This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rO2R2wwim6z8Uo9KodlouxfO2Kc.roa File: rO2R2wwim6z8Uo9KodlouxfO2Kc.roa (raw, json) Hash identifier: MSDQeqtlVeJQEX1qvwfW+BEAzrH3Zl/wiPIncAR+aWA= Subject key identifier: AC:ED:91:DB:0C:22:9B:AC:FC:52:8F:4A:A1:D9:68:BB:17:CE:D8:A7 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA545652932683B984F073AEFFF3969 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rO2R2wwim6z8Uo9KodlouxfO2Kc.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199512 IP address blocks: 213.91.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:45:65:29:32:68:3b:98:4f:07:3a:ef:ff:39:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aced91db0c229bacfc528f4aa1d968bb17ced8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:52:22:2b:11:e2:d5:2e:aa:8c:53:bf:13:cb: fc:8f:5a:17:c1:5c:e7:08:7a:4b:75:46:a3:0d:1e: b9:01:02:83:d5:af:89:86:4e:b1:af:3b:63:f2:68: 5f:7f:53:d0:48:cf:90:c4:f8:e5:64:df:13:df:d7: b9:d0:90:8e:7c:e6:58:c0:5a:e6:39:a7:7b:d2:40: 38:f6:54:4b:dc:a4:6d:1f:77:c7:0f:7a:c0:a1:74: cc:87:96:c9:6c:5d:f6:7c:d4:a5:69:fc:42:28:a4: 95:41:b8:64:1f:44:46:c4:2e:11:5c:b2:5d:af:5f: 7b:53:c6:7a:60:0f:eb:cb:55:9f:9e:e3:ab:f1:2b: ae:90:ce:48:59:fb:fd:b7:a2:db:d4:06:ee:31:da: b6:0b:da:a6:45:14:b0:2e:99:ed:a1:25:b3:dc:43: 0e:53:7e:0e:86:f8:08:9d:3b:13:75:7c:9e:b2:2d: 66:4f:b0:4d:68:5a:a6:c0:8b:2e:50:65:98:1e:a0: 34:b1:4c:87:b8:4d:8d:f7:00:9c:0d:f6:a0:2a:91: ab:40:b3:35:50:15:5a:9e:65:b0:2a:2f:5c:03:34: bd:0b:76:4f:7c:db:a4:19:87:aa:37:7f:09:d6:7a: 9d:6c:6f:48:d6:25:e1:a8:f7:50:d5:c3:25:32:3e: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:ED:91:DB:0C:22:9B:AC:FC:52:8F:4A:A1:D9:68:BB:17:CE:D8:A7 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rO2R2wwim6z8Uo9KodlouxfO2Kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.91.157.0/24 Signature Algorithm: sha256WithRSAEncryption b2:75:cb:f2:bb:4e:ee:4e:51:76:28:40:7a:7c:ee:d4:14:65: 1c:82:fc:1f:4d:ac:4e:2a:de:b5:33:12:12:b3:3f:d3:90:47: 6b:2f:79:83:03:7f:ae:b7:32:3e:fd:08:08:a9:5c:6b:be:e0: 08:35:a9:ec:3b:11:3d:69:5a:44:6d:6f:73:86:01:c8:a0:8f: 4e:b4:4f:82:e3:8c:76:56:73:18:60:a5:5a:a5:9c:90:9f:df: 93:a4:28:70:07:d3:02:e9:dc:c8:c0:9d:2a:a8:8b:6e:a3:52: e2:1b:89:e2:b0:86:6d:3d:2c:0b:25:df:38:09:a0:99:f4:c4: ed:93:12:5f:e6:62:0b:0d:dd:fd:7e:1a:1c:98:03:82:1f:35: 7e:4b:a9:2c:f1:c8:80:d8:2a:29:d5:90:50:81:a8:75:3d:2b: 07:47:3e:22:ab:8a:6f:e8:03:b6:cd:34:86:95:2a:3e:13:48: 34:10:ff:53:43:5a:71:2e:0b:7a:e4:e5:51:ec:1a:24:ce:21: 00:26:a8:8d:f9:4f:b8:a3:a1:56:48:d1:db:20:9d:4d:bc:3c: 7b:97:a8:f2:d9:3c:da:37:7e:84:a0:5e:51:74:74:dd:f2:87: 49:2b:f9:3f:0e:90:c6:25:27:9f:9e:a6:8f:1f:bf:8a:4c:82: b1:bb:bf:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUVlKTJoO5hPBzrv/zlpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2VkOTFkYjBjMjI5YmFjZmM1MjhmNGFhMWQ5NjhiYjE3Y2VkOGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVIiKxHi1S6qjFO/E8v8j1oXwVzn CHpLdUajDR65AQKD1a+Jhk6xrztj8mhff1PQSM+QxPjlZN8T39e50JCOfOZYwFrm Oad70kA49lRL3KRtH3fHD3rAoXTMh5bJbF32fNSlafxCKKSVQbhkH0RGxC4RXLJd r197U8Z6YA/ry1WfnuOr8SuukM5IWfv9t6Lb1AbuMdq2C9qmRRSwLpntoSWz3EMO U34OhvgInTsTdXyesi1mT7BNaFqmwIsuUGWYHqA0sUyHuE2N9wCcDfagKpGrQLM1 UBVanmWwKi9cAzS9C3ZPfNukGYeqN38J1nqdbG9I1iXhqPdQ1cMlMj4HcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKztkdsMIpus/FKPSqHZaLsXztinMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvck8yUjJ3d2ltNno4VW85S29kbG91eGZPMktjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VudMA0G CSqGSIb3DQEBCwUAA4IBAQCydcvyu07uTlF2KEB6fO7UFGUcgvwfTaxOKt61MxIS sz/TkEdrL3mDA3+utzI+/QgIqVxrvuAINansOxE9aVpEbW9zhgHIoI9OtE+C44x2 VnMYYKVapZyQn9+TpChwB9MC6dzIwJ0qqItuo1LiG4nisIZtPSwLJd84CaCZ9MTt kxJf5mILDd39fhocmAOCHzV+S6ks8ciA2Cop1ZBQgah1PSsHRz4iq4pv6AO2zTSG lSo+E0g0EP9TQ1pxLgt65OVR7BokziEAJqiN+U+4o6FWSNHbIJ1NvDx7l6jy2Tza N36EoF5RdHTd8odJK/k/DpDGJSefnqaPH7+KTIKxu780 -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:24 2026 by rpki-client