This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/ercPbtahy3f9eM5GSzohbTGgqsw.roa File: ercPbtahy3f9eM5GSzohbTGgqsw.roa (raw, json) Hash identifier: 6i0HSVm0VOwA3Kxo8s7D20nC5SFv01ATtGPCU/ddYG0= Subject key identifier: 7A:B7:0F:6E:D6:A1:CB:77:FD:78:CE:46:4B:3A:21:6D:31:A0:AA:CC Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248 Certificate serial: 019B797ECC6C9C047279B22E1ED2ADB00676 Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/ercPbtahy3f9eM5GSzohbTGgqsw.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209923 IP address blocks: 213.190.8.0/22 maxlen: 22 213.190.8.0/23 maxlen: 23 213.190.8.0/24 maxlen: 24 213.190.9.0/24 maxlen: 24 213.190.10.0/23 maxlen: 23 213.190.10.0/24 maxlen: 24 213.190.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cc:6c:9c:04:72:79:b2:2e:1e:d2:ad:b0:06:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248 Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ab70f6ed6a1cb77fd78ce464b3a216d31a0aacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0d:a2:e3:16:80:b0:fb:11:d4:1a:7c:b9:63: 3c:12:fe:80:09:fa:0a:8f:7f:03:9f:9f:57:2f:86: b5:64:5f:24:7c:6e:fa:8f:20:a7:05:81:25:5d:2a: 78:72:6b:fc:5c:75:46:5a:8a:66:0a:9b:8b:2e:a3: 34:ce:7c:86:f7:e6:58:33:f9:df:aa:04:2c:4c:08: be:68:f5:46:fe:a6:df:84:b1:e1:9b:62:bd:ec:48: 3a:2e:b3:03:a1:46:bc:87:8b:c5:0d:39:0b:79:3b: f0:96:a5:55:fb:f7:46:61:a5:19:e3:7a:50:fa:e7: 43:f6:dd:ff:53:48:f0:c9:3a:12:95:24:21:e0:18: b3:05:a5:9f:cf:17:7b:ef:66:92:7f:e8:6d:42:e3: 8a:2c:72:8c:4b:6c:67:56:27:dc:f2:1e:a1:d2:93: fc:d1:19:c0:1e:cb:7a:f8:1c:7d:bd:a3:a7:8b:eb: 13:a0:18:23:f5:62:d6:f1:b1:a0:17:96:32:1f:bc: 19:26:ad:c7:41:af:a1:45:6c:55:82:eb:97:78:e2: c1:e2:d0:f6:3a:7e:7d:bd:4c:07:69:8c:cb:3a:14: 0d:bd:9d:c5:b6:bb:aa:8a:a9:60:92:f9:f1:2c:25: 7f:cf:eb:4c:e1:2a:19:83:ec:f5:60:a8:a8:3c:ef: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B7:0F:6E:D6:A1:CB:77:FD:78:CE:46:4B:3A:21:6D:31:A0:AA:CC X509v3 Authority Key Identifier: keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/ercPbtahy3f9eM5GSzohbTGgqsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.190.8.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:7b:0a:11:10:27:21:62:e5:65:7a:5b:1c:ef:ae:a6:06:d9: 89:67:f7:e8:3b:f3:6a:f9:86:a0:a2:bb:bd:44:c3:e4:17:3f: c0:82:ee:a6:86:f5:b0:e2:6c:cb:a0:a1:db:f8:98:42:9c:f6: 1c:ae:21:dc:70:eb:47:ad:cc:5b:3c:2f:c4:e2:f0:b7:60:b2: 23:8c:59:04:65:97:6a:c0:4b:38:fd:35:8e:c7:35:9b:d5:00: 03:07:4d:98:67:aa:c0:4a:a0:06:0d:b6:c2:4b:69:97:c7:c9: 3a:5a:9d:61:f2:58:ee:db:87:50:79:00:e9:71:aa:08:90:68: c2:f7:6a:64:b2:e3:04:ab:2a:89:a0:55:ec:f1:62:39:e3:3f: 80:98:11:7b:05:ba:1d:15:85:e3:81:41:05:bf:b1:46:73:e7: 32:51:52:16:fb:99:a1:e7:d1:1c:0f:15:bd:c5:bc:b7:07:87: 6c:2a:59:ab:80:74:23:d9:a8:3a:89:de:f7:f0:98:a9:9a:16: e5:8a:94:07:6a:8a:e0:16:2a:1b:c3:f7:b9:93:5a:37:52:ed: 59:e3:73:75:01:f8:bd:84:3a:fc:39:b8:71:4a:f7:c8:ac:f9: 3d:fa:bf:c8:e0:dc:93:26:a4:90:87:36:18:19:6d:f4:72:6d: 9a:36:67:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsxsnARyebIuHtKtsAZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkODllN2M1M2U5MjQ3OWRmODExNzFlYmFhZjIzNjBhMDM3 YzMyNDgwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWI3MGY2ZWQ2YTFjYjc3ZmQ3OGNlNDY0YjNhMjE2ZDMxYTBhYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w2i4xaAsPsR1Bp8uWM8Ev6ACfoK j38Dn59XL4a1ZF8kfG76jyCnBYElXSp4cmv8XHVGWopmCpuLLqM0znyG9+ZYM/nf qgQsTAi+aPVG/qbfhLHhm2K97Eg6LrMDoUa8h4vFDTkLeTvwlqVV+/dGYaUZ43pQ +udD9t3/U0jwyToSlSQh4BizBaWfzxd772aSf+htQuOKLHKMS2xnVifc8h6h0pP8 0RnAHst6+Bx9vaOni+sToBgj9WLW8bGgF5YyH7wZJq3HQa+hRWxVguuXeOLB4tD2 On59vUwHaYzLOhQNvZ3FtruqiqlgkvnxLCV/z+tM4SoZg+z1YKioPO+AewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHq3D27Woct3/XjORks6IW0xoKrMMB8GA1UdIwQY MBaAFJ2J58U+kked+BFx66ryNgoDfDJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMt ODlhNjhlNWEyMTEwLzEvZXJjUGJ0YWh5M2Y5ZU01R1N6b2hiVEdncXN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMtODlhNjhlNWEyMTEw LzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1b4IMA0G CSqGSIb3DQEBCwUAA4IBAQCNewoRECchYuVlelsc766mBtmJZ/foO/Nq+Yagoru9 RMPkFz/Agu6mhvWw4mzLoKHb+JhCnPYcriHccOtHrcxbPC/E4vC3YLIjjFkEZZdq wEs4/TWOxzWb1QADB02YZ6rASqAGDbbCS2mXx8k6Wp1h8lju24dQeQDpcaoIkGjC 92pksuMEqyqJoFXs8WI54z+AmBF7BbodFYXjgUEFv7FGc+cyUVIW+5mh59EcDxW9 xby3B4dsKlmrgHQj2ag6id738JipmhblipQHaorgFiobw/e5k1o3Uu1Z43N1Afi9 hDr8ObhxSvfIrPk9+r/I4NyTJqSQhzYYGW30cm2aNmfP -----END CERTIFICATE-----Generated at Mon Feb 9 22:58:00 2026 by rpki-client