This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/unsJblg8PfDGIvnUM12aQMVZtRM.roa File: unsJblg8PfDGIvnUM12aQMVZtRM.roa (raw, json) Hash identifier: XEnhlp0/1k08b/mr5WKuqa+8GA7Vc80JW7BzcJQ6qbE= Subject key identifier: BA:7B:09:6E:58:3C:3D:F0:C6:22:F9:D4:33:5D:9A:40:C5:59:B5:13 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA54BF9EAF0190F49AE0DED10050EC8 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/unsJblg8PfDGIvnUM12aQMVZtRM.roa Signing time: Thu 01 Jan 2026 22:19:49 +0000 ROA not before: Thu 01 Jan 2026 22:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206180 IP address blocks: 213.16.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:4b:f9:ea:f0:19:0f:49:ae:0d:ed:10:05:0e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba7b096e583c3df0c622f9d4335d9a40c559b513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:9d:12:86:01:e7:f4:93:96:03:81:ac:76: 61:37:cf:ea:46:8f:41:72:ec:3a:52:69:90:5c:50: b9:88:9a:50:68:00:14:4a:15:38:48:8a:45:a4:7b: 68:fb:f7:f9:bd:75:ac:45:b7:bd:4b:b9:74:c7:c2: 40:28:3b:4a:9a:cd:b9:99:c5:5b:06:8f:08:a1:33: 6f:a7:f4:79:76:ee:24:e4:9e:64:05:d3:72:a1:3d: 7b:63:0d:70:0f:fe:ea:01:d7:ed:95:7c:47:9d:42: 1a:b5:f5:51:e0:a7:86:b3:2c:43:95:ba:7e:80:db: d2:fa:28:67:a3:bb:3b:b6:b7:0a:59:d1:b8:64:2c: 06:1b:1f:fd:a4:7b:21:7e:b6:e8:06:64:b7:30:3a: 9e:9c:e8:4f:85:b5:56:d0:58:9e:6d:c7:f0:d9:0b: 93:1a:de:1d:0c:55:8d:fb:f8:12:37:af:c6:c9:05: 5d:15:77:7f:e0:22:8b:cc:fd:c1:01:4a:92:ce:03: 30:d2:58:4d:30:5d:da:13:7a:d0:ec:8f:de:a5:bd: b8:55:24:08:e8:91:d4:af:78:58:78:0a:25:09:ba: af:3d:da:6a:0c:3e:0a:7d:22:25:75:8d:c8:cc:20: 18:25:44:c5:b7:b1:63:a4:7e:ed:f4:7e:70:22:34: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7B:09:6E:58:3C:3D:F0:C6:22:F9:D4:33:5D:9A:40:C5:59:B5:13 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/unsJblg8PfDGIvnUM12aQMVZtRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.16.38.0/24 Signature Algorithm: sha256WithRSAEncryption 12:0d:60:2c:3e:11:cb:37:b3:cc:27:53:63:9e:5f:58:1c:45: 79:6e:71:0d:65:05:c2:71:8e:90:1e:56:8c:9e:7a:f9:fb:2c: 0c:eb:73:7d:b8:09:45:db:24:e1:f3:b2:1f:4b:b3:54:29:fd: 42:ec:82:2b:d5:79:f3:57:ba:4c:26:da:39:b3:fe:8d:f6:30: 42:48:d2:b2:cb:7a:13:dc:49:90:e2:57:03:14:09:b3:2b:56: d5:0c:c7:31:b9:a6:e7:eb:85:e8:c9:17:8f:01:0e:ce:35:8a: 28:5c:15:71:0c:55:e4:be:6a:f0:b8:13:30:01:86:fb:9a:5a: 26:44:85:0b:2a:1f:4d:37:6f:6a:3e:da:f0:c1:8d:01:15:5c: 31:78:f6:1b:19:2c:e9:3e:0e:40:5a:0c:d9:e5:72:99:0c:83: 19:6a:4e:91:ae:31:ea:6d:ae:fb:77:e2:61:81:7e:fe:9c:43: 75:63:e8:b4:dc:f6:7d:3c:c1:39:c0:51:4f:85:62:95:5b:ce: c7:6f:33:71:9c:dc:29:bc:1e:33:8c:aa:fc:73:49:32:9a:45: 3e:d2:9c:b8:90:d5:78:6c:5c:cf:ab:c9:ee:12:01:d3:78:9f: 9c:f4:68:ff:05:c2:5d:a4:14:1f:88:6b:7d:30:0d:69:88:77: 14:ec:0f:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUv56vAZD0muDe0QBQ7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTdiMDk2ZTU4M2MzZGYwYzYyMmY5ZDQzMzVkOWE0MGM1NTliNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUGdEoYB5/STlgOBrHZhN8/qRo9B cuw6UmmQXFC5iJpQaAAUShU4SIpFpHto+/f5vXWsRbe9S7l0x8JAKDtKms25mcVb Bo8IoTNvp/R5du4k5J5kBdNyoT17Yw1wD/7qAdftlXxHnUIatfVR4KeGsyxDlbp+ gNvS+ihno7s7trcKWdG4ZCwGGx/9pHshfrboBmS3MDqenOhPhbVW0Fiebcfw2QuT Gt4dDFWN+/gSN6/GyQVdFXd/4CKLzP3BAUqSzgMw0lhNMF3aE3rQ7I/epb24VSQI 6JHUr3hYeAolCbqvPdpqDD4KfSIldY3IzCAYJUTFt7FjpH7t9H5wIjS1JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLp7CW5YPD3wxiL51DNdmkDFWbUTMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvdW5zSmJsZzhQZkRHSXZuVU0xMmFRTVZadFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RAmMA0G CSqGSIb3DQEBCwUAA4IBAQASDWAsPhHLN7PMJ1Njnl9YHEV5bnENZQXCcY6QHlaM nnr5+ywM63N9uAlF2yTh87IfS7NUKf1C7IIr1XnzV7pMJto5s/6N9jBCSNKyy3oT 3EmQ4lcDFAmzK1bVDMcxuabn64XoyRePAQ7ONYooXBVxDFXkvmrwuBMwAYb7mlom RIULKh9NN29qPtrwwY0BFVwxePYbGSzpPg5AWgzZ5XKZDIMZak6RrjHqba77d+Jh gX7+nEN1Y+i03PZ9PME5wFFPhWKVW87HbzNxnNwpvB4zjKr8c0kymkU+0py4kNV4 bFzPq8nuEgHTeJ+c9Gj/BcJdpBQfiGt9MA1piHcU7A9A -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:19 2026 by rpki-client