This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1xYnAmaCySt-IQ4H91staf4Aw3o.roa File: 1xYnAmaCySt-IQ4H91staf4Aw3o.roa (raw, json) Hash identifier: dkGAk3++9l10Ic8IuEsuMk4S+Ts1f5fNnq96/Y8S41g= Subject key identifier: D7:16:27:02:66:82:C9:2B:7E:21:0E:07:F7:5B:2D:69:FE:00:C3:7A Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F3FD1B36AEBDD004BDB5E9C4C38DD Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1xYnAmaCySt-IQ4H91staf4Aw3o.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 213.238.160.0/24 maxlen: 24 213.238.161.0/24 maxlen: 24 213.238.162.0/24 maxlen: 24 213.238.163.0/24 maxlen: 24 213.238.164.0/24 maxlen: 24 213.238.165.0/24 maxlen: 24 213.238.168.0/24 maxlen: 24 213.238.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3f:d1:b3:6a:eb:dd:00:4b:db:5e:9c:4c:38:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d71627026682c92b7e210e07f75b2d69fe00c37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:bb:5c:2d:a4:54:97:d7:18:78:67:42:a0: 58:fa:7c:86:ba:9b:ec:9b:45:4c:f2:35:ee:95:63: 2f:5f:e5:10:13:16:e9:7b:49:4a:11:f3:40:d0:90: ea:92:10:b3:67:ef:51:7d:b9:44:5e:fe:45:52:e3: ed:e1:8e:c7:5b:28:3a:ef:e9:0b:fb:54:20:bd:43: 04:f0:64:f0:de:90:44:4a:f1:c9:e3:ba:4e:7c:06: c9:cc:20:26:5d:bd:a0:da:90:a0:d7:15:16:02:80: 1a:92:e2:1f:59:f5:35:ed:63:7d:e2:84:32:58:24: c2:69:ca:63:06:9a:a2:af:c2:80:4f:31:ea:1d:a1: 9b:da:1c:56:e9:3d:61:83:16:52:78:6f:ac:04:e7: ba:4c:88:79:63:38:8c:26:d7:b4:3f:d1:8e:df:a4: f9:7b:64:7f:98:c3:a9:cf:59:09:b4:96:21:bf:48: d4:d4:75:20:68:19:b0:a9:b5:4c:06:73:79:7b:98: 85:22:43:8e:48:37:eb:1a:0f:23:08:60:d0:52:9a: 5c:9a:a8:3b:70:59:91:94:be:cd:9e:b3:0c:5f:51: 29:ba:7c:61:36:fa:7d:03:8b:7a:a8:d8:fa:f7:6d: d2:17:89:17:dd:74:c8:c5:1b:e3:b3:b7:d4:53:c5: 35:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:16:27:02:66:82:C9:2B:7E:21:0E:07:F7:5B:2D:69:FE:00:C3:7A X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1xYnAmaCySt-IQ4H91staf4Aw3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.160.0-213.238.165.255 213.238.168.0/24 213.238.187.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:50:9c:27:5e:b4:16:65:14:a9:e0:55:43:fe:6b:37:0e:bf: a2:9b:50:17:17:a6:ac:5d:a6:59:f7:ae:d5:2e:ce:ee:d5:5a: 68:40:0a:57:ec:83:0e:67:e4:6b:f4:48:e2:da:51:fb:12:0b: 1a:35:83:21:14:c9:e8:a6:0c:f6:4f:f2:39:84:d4:6a:f7:de: 7a:dd:f6:df:0c:71:db:fc:12:9c:02:54:97:2a:95:c6:a7:e6: 8b:8a:63:21:d6:c4:a0:6d:32:44:dc:2c:6b:46:c2:f9:e4:41: 69:f7:f6:29:27:65:5d:18:00:05:04:f8:bd:6d:ed:9e:bb:ee: c6:c5:fe:e9:cf:18:84:31:25:00:67:4a:75:57:97:5a:36:b1: 12:49:5a:23:89:53:8d:17:fe:99:34:c4:d7:c4:ed:40:57:d8: 28:4a:57:5b:c7:49:dc:03:82:0c:58:81:a4:e1:a4:6a:cf:0a: 1f:b0:30:0c:24:3c:28:af:09:2f:56:88:65:fd:89:df:44:03: ad:0b:ad:69:98:05:68:16:4e:fd:45:ae:98:ba:d4:33:53:d2: 75:8f:16:6f:f9:98:93:21:9c:40:df:09:27:55:38:3f:c8:7d: a2:ab:06:da:5e:34:0a:1e:a1:0e:76:46:48:8a:e5:36:f5:6a: 32:eb:fc:f1 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt5fz/Rs2rr3QBL216cTDjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzE2MjcwMjY2ODJjOTJiN2UyMTBlMDdmNzViMmQ2OWZlMDBjMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu67XC2kVJfXGHhnQqBY+nyGupvs m0VM8jXulWMvX+UQExbpe0lKEfNA0JDqkhCzZ+9RfblEXv5FUuPt4Y7HWyg67+kL +1QgvUME8GTw3pBESvHJ47pOfAbJzCAmXb2g2pCg1xUWAoAakuIfWfU17WN94oQy WCTCacpjBpqir8KATzHqHaGb2hxW6T1hgxZSeG+sBOe6TIh5YziMJte0P9GO36T5 e2R/mMOpz1kJtJYhv0jU1HUgaBmwqbVMBnN5e5iFIkOOSDfrGg8jCGDQUppcmqg7 cFmRlL7NnrMMX1EpunxhNvp9A4t6qNj6923SF4kX3XTIxRvjs7fUU8U1xwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNcWJwJmgskrfiEOB/dbLWn+AMN6MB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvMXhZbkFtYUN5U3QtSVE0SDkxc3RhZjRBdzNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAXV7qAD BAHV7qQDBADV7qgDBADV7rswDQYJKoZIhvcNAQELBQADggEBAE1QnCdetBZlFKng VUP+azcOv6KbUBcXpqxdpln3rtUuzu7VWmhAClfsgw5n5Gv0SOLaUfsSCxo1gyEU yeimDPZP8jmE1Gr33nrd9t8Mcdv8EpwCVJcqlcan5ouKYyHWxKBtMkTcLGtGwvnk QWn39iknZV0YAAUE+L1t7Z677sbF/unPGIQxJQBnSnVXl1o2sRJJWiOJU40X/pk0 xNfE7UBX2ChKV1vHSdwDggxYgaThpGrPCh+wMAwkPCivCS9WiGX9id9EA60LrWmY BWgWTv1Frpi61DNT0nWPFm/5mJMhnEDfCSdVOD/IfaKrBtpeNAoeoQ52RkiK5Tb1 ajLr/PE= -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:11 2026 by rpki-client