This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/ssMCTs8bK6eFQagUc6XQvNNJt9M.roa File: ssMCTs8bK6eFQagUc6XQvNNJt9M.roa (raw, json) Hash identifier: Ez0nES5Job0wKRYCfXv+7ubsmfBER3A3sxP8nRIZ91Y= Subject key identifier: B2:C3:02:4E:CF:1B:2B:A7:85:41:A8:14:73:A5:D0:BC:D3:49:B7:D3 Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6 Certificate serial: 019B7B3695E4E3802A80EF6E32D890C90102 Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/ssMCTs8bK6eFQagUc6XQvNNJt9M.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 213.156.160.0/24 maxlen: 24 213.156.161.0/24 maxlen: 24 213.156.162.0/24 maxlen: 24 213.156.163.0/24 maxlen: 24 213.156.164.0/24 maxlen: 24 213.156.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:95:e4:e3:80:2a:80:ef:6e:32:d8:90:c9:01:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6 Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2c3024ecf1b2ba78541a81473a5d0bcd349b7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:62:70:6c:ee:26:03:f9:5d:e8:74:a1:6f: 89:cc:26:ae:6f:fa:cb:92:f0:dc:30:8b:32:0d:e0: b3:19:46:aa:fa:f1:95:a7:70:59:9e:6e:3c:5a:96: 6b:0c:1f:f7:55:58:ca:b2:92:55:da:a1:57:a4:09: dd:54:ee:f2:6d:c5:46:55:7e:b5:cf:ff:58:8a:a7: 63:a8:02:c3:a8:05:52:a7:b8:1e:4f:ce:f9:6a:54: 1f:b3:dd:07:4e:68:ad:c4:de:12:e6:22:e3:33:48: 74:dd:4e:7c:4a:40:f7:1e:cd:90:b2:c5:f7:7b:13: 84:63:27:5c:f7:f5:cb:21:85:1f:36:43:e2:53:d6: 5a:b9:4b:34:ab:ea:14:b5:f0:d2:b6:29:0d:94:8e: cb:00:03:1d:f0:0d:f2:7a:9a:f0:d7:1b:c7:3e:c5: 88:d5:48:47:ba:14:7f:27:7e:a9:f8:d5:18:14:83: bf:a0:31:4e:93:a0:63:c9:8d:11:38:fe:3f:fc:46: 32:cc:b8:9b:08:8a:32:1d:fc:97:0d:57:49:67:25: 07:16:11:31:fa:78:4b:da:a1:90:43:c7:2c:29:f0: 70:3f:1c:38:2b:23:c0:ad:11:53:d3:28:10:f5:5e: 87:72:40:42:84:2d:1a:62:7b:23:22:e1:ab:2b:e0: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C3:02:4E:CF:1B:2B:A7:85:41:A8:14:73:A5:D0:BC:D3:49:B7:D3 X509v3 Authority Key Identifier: keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/ssMCTs8bK6eFQagUc6XQvNNJt9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.156.160.0-213.156.165.255 Signature Algorithm: sha256WithRSAEncryption 34:76:94:53:5f:e9:fc:cb:49:1a:7b:9c:b0:cc:12:e4:d5:00: 51:e1:99:a5:d1:06:a7:c4:a1:ee:55:5f:7f:83:87:28:d6:85: c4:2e:9c:83:fd:c1:45:79:b2:f0:68:af:12:2a:9e:e5:4f:ef: b5:04:93:c4:0c:0c:06:36:db:15:79:bc:a2:10:08:9c:3e:e8: 51:25:a3:64:c6:fe:d9:e5:62:cd:8d:8b:f2:ca:e7:0c:9d:7b: 01:28:01:cb:ab:47:ba:f8:49:c6:20:a4:d0:8a:52:b8:39:d4: 04:08:9e:df:c5:1f:d9:04:6d:4e:f9:47:ad:f7:1b:7f:38:15: 68:be:4f:12:69:2b:59:a8:f5:62:2c:a5:56:89:46:be:71:46: 27:de:38:db:a0:86:82:ea:ba:e3:87:c0:2f:80:d1:b9:e4:33: d0:c0:95:7a:bb:6c:34:78:04:d4:c8:f1:69:5d:17:23:72:da: e2:e7:94:60:59:00:c6:ab:38:4f:b5:ce:12:53:ce:df:29:3f: 51:5c:f9:2b:5e:7a:91:39:9e:3d:a2:66:e0:03:0c:2e:a1:4d: 44:2a:8b:fe:be:ed:3e:71:4b:e1:af:8c:5b:9e:7b:b6:0c:e3: 0e:d1:6d:a6:5b:18:de:ed:f1:09:cd:11:2e:10:5e:42:21:d8: 0a:7e:56:49 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NpXk44AqgO9uMtiQyQECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNWU0ZmYyY2VlNGRiN2E5NWJjZjJhM2FkMTFjOTQ3NTc1 YmIxYTYwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmMzMDI0ZWNmMWIyYmE3ODU0MWE4MTQ3M2E1ZDBiY2QzNDliN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfhicGzuJgP5Xeh0oW+JzCaub/rL kvDcMIsyDeCzGUaq+vGVp3BZnm48WpZrDB/3VVjKspJV2qFXpAndVO7ybcVGVX61 z/9YiqdjqALDqAVSp7geT875alQfs90HTmitxN4S5iLjM0h03U58SkD3Hs2QssX3 exOEYydc9/XLIYUfNkPiU9ZauUs0q+oUtfDStikNlI7LAAMd8A3yeprw1xvHPsWI 1UhHuhR/J36p+NUYFIO/oDFOk6BjyY0ROP4//EYyzLibCIoyHfyXDVdJZyUHFhEx +nhL2qGQQ8csKfBwPxw4KyPArRFT0ygQ9V6HckBChC0aYnsjIuGrK+AxQQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLLDAk7PGyunhUGoFHOl0LzTSbfTMB8GA1UdIwQY MBaAFJ9eT/LO5Nt6lbzyo60RyUdXW7GmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjE1UDhzN2syM3FWdlBLanJSSEpSMWRic2FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xOGJiNWYtOTA3Ni00MmZhLTlmOGYt MzNiOGMxZjdkMTI3LzEvc3NNQ1RzOGJLNmVGUWFnVWM2WFF2Tk5KdDlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xOGJiNWYtOTA3Ni00MmZhLTlmOGYtMzNiOGMxZjdkMTI3 LzEvbjE1UDhzN2syM3FWdlBLanJSSEpSMWRic2FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXVnKAD BAHVnKQwDQYJKoZIhvcNAQELBQADggEBADR2lFNf6fzLSRp7nLDMEuTVAFHhmaXR BqfEoe5VX3+DhyjWhcQunIP9wUV5svBorxIqnuVP77UEk8QMDAY22xV5vKIQCJw+ 6FElo2TG/tnlYs2Ni/LK5wydewEoAcurR7r4ScYgpNCKUrg51AQInt/FH9kEbU75 R633G384FWi+TxJpK1mo9WIspVaJRr5xRifeONughoLquuOHwC+A0bnkM9DAlXq7 bDR4BNTI8WldFyNy2uLnlGBZAMarOE+1zhJTzt8pP1Fc+SteepE5nj2iZuADDC6h TUQqi/6+7T5xS+GvjFuee7YM4w7RbaZbGN7t8QnNES4QXkIh2Ap+Vkk= -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:57 2026 by rpki-client