This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa File: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (raw, json) Hash identifier: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q= Subject key identifier: D2:27:DD:A1:1A:9F:B6:32:99:1F:C6:BE:EA:30:FD:12:9D:3E:43:12 Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef Certificate serial: 019B79100443DAA76B43C7293599F6C7BCBD Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 141.59.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:04:43:da:a7:6b:43:c7:29:35:99:f6:c7:bc:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d227dda11a9fb632991fc6beea30fd129d3e4312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:ec:14:aa:93:34:3f:a0:a0:79:cf:87:fd: 1b:7e:9b:b9:97:ab:52:48:4b:dd:58:9c:a0:8d:54: 75:5a:ef:58:e5:99:2b:f9:05:1a:10:69:c5:a2:44: b7:30:8c:62:b8:0e:dc:1a:ee:f4:ae:58:2a:75:4a: e6:09:37:8c:d9:b8:10:e1:f2:0f:9a:ca:03:ab:88: b7:4b:07:55:09:e3:ad:37:b1:e0:47:14:e0:da:e5: 1a:b5:49:84:25:bd:f2:b8:d3:5d:58:c5:22:63:a0: 7b:42:7b:35:85:1c:6f:16:a5:72:e1:c6:a2:18:3b: 4b:b5:ab:b5:96:18:e9:8a:78:9b:7a:41:ce:6e:28: dc:70:58:d7:cf:1e:55:50:7e:c9:9c:fa:5c:35:0a: 54:20:10:e9:52:bf:09:e4:b0:1c:f0:61:5d:a0:56: a6:a4:df:1d:0d:50:ec:81:b9:a3:f2:47:e1:4a:57: f0:87:46:36:80:b8:e1:7d:10:a2:fe:8b:29:ff:0c: d8:4b:db:f4:1b:1d:8f:72:a7:b9:2b:60:a2:70:b9: 8d:59:27:b6:22:a8:9c:69:a4:8f:65:fd:e3:5e:79: 64:69:e5:79:0a:b1:0a:ff:e8:00:a2:c2:84:2c:26: ea:b7:8d:22:7f:e3:78:3c:08:ad:3e:29:0a:6c:bf: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:27:DD:A1:1A:9F:B6:32:99:1F:C6:BE:EA:30:FD:12:9D:3E:43:12 X509v3 Authority Key Identifier: keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.59.240.0/21 Signature Algorithm: sha256WithRSAEncryption 92:49:2a:77:d5:13:5f:c4:2e:7c:e2:ee:8f:da:2d:c7:41:18: aa:a8:7d:82:d3:33:55:dc:68:0f:e6:65:fa:97:b2:3a:84:ba: b1:53:99:46:a6:ff:1f:f6:24:78:92:04:fc:7f:cb:68:71:ce: 8b:b0:e5:b2:b1:0e:47:78:07:70:7a:69:3c:a6:25:77:e8:f5: 33:ce:16:21:80:9b:56:6c:9c:67:8a:ef:df:bc:67:b9:0c:25: 21:3c:45:2b:56:62:c5:31:10:32:02:5d:db:4f:dc:3d:bf:a2: 85:cb:cd:65:34:a1:07:2a:ee:28:e8:93:ef:85:c0:be:3b:f2: 25:9d:1f:96:68:48:c4:2e:2a:28:14:44:b8:70:26:73:4e:d8: c0:e4:68:ea:95:3f:5f:56:70:24:8c:c3:0b:11:c2:18:f1:01: a0:b9:06:70:fd:14:5b:b3:d2:02:da:ac:f7:a2:42:c4:7d:c9: 99:e8:8c:00:61:f8:5d:96:10:7a:2f:5d:29:94:69:22:a6:74: e6:c6:41:5a:90:f7:98:85:ca:4f:ff:df:de:75:67:53:11:27: 12:1a:32:85:79:56:62:56:e6:8f:6a:85:98:36:04:35:11:16: 20:01:87:51:f3:1a:7b:36:84:c7:b4:19:fd:35:a6:d0:be:23: d9:bf:df:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EARD2qdrQ8cpNZn2x7y9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTliYWE4Yzg4MGE5NDU5ZGM1ZjQ0ZDY3NWRlYTRlZjk2 ZGJkZWYwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjI3ZGRhMTFhOWZiNjMyOTkxZmM2YmVlYTMwZmQxMjlkM2U0MzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNnsFKqTND+goHnPh/0bfpu5l6tS SEvdWJygjVR1Wu9Y5Zkr+QUaEGnFokS3MIxiuA7cGu70rlgqdUrmCTeM2bgQ4fIP msoDq4i3SwdVCeOtN7HgRxTg2uUatUmEJb3yuNNdWMUiY6B7Qns1hRxvFqVy4cai GDtLtau1lhjpinibekHObijccFjXzx5VUH7JnPpcNQpUIBDpUr8J5LAc8GFdoFam pN8dDVDsgbmj8kfhSlfwh0Y2gLjhfRCi/osp/wzYS9v0Gx2Pcqe5K2CicLmNWSe2 IqicaaSPZf3jXnlkaeV5CrEK/+gAosKELCbqt40if+N4PAitPikKbL8pDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNIn3aEan7YymR/Gvuow/RKdPkMSMB8GA1UdIwQY MBaAFN4ZuqjIgKlFncX0TWdd6k75bb3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjct ODk0OWU3NTFiMjE5LzEvMGlmZG9ScWZ0aktaSDhhLTZqRDlFcDAtUXhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjctODk0OWU3NTFiMjE5 LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjTvwMA0G CSqGSIb3DQEBCwUAA4IBAQCSSSp31RNfxC584u6P2i3HQRiqqH2C0zNV3GgP5mX6 l7I6hLqxU5lGpv8f9iR4kgT8f8tocc6LsOWysQ5HeAdwemk8piV36PUzzhYhgJtW bJxniu/fvGe5DCUhPEUrVmLFMRAyAl3bT9w9v6KFy81lNKEHKu4o6JPvhcC+O/Il nR+WaEjELiooFES4cCZzTtjA5GjqlT9fVnAkjMMLEcIY8QGguQZw/RRbs9IC2qz3 okLEfcmZ6IwAYfhdlhB6L10plGkipnTmxkFakPeYhcpP/9/edWdTEScSGjKFeVZi VuaPaoWYNgQ1ERYgAYdR8xp7NoTHtBn9NabQviPZv9+E -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:45 2026 by rpki-client