This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pW955LWIE6ZbCmS74Yel1f4czsA.roa File: pW955LWIE6ZbCmS74Yel1f4czsA.roa (raw, json) Hash identifier: YislwYyPwlJVXZoZd1B3F6GGLH2/f1BJhFgSUCnABpw= Subject key identifier: A5:6F:79:E4:B5:88:13:A6:5B:0A:64:BB:E1:87:A5:D5:FE:1C:CE:C0 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB6A4C65328966D32033B7ACEFEEC Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pW955LWIE6ZbCmS74Yel1f4czsA.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199058 IP address blocks: 213.218.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b6:a4:c6:53:28:96:6d:32:03:3b:7a:ce:fe:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a56f79e4b58813a65b0a64bbe187a5d5fe1ccec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bf:9c:a5:b8:7e:37:a8:f0:71:7c:00:a9:59: 75:a1:d9:89:80:58:5b:fd:28:e3:f9:24:86:29:91: 1e:91:b7:26:15:5c:fc:76:f3:d9:3b:58:53:15:72: e7:fa:39:43:0d:a7:15:8b:68:c6:8a:de:73:17:f8: b9:c3:89:3b:dc:2f:8d:6e:8f:b8:e4:34:2a:21:36: a1:8c:4d:6d:f4:e3:79:82:d6:22:b2:d7:5d:02:3a: 25:73:51:0d:54:84:9a:c5:d3:d7:43:05:9b:27:a7: 45:06:86:aa:5b:95:68:df:74:64:be:d7:fb:84:77: 78:40:96:7a:43:3c:d2:37:c9:33:67:4d:51:13:11: 3c:cf:31:cd:31:b9:a8:1d:40:14:07:e2:91:88:77: da:ca:7d:d7:e1:9f:65:bc:04:28:4d:9b:ce:b4:7d: 85:77:68:93:d4:94:90:f4:b6:3e:7e:21:7d:c6:70: b1:ec:65:43:e6:d2:1b:be:46:5a:be:f1:7c:6d:74: c2:0f:e6:c4:f0:4a:d3:a1:98:ac:e4:08:16:72:73: 0b:19:ec:52:38:a6:71:2e:d0:a2:23:3e:7c:a2:63: 8d:c4:26:61:ee:01:63:de:67:76:ff:d2:03:9d:22: c4:39:50:76:f1:3f:e0:d6:58:15:8f:d4:99:6f:ae: 6f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6F:79:E4:B5:88:13:A6:5B:0A:64:BB:E1:87:A5:D5:FE:1C:CE:C0 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pW955LWIE6ZbCmS74Yel1f4czsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.218.212.0/24 Signature Algorithm: sha256WithRSAEncryption a3:ae:07:bc:7d:94:35:9a:2d:40:25:36:fc:6b:af:26:44:18: e3:16:f0:0a:b5:de:28:c3:e6:a7:d0:20:a2:31:bc:b4:00:0c: 83:48:03:0e:48:7d:e8:4c:82:b0:dd:e6:36:f3:cb:77:11:6d: 56:3d:28:3c:d4:6d:fd:cb:55:d3:5a:5a:5f:99:1f:ad:0b:5e: f5:57:40:3c:2c:39:e9:ac:24:40:18:7b:88:b0:09:bf:17:80: 56:18:da:27:06:fd:0a:09:15:69:66:97:e4:b4:ed:26:33:51: a1:bf:2d:3f:c8:ed:f3:c3:ab:e1:ea:35:b1:1b:41:7b:85:e0: 2c:3a:e7:4e:92:42:59:52:ba:58:53:88:02:5a:4d:48:d9:d7: b0:50:d9:a9:29:12:b8:07:95:0e:f3:92:8a:a8:ec:22:f5:07: e9:a1:a1:a1:b8:84:99:a7:e2:95:bf:bd:b4:91:b8:5a:da:18: 38:ed:9d:6a:85:53:4a:81:48:04:36:8c:a7:eb:59:e9:68:36: 7e:0c:fb:5a:11:35:9e:a4:2e:9b:31:13:77:eb:1e:4b:54:f7: 32:52:92:f9:2a:70:e3:15:2e:0c:29:61:0b:15:e5:42:72:05: aa:7d:0d:0c:fe:73:54:ff:50:f8:38:6f:8b:d6:39:2f:02:ca: 29:89:50:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrakxlMolm0yAzt6zv7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTZmNzllNGI1ODgxM2E2NWIwYTY0YmJlMTg3YTVkNWZlMWNjZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L+cpbh+N6jwcXwAqVl1odmJgFhb /Sjj+SSGKZEekbcmFVz8dvPZO1hTFXLn+jlDDacVi2jGit5zF/i5w4k73C+Nbo+4 5DQqITahjE1t9ON5gtYistddAjolc1ENVISaxdPXQwWbJ6dFBoaqW5Vo33Rkvtf7 hHd4QJZ6QzzSN8kzZ01RExE8zzHNMbmoHUAUB+KRiHfayn3X4Z9lvAQoTZvOtH2F d2iT1JSQ9LY+fiF9xnCx7GVD5tIbvkZavvF8bXTCD+bE8ErToZis5AgWcnMLGexS OKZxLtCiIz58omONxCZh7gFj3md2/9IDnSLEOVB28T/g1lgVj9SZb65v8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKVveeS1iBOmWwpku+GHpdX+HM7AMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvcFc5NTVMV0lFNlpiQ21TNzRZZWwxZjRjenNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1drUMA0G CSqGSIb3DQEBCwUAA4IBAQCjrge8fZQ1mi1AJTb8a68mRBjjFvAKtd4ow+an0CCi Mby0AAyDSAMOSH3oTIKw3eY288t3EW1WPSg81G39y1XTWlpfmR+tC171V0A8LDnp rCRAGHuIsAm/F4BWGNonBv0KCRVpZpfktO0mM1Ghvy0/yO3zw6vh6jWxG0F7heAs OudOkkJZUrpYU4gCWk1I2dewUNmpKRK4B5UO85KKqOwi9QfpoaGhuISZp+KVv720 kbha2hg47Z1qhVNKgUgENoyn61npaDZ+DPtaETWepC6bMRN36x5LVPcyUpL5KnDj FS4MKWELFeVCcgWqfQ0M/nNU/1D4OG+L1jkvAsopiVA4 -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:56 2026 by rpki-client