This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa File: kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa (raw, json) Hash identifier: Xz3m7rpESDDSay6iugLcdgSAsdxY3IOPYIq5I7x/X5M= Subject key identifier: 90:4E:BA:7E:10:C4:E3:10:4A:66:03:F4:D1:A0:D2:67:9C:14:A3:C4 Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe Certificate serial: 019B7835498065E1C259523580AACDCABF09 Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa Signing time: Thu 01 Jan 2026 06:18:36 +0000 ROA not before: Thu 01 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 213.218.36.0/24 maxlen: 24 213.218.37.0/24 maxlen: 24 213.218.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:49:80:65:e1:c2:59:52:35:80:aa:cd:ca:bf:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=904eba7e10c4e3104a6603f4d1a0d2679c14a3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:36:69:8d:89:b1:b1:17:48:4c:4f:8f:db: e7:59:46:af:4d:74:af:72:79:db:0f:98:ec:88:5a: 57:cb:21:9b:e7:f6:5a:7e:a2:98:93:a5:9b:4e:bc: 69:e9:de:be:e2:20:0d:81:54:2f:48:71:da:5e:12: 1b:fb:9c:d8:a5:98:dd:a3:1d:a1:fa:ea:08:ab:dd: d0:a1:29:9b:6a:92:67:67:ac:48:8d:3c:e4:fe:ab: 70:5a:43:10:6a:c5:e2:76:11:c5:3d:e0:99:37:72: 2f:9c:ae:9a:4c:60:dc:9c:60:66:83:d0:3c:4d:f2: 60:8c:8d:b9:13:d5:d9:77:df:af:2b:7b:32:c9:37: 1e:c4:a7:6e:08:e4:fd:72:70:c6:77:1c:dd:e4:f4: 82:25:9b:18:54:d4:90:14:8d:0b:3b:cc:58:e1:16: 15:41:95:6d:78:0f:d9:d5:95:a5:2c:44:72:58:7e: 34:27:7a:07:02:ae:a9:11:09:f5:12:ca:e2:11:4b: 0a:4f:cf:97:7e:62:c7:1b:8a:5d:31:93:bf:39:23: 53:d3:54:d8:a7:89:7c:46:2c:48:ad:c5:24:35:75: 67:b0:66:f8:95:db:74:46:25:e8:f6:f1:f0:07:e3: c8:74:cb:27:65:17:1e:ec:2b:4a:d3:4b:14:bb:be: 2d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4E:BA:7E:10:C4:E3:10:4A:66:03:F4:D1:A0:D2:67:9C:14:A3:C4 X509v3 Authority Key Identifier: keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.218.36.0/23 213.218.48.0/22 Signature Algorithm: sha256WithRSAEncryption 88:ca:f8:9e:80:24:d2:dd:5a:33:ab:dc:68:94:bb:18:f4:fd: 77:49:72:17:bd:88:cb:25:05:b9:5e:f7:6e:1e:89:81:8b:fc: 2a:05:0a:c4:b7:06:64:3b:0c:79:7d:7b:04:78:3e:d6:fc:53: 7a:32:72:58:6d:63:a7:9d:5c:6f:0d:57:71:ed:79:4e:73:e0: f3:19:a9:db:76:b7:45:a9:ba:65:eb:38:4a:52:0e:37:88:a4: 17:1b:c7:16:b7:54:5c:ad:4d:5d:09:af:db:76:b2:e4:25:72: 63:b6:56:f3:28:04:8f:c4:93:b4:c6:d0:7d:93:dd:a7:46:f7: 07:00:23:79:3d:d5:02:c5:bf:19:99:ce:4d:53:f3:7a:72:49: e4:3e:fe:2e:78:8b:38:0e:e3:08:9b:16:f0:ce:7f:74:78:33: 5a:04:5e:b7:72:d4:aa:50:b4:4a:68:16:aa:82:b8:07:2d:6c: c4:20:20:a5:98:0d:5b:97:6e:7b:31:cc:93:c5:65:cf:93:e3: 08:b9:ce:ac:cd:8f:35:b4:4c:43:37:03:e1:30:0c:c4:49:d9: 6b:23:64:ae:d5:79:49:0f:0a:cc:d8:e3:9b:a0:cd:22:ec:db: c6:9a:19:f9:c9:7c:c7:a9:da:16:52:2b:5c:75:83:c9:7f:45: e0:38:a4:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NUmAZeHCWVI1gKrNyr8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MWJiNDkwZTA5ZGYxNDY3ZTRlZWM0M2Q4ZjIwNDg0Y2Vl ODM5ZmUwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDRlYmE3ZTEwYzRlMzEwNGE2NjAzZjRkMWEwZDI2NzljMTRhM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2I2aY2JsbEXSExPj9vnWUavTXSv cnnbD5jsiFpXyyGb5/ZafqKYk6WbTrxp6d6+4iANgVQvSHHaXhIb+5zYpZjdox2h +uoIq93QoSmbapJnZ6xIjTzk/qtwWkMQasXidhHFPeCZN3IvnK6aTGDcnGBmg9A8 TfJgjI25E9XZd9+vK3syyTcexKduCOT9cnDGdxzd5PSCJZsYVNSQFI0LO8xY4RYV QZVteA/Z1ZWlLERyWH40J3oHAq6pEQn1EsriEUsKT8+XfmLHG4pdMZO/OSNT01TY p4l8RixIrcUkNXVnsGb4ldt0RiXo9vHwB+PIdMsnZRce7CtK00sUu74tjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJBOun4QxOMQSmYD9NGg0mecFKPEMB8GA1UdIwQY MBaAFJUbtJDgnfFGfk7sQ9jyBITO6Dn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJ1MGtPQ2Q4VVotVHV4RDJQSUVoTTdvT2Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYTZmNjEtYTlkMi00YzZiLWI3MTct MWRiNGVkMTMxYmMzLzEva0U2NmZoREU0eEJLWmdQMDBhRFNaNXdVbzhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lYTZmNjEtYTlkMi00YzZiLWI3MTctMWRiNGVkMTMxYmMz LzEvbFJ1MGtPQ2Q4VVotVHV4RDJQSUVoTTdvT2Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1dokAwQC 1dowMA0GCSqGSIb3DQEBCwUAA4IBAQCIyviegCTS3Vozq9xolLsY9P13SXIXvYjL JQW5XvduHomBi/wqBQrEtwZkOwx5fXsEeD7W/FN6MnJYbWOnnVxvDVdx7XlOc+Dz GanbdrdFqbpl6zhKUg43iKQXG8cWt1RcrU1dCa/bdrLkJXJjtlbzKASPxJO0xtB9 k92nRvcHACN5PdUCxb8Zmc5NU/N6cknkPv4ueIs4DuMImxbwzn90eDNaBF63ctSq ULRKaBaqgrgHLWzEICClmA1bl257McyTxWXPk+MIuc6szY81tExDNwPhMAzESdlr I2Su1XlJDwrM2OOboM0i7NvGmhn5yXzHqdoWUitcdYPJf0XgOKQG -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:20 2026 by rpki-client