This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/A4DPrioTJmOOuQC2yavwYY1DpBY.roa File: A4DPrioTJmOOuQC2yavwYY1DpBY.roa (raw, json) Hash identifier: o5U++ZVezdAL+4R6PdeRDcGm3Tnn68pVHwb0cieGrEU= Subject key identifier: 03:80:CF:AE:2A:13:26:63:8E:B9:00:B6:C9:AB:F0:61:8D:43:A4:16 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5A9C9A00EFA126AB180C0197F12236 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/A4DPrioTJmOOuQC2yavwYY1DpBY.roa Signing time: Fri 02 Jan 2026 06:17:28 +0000 ROA not before: Fri 02 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142578 IP address blocks: 213.176.8.0/21 maxlen: 24 213.176.32.0/19 maxlen: 24 213.176.80.0/21 maxlen: 24 213.176.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:9c:9a:00:ef:a1:26:ab:18:0c:01:97:f1:22:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0380cfae2a1326638eb900b6c9abf0618d43a416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:2a:a4:a5:c3:45:f5:04:d2:de:86:7f:c5: 80:e4:84:ec:19:38:39:88:10:52:94:00:fb:75:42: ff:2f:98:1e:a8:2b:4b:c3:4f:d7:d9:5f:b9:b2:be: b3:82:3c:aa:35:c1:23:38:93:e8:86:d1:9a:d6:01: a1:f2:a1:63:1e:7b:84:9a:26:ea:0d:be:e1:69:5e: 91:23:56:15:b3:78:63:d5:7d:b7:c6:9b:ea:a5:fa: 5f:38:aa:25:60:39:70:c3:28:4a:15:b6:5c:d2:3a: 8f:17:45:79:a8:5d:44:4b:bf:74:df:c2:c8:14:57: 50:33:55:fd:5e:25:b4:57:20:f5:0d:da:92:28:27: 5a:a8:73:c9:4a:ef:10:6f:1c:aa:ad:51:69:ee:86: 53:86:7f:e4:fc:f7:ce:27:0a:bf:21:f3:75:85:f9: f1:5f:4a:a7:0a:4e:b4:97:56:df:12:03:22:37:f0: e2:29:30:ab:c9:19:8d:3f:e4:d4:d3:aa:49:a7:32: 5b:1b:c9:78:03:ee:2f:76:40:a8:5e:29:0c:c9:a4: 10:83:b8:8a:39:ee:b9:36:31:6f:4a:e7:64:fb:62: 87:74:6a:11:59:ad:45:ca:25:40:8b:1e:c0:ed:42: 51:78:3d:08:bd:19:dc:d4:c8:75:67:e1:22:20:b5: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:80:CF:AE:2A:13:26:63:8E:B9:00:B6:C9:AB:F0:61:8D:43:A4:16 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/A4DPrioTJmOOuQC2yavwYY1DpBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.176.8.0/21 213.176.32.0/19 213.176.80.0/21 213.176.96.0/20 Signature Algorithm: sha256WithRSAEncryption c5:60:41:bd:17:81:23:c5:72:75:4d:94:5b:3a:c2:d9:3e:1e: 90:2a:86:79:8f:03:06:8a:5d:53:41:26:b9:38:02:82:37:cb: b4:c5:a6:42:a9:19:00:91:ff:9a:14:bc:c3:ec:cc:a3:54:53: 4d:1f:7f:89:a2:e3:0d:e5:00:97:05:cd:a1:65:fa:a3:bb:ce: da:fa:cd:e9:c3:bf:7d:4e:bd:e2:ea:81:19:e0:b7:45:4f:19: 6e:57:8e:2e:db:4a:2b:dd:2a:e5:c5:c2:de:4f:8b:21:2e:d0: d1:bb:36:30:2a:45:bc:30:79:61:cb:02:21:3a:62:84:ef:e4: 14:c9:58:82:5c:12:de:3f:98:09:1a:c2:da:8d:e8:11:c2:e3: a2:79:b1:55:22:d1:87:f4:0e:50:f8:8e:da:95:d8:5f:5a:f7: 1e:16:e0:53:08:f1:f3:29:94:95:1a:ad:1f:d8:94:61:6d:98: ca:1a:00:40:93:26:82:3c:85:22:02:eb:ee:30:6c:f3:38:1b: a7:89:9a:1f:7b:f2:c9:46:13:1d:2a:2e:24:3d:1b:fd:a3:b7: 57:d6:00:63:d9:94:ab:7d:18:32:b6:2c:ff:95:8e:72:c6:9e: 3b:01:3e:cc:9a:b2:bc:99:00:25:fc:b7:9b:8d:0f:c7:cd:bb: e7:ea:ba:2e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9WpyaAO+hJqsYDAGX8SI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzgwY2ZhZTJhMTMyNjYzOGViOTAwYjZjOWFiZjA2MThkNDNhNDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxAqpKXDRfUE0t6Gf8WA5ITsGTg5 iBBSlAD7dUL/L5geqCtLw0/X2V+5sr6zgjyqNcEjOJPohtGa1gGh8qFjHnuEmibq Db7haV6RI1YVs3hj1X23xpvqpfpfOKolYDlwwyhKFbZc0jqPF0V5qF1ES79038LI FFdQM1X9XiW0VyD1DdqSKCdaqHPJSu8QbxyqrVFp7oZThn/k/PfOJwq/IfN1hfnx X0qnCk60l1bfEgMiN/DiKTCryRmNP+TU06pJpzJbG8l4A+4vdkCoXikMyaQQg7iK Oe65NjFvSudk+2KHdGoRWa1FyiVAix7A7UJReD0IvRnc1Mh1Z+EiILWEcwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAOAz64qEyZjjrkAtsmr8GGNQ6QWMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvQTREUHJpb1RKbU9PdVFDMnlhdndZWTFEcEJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQD1bAIAwQF 1bAgAwQD1bBQAwQE1bBgMA0GCSqGSIb3DQEBCwUAA4IBAQDFYEG9F4EjxXJ1TZRb OsLZPh6QKoZ5jwMGil1TQSa5OAKCN8u0xaZCqRkAkf+aFLzD7MyjVFNNH3+JouMN 5QCXBc2hZfqju87a+s3pw799Tr3i6oEZ4LdFTxluV44u20or3SrlxcLeT4shLtDR uzYwKkW8MHlhywIhOmKE7+QUyViCXBLeP5gJGsLajegRwuOiebFVItGH9A5Q+I7a ldhfWvceFuBTCPHzKZSVGq0f2JRhbZjKGgBAkyaCPIUiAuvuMGzzOBuniZofe/LJ RhMdKi4kPRv9o7dX1gBj2ZSrfRgytiz/lY5yxp47AT7MmrK8mQAl/LebjQ/Hzbvn 6rou -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:13 2026 by rpki-client