This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/rrxhY0T34NFm8dBURFOGg9BvJjw.roa File: rrxhY0T34NFm8dBURFOGg9BvJjw.roa (raw, json) Hash identifier: CAUMQZvZz6QKlQgRUZEx4oRHdyyDBXGnUQ6HYMNXgDk= Subject key identifier: AE:BC:61:63:44:F7:E0:D1:66:F1:D0:54:44:53:86:83:D0:6F:26:3C Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217 Certificate serial: 019B78A31354AD1DEE6E2C5B31EC50C89534 Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/rrxhY0T34NFm8dBURFOGg9BvJjw.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54103 IP address blocks: 212.124.80.0/22 maxlen: 24 212.124.84.0/24 maxlen: 24 212.124.85.0/24 maxlen: 24 212.124.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:13:54:ad:1d:ee:6e:2c:5b:31:ec:50:c8:95:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aebc616344f7e0d166f1d05444538683d06f263c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:43:b1:63:b8:fc:92:b4:fa:6c:be:e1:c5: 90:58:24:1b:07:17:a2:05:12:b3:d5:9b:c7:94:49: 5e:1c:4d:b4:fa:37:45:de:15:b3:aa:ab:ed:51:9c: f6:f2:9a:f0:0a:66:67:38:51:da:b7:d0:d1:32:7b: 8d:81:18:97:64:16:0b:9a:99:db:10:49:a9:5d:5e: cf:61:b2:67:6e:36:df:dd:a5:61:27:34:cd:a8:92: ab:60:a8:ce:13:4e:86:13:d1:25:d4:cb:77:8b:50: 89:db:85:bd:55:84:e6:08:63:f4:92:2d:e3:a8:cd: cb:d7:db:14:11:ae:04:86:92:a9:0d:7e:f1:75:c6: da:18:a0:e7:fc:bd:0f:b2:dc:d9:94:f2:6b:e6:03: 99:62:7a:e4:d4:ce:ae:f5:0e:87:28:90:59:a1:d3: b9:51:92:2b:0c:0f:53:0d:11:68:fa:ad:a4:f8:49: 7e:f2:12:6e:26:45:dc:b9:4e:0a:d5:23:06:6a:57: fb:a2:38:97:a3:de:25:61:ba:53:d1:a2:10:b9:3d: e4:da:66:61:39:43:59:b5:0f:15:10:20:7d:c7:7c: e2:b6:5c:0f:b3:12:7f:93:94:7f:5c:6d:14:6f:65: 58:a4:7b:43:ae:cc:ba:58:49:02:7c:52:4f:97:46: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BC:61:63:44:F7:E0:D1:66:F1:D0:54:44:53:86:83:D0:6F:26:3C X509v3 Authority Key Identifier: keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/rrxhY0T34NFm8dBURFOGg9BvJjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.124.80.0-212.124.85.255 212.124.87.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f5:d6:1b:c0:d0:95:d4:f0:d9:47:a9:5d:25:92:22:cf:05: 99:e4:3f:28:04:bf:df:04:7a:94:84:24:9d:99:04:19:24:4d: 86:88:c0:d0:fc:94:82:b4:1f:07:3d:20:3d:44:89:0e:9c:04: a2:7d:00:c7:ce:86:da:52:e9:27:42:9f:bb:cb:63:06:d4:db: 62:bb:69:5f:37:bc:32:8f:a4:74:3f:a0:50:11:5f:08:fc:ef: 4d:c8:f8:22:f9:22:06:49:97:ff:69:8f:e3:7d:ce:80:46:21: 79:3a:05:33:ef:12:93:af:58:04:22:ab:2a:72:f8:91:ef:d6: f2:8d:e7:9a:ce:32:4e:21:dd:35:b0:05:8c:41:00:90:2a:90: e8:20:b5:cd:80:21:a6:60:45:39:51:0a:66:39:a4:08:f1:aa: ee:88:4c:d3:68:d5:92:43:8c:06:35:83:53:59:93:93:e8:23: 13:09:33:2e:93:df:3b:07:7d:2c:2e:92:93:28:76:98:9f:cb: 0f:1a:a9:ce:26:9d:0a:2e:77:72:80:b8:c2:a7:03:aa:b5:1d: 4c:4d:8d:50:e4:7a:b7:5d:d3:8c:2d:b5:6e:31:3f:57:fd:f3: e1:e8:f1:6e:89:ea:79:43:07:1e:09:98:af:c0:95:92:56:23: ea:da:89:e6 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4oxNUrR3ubixbMexQyJU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWUyYmY0M2YyMWE4MWM0OTJjNmU2YTlmYzZmMDc0ZDJm MGEyMTcwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWJjNjE2MzQ0ZjdlMGQxNjZmMWQwNTQ0NDUzODY4M2QwNmYyNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCRDsWO4/JK0+my+4cWQWCQbBxei BRKz1ZvHlEleHE20+jdF3hWzqqvtUZz28prwCmZnOFHat9DRMnuNgRiXZBYLmpnb EEmpXV7PYbJnbjbf3aVhJzTNqJKrYKjOE06GE9El1Mt3i1CJ24W9VYTmCGP0ki3j qM3L19sUEa4EhpKpDX7xdcbaGKDn/L0PstzZlPJr5gOZYnrk1M6u9Q6HKJBZodO5 UZIrDA9TDRFo+q2k+El+8hJuJkXcuU4K1SMGalf7ojiXo94lYbpT0aIQuT3k2mZh OUNZtQ8VECB9x3zitlwPsxJ/k5R/XG0Ub2VYpHtDrsy6WEkCfFJPl0ZkAQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFK68YWNE9+DRZvHQVERThoPQbyY8MB8GA1UdIwQY MBaAFN/uK/Q/IagcSSxuap/G8HTS8KIXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTIt MjhkNzhlYjlmMmRjLzEvcnJ4aFkwVDM0TkZtOGRCVVJGT0dnOUJ2Smp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTItMjhkNzhlYjlmMmRj LzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBATUfFAD BAHUfFQDBADUfFcwDQYJKoZIhvcNAQELBQADggEBAFn11hvA0JXU8NlHqV0lkiLP BZnkPygEv98EepSEJJ2ZBBkkTYaIwND8lIK0Hwc9ID1EiQ6cBKJ9AMfOhtpS6SdC n7vLYwbU22K7aV83vDKPpHQ/oFARXwj8703I+CL5IgZJl/9pj+N9zoBGIXk6BTPv EpOvWAQiqypy+JHv1vKN55rOMk4h3TWwBYxBAJAqkOggtc2AIaZgRTlRCmY5pAjx qu6ITNNo1ZJDjAY1g1NZk5PoIxMJMy6T3zsHfSwukpModpifyw8aqc4mnQoud3KA uMKnA6q1HUxNjVDkerdd04wttW4xP1f98+Ho8W6J6nlDBx4JmK/AlZJWI+raieY= -----END CERTIFICATE-----Generated at Wed Jan 21 06:08:43 2026 by rpki-client