This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/sPNr1HqSOW9gPQD2njRcNYsq_nU.roa File: sPNr1HqSOW9gPQD2njRcNYsq_nU.roa (raw, json) Hash identifier: Rxx1CbY9JZ6FmKclFr3hxanK7IPpIKnWMWk/29TEk0E= Subject key identifier: B0:F3:6B:D4:7A:92:39:6F:60:3D:00:F6:9E:34:5C:35:8B:2A:FE:75 Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Certificate serial: 019B76EB20F8DD185C5543D5462353144CD8 Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/sPNr1HqSOW9gPQD2njRcNYsq_nU.roa Signing time: Thu 01 Jan 2026 00:17:59 +0000 ROA not before: Thu 01 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210262 IP address blocks: 213.231.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:20:f8:dd:18:5c:55:43:d5:46:23:53:14:4c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0f36bd47a92396f603d00f69e345c358b2afe75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:b7:73:a6:e4:36:0d:61:31:03:2c:23:79: 4c:ba:33:3d:df:ad:27:d3:8d:0d:ca:2f:97:90:92: c7:ad:71:fd:d5:5f:cd:0c:e9:9e:6d:07:00:56:5a: f9:f6:eb:cb:04:cb:8f:7d:a2:2f:fd:32:79:77:6e: d1:da:98:be:16:c1:f7:09:51:ac:31:fd:0c:dd:8d: f7:bc:38:d2:26:5b:4d:08:a8:1d:5a:ae:be:5c:49: 1b:ad:64:ce:dd:80:0f:62:53:c4:02:b2:bf:5b:3b: 23:e3:5b:ea:e7:b6:b1:18:ba:80:48:4d:b4:0f:50: 20:7c:bd:a1:cf:cb:fd:9f:6f:9f:47:24:6f:91:cc: 52:a8:c2:b3:00:e2:b5:fa:aa:c8:ff:da:c9:e8:73: 52:07:c5:56:9b:93:85:11:4a:0a:b6:01:3d:d3:e4: 4e:15:b9:55:9f:1d:04:ca:14:d3:37:04:eb:6a:ff: 38:ec:d1:c6:00:70:20:a6:cc:2e:11:04:02:0a:7d: b5:39:b2:9c:72:36:92:af:66:9f:b9:a5:14:e8:33: 0c:31:2d:08:41:61:14:40:ac:4e:b1:38:f0:ad:f1: 4b:41:55:bf:f1:1d:9c:77:ae:36:c1:53:7e:d4:ad: 94:24:d1:f4:02:a5:60:41:ba:59:b2:db:8d:3a:0e: e3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F3:6B:D4:7A:92:39:6F:60:3D:00:F6:9E:34:5C:35:8B:2A:FE:75 X509v3 Authority Key Identifier: keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/sPNr1HqSOW9gPQD2njRcNYsq_nU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.231.197.0/24 Signature Algorithm: sha256WithRSAEncryption a3:fb:21:51:7c:f4:00:d0:f4:af:d9:e1:80:d7:30:91:9e:35: a3:84:43:8e:9e:1b:9e:02:09:5f:52:b1:5a:24:9a:bc:78:74: 74:90:34:9a:28:24:5d:a0:81:1d:ec:bd:a5:f9:a2:a5:da:cf: 37:cf:d3:42:bf:66:01:c4:e2:a5:f8:9d:4e:f7:90:7d:24:cc: 07:dd:7f:ff:45:12:df:26:dc:57:3f:0d:05:42:52:b8:5e:80: c6:d5:01:6b:0a:cb:10:6d:0b:d8:b3:1a:40:30:55:49:ae:88: 0b:c5:37:d9:40:9a:6b:1a:bc:c8:5a:5b:3c:9c:36:02:7c:e3: 36:1d:bb:00:87:ed:1f:21:b5:50:f6:94:13:12:88:74:39:ec: 64:22:01:d2:a5:29:7f:b6:80:88:c6:55:7d:42:32:da:a4:2f: 20:8e:53:61:6f:84:e0:a6:ca:21:19:a7:22:53:45:46:ff:b9: 65:5f:8b:f2:d1:36:60:fe:0d:66:b8:f7:34:6c:be:ce:f3:ea: 85:f6:17:e5:0f:67:2b:72:fd:bc:e1:f7:2a:94:14:2a:eb:33: c8:e4:17:01:5e:1e:fc:26:2f:ed:58:06:2b:9b:f2:ad:60:0f: 6a:27:8d:ce:3a:9b:50:2f:81:b5:63:29:cb:a8:76:e3:08:3b: a7:73:af:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26yD43RhcVUPVRiNTFEzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj ZDVhYWUwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGYzNmJkNDdhOTIzOTZmNjAzZDAwZjY5ZTM0NWMzNThiMmFmZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2a3c6bkNg1hMQMsI3lMujM9360n 040Nyi+XkJLHrXH91V/NDOmebQcAVlr59uvLBMuPfaIv/TJ5d27R2pi+FsH3CVGs Mf0M3Y33vDjSJltNCKgdWq6+XEkbrWTO3YAPYlPEArK/Wzsj41vq57axGLqASE20 D1AgfL2hz8v9n2+fRyRvkcxSqMKzAOK1+qrI/9rJ6HNSB8VWm5OFEUoKtgE90+RO FblVnx0EyhTTNwTrav847NHGAHAgpswuEQQCCn21ObKccjaSr2afuaUU6DMMMS0I QWEUQKxOsTjwrfFLQVW/8R2cd642wVN+1K2UJNH0AqVgQbpZstuNOg7jfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLDza9R6kjlvYD0A9p40XDWLKv51MB8GA1UdIwQY MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt ZjZiNzhlMmIxN2ExLzEvc1BOcjFIcVNPVzlnUFFEMm5qUmNOWXNxX25VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1efFMA0G CSqGSIb3DQEBCwUAA4IBAQCj+yFRfPQA0PSv2eGA1zCRnjWjhEOOnhueAglfUrFa JJq8eHR0kDSaKCRdoIEd7L2l+aKl2s83z9NCv2YBxOKl+J1O95B9JMwH3X//RRLf JtxXPw0FQlK4XoDG1QFrCssQbQvYsxpAMFVJrogLxTfZQJprGrzIWls8nDYCfOM2 HbsAh+0fIbVQ9pQTEoh0OexkIgHSpSl/toCIxlV9QjLapC8gjlNhb4TgpsohGaci U0VG/7llX4vy0TZg/g1muPc0bL7O8+qF9hflD2crcv284fcqlBQq6zPI5BcBXh78 Ji/tWAYrm/KtYA9qJ43OOptQL4G1YynLqHbjCDunc68e -----END CERTIFICATE-----Generated at Mon Jan 26 15:58:42 2026 by rpki-client