This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/hN8uqpJVGUVz_yoCMsK71ZeLMkw.roa File: hN8uqpJVGUVz_yoCMsK71ZeLMkw.roa (raw, json) Hash identifier: yFRAlutdbfqI9DX9panTjVrB5bc9srd6cM00XqjPdl4= Subject key identifier: 84:DF:2E:AA:92:55:19:45:73:FF:2A:02:32:C2:BB:D5:97:8B:32:4C Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8ABCE4B0E214E6238D83D0D57702B Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/hN8uqpJVGUVz_yoCMsK71ZeLMkw.roa Signing time: Fri 02 Jan 2026 08:17:41 +0000 ROA not before: Fri 02 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208905 IP address blocks: 213.137.92.0/24 maxlen: 24 213.137.93.0/24 maxlen: 24 213.137.94.0/24 maxlen: 24 213.137.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:ab:ce:4b:0e:21:4e:62:38:d8:3d:0d:57:70:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84df2eaa9255194573ff2a0232c2bbd5978b324c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3c:9f:2f:da:50:5e:cb:b6:1e:5a:87:3b:3a: 0d:e7:dd:a0:6d:d4:31:4d:32:61:76:de:a6:ec:f5: b0:99:20:49:b4:bd:0f:9a:7a:51:3f:c5:67:8b:3f: 87:44:b6:a5:04:e0:39:a3:25:d4:67:b5:b8:91:1d: 04:b9:30:69:68:56:53:83:02:1d:8a:45:c5:ac:9a: ff:88:25:e9:38:d5:c8:49:eb:12:0b:c6:b7:9e:d4: 5c:0a:a7:5c:1d:86:bf:23:2f:43:18:dc:1f:27:af: 01:da:b1:da:c6:20:32:1b:c2:63:37:f4:2f:8f:74: 23:d5:ec:97:20:8a:74:b3:9c:f2:e3:4e:68:0f:12: 6b:6e:e9:f5:79:0b:79:8e:f1:6f:db:5b:cb:ee:77: dc:b8:ad:25:73:c0:c1:f9:ed:a0:ab:37:a5:db:ad: 98:8e:09:51:2d:f1:66:52:83:e9:ef:f3:a3:18:f8: 2e:f7:5c:5f:d3:b4:04:9a:fe:c6:b6:9d:c2:82:49: a1:40:c2:62:b7:91:15:5c:49:cd:d3:ad:35:b6:b3: 94:5d:75:5e:f9:35:c3:7e:97:61:fe:68:fd:80:04: b9:d5:1f:87:19:ae:51:80:cb:f2:b2:83:e4:c6:53: c5:87:1c:11:b0:46:cc:e6:09:be:85:ac:bd:f7:fd: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DF:2E:AA:92:55:19:45:73:FF:2A:02:32:C2:BB:D5:97:8B:32:4C X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/hN8uqpJVGUVz_yoCMsK71ZeLMkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.137.92.0/22 Signature Algorithm: sha256WithRSAEncryption 54:1e:6b:74:b0:89:0c:00:6a:b0:90:e1:30:a3:bd:79:28:70: 15:ac:d3:81:ec:9e:2c:1f:c6:ab:dd:0e:8c:3f:3e:1b:72:51: f5:5c:5c:29:17:2d:77:f6:81:27:05:78:e7:e8:ad:c0:79:93: f4:57:c0:de:2b:81:5a:d9:eb:06:50:3d:c3:52:f2:4e:35:59: dd:47:2b:58:25:02:ec:8b:79:f4:02:5a:e7:b9:b9:18:b0:6a: f9:48:9e:c7:1b:61:65:c4:e6:ab:c4:96:18:a0:1d:08:37:a3: df:af:1f:85:b0:a9:e1:c6:5b:fb:9d:ce:2b:b2:be:0f:66:56: 81:3a:43:c2:57:f2:4e:55:6d:45:13:e1:d8:79:7b:29:b2:40: 98:5b:09:99:7e:7c:b1:00:3e:94:a5:69:1a:3d:71:30:b1:d6: f6:53:81:cb:4a:3d:9d:27:97:28:a4:96:0a:c5:28:dc:44:4b: 4b:12:d3:e7:ae:39:28:4c:e4:0c:ff:1c:3f:f9:56:15:f1:27: 8c:95:68:3f:fd:5c:c0:76:5a:31:9b:27:0f:4a:ec:9a:fd:b9: 6f:88:6c:fb:d4:81:10:8e:55:8e:91:31:6f:b5:1b:fd:95:61: d7:3a:4c:35:54:d7:7c:ba:06:69:11:39:75:0f:2f:1c:45:7f: 82:7b:33:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yKvOSw4hTmI42D0NV3ArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGRmMmVhYTkyNTUxOTQ1NzNmZjJhMDIzMmMyYmJkNTk3OGIzMjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DyfL9pQXsu2HlqHOzoN592gbdQx TTJhdt6m7PWwmSBJtL0PmnpRP8Vniz+HRLalBOA5oyXUZ7W4kR0EuTBpaFZTgwId ikXFrJr/iCXpONXISesSC8a3ntRcCqdcHYa/Iy9DGNwfJ68B2rHaxiAyG8JjN/Qv j3Qj1eyXIIp0s5zy405oDxJrbun1eQt5jvFv21vL7nfcuK0lc8DB+e2gqzel262Y jglRLfFmUoPp7/OjGPgu91xf07QEmv7Gtp3CgkmhQMJit5EVXEnN0601trOUXXVe +TXDfpdh/mj9gAS51R+HGa5RgMvysoPkxlPFhxwRsEbM5gm+hay99/3IsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITfLqqSVRlFc/8qAjLCu9WXizJMMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvaE44dXFwSlZHVVZ6X3lvQ01zSzcxWmVMTWt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1YlcMA0G CSqGSIb3DQEBCwUAA4IBAQBUHmt0sIkMAGqwkOEwo715KHAVrNOB7J4sH8ar3Q6M Pz4bclH1XFwpFy139oEnBXjn6K3AeZP0V8DeK4Fa2esGUD3DUvJONVndRytYJQLs i3n0AlrnubkYsGr5SJ7HG2FlxOarxJYYoB0IN6Pfrx+FsKnhxlv7nc4rsr4PZlaB OkPCV/JOVW1FE+HYeXspskCYWwmZfnyxAD6UpWkaPXEwsdb2U4HLSj2dJ5copJYK xSjcREtLEtPnrjkoTOQM/xw/+VYV8SeMlWg//VzAdloxmycPSuya/blviGz71IEQ jlWOkTFvtRv9lWHXOkw1VNd8ugZpETl1Dy8cRX+CezNm -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:53 2026 by rpki-client