This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-pMl3d4gNxU27FCDZAJAkSHCnQ.roa File: 1-pMl3d4gNxU27FCDZAJAkSHCnQ.roa (raw, json) Hash identifier: 5SWZgCq5BYZHkDe5mSnx1U8yWTgXkvxikcxmv8Yb7Sk= Subject key identifier: D7:EA:4C:97:77:78:80:DC:54:DB:B1:42:0D:90:09:02:44:87:0A:74 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783455A8EBA8FE3F54588047E6CB2797 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-pMl3d4gNxU27FCDZAJAkSHCnQ.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142146 IP address blocks: 213.232.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:55:a8:eb:a8:fe:3f:54:58:80:47:e6:cb:27:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7ea4c97777880dc54dbb1420d90090244870a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:c7:7b:21:ee:2c:c8:3d:bc:db:55:7c:b0: 1d:35:1f:eb:17:5d:2e:44:1a:41:60:0d:15:f3:f3: cf:26:56:28:85:c4:99:14:6b:d3:ce:ad:58:23:e6: 0e:98:9c:1a:e7:13:09:46:e7:a9:2b:55:8f:5e:89: ca:1c:29:d8:5d:cb:ea:78:b5:35:34:ca:b1:d2:d5: 63:38:cf:00:26:dc:c7:01:f2:26:35:43:98:7b:8c: e7:42:b8:c7:c7:87:fc:a1:c2:16:c3:07:e7:05:ae: d2:16:99:72:21:3d:49:11:e1:13:ed:10:01:5f:68: 33:a7:96:8d:e5:b0:c7:e7:5c:b6:8b:17:95:40:ed: 40:d7:3b:76:d9:a1:93:d8:23:8b:a1:44:b4:43:58: 01:d4:56:7e:89:1f:6b:97:ec:03:fc:44:bc:93:15: 36:64:5f:d9:7f:88:21:c9:04:db:32:0d:c6:38:6e: 93:f1:fb:5b:86:19:92:84:dc:c0:b6:e4:4a:18:49: d5:5d:27:b9:11:9f:61:ce:ab:26:98:4d:68:5c:b7: 6a:0f:50:71:3a:d6:cf:c9:c2:f0:e8:62:27:90:f8: e1:e5:e2:0e:1a:f7:f7:90:95:cb:37:4b:53:42:86: 67:38:99:b8:92:b0:b4:56:25:67:a6:dd:0b:ab:db: 9d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EA:4C:97:77:78:80:DC:54:DB:B1:42:0D:90:09:02:44:87:0A:74 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-pMl3d4gNxU27FCDZAJAkSHCnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.232.239.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:16:71:87:cf:ed:1b:9f:5a:d3:7e:78:e0:e7:0a:6c:25:a6: da:c7:de:13:e4:0e:d8:60:1b:8f:29:a8:ef:43:b9:74:fb:d5: bf:94:4f:e0:d9:15:c0:b3:43:09:51:96:26:70:9d:ac:9a:75: f1:fe:a3:6d:ec:24:3f:8a:c3:c5:42:73:9f:ce:20:72:4f:9c: f7:cf:83:d5:88:fe:84:c3:2e:5a:21:a3:bd:3d:c6:93:b7:1f: d7:e7:d4:5d:57:61:76:c7:3f:db:10:e3:5a:60:33:b1:c5:fa: 0a:31:5e:bd:13:86:36:54:3e:b7:d5:fc:14:66:3e:f2:cd:3e: 2a:e5:cd:99:2d:bd:b9:d0:80:cf:9b:a9:9a:ac:39:60:d0:af: d9:31:9c:f2:29:0c:c3:5d:70:06:e6:62:65:59:da:75:ce:4a: b7:0f:83:ef:f6:94:8c:da:b5:52:e1:b3:da:4d:48:54:0d:bf: 4d:34:cb:11:6e:59:8a:54:2c:1e:ba:54:f5:b9:f9:c8:e5:4c: 62:c6:55:e9:00:0d:9a:e0:90:bc:c5:63:03:98:d5:e3:86:c6: 9f:49:c5:60:b3:56:ed:ff:e4:32:d2:19:ad:02:64:62:74:e6: 11:c8:83:ff:cf:99:56:1e:91:e5:16:82:6a:21:02:ea:07:6d: bf:cf:91:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFWo66j+P1RYgEfmyyeXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2VhNGM5Nzc3Nzg4MGRjNTRkYmIxNDIwZDkwMDkwMjQ0ODcwYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9nHeyHuLMg9vNtVfLAdNR/rF10u RBpBYA0V8/PPJlYohcSZFGvTzq1YI+YOmJwa5xMJRuepK1WPXonKHCnYXcvqeLU1 NMqx0tVjOM8AJtzHAfImNUOYe4znQrjHx4f8ocIWwwfnBa7SFplyIT1JEeET7RAB X2gzp5aN5bDH51y2ixeVQO1A1zt22aGT2COLoUS0Q1gB1FZ+iR9rl+wD/ES8kxU2 ZF/Zf4ghyQTbMg3GOG6T8ftbhhmShNzAtuRKGEnVXSe5EZ9hzqsmmE1oXLdqD1Bx OtbPycLw6GInkPjh5eIOGvf3kJXLN0tTQoZnOJm4krC0ViVnpt0Lq9udMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNfqTJd3eIDcVNuxQg2QCQJEhwp0MB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvMS1wTWwzZDRnTnhVMjdGQ0RaQUpBa1NIQ25RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ejvMA0G CSqGSIb3DQEBCwUAA4IBAQCMFnGHz+0bn1rTfnjg5wpsJabax94T5A7YYBuPKajv Q7l0+9W/lE/g2RXAs0MJUZYmcJ2smnXx/qNt7CQ/isPFQnOfziByT5z3z4PViP6E wy5aIaO9PcaTtx/X59RdV2F2xz/bEONaYDOxxfoKMV69E4Y2VD631fwUZj7yzT4q 5c2ZLb250IDPm6marDlg0K/ZMZzyKQzDXXAG5mJlWdp1zkq3D4Pv9pSM2rVS4bPa TUhUDb9NNMsRblmKVCweulT1ufnI5UxixlXpAA2a4JC8xWMDmNXjhsafScVgs1bt /+Qy0hmtAmRidOYRyIP/z5lWHpHlFoJqIQLqB22/z5E+ -----END CERTIFICATE-----Generated at Wed Jan 21 21:31:14 2026 by rpki-client