This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0KCYA7w5FKta4XJSbmYaSwYdXVg.roa File: 0KCYA7w5FKta4XJSbmYaSwYdXVg.roa (raw, json) Hash identifier: rACBHenNRCsSg6SYR157fS0JqMDKLPYPktIv7cUY1bc= Subject key identifier: D0:A0:98:03:BC:39:14:AB:5A:E1:72:52:6E:66:1A:4B:06:1D:5D:58 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8CE75D51409CC6CBF5E671C77E39C Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0KCYA7w5FKta4XJSbmYaSwYdXVg.roa Signing time: Thu 01 Jan 2026 18:18:59 +0000 ROA not before: Thu 01 Jan 2026 18:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211527 IP address blocks: 213.175.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ce:75:d5:14:09:cc:6c:bf:5e:67:1c:77:e3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0a09803bc3914ab5ae172526e661a4b061d5d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:5f:ec:93:dd:aa:6f:55:3d:9c:96:fe:a2: a2:6d:83:b1:4d:f8:fb:e4:d4:14:68:43:24:2e:26: 32:14:9c:35:cd:84:b2:a3:de:ce:59:6a:db:34:d5: 6c:85:c5:20:e7:42:78:97:58:0d:ba:c7:a5:1b:ff: c7:e9:b4:52:5c:ee:2a:50:aa:a2:66:6c:61:5f:f8: b2:d8:9c:50:52:dd:52:d8:af:1a:f2:19:2c:20:87: d9:c7:52:fd:60:8f:3e:f2:df:3a:ce:d3:c9:55:56: 1d:a3:78:4c:45:c6:45:66:24:b7:f4:2c:61:8d:f9: 10:53:80:55:15:52:4d:19:72:55:83:d0:13:de:8e: 6d:d0:d8:d0:24:de:5c:83:1d:1f:3f:9c:5b:66:f0: 90:14:77:c8:db:25:b7:6b:2d:a8:d2:e0:12:af:20: 43:dc:22:63:cd:cf:c2:ff:8e:9b:6c:0f:59:0d:51: 88:d0:41:3d:32:43:ab:5f:c0:b8:ca:d6:59:f0:17: 49:30:35:2c:c0:c8:4f:93:ac:03:36:e3:7b:1d:a9: c6:35:b1:0c:d1:c1:3e:d7:cd:55:b7:9a:03:fe:69: c0:0d:86:45:c7:f2:d4:be:35:8a:40:ca:3c:7c:97: 71:51:b4:05:89:40:eb:3b:64:a8:ac:b9:c9:61:fc: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A0:98:03:BC:39:14:AB:5A:E1:72:52:6E:66:1A:4B:06:1D:5D:58 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0KCYA7w5FKta4XJSbmYaSwYdXVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.175.68.0/24 Signature Algorithm: sha256WithRSAEncryption 10:cd:73:5f:9c:39:b9:d6:96:a3:d2:d7:58:9f:9b:8d:d4:d7: 74:9a:1d:de:f7:62:e1:96:25:66:da:59:12:c1:35:28:88:f6: 45:89:9c:b8:d8:51:6d:eb:48:ec:4f:bb:97:50:1b:bc:77:84: 39:9a:79:8a:cf:75:29:e2:c8:6d:73:ea:d0:8f:30:f4:ce:3e: 00:22:2a:ed:26:b5:ca:bb:4b:f9:ba:8e:c4:45:bd:75:e3:e0: 22:1a:96:f8:7b:80:ef:60:bc:9c:ac:b9:38:a0:7d:6d:0e:2a: cc:0e:cf:17:82:cb:03:ea:17:be:f6:56:21:c9:9f:08:b1:b6: f2:e7:f4:42:2f:63:8d:2a:07:fd:ee:db:4f:38:73:26:c3:20: b7:34:f3:74:31:a5:66:9b:07:6b:1d:19:1a:82:35:70:3d:bb: e3:74:28:93:76:10:46:73:77:d5:e0:50:57:11:4b:9d:d8:95: 43:c4:3f:2a:5c:af:9b:79:06:7c:ff:e7:60:36:ee:dc:e1:be: 84:d6:79:aa:9a:5f:7e:89:ad:d1:6f:78:77:74:de:ad:46:8d: 99:1b:8c:c1:a3:40:99:95:cb:54:2e:0b:2d:e9:16:09:9b:f4: 82:9f:68:8f:d0:ec:d5:28:55:8e:e4:7f:82:ea:7e:de:6b:39: e7:01:c5:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yM511RQJzGy/Xmccd+OcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGEwOTgwM2JjMzkxNGFiNWFlMTcyNTI2ZTY2MWE0YjA2MWQ1ZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Zf7JPdqm9VPZyW/qKibYOxTfj7 5NQUaEMkLiYyFJw1zYSyo97OWWrbNNVshcUg50J4l1gNuselG//H6bRSXO4qUKqi ZmxhX/iy2JxQUt1S2K8a8hksIIfZx1L9YI8+8t86ztPJVVYdo3hMRcZFZiS39Cxh jfkQU4BVFVJNGXJVg9AT3o5t0NjQJN5cgx0fP5xbZvCQFHfI2yW3ay2o0uASryBD 3CJjzc/C/46bbA9ZDVGI0EE9MkOrX8C4ytZZ8BdJMDUswMhPk6wDNuN7HanGNbEM 0cE+181Vt5oD/mnADYZFx/LUvjWKQMo8fJdxUbQFiUDrO2SorLnJYfxx8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCgmAO8ORSrWuFyUm5mGksGHV1YMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvMEtDWUE3dzVGS3RhNFhKU2JtWWFTd1lkWFZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a9EMA0G CSqGSIb3DQEBCwUAA4IBAQAQzXNfnDm51paj0tdYn5uN1Nd0mh3e92LhliVm2lkS wTUoiPZFiZy42FFt60jsT7uXUBu8d4Q5mnmKz3Up4shtc+rQjzD0zj4AIirtJrXK u0v5uo7ERb114+AiGpb4e4DvYLycrLk4oH1tDirMDs8XgssD6he+9lYhyZ8Isbby 5/RCL2ONKgf97ttPOHMmwyC3NPN0MaVmmwdrHRkagjVwPbvjdCiTdhBGc3fV4FBX EUud2JVDxD8qXK+beQZ8/+dgNu7c4b6E1nmqml9+ia3Rb3h3dN6tRo2ZG4zBo0CZ lctULgst6RYJm/SCn2iP0OzVKFWO5H+C6n7eaznnAcVH -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:20 2026 by rpki-client