This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-EZPlhO1u_JV3r0vjPsF2SpVds0.roa File: 1-EZPlhO1u_JV3r0vjPsF2SpVds0.roa (raw, json) Hash identifier: BaklqMHNX3mQCpVPAa6GcrNMPyJZoCisYw/62Nbe8tY= Subject key identifier: F8:46:4F:96:13:B5:BB:F2:55:DE:BD:2F:8C:FB:05:D9:2A:55:76:CD Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AAAF9F0A47509FBA7FD20DD5E294E Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-EZPlhO1u_JV3r0vjPsF2SpVds0.roa Signing time: Fri 02 Jan 2026 06:17:32 +0000 ROA not before: Fri 02 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215826 IP address blocks: 213.176.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:aa:f9:f0:a4:75:09:fb:a7:fd:20:dd:5e:29:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8464f9613b5bbf255debd2f8cfb05d92a5576cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c2:cb:bc:89:b2:d7:4c:eb:d0:f9:89:8c:24: ea:e1:f0:d5:2a:cd:5e:22:99:f3:4f:f3:ed:06:b4: 31:76:aa:b5:3d:6b:a9:ac:c0:e3:93:70:33:a1:3d: a0:80:3a:f6:a4:67:e7:5a:c8:d5:d9:62:ef:7c:0f: 9d:df:01:29:ec:0b:28:36:5b:72:82:5e:e5:3e:e2: 31:e4:a3:d5:6b:b3:8d:59:a1:e2:41:62:f7:6f:14: 57:38:4b:e0:a4:7e:6e:8d:40:64:e0:70:4f:16:b2: 18:57:7a:0e:a3:46:a0:1f:7d:19:ef:11:61:dc:3e: c1:a4:7a:69:2f:a1:e0:a4:49:f3:f0:8e:b4:f4:4c: dc:2b:3a:eb:aa:10:c0:1a:11:ff:93:59:62:30:cf: 43:f5:22:37:2a:08:ef:6c:7e:38:4d:a3:a4:78:8c: 32:76:01:85:fd:e0:24:74:d1:91:ae:a6:eb:13:06: 41:c8:d9:98:0e:67:ec:5b:95:b2:1a:6f:8b:2b:42: f0:f5:85:ba:f9:64:6f:3f:d2:b3:d2:b9:38:e7:f2: 82:c7:2f:76:ba:62:28:04:6f:f7:0e:53:6b:f1:4a: 6a:62:ed:dd:9b:04:0a:65:58:62:2c:60:ba:84:6d: 37:fd:b5:55:7f:3e:ee:52:5a:c3:dd:5b:29:ef:1a: b0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:46:4F:96:13:B5:BB:F2:55:DE:BD:2F:8C:FB:05:D9:2A:55:76:CD X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-EZPlhO1u_JV3r0vjPsF2SpVds0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.176.79.0/24 Signature Algorithm: sha256WithRSAEncryption 23:75:02:69:be:70:8f:a6:15:17:8c:74:59:f6:42:4f:2c:49: e0:aa:c7:09:9c:63:c2:ec:b6:73:85:b1:d2:92:fb:5e:e9:a0: 8c:50:1b:e9:21:e8:dc:79:99:4f:b0:5c:60:09:22:a6:ef:7e: 41:dd:e5:ad:1e:d5:82:31:51:99:f5:79:1a:a7:e1:78:42:b4: 82:75:06:2f:c1:30:98:89:28:42:28:30:f5:f5:d0:a3:d8:17: 16:87:bf:fc:c0:2d:b7:2d:7b:3c:5f:92:4a:5e:f9:fb:8a:59: 75:bf:72:56:50:1f:b7:97:6c:ae:12:31:18:56:ad:b6:11:79: f0:b3:2a:12:c3:60:89:d9:7a:e2:dc:c3:a5:a3:4d:d8:0d:92: 8c:ab:b2:e8:19:97:8c:4c:20:82:43:8b:cf:5c:57:fd:61:df: 18:c6:7b:86:01:4a:70:cd:08:ea:5b:26:02:80:8a:c3:64:f3: 46:36:0d:3a:a1:20:d6:78:c6:95:78:22:2a:c7:d0:08:25:c0: 86:0a:ec:8a:96:8e:ac:e7:a6:3c:d7:d5:e9:af:7c:6e:3d:0f: d0:44:1e:73:3d:00:3f:e1:8d:e1:bf:f9:0a:b2:4b:a4:96:a9: df:86:cd:a3:a1:b4:54:21:6c:26:64:5c:09:e9:60:04:57:d8: 5e:dc:a6:b9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9Wqr58KR1Cfun/SDdXilOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODQ2NGY5NjEzYjViYmYyNTVkZWJkMmY4Y2ZiMDVkOTJhNTU3NmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38LLvImy10zr0PmJjCTq4fDVKs1e IpnzT/PtBrQxdqq1PWuprMDjk3AzoT2ggDr2pGfnWsjV2WLvfA+d3wEp7AsoNlty gl7lPuIx5KPVa7ONWaHiQWL3bxRXOEvgpH5ujUBk4HBPFrIYV3oOo0agH30Z7xFh 3D7BpHppL6HgpEnz8I609EzcKzrrqhDAGhH/k1liMM9D9SI3KgjvbH44TaOkeIwy dgGF/eAkdNGRrqbrEwZByNmYDmfsW5WyGm+LK0Lw9YW6+WRvP9Kz0rk45/KCxy92 umIoBG/3DlNr8UpqYu3dmwQKZVhiLGC6hG03/bVVfz7uUlrD3Vsp7xqwrQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPhGT5YTtbvyVd69L4z7BdkqVXbNMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvMS1FWlBsaE8xdV9KVjNyMHZqUHNGMlNwVmRzMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTcvMTMzOWRmLThlMDYtNDFkZS05NGYzLTBjYmEzM2VmYzVi Yi8xL3c4R0ZKLU9pQnE4b1FnS05sYTdFRXpqbzJ2Zy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWwTzAN BgkqhkiG9w0BAQsFAAOCAQEAI3UCab5wj6YVF4x0WfZCTyxJ4KrHCZxjwuy2c4Wx 0pL7XumgjFAb6SHo3HmZT7BcYAkipu9+Qd3lrR7VgjFRmfV5GqfheEK0gnUGL8Ew mIkoQigw9fXQo9gXFoe//MAtty17PF+SSl75+4pZdb9yVlAft5dsrhIxGFatthF5 8LMqEsNgidl64tzDpaNN2A2SjKuy6BmXjEwggkOLz1xX/WHfGMZ7hgFKcM0I6lsm AoCKw2TzRjYNOqEg1njGlXgiKsfQCCXAhgrsipaOrOemPNfV6a98bj0P0EQecz0A P+GN4b/5CrJLpJap34bNo6G0VCFsJmRcCelgBFfYXtymuQ== -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:44 2026 by rpki-client