This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/1-IJx4nelfGjFuMYLqOK7id9irxU.roa File: 1-IJx4nelfGjFuMYLqOK7id9irxU.roa (raw, json) Hash identifier: b5aVl1cJIc1BC2UfHdl9ea+y66xvZtqK+4BK5mmAqH4= Subject key identifier: F8:82:71:E2:77:A5:7C:68:C5:B8:C6:0B:A8:E2:BB:89:DF:62:AF:15 Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c Certificate serial: 019B7F822D1513B6FBBED308C919EEC8FDE8 Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/1-IJx4nelfGjFuMYLqOK7id9irxU.roa Signing time: Fri 02 Jan 2026 16:19:56 +0000 ROA not before: Fri 02 Jan 2026 16:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 213.139.196.0/24 maxlen: 24 213.139.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:2d:15:13:b6:fb:be:d3:08:c9:19:ee:c8:fd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c Validity Not Before: Jan 2 16:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f88271e277a57c68c5b8c60ba8e2bb89df62af15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:b8:a0:21:31:88:6b:1e:08:44:0d:08:49: 47:9a:20:4e:a3:e5:04:6e:6c:68:dd:37:96:bf:5e: 30:6a:fc:fd:f2:48:88:c0:f2:22:bd:a7:25:b4:ef: 8a:d6:f1:c8:66:fd:ae:87:66:0a:57:ca:8a:72:73: 1f:56:55:65:55:8b:48:b9:e8:aa:69:25:c9:81:01: 15:21:fa:53:70:ff:5a:83:5f:35:d0:56:8f:b5:4c: 74:e8:24:4a:d6:de:f8:67:dd:7d:ad:cf:78:42:09: e0:e9:20:3e:ae:fc:41:a1:81:38:87:d6:07:7b:41: 6b:c0:5e:98:79:2c:37:a8:08:55:a1:0d:88:eb:16: 44:54:c7:49:f1:b8:1d:c2:06:ff:19:d1:e5:8c:98: 93:35:88:d7:f0:10:f1:24:4c:c7:8b:3c:78:1f:e8: 55:af:24:41:47:c2:43:25:10:51:2b:18:93:e2:e9: ae:7e:cd:15:f1:ef:d1:8c:45:d7:c0:b8:c5:c6:4c: 0a:d5:cb:81:7c:89:fb:90:a1:d0:b5:d9:e0:98:72: dd:98:d4:8f:5b:f0:ec:b4:98:80:27:a0:65:4f:2b: e8:6b:09:0c:32:1e:4d:40:7e:1c:ab:0a:dd:71:24: 95:47:a0:32:9f:23:3a:cb:32:3c:d9:e3:42:fa:bd: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:82:71:E2:77:A5:7C:68:C5:B8:C6:0B:A8:E2:BB:89:DF:62:AF:15 X509v3 Authority Key Identifier: keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/1-IJx4nelfGjFuMYLqOK7id9irxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.139.196.0/23 Signature Algorithm: sha256WithRSAEncryption 09:63:a2:c6:59:a7:5e:ac:63:c6:5d:1a:9e:94:06:2d:53:5c: d2:cd:4a:2a:db:fa:1d:ea:45:02:db:7c:e3:64:4a:4a:75:95: 11:91:cc:36:1f:59:14:e3:1c:93:5b:37:0d:83:7b:fe:da:20: 96:ef:d4:7c:5f:8d:c8:b1:4d:ef:b8:ee:9e:e9:64:d4:c8:3b: a7:df:69:33:9f:e0:ff:fe:33:12:fa:2e:04:82:0e:9d:40:00: ce:5c:cd:3b:9b:13:f0:bd:b4:05:95:5e:b0:9b:5a:a7:c8:3a: c5:c8:32:5a:79:dd:31:d0:73:31:57:29:1b:72:cb:47:b9:46: b8:d3:5a:f8:00:98:30:7f:56:5d:2b:04:4f:59:34:7b:55:8f: d7:d2:32:7f:c9:65:72:9f:f0:35:05:72:5a:be:47:7e:3f:6a: 8f:80:74:d3:31:b1:ee:45:ab:54:da:95:13:34:61:ba:e9:7c: ae:3d:24:45:e2:1e:a6:74:70:cf:c3:f4:ab:31:47:c7:6c:e3: ae:25:ff:fd:93:e6:85:d3:0a:4d:72:6c:08:08:ee:7b:69:2a: 7c:0a:72:b6:48:e7:5c:36:96:80:53:be:ec:a5:de:32:13:c6: d6:bf:21:7b:c0:bb:ec:c6:8a:36:45:a7:69:23:0f:c0:27:56: 80:b6:f3:12 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/gi0VE7b7vtMIyRnuyP3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4 OGU5MmMwHhcNMjYwMTAyMTYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODgyNzFlMjc3YTU3YzY4YzViOGM2MGJhOGUyYmI4OWRmNjJhZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4K4oCExiGseCEQNCElHmiBOo+UE bmxo3TeWv14wavz98kiIwPIivacltO+K1vHIZv2uh2YKV8qKcnMfVlVlVYtIueiq aSXJgQEVIfpTcP9ag1810FaPtUx06CRK1t74Z919rc94Qgng6SA+rvxBoYE4h9YH e0FrwF6YeSw3qAhVoQ2I6xZEVMdJ8bgdwgb/GdHljJiTNYjX8BDxJEzHizx4H+hV ryRBR8JDJRBRKxiT4umufs0V8e/RjEXXwLjFxkwK1cuBfIn7kKHQtdngmHLdmNSP W/DstJiAJ6BlTyvoawkMMh5NQH4cqwrdcSSVR6AynyM6yzI82eNC+r2yewIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPiCceJ3pXxoxbjGC6jiu4nfYq8VMB8GA1UdIwQY MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt NjQ0YmQwZmM3ZjgwLzEvMS1JSng0bmVsZkdqRnVNWUxxT0s3aWQ5aXJ4VS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWYvZGY3MTlhLTQ5MmYtNDdjYi05MjEyLTY0NGJkMGZjN2Y4 MC8xL3JfYjRXcTBRSEVWc0dzbWdHbkdTX0ZlSTZTdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdWLxDAN BgkqhkiG9w0BAQsFAAOCAQEACWOixlmnXqxjxl0anpQGLVNc0s1KKtv6HepFAtt8 42RKSnWVEZHMNh9ZFOMck1s3DYN7/toglu/UfF+NyLFN77junulk1Mg7p99pM5/g //4zEvouBIIOnUAAzlzNO5sT8L20BZVesJtap8g6xcgyWnndMdBzMVcpG3LLR7lG uNNa+ACYMH9WXSsET1k0e1WP19Iyf8llcp/wNQVyWr5Hfj9qj4B00zGx7kWrVNqV EzRhuul8rj0kReIepnRwz8P0qzFHx2zjriX//ZPmhdMKTXJsCAjue2kqfApytkjn XDaWgFO+7KXeMhPG1r8he8C77MaKNkWnaSMPwCdWgLbzEg== -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:24 2026 by rpki-client