This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa File: 1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa (raw, json) Hash identifier: uFFlZsAMKLJKDEktW5ybjbZi8RHcBaE5UQZ62izVnr4= Subject key identifier: FB:13:FA:C0:61:F8:13:88:FD:34:9F:8D:07:64:1F:2E:57:71:D4:BC Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Certificate serial: 019B7C80703C47FDF461D163FC18B979B27A Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196730 IP address blocks: 212.59.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:70:3c:47:fd:f4:61:d1:63:fc:18:b9:79:b2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb13fac061f81388fd349f8d07641f2e5771d4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:eb:70:aa:9c:cd:9e:18:e9:88:2d:4e:27:97: 4a:02:93:3b:df:11:14:f5:60:52:ee:a8:26:3c:ef: 2e:81:58:45:6a:08:26:7d:3d:79:5f:2a:be:13:9c: 51:7b:af:fc:fd:29:5f:17:c9:6d:a0:8c:5c:a4:f8: 88:2d:0d:50:cc:20:e5:35:e1:5e:64:70:9c:87:5a: 71:b4:38:7d:0f:78:e4:26:6b:26:a6:ea:5b:21:0a: ec:63:b9:0e:4a:5a:ab:7d:c2:fc:a2:8a:c2:30:2f: 75:4c:be:b9:d7:14:bd:ce:31:81:b3:4c:a2:7a:32: 31:76:8a:c9:c3:74:f3:8d:94:59:9e:9d:f4:8c:4d: bd:5b:74:51:67:3d:31:a8:ba:d2:a3:74:93:e7:b0: 30:c7:bc:fc:43:83:5f:d7:2f:e5:fa:bd:d6:52:a7: a4:af:13:6d:5c:f3:f3:00:29:47:3f:5b:f6:5c:5c: 72:06:98:91:05:9a:e3:70:3a:e3:5a:98:45:5c:b2: 20:4e:35:1b:be:2d:4c:8c:fb:ac:50:2e:64:30:1a: f3:f3:80:52:fd:d4:25:05:4b:fa:f9:92:cf:7c:f8: b9:ea:e0:b4:f7:1a:61:8d:e1:4e:75:39:ef:8c:1e: 1e:4e:90:51:92:7c:6b:96:06:e6:7c:09:d0:86:00: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:13:FA:C0:61:F8:13:88:FD:34:9F:8D:07:64:1F:2E:57:71:D4:BC X509v3 Authority Key Identifier: keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.59.248.0/22 Signature Algorithm: sha256WithRSAEncryption c4:16:ae:72:6b:0b:55:77:10:b7:28:8f:5e:6c:62:46:8e:a4: 6c:46:37:fd:c0:2f:c6:1d:43:b3:de:81:d3:c7:5b:a0:63:40: c7:62:50:31:03:b3:e7:d4:87:99:09:92:c4:7d:78:4b:0f:da: 42:a0:a2:5d:66:07:45:53:13:7f:0b:80:b8:ed:c8:8b:39:60: 15:8a:39:55:47:c5:ca:8f:03:25:2d:06:51:2a:ab:0a:30:ad: e4:f3:c0:06:1f:67:27:67:1f:0d:7d:a9:5b:42:5c:4d:60:bf: cd:c6:9f:06:5b:88:c1:22:65:b2:f4:51:11:a6:5a:ab:75:b6: cd:c9:a8:ac:3f:4f:a6:4e:51:18:4e:35:99:bd:02:7b:92:55: 8b:b1:37:1a:c1:e9:70:e5:8f:d1:1b:58:e9:37:61:e4:c4:1a: cf:b8:d1:85:b5:eb:f4:ef:4b:ab:c8:ad:f0:0a:01:96:67:aa: b7:02:21:96:5e:27:b1:e1:da:8c:30:bf:e1:4a:7a:79:21:b9: b3:86:03:07:b9:d4:e8:47:c4:b3:a1:4b:53:48:ee:10:38:de: 8c:dc:35:da:47:46:45:bb:e4:9d:31:99:a1:32:d7:14:3e:b7: f9:f7:ed:d5:fb:ae:fd:ff:1c:4d:a0:ac:60:34:f7:46:a1:a1: 29:13:06:dc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gHA8R/30YdFj/Bi5ebJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjhmN2EzOTFiN2IxNjQ5ZWQ0OTAzNDgyZDNlOTMxZWQz NGUzZDgwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjEzZmFjMDYxZjgxMzg4ZmQzNDlmOGQwNzY0MWYyZTU3NzFkNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+twqpzNnhjpiC1OJ5dKApM73xEU 9WBS7qgmPO8ugVhFaggmfT15Xyq+E5xRe6/8/SlfF8ltoIxcpPiILQ1QzCDlNeFe ZHCch1pxtDh9D3jkJmsmpupbIQrsY7kOSlqrfcL8oorCMC91TL651xS9zjGBs0yi ejIxdorJw3TzjZRZnp30jE29W3RRZz0xqLrSo3ST57Awx7z8Q4Nf1y/l+r3WUqek rxNtXPPzAClHP1v2XFxyBpiRBZrjcDrjWphFXLIgTjUbvi1MjPusUC5kMBrz84BS /dQlBUv6+ZLPfPi56uC09xphjeFOdTnvjB4eTpBRknxrlgbmfAnQhgA4ZQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsT+sBh+BOI/TSfjQdkHy5XcdS8MB8GA1UdIwQY MBaAFM1o96ORt7FkntSQNILT6THtNOPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQt MTY3M2FkOGM0MDEyLzEvMS14UDZ3R0g0RTRqOU5KLU5CMlFmTGxkeDFMdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTkvOGIwNWJmLTMzZjEtNGI1Yi04OGE0LTE2NzNhZDhjNDAx Mi8xL3pXajNvNUczc1dTZTFKQTBndFBwTWUwMDQ5Zy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtQ7+DAN BgkqhkiG9w0BAQsFAAOCAQEAxBaucmsLVXcQtyiPXmxiRo6kbEY3/cAvxh1Ds96B 08dboGNAx2JQMQOz59SHmQmSxH14Sw/aQqCiXWYHRVMTfwuAuO3IizlgFYo5VUfF yo8DJS0GUSqrCjCt5PPABh9nJ2cfDX2pW0JcTWC/zcafBluIwSJlsvRREaZaq3W2 zcmorD9Ppk5RGE41mb0Ce5JVi7E3GsHpcOWP0RtY6Tdh5MQaz7jRhbXr9O9Lq8it 8AoBlmeqtwIhll4nseHajDC/4Up6eSG5s4YDB7nU6EfEs6FLU0juEDjejNw12kdG RbvknTGZoTLXFD63+fft1fuu/f8cTaCsYDT3RqGhKRMG3A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:53 2026 by rpki-client