This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1n3hiFZmnwR4waCiwOmlFtWMpjY.roa File: 1n3hiFZmnwR4waCiwOmlFtWMpjY.roa (raw, json) Hash identifier: dtaEfQo35E8LjqSEPmnrfsj5/PdFrXpwF1bthia8Hhc= Subject key identifier: D6:7D:E1:88:56:66:9F:04:78:C1:A0:A2:C0:E9:A5:16:D5:8C:A6:36 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2467E23A55171A6F3E1F13608B418 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1n3hiFZmnwR4waCiwOmlFtWMpjY.roa Signing time: Thu 01 Jan 2026 08:17:39 +0000 ROA not before: Thu 01 Jan 2026 08:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21840 IP address blocks: 212.135.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:46:7e:23:a5:51:71:a6:f3:e1:f1:36:08:b4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d67de18856669f0478c1a0a2c0e9a516d58ca636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:33:3d:be:9c:92:4e:f8:f6:2f:0d:ae:33: 7b:ea:28:99:c2:ee:f8:06:6d:63:73:f2:56:b0:e3: a8:fd:ca:98:bf:ef:b3:b3:ac:1a:c4:8b:f7:9a:5b: 04:c9:d0:92:99:d3:e9:2d:51:e9:3d:1f:f6:22:30: 45:7d:5c:42:b3:78:4f:5c:9f:52:e3:ce:da:de:b9: 6f:c6:72:f7:32:e6:60:8b:7c:13:38:98:92:ca:30: 13:7a:86:19:00:a2:6a:3e:60:0e:c3:08:0e:1f:67: 90:69:2d:6f:76:a4:4f:a0:73:29:15:e4:e2:26:b4: 2a:5f:b4:de:d5:16:e2:a0:fe:3b:98:4c:9b:69:24: da:e5:d4:7d:5a:8f:9b:67:e8:99:9c:9e:1b:8b:f8: 51:9c:af:e6:3c:a4:25:9d:74:ba:91:cc:94:ec:e8: ca:bc:d2:37:7b:4c:16:18:29:2b:f5:9b:3a:fd:fa: 6f:1c:14:4c:51:ff:57:61:be:92:b6:cb:8e:39:40: 5a:2a:c5:4f:6d:84:f5:5a:d6:de:8b:ea:05:9b:0e: 00:31:64:a0:d2:d5:cb:a7:57:c0:44:89:3d:34:62: 29:6d:c3:0e:11:51:92:5a:e9:b4:99:7f:d9:d8:87: fd:17:7b:ee:9c:ca:a4:4e:48:07:60:bf:9f:82:81: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7D:E1:88:56:66:9F:04:78:C1:A0:A2:C0:E9:A5:16:D5:8C:A6:36 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1n3hiFZmnwR4waCiwOmlFtWMpjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.242.0/24 Signature Algorithm: sha256WithRSAEncryption 96:45:d7:4a:77:de:56:a5:47:0d:6b:92:92:48:48:87:d8:be: 00:b0:f8:1d:32:19:3f:2d:24:01:f8:76:37:90:01:cb:1a:5d: 10:59:6d:c2:67:30:9c:81:f3:a0:16:ce:94:6a:81:6a:b6:c8: d9:d2:22:6f:dd:ba:48:a9:19:c2:c0:36:d3:71:4a:83:79:46: dc:f0:66:d0:8e:53:52:1c:de:6a:e3:bf:28:2f:1a:03:00:65: b8:b3:45:09:67:cd:d6:2b:8e:53:53:7f:5b:05:63:0f:62:7c: e7:58:3d:36:92:ad:cb:f3:c2:14:f7:75:1d:fd:1d:e7:08:2e: 3d:c7:ee:9a:1c:8f:90:5c:88:01:4f:ff:29:14:be:35:73:17: 31:3c:10:17:03:c1:b5:22:ff:37:08:a6:5c:e0:47:1f:b6:7d: f1:c1:e0:2f:e0:69:0b:c5:52:ac:b0:cf:c6:c9:ff:69:9f:a4: 27:a9:05:71:03:15:4d:ab:ba:3b:07:67:bd:24:9a:7c:cb:37: 46:9b:c7:5e:9f:2a:21:bb:f3:fe:33:e5:fc:22:31:81:96:a7: fd:31:b4:6f:28:bf:73:8e:1e:2b:e0:ef:4e:46:94:2f:70:ed: c2:6d:e0:a1:5e:47:d3:2a:01:6d:12:d5:0f:69:2e:77:f9:e1: 34:ba:ca:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4okZ+I6VRcabz4fE2CLQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjdkZTE4ODU2NjY5ZjA0NzhjMWEwYTJjMGU5YTUxNmQ1OGNhNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCgzPb6ckk749i8NrjN76iiZwu74 Bm1jc/JWsOOo/cqYv++zs6waxIv3mlsEydCSmdPpLVHpPR/2IjBFfVxCs3hPXJ9S 487a3rlvxnL3MuZgi3wTOJiSyjATeoYZAKJqPmAOwwgOH2eQaS1vdqRPoHMpFeTi JrQqX7Te1RbioP47mEybaSTa5dR9Wo+bZ+iZnJ4bi/hRnK/mPKQlnXS6kcyU7OjK vNI3e0wWGCkr9Zs6/fpvHBRMUf9XYb6StsuOOUBaKsVPbYT1Wtbei+oFmw4AMWSg 0tXLp1fARIk9NGIpbcMOEVGSWum0mX/Z2If9F3vunMqkTkgHYL+fgoEtfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNZ94YhWZp8EeMGgosDppRbVjKY2MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvMW4zaGlGWm1ud1I0d2FDaXdPbWxGdFdNcGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IfyMA0G CSqGSIb3DQEBCwUAA4IBAQCWRddKd95WpUcNa5KSSEiH2L4AsPgdMhk/LSQB+HY3 kAHLGl0QWW3CZzCcgfOgFs6UaoFqtsjZ0iJv3bpIqRnCwDbTcUqDeUbc8GbQjlNS HN5q478oLxoDAGW4s0UJZ83WK45TU39bBWMPYnznWD02kq3L88IU93Ud/R3nCC49 x+6aHI+QXIgBT/8pFL41cxcxPBAXA8G1Iv83CKZc4Ecftn3xweAv4GkLxVKssM/G yf9pn6QnqQVxAxVNq7o7B2e9JJp8yzdGm8denyohu/P+M+X8IjGBlqf9MbRvKL9z jh4r4O9ORpQvcO3CbeChXkfTKgFtEtUPaS53+eE0uspK -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:38 2026 by rpki-client