This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa File: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (raw, json) Hash identifier: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q= Subject key identifier: B3:D8:5D:50:E7:2B:E6:22:B5:70:CA:BD:2A:ED:BD:6C:F1:8A:E0:9F Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F137A460C0BB81327DA29C7A355D32E Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa Signing time: Fri 02 Jan 2026 14:19:01 +0000 ROA not before: Fri 02 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211936 IP address blocks: 213.209.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:7a:46:0c:0b:b8:13:27:da:29:c7:a3:55:d3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3d85d50e72be622b570cabd2aedbd6cf18ae09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:e7:ad:89:b8:e2:24:c8:17:f2:d7:d9:73: 3c:ee:47:cf:d9:22:d3:df:25:60:23:81:ef:4f:25: 68:19:54:fe:92:98:25:76:d2:00:6f:37:bc:59:fc: 0a:25:10:c9:94:35:14:99:62:ba:34:60:b3:9d:74: 5a:38:1a:9a:fc:ef:00:a6:5b:84:83:1c:b0:d8:37: 6a:22:1b:ce:c4:20:17:a0:81:10:4c:39:d6:bd:26: 3b:bc:70:17:88:b3:5d:23:37:70:cf:95:1f:fa:98: 9a:01:7f:ed:f6:89:ab:fb:5f:48:e4:42:7f:b2:7e: ba:2d:b1:33:32:5c:af:94:05:3c:a7:bb:42:32:17: 68:71:30:0f:4d:30:14:9d:2c:e7:38:5f:a7:0d:2c: 8b:51:46:2b:72:7d:ed:b5:cd:c9:76:08:9e:dd:56: 2d:df:12:96:b4:ea:4b:6e:b6:bc:95:0e:63:f7:36: cc:50:02:45:75:35:f7:24:25:74:7e:d3:14:2d:20: 89:cf:cc:2b:c3:95:da:93:55:6c:28:e5:86:86:20: 70:9f:ea:4a:b3:c0:f5:4b:d3:ac:31:c0:e3:d8:38: 7c:f5:8e:d9:c7:b8:fc:22:c9:7c:cd:79:72:25:97: 7d:09:0b:7d:62:12:bd:2b:ee:b5:ef:8d:50:76:5a: a6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D8:5D:50:E7:2B:E6:22:B5:70:CA:BD:2A:ED:BD:6C:F1:8A:E0:9F X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.209.136.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:9d:f0:ce:1c:37:0b:80:90:9d:bf:f0:c7:df:4a:05:73:26: c5:7d:18:51:39:95:f5:a3:da:50:58:d6:a5:e5:53:5e:68:39: c4:d8:6f:da:55:a0:99:0c:9f:78:31:c6:46:3b:a9:5d:44:fd: 5f:97:d0:02:50:c6:90:4a:29:cd:8c:33:17:54:e1:dc:1f:bb: 34:a9:2b:2a:d4:ff:ee:9a:ce:f2:b4:a7:c0:de:13:8f:21:54: 26:53:4e:b0:0a:0e:8a:5c:e4:9c:64:41:9d:d7:c4:bb:6a:a4: 57:87:d9:66:b5:33:f6:de:4c:ae:7d:e6:91:7a:72:66:be:10: 93:c4:4c:98:3d:47:15:77:9e:28:79:9c:05:ec:d4:23:d1:2a: ca:2c:3b:14:b9:b8:ef:0d:98:42:6c:96:11:ee:c6:1b:f3:0c: 01:a3:de:97:bf:4a:9b:98:7c:d8:95:59:9e:ec:15:23:90:46: f5:8e:fa:87:6c:87:0f:0e:90:c9:33:55:78:43:08:c6:58:2b: d5:a8:df:12:1e:f2:5e:6b:8b:df:6e:05:c4:0a:96:e5:1b:62: a5:5f:fb:ea:b7:bb:5b:6f:63:07:e1:23:71:b9:bf:50:bd:52: a1:90:52:6e:71:aa:a5:a7:ab:d6:38:ec:d8:87:95:ae:aa:a2: 62:1c:55:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E3pGDAu4EyfaKcejVdMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2Q4NWQ1MGU3MmJlNjIyYjU3MGNhYmQyYWVkYmQ2Y2YxOGFlMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZfnrYm44iTIF/LX2XM87kfP2SLT 3yVgI4HvTyVoGVT+kpgldtIAbze8WfwKJRDJlDUUmWK6NGCznXRaOBqa/O8ApluE gxyw2DdqIhvOxCAXoIEQTDnWvSY7vHAXiLNdIzdwz5Uf+piaAX/t9omr+19I5EJ/ sn66LbEzMlyvlAU8p7tCMhdocTAPTTAUnSznOF+nDSyLUUYrcn3ttc3Jdgie3VYt 3xKWtOpLbra8lQ5j9zbMUAJFdTX3JCV0ftMULSCJz8wrw5Xak1VsKOWGhiBwn+pK s8D1S9OsMcDj2Dh89Y7Zx7j8Isl8zXlyJZd9CQt9YhK9K+61741QdlqmeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLPYXVDnK+YitXDKvSrtvWzxiuCfMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvczloZFVPY3I1aUsxY01xOUt1MjliUEdLNEo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dGIMA0G CSqGSIb3DQEBCwUAA4IBAQBunfDOHDcLgJCdv/DH30oFcybFfRhROZX1o9pQWNal 5VNeaDnE2G/aVaCZDJ94McZGO6ldRP1fl9ACUMaQSinNjDMXVOHcH7s0qSsq1P/u ms7ytKfA3hOPIVQmU06wCg6KXOScZEGd18S7aqRXh9lmtTP23kyufeaRenJmvhCT xEyYPUcVd54oeZwF7NQj0SrKLDsUubjvDZhCbJYR7sYb8wwBo96Xv0qbmHzYlVme 7BUjkEb1jvqHbIcPDpDJM1V4QwjGWCvVqN8SHvJea4vfbgXECpblG2KlX/vqt7tb b2MH4SNxub9QvVKhkFJucaqlp6vWOOzYh5WuqqJiHFX/ -----END CERTIFICATE-----Generated at Wed Jan 21 07:48:41 2026 by rpki-client