This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/aE2McMJGZ3uuhPCVHbhKOJJyMlw.roa File: aE2McMJGZ3uuhPCVHbhKOJJyMlw.roa (raw, json) Hash identifier: 2ll/Ac4ka+uhATeQQZ/AvlRcwkhwuYUDVQ0cKm3+8V0= Subject key identifier: 68:4D:8C:70:C2:46:67:7B:AE:84:F0:95:1D:B8:4A:38:92:72:32:5C Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 019B7C11FFF5170914AC9460F0D2DBD893E0 Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/aE2McMJGZ3uuhPCVHbhKOJJyMlw.roa Signing time: Fri 02 Jan 2026 00:18:32 +0000 ROA not before: Fri 02 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196858 IP address blocks: 213.227.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ff:f5:17:09:14:ac:94:60:f0:d2:db:d8:93:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Jan 2 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=684d8c70c246677bae84f0951db84a389272325c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b4:ae:35:e8:d2:e3:79:b7:2f:e6:40:da:44: 21:79:3b:8f:fb:7c:7c:7e:5d:5e:5e:c6:e4:ba:82: a2:f0:46:8c:d6:ae:aa:6c:93:0f:ce:64:fc:f7:c1: ae:e6:8e:e4:2c:39:e8:94:41:81:e7:64:bd:e2:40: 4b:81:91:93:80:c0:e8:0a:07:df:28:20:34:9e:99: 09:6d:b8:f5:ef:34:36:61:a7:1e:86:e4:13:55:16: cd:42:b4:e8:cf:30:be:50:33:bd:b6:8b:61:da:e6: a8:e1:3f:d2:fb:88:4c:fd:43:d8:3a:ef:58:57:a7: 67:f5:9c:3a:da:cc:e8:9c:68:45:c0:a9:ad:27:f0: c6:6a:75:ef:d5:2f:77:ec:b2:8e:77:76:e1:6b:a0: 30:ba:27:c2:a4:e9:2d:7c:5c:13:6d:6a:71:3c:0a: 5f:13:2c:b3:96:9b:ac:df:53:2b:7f:bc:97:d9:fa: a4:d4:12:e1:01:d0:d1:89:98:de:11:13:67:74:23: 1e:12:f7:83:57:d2:95:8d:f7:54:ba:c3:14:21:c7: c5:50:d4:78:85:d8:cf:7e:c3:30:08:9e:2d:9f:71: 4a:ad:53:28:e0:ba:37:ce:99:ac:13:f4:f2:b5:18: 48:c2:b5:a8:6a:4b:01:3d:e3:7a:0f:fc:90:0d:7b: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4D:8C:70:C2:46:67:7B:AE:84:F0:95:1D:B8:4A:38:92:72:32:5C X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/aE2McMJGZ3uuhPCVHbhKOJJyMlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.227.66.0/23 Signature Algorithm: sha256WithRSAEncryption 44:ba:6e:d3:16:c3:25:9b:34:b1:f1:e1:c7:e8:21:1a:f7:6b: 85:0d:8c:6d:b0:88:d0:b9:38:7e:c6:1f:a6:22:42:24:64:cc: 29:4e:2f:ef:78:fe:83:ee:ec:67:7a:4d:0a:58:86:4d:52:5d: e1:f8:49:33:1d:ff:2a:c0:34:be:a1:4e:7b:dd:85:1d:3f:c9: 93:05:89:63:83:72:29:43:fb:99:bb:3d:63:15:7f:eb:0c:91: aa:9a:d8:98:25:70:a1:d1:98:0c:55:6d:e3:98:f2:b9:de:4f: 23:92:b5:5e:88:1d:36:a4:5d:37:ea:d0:fc:a1:9b:45:69:a7: 5e:c4:42:54:47:e7:a5:d7:45:9e:d6:de:e1:2a:d9:0b:32:23: 56:13:9d:73:bd:df:43:19:76:db:db:15:ea:bc:fb:5f:b6:6d: 87:08:4f:c9:92:8f:3b:e3:51:63:e2:fc:d6:06:7d:b2:40:84: a0:3c:23:ca:95:d6:05:b5:ac:c4:58:99:8c:11:5e:87:30:58: 64:b1:6b:9c:ae:45:4e:c7:5a:57:17:e7:a3:00:69:2e:6b:fb: cf:fa:32:88:56:91:aa:b6:5e:9f:88:59:29:eb:ee:05:08:12: fa:9c:2a:bf:f5:5d:1b:e8:a8:70:91:1d:f7:97:b3:54:1f:56: aa:64:b6:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ef/1FwkUrJRg8NLb2JPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjYwMTAyMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODRkOGM3MGMyNDY2NzdiYWU4NGYwOTUxZGI4NGEzODkyNzIzMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrSuNejS43m3L+ZA2kQheTuP+3x8 fl1eXsbkuoKi8EaM1q6qbJMPzmT898Gu5o7kLDnolEGB52S94kBLgZGTgMDoCgff KCA0npkJbbj17zQ2YacehuQTVRbNQrTozzC+UDO9toth2uao4T/S+4hM/UPYOu9Y V6dn9Zw62szonGhFwKmtJ/DGanXv1S937LKOd3bha6AwuifCpOktfFwTbWpxPApf Eyyzlpus31Mrf7yX2fqk1BLhAdDRiZjeERNndCMeEveDV9KVjfdUusMUIcfFUNR4 hdjPfsMwCJ4tn3FKrVMo4Lo3zpmsE/TytRhIwrWoaksBPeN6D/yQDXv2hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhNjHDCRmd7roTwlR24SjiScjJcMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvYUUyTWNNSkdaM3V1aFBDVkhiaEtPSkp5TWx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1eNCMA0G CSqGSIb3DQEBCwUAA4IBAQBEum7TFsMlmzSx8eHH6CEa92uFDYxtsIjQuTh+xh+m IkIkZMwpTi/veP6D7uxnek0KWIZNUl3h+EkzHf8qwDS+oU573YUdP8mTBYljg3Ip Q/uZuz1jFX/rDJGqmtiYJXCh0ZgMVW3jmPK53k8jkrVeiB02pF036tD8oZtFaade xEJUR+el10We1t7hKtkLMiNWE51zvd9DGXbb2xXqvPtftm2HCE/Jko8741Fj4vzW Bn2yQISgPCPKldYFtazEWJmMEV6HMFhksWucrkVOx1pXF+ejAGkua/vP+jKIVpGq tl6fiFkp6+4FCBL6nCq/9V0b6KhwkR33l7NUH1aqZLaq -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:11 2026 by rpki-client