This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/TIVfVbHfouWC6xhaqaOe2rROKk4.roa File: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (raw, json) Hash identifier: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c= Subject key identifier: 4C:85:5F:55:B1:DF:A2:E5:82:EB:18:5A:A9:A3:9E:DA:B4:4E:2A:4E Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E388F50DC11FAA212E4D443A60163F8 Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/TIVfVbHfouWC6xhaqaOe2rROKk4.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42014 IP address blocks: 213.174.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8f:50:dc:11:fa:a2:12:e4:d4:43:a6:01:63:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c855f55b1dfa2e582eb185aa9a39edab44e2a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:d3:c3:bd:bc:2e:ed:4c:db:37:76:10:5c: ff:8f:1a:69:6a:a0:34:d2:b9:f8:a1:d7:83:e6:9f: 84:72:84:c6:e6:5b:41:33:e5:fa:ac:d2:4d:f5:8d: bd:dc:f6:c6:02:fa:0d:eb:df:37:3f:64:40:52:a0: 47:92:8b:d4:88:b1:85:d3:36:39:d7:7d:66:30:f5: 20:1a:aa:f0:73:83:32:a3:11:25:8e:fb:2f:e5:25: 30:52:47:d1:5c:21:d2:05:cb:76:8e:a6:5c:18:ac: e4:47:a8:bf:e2:c2:02:2b:28:f1:bd:93:19:fd:01: 1b:58:d8:71:92:89:83:01:61:64:7a:81:cd:ef:5e: 4c:f7:5a:de:82:41:da:9d:e0:02:f9:74:e9:ad:3c: ab:1d:a3:e5:5c:4d:a4:33:35:16:66:a4:ac:19:cd: 8d:7b:2f:f9:32:30:b1:d8:b1:ec:c0:71:74:cb:da: 37:50:f0:02:89:17:71:5e:b3:0f:8e:02:fe:33:4e: f5:d3:d1:0c:c6:42:c1:7f:0a:49:5a:fa:3d:8b:15: 4c:8a:05:e2:47:ee:87:3b:e0:b5:38:9d:93:7d:0f: cd:61:5a:c6:5f:72:9f:b6:fa:1b:44:fb:fc:6d:d1: 79:3f:08:98:34:e7:e8:0f:93:a0:e0:87:1b:09:eb: 82:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:85:5F:55:B1:DF:A2:E5:82:EB:18:5A:A9:A3:9E:DA:B4:4E:2A:4E X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/TIVfVbHfouWC6xhaqaOe2rROKk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.174.21.0/24 Signature Algorithm: sha256WithRSAEncryption 54:6f:47:0d:b7:ba:08:7d:bb:24:ec:ac:eb:7b:88:eb:85:c3: 02:92:76:c2:58:16:5f:07:f0:61:dd:bc:5c:41:22:cf:19:f6: 40:73:c6:d4:9a:44:92:17:19:df:0f:29:e2:fa:22:e6:e0:c7: a3:61:93:ff:bf:73:95:ee:4f:da:e6:aa:72:24:99:13:0c:7a: 5f:82:39:45:9d:59:aa:ba:d0:df:ea:d4:16:bb:c7:a6:98:2b: c7:12:d5:0f:ae:f1:57:de:84:96:be:a8:2f:e2:e2:2e:79:3c: ed:6a:ce:42:70:ec:ed:d2:35:eb:04:0d:01:41:cc:cc:b9:d6: 2f:2b:ec:6c:1c:ef:c2:4e:29:d6:3e:19:c2:1e:76:94:84:88: 81:02:79:2e:ee:b9:6f:aa:ad:db:6a:f4:db:fd:3d:90:6a:39: af:f1:ad:a8:26:63:1b:71:73:38:2d:82:12:8d:69:e7:d1:26: b7:91:d3:7b:3f:bd:4a:fe:31:81:70:bc:56:99:11:29:55:d5: 2a:57:bd:31:83:e0:15:df:6b:9d:e4:ba:2c:ef:f7:bf:eb:d7: c9:10:a2:e9:c8:d1:c6:7c:14:14:33:58:1e:51:35:ec:83:6c: 46:ed:70:2d:b8:a5:b0:c4:27:9d:a1:4c:59:91:47:43:51:03: 15:10:45:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OI9Q3BH6ohLk1EOmAWP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzg1NWY1NWIxZGZhMmU1ODJlYjE4NWFhOWEzOWVkYWI0NGUyYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRPTw728Lu1M2zd2EFz/jxppaqA0 0rn4odeD5p+EcoTG5ltBM+X6rNJN9Y293PbGAvoN6983P2RAUqBHkovUiLGF0zY5 131mMPUgGqrwc4MyoxEljvsv5SUwUkfRXCHSBct2jqZcGKzkR6i/4sICKyjxvZMZ /QEbWNhxkomDAWFkeoHN715M91regkHaneAC+XTprTyrHaPlXE2kMzUWZqSsGc2N ey/5MjCx2LHswHF0y9o3UPACiRdxXrMPjgL+M07109EMxkLBfwpJWvo9ixVMigXi R+6HO+C1OJ2TfQ/NYVrGX3KftvobRPv8bdF5PwiYNOfoD5Og4IcbCeuCKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEyFX1Wx36LlgusYWqmjntq0TipOMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvVElWZlZiSGZvdVdDNnhoYXFhT2UyclJPS2s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a4VMA0G CSqGSIb3DQEBCwUAA4IBAQBUb0cNt7oIfbsk7Kzre4jrhcMCknbCWBZfB/Bh3bxc QSLPGfZAc8bUmkSSFxnfDyni+iLm4MejYZP/v3OV7k/a5qpyJJkTDHpfgjlFnVmq utDf6tQWu8emmCvHEtUPrvFX3oSWvqgv4uIueTztas5CcOzt0jXrBA0BQczMudYv K+xsHO/CTinWPhnCHnaUhIiBAnku7rlvqq3bavTb/T2Qajmv8a2oJmMbcXM4LYIS jWnn0Sa3kdN7P71K/jGBcLxWmREpVdUqV70xg+AV32ud5Los7/e/69fJEKLpyNHG fBQUM1geUTXsg2xG7XAtuKWwxCedoUxZkUdDUQMVEEUP -----END CERTIFICATE-----Generated at Mon Jan 26 14:44:19 2026 by rpki-client