This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/s1N5kDv4-SpOqan5hJxvvqdzfgk.roa File: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (raw, json) Hash identifier: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4= Subject key identifier: B3:53:79:90:3B:F8:F9:2A:4E:A9:A9:F9:84:9C:6F:BE:A7:73:7E:09 Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Certificate serial: 019B7B36C2456EA51907ECC7ED4CEB60E7D2 Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/s1N5kDv4-SpOqan5hJxvvqdzfgk.roa Signing time: Thu 01 Jan 2026 20:19:04 +0000 ROA not before: Thu 01 Jan 2026 20:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198154 IP address blocks: 213.134.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c2:45:6e:a5:19:07:ec:c7:ed:4c:eb:60:e7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Validity Not Before: Jan 1 20:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b35379903bf8f92a4ea9a9f9849c6fbea7737e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:e6:c1:dc:4e:9a:63:e7:fc:4b:e0:af:b0: 60:e9:82:85:51:0b:56:33:a2:89:2e:41:e4:27:de: bc:04:0e:6a:56:59:ae:ee:8f:97:df:f5:bd:f6:34: 06:34:67:ae:f6:c3:40:43:dc:ae:a7:30:91:ae:99: 7c:69:3e:c7:d7:52:fa:b6:d2:13:8c:24:36:46:30: af:19:93:95:85:e6:61:a6:e5:14:73:69:7b:c3:5e: e9:04:19:9b:68:77:9a:e7:79:f4:52:08:eb:e9:ca: df:7d:b5:64:ba:0f:ef:c0:0f:36:e2:27:08:1f:2b: 96:7d:5c:e5:9d:f4:ca:87:b8:79:72:31:b9:f8:21: 68:e5:70:c5:86:0d:1f:0a:89:51:52:79:1c:74:fa: dd:92:d5:3b:2a:6d:26:bf:26:68:ca:60:59:84:a0: 2b:40:75:5b:2a:d7:9a:5f:a1:2a:f5:c8:df:60:f3: 14:b1:d1:20:be:35:52:3d:f3:1e:89:a7:f1:58:c2: 2d:6c:54:10:0c:89:f5:fb:af:80:ee:8d:f1:17:10: 62:fd:53:80:4b:81:04:45:87:c3:c6:77:43:83:be: e6:f3:4a:0a:6a:98:3f:d3:8f:2b:f8:f3:54:39:fb: 82:cd:87:00:63:cf:cf:c8:69:71:f3:d1:7a:ff:3f: 4d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:53:79:90:3B:F8:F9:2A:4E:A9:A9:F9:84:9C:6F:BE:A7:73:7E:09 X509v3 Authority Key Identifier: keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/s1N5kDv4-SpOqan5hJxvvqdzfgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.134.17.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:36:d3:a9:14:e6:67:37:db:53:45:43:da:d0:e2:c7:72:5f: 52:95:d5:a2:fd:16:44:d8:ab:19:f2:19:27:cf:1a:63:ba:24: 72:f4:41:64:22:9f:f8:ed:ed:33:37:7b:2b:3c:8b:61:b4:78: fc:c5:9d:c9:82:d4:1d:6c:a8:b5:80:9f:36:07:35:76:1c:a5: 6b:ba:5c:b5:32:00:13:fd:36:6b:fd:9f:e1:d3:dc:5a:cb:50: 99:bc:83:9f:fa:28:ea:22:21:b7:db:7a:a4:c5:0d:dc:f2:2b: 38:81:c0:fa:0e:e2:4b:1b:af:fb:99:f1:9a:57:3a:09:ea:22: 16:7c:3b:bd:08:2e:58:2a:3a:99:d2:eb:e0:ca:40:bc:dc:b4: 25:52:19:55:43:fe:e5:db:b7:e2:3f:81:9a:29:ef:2b:ec:f0: 38:a4:c5:3a:af:96:95:af:cd:70:e3:1f:23:59:a7:72:3d:90: 5c:2a:6c:76:f0:12:25:a0:a8:6b:fb:37:2e:50:b7:17:d8:01: 1d:d4:07:9f:24:d2:28:0c:92:b4:87:27:5f:af:18:b8:1b:cb: 33:f2:7d:20:50:da:a8:d1:84:37:48:07:8c:b9:18:ea:4f:ca: 75:98:e8:d3:66:41:9e:d7:22:a6:24:8b:47:a4:6b:d4:36:6d: 5b:55:d6:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NsJFbqUZB+zH7UzrYOfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0 YjViMTEwHhcNMjYwMTAxMjAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzUzNzk5MDNiZjhmOTJhNGVhOWE5Zjk4NDljNmZiZWE3NzM3ZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnATmwdxOmmPn/Evgr7Bg6YKFUQtW M6KJLkHkJ968BA5qVlmu7o+X3/W99jQGNGeu9sNAQ9yupzCRrpl8aT7H11L6ttIT jCQ2RjCvGZOVheZhpuUUc2l7w17pBBmbaHea53n0Ugjr6crffbVkug/vwA824icI HyuWfVzlnfTKh7h5cjG5+CFo5XDFhg0fColRUnkcdPrdktU7Km0mvyZoymBZhKAr QHVbKteaX6Eq9cjfYPMUsdEgvjVSPfMeiafxWMItbFQQDIn1+6+A7o3xFxBi/VOA S4EERYfDxndDg77m80oKapg/048r+PNUOfuCzYcAY8/PyGlx89F6/z9NvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNTeZA7+PkqTqmp+YScb76nc34JMB8GA1UdIwQY MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt NDkxNWZlN2Y5MmNlLzEvczFONWtEdjQtU3BPcWFuNWhKeHZ2cWR6ZmdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YYRMA0G CSqGSIb3DQEBCwUAA4IBAQCPNtOpFOZnN9tTRUPa0OLHcl9SldWi/RZE2KsZ8hkn zxpjuiRy9EFkIp/47e0zN3srPIthtHj8xZ3JgtQdbKi1gJ82BzV2HKVruly1MgAT /TZr/Z/h09xay1CZvIOf+ijqIiG323qkxQ3c8is4gcD6DuJLG6/7mfGaVzoJ6iIW fDu9CC5YKjqZ0uvgykC83LQlUhlVQ/7l27fiP4GaKe8r7PA4pMU6r5aVr81w4x8j WadyPZBcKmx28BIloKhr+zcuULcX2AEd1AefJNIoDJK0hydfrxi4G8sz8n0gUNqo 0YQ3SAeMuRjqT8p1mOjTZkGe1yKmJItHpGvUNm1bVdbN -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:38 2026 by rpki-client