This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/sTRe3hxafWevdrqOFig7u6J6HfA.roa File: sTRe3hxafWevdrqOFig7u6J6HfA.roa (raw, json) Hash identifier: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls= Subject key identifier: B1:34:5E:DE:1C:5A:7D:67:AF:76:BA:8E:16:28:3B:BB:A2:7A:1D:F0 Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B7910824E217CE56A60E18E8E5DAA6F06 Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/sTRe3hxafWevdrqOFig7u6J6HfA.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 213.198.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:82:4e:21:7c:e5:6a:60:e1:8e:8e:5d:aa:6f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1345ede1c5a7d67af76ba8e16283bbba27a1df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fe:2d:a2:ae:49:36:bf:93:45:de:69:e2:37: ec:bc:5a:4b:2c:cd:2a:5e:00:cf:41:0f:b9:f9:a0: 20:de:70:9a:e4:64:35:be:2a:7a:1e:6e:c3:4e:0b: 0a:bf:81:5d:12:f1:1a:9f:0c:ef:7d:bc:8a:0e:40: 97:43:86:10:6a:98:f9:c2:04:09:47:a5:d2:12:71: a4:c5:16:b3:9a:ed:97:93:02:98:92:a8:25:eb:8a: f2:28:d2:b7:5c:b7:93:38:e5:90:97:64:d9:2f:04: c1:de:4a:2c:ff:a3:d3:fc:18:68:b6:02:37:52:e3: 6b:b3:3e:01:1a:e1:c0:11:ea:65:fc:47:13:62:ab: dd:11:c4:06:56:e4:83:41:9b:93:c0:15:12:4c:6a: 67:54:de:f2:41:d4:78:c4:7c:45:e5:bc:d8:4c:79: bc:56:ae:5c:b0:80:51:4d:65:eb:cd:12:9c:a5:f5: 91:c8:e7:f9:a4:f4:c0:0a:da:9a:53:ec:52:5e:49: 58:56:f7:24:8b:2a:7c:df:0b:26:d0:1d:7b:ad:e6: 7e:d8:5b:50:3c:60:21:fd:ba:49:fa:3b:e6:27:79: 3f:47:48:0c:f8:c6:b0:29:32:3a:df:bf:8e:15:25: e6:b9:86:32:2a:2f:1e:87:4b:e8:92:7d:dc:83:10: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:34:5E:DE:1C:5A:7D:67:AF:76:BA:8E:16:28:3B:BB:A2:7A:1D:F0 X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/sTRe3hxafWevdrqOFig7u6J6HfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.198.67.0/24 Signature Algorithm: sha256WithRSAEncryption 88:aa:ab:10:3d:ff:03:bf:aa:9f:6b:75:1d:a0:0c:33:30:fe: 6c:3f:3f:6d:48:5e:1c:87:fb:27:98:62:9b:e7:ab:5c:16:6c: 9c:87:06:3d:b4:6e:75:de:87:1d:94:af:6b:bc:26:af:d0:45: 07:60:ea:f8:4a:d1:3e:6c:6a:ae:32:95:ff:03:31:7e:7e:84: e1:3e:a1:55:ee:a0:c5:46:65:4b:ed:20:92:25:8f:b6:81:c4: 01:49:78:48:83:cf:11:92:dd:e8:49:8f:10:f8:0d:92:4c:08: 84:29:e9:70:aa:d5:08:30:f2:30:53:5c:2f:12:70:74:93:6c: 48:aa:9b:82:1b:00:79:ee:8a:50:d2:99:42:de:3e:63:fe:a5: 62:f4:c2:da:ba:b4:3c:b9:3e:1e:40:11:bd:07:e4:81:90:f1: 08:24:d0:06:51:5d:0c:21:dd:13:21:bc:a6:bf:1d:75:c8:a5: f5:4b:0b:b6:4a:f7:5e:07:c1:d3:31:38:09:c5:e3:fe:38:45: 35:b5:41:b1:a7:c5:e0:78:51:07:b7:52:6c:c6:2e:6f:e7:b1: 20:79:f0:02:ba:3a:14:5b:db:dc:d0:4d:b2:78:55:ce:c4:56: a8:31:a6:da:f7:8f:5d:a1:60:87:be:57:67:f5:3f:23:f3:7f: 72:0b:0d:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIJOIXzlamDhjo5dqm8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTM0NWVkZTFjNWE3ZDY3YWY3NmJhOGUxNjI4M2JiYmEyN2ExZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/4toq5JNr+TRd5p4jfsvFpLLM0q XgDPQQ+5+aAg3nCa5GQ1vip6Hm7DTgsKv4FdEvEanwzvfbyKDkCXQ4YQapj5wgQJ R6XSEnGkxRazmu2XkwKYkqgl64ryKNK3XLeTOOWQl2TZLwTB3kos/6PT/BhotgI3 UuNrsz4BGuHAEepl/EcTYqvdEcQGVuSDQZuTwBUSTGpnVN7yQdR4xHxF5bzYTHm8 Vq5csIBRTWXrzRKcpfWRyOf5pPTACtqaU+xSXklYVvckiyp83wsm0B17reZ+2FtQ PGAh/bpJ+jvmJ3k/R0gM+MawKTI637+OFSXmuYYyKi8eh0vokn3cgxCVPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLE0Xt4cWn1nr3a6jhYoO7uieh3wMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvc1RSZTNoeGFmV2V2ZHJxT0ZpZzd1Nko2SGZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cZDMA0G CSqGSIb3DQEBCwUAA4IBAQCIqqsQPf8Dv6qfa3UdoAwzMP5sPz9tSF4ch/snmGKb 56tcFmychwY9tG513ocdlK9rvCav0EUHYOr4StE+bGquMpX/AzF+foThPqFV7qDF RmVL7SCSJY+2gcQBSXhIg88Rkt3oSY8Q+A2STAiEKelwqtUIMPIwU1wvEnB0k2xI qpuCGwB57opQ0plC3j5j/qVi9MLaurQ8uT4eQBG9B+SBkPEIJNAGUV0MId0TIbym vx11yKX1Swu2SvdeB8HTMTgJxeP+OEU1tUGxp8XgeFEHt1Jsxi5v57EgefACujoU W9vc0E2yeFXOxFaoMaba949doWCHvldn9T8j839yCw0K -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:09 2026 by rpki-client