This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/xbafFgHngcJFMb2cngm3oN0_3sA.roa File: xbafFgHngcJFMb2cngm3oN0_3sA.roa (raw, json) Hash identifier: 3QhvTvFkxgvJXVXMTx914Du8ko0OHV0OfDyouPKHYiA= Subject key identifier: C5:B6:9F:16:01:E7:81:C2:45:31:BD:9C:9E:09:B7:A0:DD:3F:DE:C0 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019B77C70A44D2AA72751FE12F09D745B252 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/xbafFgHngcJFMb2cngm3oN0_3sA.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50599 IP address blocks: 212.7.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0a:44:d2:aa:72:75:1f:e1:2f:09:d7:45:b2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5b69f1601e781c24531bd9c9e09b7a0dd3fdec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:08:df:ea:1b:f7:f4:aa:5a:3f:98:57:1f:82: c5:d4:f3:89:e0:3a:b7:8c:99:e2:be:51:e6:82:5a: 45:95:5e:29:b5:88:42:a4:57:7d:34:66:31:c2:bc: 34:d4:b4:c2:cc:b4:0a:08:1f:73:4c:c8:94:ed:dd: 1d:0b:8c:97:0e:85:31:09:44:d2:20:c4:20:8b:4c: 54:9e:12:18:4c:54:6b:1c:6e:54:ac:1a:bf:eb:24: e3:56:ed:5b:ca:90:23:ac:91:35:50:e6:28:77:2c: 12:86:68:0d:1a:8d:ea:9a:44:35:06:a6:15:84:c2: cd:60:b0:00:47:d7:7f:e9:c6:6d:d6:f1:8a:fd:ff: 6a:a3:14:e6:95:06:f9:9b:4a:f4:68:e2:2b:89:1b: e3:b5:f9:a9:70:f8:47:2f:0c:2e:cd:fc:0e:e7:8d: 96:3c:d5:95:b2:7d:03:6d:2e:90:e6:92:60:59:b2: ec:97:32:d1:2b:24:8c:44:b1:1f:e8:a5:e9:96:39: 2c:81:f1:1d:8b:23:79:35:c4:e6:29:b3:67:1a:c1: 0b:e0:04:01:b1:30:e7:6c:48:3f:98:4f:d7:4e:ea: df:0d:47:3f:12:1d:8d:58:fb:67:c0:a0:6e:52:c2: 3b:5c:7f:90:86:5f:fa:f0:37:f0:d1:b5:2a:19:26: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B6:9F:16:01:E7:81:C2:45:31:BD:9C:9E:09:B7:A0:DD:3F:DE:C0 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/xbafFgHngcJFMb2cngm3oN0_3sA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.7.213.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:b5:5a:13:25:ab:ad:34:86:43:37:4e:0e:4c:9b:86:7d:b1: 2f:a0:42:0d:c1:3d:aa:ca:d8:12:ff:c7:4c:13:1e:df:1f:34: 8f:c7:bd:85:4d:a1:7c:9d:15:52:69:8c:b6:c2:52:e0:08:95: 7e:7b:09:1b:97:bd:8f:45:00:43:31:9b:eb:f4:f2:9d:ae:33: 89:e0:80:d5:d9:af:25:4d:fc:34:e7:c9:ff:e2:52:5a:fe:26: ee:17:c7:dc:a8:f5:7b:6b:0a:6c:c2:8f:57:3c:8c:c6:6d:df: 78:77:dd:82:b7:69:bf:b8:58:35:5b:eb:4c:bf:27:47:20:96: cb:0b:ba:f1:b6:60:c2:2b:20:16:f5:13:b2:48:d6:c6:7e:7c: fa:63:e8:67:e0:75:dc:12:2f:a2:08:54:d3:ae:16:d8:dc:f9: b7:14:f9:9e:7d:52:e0:c0:ad:d4:6a:04:96:9d:49:e1:2f:97: d5:d6:4a:a3:4f:fe:05:9a:8b:d0:5e:f1:e9:6e:d3:fb:2f:c7: 9a:72:c6:a6:06:e3:dc:33:6c:8d:2b:f1:1a:81:9a:7c:84:45: f6:1b:59:d2:9e:59:a5:54:d9:e4:a5:8d:7c:26:93:f7:9c:08: 81:bc:c2:45:1c:af:e2:11:73:9b:68:7b:20:45:32:3d:60:82: d3:d8:e2:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwpE0qpydR/hLwnXRbJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWI2OWYxNjAxZTc4MWMyNDUzMWJkOWM5ZTA5YjdhMGRkM2ZkZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwjf6hv39KpaP5hXH4LF1POJ4Dq3 jJnivlHmglpFlV4ptYhCpFd9NGYxwrw01LTCzLQKCB9zTMiU7d0dC4yXDoUxCUTS IMQgi0xUnhIYTFRrHG5UrBq/6yTjVu1bypAjrJE1UOYodywShmgNGo3qmkQ1BqYV hMLNYLAAR9d/6cZt1vGK/f9qoxTmlQb5m0r0aOIriRvjtfmpcPhHLwwuzfwO542W PNWVsn0DbS6Q5pJgWbLslzLRKySMRLEf6KXpljksgfEdiyN5NcTmKbNnGsEL4AQB sTDnbEg/mE/XTurfDUc/Eh2NWPtnwKBuUsI7XH+Qhl/68Dfw0bUqGSb4pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMW2nxYB54HCRTG9nJ4Jt6DdP97AMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEveGJhZkZnSG5nY0pGTWIyY25nbTNvTjBfM3NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AfVMA0G CSqGSIb3DQEBCwUAA4IBAQBMtVoTJautNIZDN04OTJuGfbEvoEINwT2qytgS/8dM Ex7fHzSPx72FTaF8nRVSaYy2wlLgCJV+ewkbl72PRQBDMZvr9PKdrjOJ4IDV2a8l Tfw058n/4lJa/ibuF8fcqPV7awpswo9XPIzGbd94d92Ct2m/uFg1W+tMvydHIJbL C7rxtmDCKyAW9ROySNbGfnz6Y+hn4HXcEi+iCFTTrhbY3Pm3FPmefVLgwK3UagSW nUnhL5fV1kqjT/4FmovQXvHpbtP7L8eacsamBuPcM2yNK/EagZp8hEX2G1nSnlml VNnkpY18JpP3nAiBvMJFHK/iEXObaHsgRTI9YILT2OLm -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:49 2026 by rpki-client