jZIZgiBhQ7HemGq5ANFfkQBjlmaQmSVDlERIhgxMzDy 02a/fpDQKKzVwIkQTK/1NZ7SfaOWOgVYfNKzDIt1zP3WLJI82vhdPALzlQywM/HD 8ZyqxbbIJhaS8H85o9k1VtKAT2cJrnU1FG+Zcr9z2tFB -----END CERTIFICATE-----Generated at Mon Jan 26 07:58:04 2026 by rpki-client