This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/l313G5r0ETGqqj4VTrFk6ALOLjM.roa File: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (raw, json) Hash identifier: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0= Subject key identifier: 97:7D:77:1B:9A:F4:11:31:AA:AA:3E:15:4E:B1:64:E8:02:CE:2E:33 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBDD1B291FE0CE7E6798233D3746AC Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/l313G5r0ETGqqj4VTrFk6ALOLjM.roa Signing time: Thu 01 Jan 2026 14:17:38 +0000 ROA not before: Thu 01 Jan 2026 14:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41921 IP address blocks: 213.33.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:dd:1b:29:1f:e0:ce:7e:67:98:23:3d:37:46:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=977d771b9af41131aaaa3e154eb164e802ce2e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:0a:37:98:9c:15:ae:3a:5f:4a:ac:fe:eb: dd:31:c1:cb:59:d4:84:fc:03:2b:79:ad:34:c9:e0: 00:ea:c8:3f:2a:d2:83:aa:00:3b:c8:ba:d7:7c:5c: 60:96:48:de:25:67:88:5a:93:4a:ba:bd:67:b5:28: 43:0d:0b:48:8a:f3:f1:a5:a4:b1:d5:43:8f:44:57: 55:2c:51:14:3d:3a:d8:4e:74:53:0f:2b:a6:69:6b: 95:ca:64:38:b2:ec:4f:a7:ec:bb:d9:3e:a3:42:d6: c8:d1:2b:2e:10:78:b9:5a:79:0c:fb:a6:61:f2:d3: 29:7b:a3:69:ab:6e:9d:2b:d4:23:ef:c8:15:aa:c3: ad:4b:24:82:32:5b:4c:46:53:b8:c1:83:15:64:05: c7:70:ca:c8:b7:b0:46:70:6f:dc:59:07:be:ae:5e: 92:6a:4e:ee:3b:7b:bd:1d:64:17:26:e3:c1:0d:7e: f4:71:69:39:20:2d:7a:49:3a:20:51:a0:1c:96:29: df:6b:33:a8:ce:f6:a9:fc:1b:f6:20:d3:db:02:dd: 72:d5:38:10:46:f5:1b:1a:bc:71:f1:8b:3c:b6:60: 4a:4d:45:64:63:31:c3:22:5f:30:5c:1f:47:14:cd: a6:3e:82:4c:16:1e:a3:5e:7d:2f:05:14:9b:ad:f2: 15:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7D:77:1B:9A:F4:11:31:AA:AA:3E:15:4E:B1:64:E8:02:CE:2E:33 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/l313G5r0ETGqqj4VTrFk6ALOLjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.33.116.0/24 Signature Algorithm: sha256WithRSAEncryption b2:f4:7b:e5:51:9a:80:56:9a:ad:64:ea:80:b1:39:03:dc:38: 99:62:20:75:17:56:30:da:d4:16:85:5f:6d:f0:51:c4:6e:e6: c6:91:4a:79:b6:c0:7d:d1:e7:80:5d:7f:18:e6:67:8f:e0:cb: 4f:36:3e:5d:b0:14:ec:c7:3f:2a:47:5a:80:bc:47:99:8b:dc: 89:af:7a:75:95:ac:d9:42:79:15:4b:a4:d2:25:f2:07:b6:9f: 2b:27:62:d3:97:dc:9b:f1:17:28:de:0e:35:6c:53:e0:51:7f: 77:8f:a2:31:6a:e5:5b:a4:29:92:fe:dd:c9:47:d0:a2:7f:d9: ae:7c:5d:6e:99:a2:65:34:e8:8c:2a:7f:11:7e:8c:09:48:35: 82:9e:af:e4:cc:42:25:ce:4b:b8:65:b6:e4:cb:cc:bd:8e:3d: 4f:52:7b:15:00:e0:27:e3:10:ca:05:3d:81:3b:75:75:f5:6d: 87:31:26:a4:77:c4:ed:b2:6d:49:63:af:5d:a3:f2:9c:1f:40: 59:be:e1:68:ba:31:8f:e2:79:06:b5:10:1c:8a:b5:71:d6:e6: 8d:9f:0b:e4:fb:b4:f4:dc:d1:27:87:45:01:19:83:07:a7:39: da:91:16:77:f5:fe:98:e4:63:32:06:28:45:e7:d9:1e:60:4c: 88:43:e3:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5690bKR/gzn5nmCM9N0asMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzdkNzcxYjlhZjQxMTMxYWFhYTNlMTU0ZWIxNjRlODAyY2UyZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/YKN5icFa46X0qs/uvdMcHLWdSE /AMrea00yeAA6sg/KtKDqgA7yLrXfFxglkjeJWeIWpNKur1ntShDDQtIivPxpaSx 1UOPRFdVLFEUPTrYTnRTDyumaWuVymQ4suxPp+y72T6jQtbI0SsuEHi5WnkM+6Zh 8tMpe6Npq26dK9Qj78gVqsOtSySCMltMRlO4wYMVZAXHcMrIt7BGcG/cWQe+rl6S ak7uO3u9HWQXJuPBDX70cWk5IC16STogUaAclinfazOozvap/Bv2INPbAt1y1TgQ RvUbGrxx8Ys8tmBKTUVkYzHDIl8wXB9HFM2mPoJMFh6jXn0vBRSbrfIV5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJd9dxua9BExqqo+FU6xZOgCzi4zMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvbDMxM0c1cjBFVEdxcWo0VlRyRms2QUxPTGpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1SF0MA0G CSqGSIb3DQEBCwUAA4IBAQCy9HvlUZqAVpqtZOqAsTkD3DiZYiB1F1Yw2tQWhV9t 8FHEbubGkUp5tsB90eeAXX8Y5meP4MtPNj5dsBTsxz8qR1qAvEeZi9yJr3p1lazZ QnkVS6TSJfIHtp8rJ2LTl9yb8Rco3g41bFPgUX93j6IxauVbpCmS/t3JR9Cif9mu fF1umaJlNOiMKn8RfowJSDWCnq/kzEIlzku4Zbbky8y9jj1PUnsVAOAn4xDKBT2B O3V19W2HMSakd8Ttsm1JY69do/KcH0BZvuFoujGP4nkGtRAcirVx1uaNnwvk+7T0 3NEnh0UBGYMHpznakRZ39f6Y5GMyBihF59keYEyIQ+OF -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:25 2026 by rpki-client