This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/FuIBir0i-y7SEGRI15m4Ui_zA_0.roa File: FuIBir0i-y7SEGRI15m4Ui_zA_0.roa (raw, json) Hash identifier: VPkd3ytwbWG1Sl01GeIeuQbGU6zTZUHeBBof8XyrtUU= Subject key identifier: 16:E2:01:8A:BD:22:FB:2E:D2:10:64:48:D7:99:B8:52:2F:F3:03:FD Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Certificate serial: 019B7A5B76F0308AF7F2C6259F7584D08922 Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/FuIBir0i-y7SEGRI15m4Ui_zA_0.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 213.156.248.0/24 maxlen: 24 213.156.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:76:f0:30:8a:f7:f2:c6:25:9f:75:84:d0:89:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16e2018abd22fb2ed2106448d799b8522ff303fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9c:e3:b0:9a:60:00:82:41:83:29:b8:dc:45: d6:35:14:0a:10:66:1b:c0:a9:21:97:eb:7f:c3:73: 26:c5:5d:e4:b5:48:db:2b:f9:c1:d5:57:c2:e9:94: c5:36:db:07:6b:f1:eb:81:66:69:b9:f6:6c:52:5e: 1a:cc:e8:c4:cb:18:bc:d4:34:f1:30:fc:71:58:2e: 42:a8:99:fc:b4:14:a6:ca:85:92:a3:1f:2f:f6:3e: 42:3c:12:3b:91:ba:dc:1b:59:8a:4c:3a:d3:82:95: 9a:1d:b9:2b:43:35:d1:39:dc:8b:16:2e:ec:f6:50: e0:7d:40:1d:6e:37:86:f2:78:a4:d4:81:a4:c7:ae: 7d:d5:ea:18:78:fc:6a:21:72:a8:aa:76:81:a8:44: 7b:16:07:bd:d5:09:87:a6:d5:7d:fe:13:2e:de:e9: 44:24:ef:91:3c:5d:cd:20:28:d2:04:79:d9:9a:18: d4:ad:c7:c2:ff:ae:73:de:bd:c2:fe:24:40:b5:46: 5a:4f:4e:0d:3b:35:65:20:7b:9d:99:ec:f8:82:03: 8e:d1:95:f2:78:e7:7c:8a:da:81:e3:2a:97:c8:b7: 3c:c0:96:30:07:7e:4a:e3:60:76:99:55:3c:99:e8: fe:d9:68:9a:88:12:4f:4b:5f:bb:ec:be:4c:64:42: 33:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E2:01:8A:BD:22:FB:2E:D2:10:64:48:D7:99:B8:52:2F:F3:03:FD X509v3 Authority Key Identifier: keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/FuIBir0i-y7SEGRI15m4Ui_zA_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.156.248.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:d0:62:89:77:a1:58:dd:73:bf:74:d6:b7:ad:7e:9c:da:4a: 34:a3:e0:76:6a:2f:73:b0:05:cc:e9:c3:65:09:ee:d6:f7:99: 45:e1:84:d5:d9:60:e6:d2:67:82:af:5b:e3:8a:c6:d1:a9:a7: d3:d1:fd:1b:17:0c:5c:ec:2a:83:89:cc:b1:d4:ff:54:59:6f: 47:96:88:6e:f5:fd:57:ee:4e:4b:63:44:bf:a6:b1:5c:f8:f5: f2:f3:de:3e:48:19:38:f8:39:ea:da:1f:90:63:79:82:ec:e1: 75:88:2f:77:46:ba:e0:a8:ba:6e:5a:c8:12:03:3e:20:c3:23: d7:8c:46:14:94:c8:2a:77:2e:f9:af:20:3e:ce:7c:3f:5a:5e: 30:59:b2:7b:cb:d0:60:a3:7c:0f:8c:95:ea:59:92:03:c7:be: 0b:14:b4:94:c1:48:b5:42:83:6c:01:a9:ce:41:dc:4c:80:b3: 68:c3:33:3f:81:8f:d1:b8:be:38:07:d8:f9:87:30:23:2b:05: e0:41:4f:4a:f3:e4:fe:f7:35:52:c3:ca:c0:48:a1:65:1e:b7: 9f:f5:46:59:64:ff:1c:7b:4a:40:58:c7:c6:ba:ee:60:b0:e2: fa:9e:9b:a5:ed:48:f0:19:79:68:66:64:81:e2:c4:c8:a7:3d: 06:0a:3a:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3bwMIr38sYln3WE0IkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw MGM0YzIwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmUyMDE4YWJkMjJmYjJlZDIxMDY0NDhkNzk5Yjg1MjJmZjMwM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JzjsJpgAIJBgym43EXWNRQKEGYb wKkhl+t/w3MmxV3ktUjbK/nB1VfC6ZTFNtsHa/HrgWZpufZsUl4azOjEyxi81DTx MPxxWC5CqJn8tBSmyoWSox8v9j5CPBI7kbrcG1mKTDrTgpWaHbkrQzXROdyLFi7s 9lDgfUAdbjeG8nik1IGkx6591eoYePxqIXKoqnaBqER7Fge91QmHptV9/hMu3ulE JO+RPF3NICjSBHnZmhjUrcfC/65z3r3C/iRAtUZaT04NOzVlIHudmez4ggOO0ZXy eOd8itqB4yqXyLc8wJYwB35K42B2mVU8mej+2WiaiBJPS1+77L5MZEIzhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBbiAYq9Ivsu0hBkSNeZuFIv8wP9MB8GA1UdIwQY MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt MDQwNTIzNGFiM2YxLzEvRnVJQmlyMGkteTdTRUdSSTE1bTRVaV96QV8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1Zz4MA0G CSqGSIb3DQEBCwUAA4IBAQB60GKJd6FY3XO/dNa3rX6c2ko0o+B2ai9zsAXM6cNl Ce7W95lF4YTV2WDm0meCr1vjisbRqafT0f0bFwxc7CqDicyx1P9UWW9Hlohu9f1X 7k5LY0S/prFc+PXy894+SBk4+Dnq2h+QY3mC7OF1iC93RrrgqLpuWsgSAz4gwyPX jEYUlMgqdy75ryA+znw/Wl4wWbJ7y9Bgo3wPjJXqWZIDx74LFLSUwUi1QoNsAanO QdxMgLNowzM/gY/RuL44B9j5hzAjKwXgQU9K8+T+9zVSw8rASKFlHref9UZZZP8c e0pAWMfGuu5gsOL6npul7UjwGXloZmSB4sTIpz0GCjoQ -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:36 2026 by rpki-client