This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1SvRDU4zowbzMmN9owqlmhc1aXg.roa File: 1SvRDU4zowbzMmN9owqlmhc1aXg.roa (raw, json) Hash identifier: FCErRYwXWbXA9baYI2I0ydG2KxQyAdAATkUyIOiCU/Q= Subject key identifier: D5:2B:D1:0D:4E:33:A3:06:F3:32:63:7D:A3:0A:A5:9A:17:35:69:78 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C97E35A2B260C1851200E3952662 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1SvRDU4zowbzMmN9owqlmhc1aXg.roa Signing time: Thu 01 Jan 2026 18:18:57 +0000 ROA not before: Thu 01 Jan 2026 18:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51610 IP address blocks: 213.175.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c9:7e:35:a2:b2:60:c1:85:12:00:e3:95:26:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d52bd10d4e33a306f332637da30aa59a17356978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:b9:30:02:4b:11:20:b6:3f:14:4a:82:cf: 96:70:23:2e:13:18:2b:8e:b1:d0:3b:74:64:4f:2c: fb:d3:c3:86:97:20:13:34:d7:28:2c:21:22:d5:7c: 97:e8:59:45:1f:6e:4a:8e:26:7a:72:c9:b6:04:b5: 2c:9c:74:7b:87:cf:53:aa:6d:2e:42:e1:44:ae:70: ef:59:45:4d:b8:54:39:d9:f5:08:22:43:79:7f:bd: 72:8f:f0:b5:6a:26:f7:ed:b7:8c:0a:4c:dc:00:74: 58:f3:00:81:6c:56:2c:4c:88:6d:42:9c:a8:cb:86: cb:81:53:6a:87:b1:6f:ec:d7:5a:58:08:85:a5:5f: fa:88:17:a2:a1:7f:f2:5e:6e:d8:79:5d:db:87:d6: c4:60:f1:56:1b:8b:29:8f:bf:97:5d:da:db:6a:21: 5c:39:57:37:ab:fa:91:f4:00:63:69:b7:04:cf:01: 41:ce:5a:f9:20:ba:40:ca:70:a9:41:30:6d:15:63: 0c:77:48:02:8e:f5:0d:1e:ea:81:15:4c:68:54:fa: ee:ef:07:de:26:52:26:37:b7:5e:ef:0b:41:f9:d2: b4:28:be:ac:da:ec:4b:bd:47:bb:16:a1:5d:4e:8b: 6d:5f:1c:b2:a9:fb:e5:1c:8a:69:21:01:fb:d7:3a: 6c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2B:D1:0D:4E:33:A3:06:F3:32:63:7D:A3:0A:A5:9A:17:35:69:78 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1SvRDU4zowbzMmN9owqlmhc1aXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.175.77.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:e4:51:88:3a:2d:bd:c6:76:c7:4c:e0:dd:4d:a5:f1:8d:14: 86:57:86:74:c1:46:d2:33:e8:9e:ff:34:78:db:92:f6:ca:72: 42:75:ee:58:5c:8a:ec:66:cd:3f:d3:05:15:ea:6d:e1:54:1d: 3e:94:3e:b2:6c:6e:56:01:53:77:3f:01:2a:dd:7a:6c:82:a9: 95:f0:ec:d5:01:a0:e9:46:f3:7c:3a:99:48:0d:55:e0:9d:1f: b8:cd:0d:04:b4:73:13:c4:21:83:50:bd:39:01:dc:cc:89:0b: 52:57:ec:1e:e7:a7:fc:b9:de:6d:c7:b8:86:57:ec:b5:00:3c: a5:3e:32:43:cc:99:87:31:3a:e5:a6:8e:3a:10:31:d5:16:f2: b5:b5:cc:ef:32:55:98:11:7c:b5:8b:76:94:26:87:92:76:13: 5e:b0:85:61:5b:a0:ed:e8:e4:d5:61:36:dc:ee:75:c5:97:75: c5:8f:2a:82:2f:94:c1:e8:41:94:81:b3:ae:a1:e0:e3:86:85: ee:2c:03:4b:c2:5a:b2:08:c6:9d:a0:35:b4:bd:30:05:ab:28: 49:b6:1a:25:de:c4:60:cf:45:44:71:40:52:82:c1:c3:a2:c8: 88:a2:2d:63:d1:80:81:be:55:77:65:5c:db:78:2c:9e:56:be: e7:8d:4b:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMl+NaKyYMGFEgDjlSZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTJiZDEwZDRlMzNhMzA2ZjMzMjYzN2RhMzBhYTU5YTE3MzU2OTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZO5MAJLESC2PxRKgs+WcCMuExgr jrHQO3RkTyz708OGlyATNNcoLCEi1XyX6FlFH25KjiZ6csm2BLUsnHR7h89Tqm0u QuFErnDvWUVNuFQ52fUIIkN5f71yj/C1aib37beMCkzcAHRY8wCBbFYsTIhtQpyo y4bLgVNqh7Fv7NdaWAiFpV/6iBeioX/yXm7YeV3bh9bEYPFWG4spj7+XXdrbaiFc OVc3q/qR9ABjabcEzwFBzlr5ILpAynCpQTBtFWMMd0gCjvUNHuqBFUxoVPru7wfe JlImN7de7wtB+dK0KL6s2uxLvUe7FqFdTottXxyyqfvlHIppIQH71zpsAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNUr0Q1OM6MG8zJjfaMKpZoXNWl4MB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvMVN2UkRVNHpvd2J6TW1OOW93cWxtaGMxYVhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a9NMA0G CSqGSIb3DQEBCwUAA4IBAQCL5FGIOi29xnbHTODdTaXxjRSGV4Z0wUbSM+ie/zR4 25L2ynJCde5YXIrsZs0/0wUV6m3hVB0+lD6ybG5WAVN3PwEq3XpsgqmV8OzVAaDp RvN8OplIDVXgnR+4zQ0EtHMTxCGDUL05AdzMiQtSV+we56f8ud5tx7iGV+y1ADyl PjJDzJmHMTrlpo46EDHVFvK1tczvMlWYEXy1i3aUJoeSdhNesIVhW6Dt6OTVYTbc 7nXFl3XFjyqCL5TB6EGUgbOuoeDjhoXuLANLwlqyCMadoDW0vTAFqyhJthol3sRg z0VEcUBSgsHDosiIoi1j0YCBvlV3ZVzbeCyeVr7njUs7 -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:49 2026 by rpki-client