This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/PAOf68ulivD1aol29ZpsFsfmh6U.roa File: PAOf68ulivD1aol29ZpsFsfmh6U.roa (raw, json) Hash identifier: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE= Subject key identifier: 3C:03:9F:EB:CB:A5:8A:F0:F5:6A:89:76:F5:9A:6C:16:C7:E6:87:A5 Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B7910868BA56DCB3D21AF6D65B86740BC Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/PAOf68ulivD1aol29ZpsFsfmh6U.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198335 IP address blocks: 213.198.104.0/21 maxlen: 24 213.198.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:86:8b:a5:6d:cb:3d:21:af:6d:65:b8:67:40:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c039febcba58af0f56a8976f59a6c16c7e687a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:c5:3a:2f:12:6b:89:cc:94:0d:2f:fb:25: d5:9f:68:8e:93:cb:ae:b0:2a:38:ad:af:ed:f4:34: 5d:f8:72:18:26:e2:31:b6:69:7b:2b:4d:2e:dd:04: 2b:f6:64:6a:54:49:bc:4f:b2:13:76:5e:75:4f:31: 91:98:df:10:35:6f:12:b1:1e:7d:60:05:c0:55:ed: 89:e6:4a:08:78:91:18:5c:5e:30:6e:37:89:fd:a8: 74:98:1b:06:6f:e2:3d:88:fa:1d:cc:6f:63:ee:75: ee:f6:01:85:b2:97:2b:fc:6f:73:fc:36:bb:4f:16: cd:b1:8b:f6:db:41:6d:f6:cb:be:8d:0f:0c:96:76: fb:18:9c:d8:1f:d1:5f:a8:f0:a5:57:e9:81:4c:3f: 2d:d6:91:d8:8a:2e:04:dd:0c:20:05:79:1c:a0:a7: a1:51:d2:50:00:04:22:17:c2:33:c5:ef:22:bd:64: fd:6f:39:b9:c0:29:9a:7e:58:be:de:df:55:18:2d: 10:d3:6e:62:06:3b:8f:d7:b7:7e:1c:d4:96:d2:d6: a9:33:98:3c:b2:26:3b:6f:78:87:c7:8a:0e:5f:12: 96:b4:33:6f:df:87:00:cc:00:93:54:1c:87:a1:bc: c3:2f:10:a1:8e:8e:a9:a8:4c:f3:73:91:65:a1:7f: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:03:9F:EB:CB:A5:8A:F0:F5:6A:89:76:F5:9A:6C:16:C7:E6:87:A5 X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/PAOf68ulivD1aol29ZpsFsfmh6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.198.104.0/21 Signature Algorithm: sha256WithRSAEncryption 21:25:52:5d:33:4a:2c:a5:0f:88:83:5b:42:56:79:34:ea:8b: ce:e6:8d:2e:40:32:01:7f:13:79:00:c5:5d:0e:fa:bd:57:c9: e0:20:9a:ea:b0:b8:07:06:d7:86:33:89:45:8e:a5:a3:42:73: 4e:c0:f1:f0:31:ff:32:96:c1:a4:ec:b5:d3:eb:75:28:fd:68: 3d:c0:14:a4:6a:db:e8:8f:17:48:78:fa:57:ce:15:ec:3e:b3: 9f:be:f8:3c:de:90:42:36:22:91:53:4d:c6:68:60:25:8d:71: 4f:09:83:09:fc:58:b4:c7:02:0c:d0:ad:a2:ce:98:2f:68:8a: b3:60:ae:8e:0f:2f:9c:50:68:bc:ca:2e:60:d1:7d:b4:ff:8d: 0e:f9:0f:6f:6c:db:a5:5d:79:08:02:2e:a9:ae:21:fc:e3:32: ac:e1:14:8f:48:dc:57:75:70:6f:e0:1a:ea:7a:68:be:6e:0d: 5b:2d:11:19:2c:ed:07:37:36:f2:a9:d7:29:16:0a:ef:0f:1b: d0:ae:d1:a1:20:e6:a8:b9:f7:71:a7:74:d6:bd:3f:9c:33:5f: 93:80:f9:b7:37:28:40:7e:da:37:0d:22:46:0d:65:52:7d:75: 92:ed:7f:ce:4c:d2:21:a6:ed:db:68:06:d2:bf:5d:43:ea:69: b8:59:1a:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIaLpW3LPSGvbWW4Z0C8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzAzOWZlYmNiYTU4YWYwZjU2YTg5NzZmNTlhNmMxNmM3ZTY4N2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYXFOi8Sa4nMlA0v+yXVn2iOk8uu sCo4ra/t9DRd+HIYJuIxtml7K00u3QQr9mRqVEm8T7ITdl51TzGRmN8QNW8SsR59 YAXAVe2J5koIeJEYXF4wbjeJ/ah0mBsGb+I9iPodzG9j7nXu9gGFspcr/G9z/Da7 TxbNsYv220Ft9su+jQ8Mlnb7GJzYH9FfqPClV+mBTD8t1pHYii4E3QwgBXkcoKeh UdJQAAQiF8Izxe8ivWT9bzm5wCmafli+3t9VGC0Q025iBjuP17d+HNSW0tapM5g8 siY7b3iHx4oOXxKWtDNv34cAzACTVByHobzDLxChjo6pqEzzc5FloX8sVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDwDn+vLpYrw9WqJdvWabBbH5oelMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvUEFPZjY4dWxpdkQxYW9sMjlacHNGc2ZtaDZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1cZoMA0G CSqGSIb3DQEBCwUAA4IBAQAhJVJdM0ospQ+Ig1tCVnk06ovO5o0uQDIBfxN5AMVd Dvq9V8ngIJrqsLgHBteGM4lFjqWjQnNOwPHwMf8ylsGk7LXT63Uo/Wg9wBSkatvo jxdIePpXzhXsPrOfvvg83pBCNiKRU03GaGAljXFPCYMJ/Fi0xwIM0K2izpgvaIqz YK6ODy+cUGi8yi5g0X20/40O+Q9vbNulXXkIAi6priH84zKs4RSPSNxXdXBv4Brq emi+bg1bLREZLO0HNzbyqdcpFgrvDxvQrtGhIOaoufdxp3TWvT+cM1+TgPm3NyhA fto3DSJGDWVSfXWS7X/OTNIhpu3baAbSv11D6mm4WRpt -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:09 2026 by rpki-client