This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UirifqXV3cw_6K-fg52s9yFvg4w.roa File: UirifqXV3cw_6K-fg52s9yFvg4w.roa (raw, json) Hash identifier: t8GjVN4r2SabCqrBjaOzp8dUm8wV0S4SECs/VIbbHG4= Subject key identifier: 52:2A:E2:7E:A5:D5:DD:CC:3F:E8:AF:9F:83:9D:AC:F7:21:6F:83:8C Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA499E072ED0EB41A6AE5D1EA05AA55 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UirifqXV3cw_6K-fg52s9yFvg4w.roa Signing time: Thu 01 Jan 2026 22:19:03 +0000 ROA not before: Thu 01 Jan 2026 22:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57529 IP address blocks: 213.109.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:99:e0:72:ed:0e:b4:1a:6a:e5:d1:ea:05:aa:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=522ae27ea5d5ddcc3fe8af9f839dacf7216f838c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b5:2f:80:95:78:80:52:52:ce:3f:d1:c2:b1: 0c:95:55:45:da:a3:7d:2f:e8:60:a5:b3:d1:c2:97: aa:61:4c:ff:42:e2:a0:6f:8a:d7:88:07:f8:3d:5f: f1:51:0e:9c:0d:77:d1:b8:91:bd:7c:91:ef:c7:f7: 58:0d:5e:28:10:ca:1d:38:1b:20:33:10:86:f9:a4: a0:56:77:32:e4:00:9d:e8:c7:ee:87:bf:e6:4f:86: b0:26:2c:6c:71:27:31:98:1b:2d:31:86:4b:e7:10: d1:f1:d1:be:46:71:78:e0:e8:4d:4a:d0:f6:7f:3d: 70:f9:53:e9:03:e7:14:69:26:af:b7:b2:7d:6f:59: 13:76:f7:40:27:53:72:8d:30:f4:05:76:88:90:5e: 17:bb:5d:0a:76:40:13:0e:be:93:6c:f2:77:9c:9d: bf:f3:fc:fc:f5:a2:93:c4:ed:78:11:52:f2:4f:be: 54:70:2c:95:bc:32:13:18:8f:75:30:2d:d2:a2:fe: 5c:47:0b:0b:fd:83:92:28:7a:94:e4:7a:c5:4e:cf: 80:51:2c:b8:bb:51:97:78:ad:5e:2b:25:7f:67:cf: ca:30:87:5a:9d:25:b6:f8:89:41:d2:4c:f1:c5:4c: 6b:bc:ac:d0:20:45:a8:83:f6:d8:a0:7b:85:3a:23: 91:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2A:E2:7E:A5:D5:DD:CC:3F:E8:AF:9F:83:9D:AC:F7:21:6F:83:8C X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UirifqXV3cw_6K-fg52s9yFvg4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.100.0/22 Signature Algorithm: sha256WithRSAEncryption 68:28:2c:16:13:60:5f:49:d6:88:51:a5:71:b3:27:d5:3f:67: be:49:f8:0f:00:23:a3:83:1e:b8:ba:04:fb:29:f5:af:14:79: 8c:27:4a:59:a3:fd:52:0b:c6:ac:5d:df:7c:95:7f:36:a9:89: 47:61:bc:02:05:7d:dd:24:7b:d5:65:f3:00:c4:80:2e:e9:6c: 4a:cc:a3:f0:51:0d:3f:cf:6c:23:5c:9a:7b:e3:c7:5d:38:20: fa:a7:1d:d6:89:2f:89:0f:f0:e8:97:b0:0c:44:bd:42:ec:f0: 39:13:7e:29:05:8a:1f:28:c2:e3:ef:94:bf:1b:29:47:aa:cd: 0f:76:f2:fd:de:a6:20:3a:aa:c1:0e:59:4c:28:11:61:01:99: fa:70:b0:7e:22:91:2b:2e:78:17:79:58:ae:44:80:3f:c0:d6: cb:df:ef:bc:c7:62:9a:b4:51:56:03:d8:ee:b6:59:3e:61:17: e1:0c:a0:ef:e1:fb:36:f0:9d:f5:db:96:80:12:4c:f5:68:df: 2c:36:1c:f5:5f:48:1b:7d:db:eb:51:0e:4a:f9:0a:d0:61:96: fc:a3:78:e8:26:ff:3a:63:c6:ba:08:2f:a9:01:65:dc:dc:c3: 3a:dc:76:a4:4e:b5:63:83:1c:fc:16:5a:88:f7:dc:6c:e5:73: 7f:87:eb:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pJngcu0OtBpq5dHqBapVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjJhZTI3ZWE1ZDVkZGNjM2ZlOGFmOWY4MzlkYWNmNzIxNmY4MzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LUvgJV4gFJSzj/RwrEMlVVF2qN9 L+hgpbPRwpeqYUz/QuKgb4rXiAf4PV/xUQ6cDXfRuJG9fJHvx/dYDV4oEModOBsg MxCG+aSgVncy5ACd6Mfuh7/mT4awJixscScxmBstMYZL5xDR8dG+RnF44OhNStD2 fz1w+VPpA+cUaSavt7J9b1kTdvdAJ1NyjTD0BXaIkF4Xu10KdkATDr6TbPJ3nJ2/ 8/z89aKTxO14EVLyT75UcCyVvDITGI91MC3Sov5cRwsL/YOSKHqU5HrFTs+AUSy4 u1GXeK1eKyV/Z8/KMIdanSW2+IlB0kzxxUxrvKzQIEWog/bYoHuFOiOR0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFIq4n6l1d3MP+ivn4OdrPchb4OMMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvVWlyaWZxWFYzY3dfNkstZmc1MnM5eUZ2ZzR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1W1kMA0G CSqGSIb3DQEBCwUAA4IBAQBoKCwWE2BfSdaIUaVxsyfVP2e+SfgPACOjgx64ugT7 KfWvFHmMJ0pZo/1SC8asXd98lX82qYlHYbwCBX3dJHvVZfMAxIAu6WxKzKPwUQ0/ z2wjXJp748ddOCD6px3WiS+JD/Dol7AMRL1C7PA5E34pBYofKMLj75S/GylHqs0P dvL93qYgOqrBDllMKBFhAZn6cLB+IpErLngXeViuRIA/wNbL3++8x2KatFFWA9ju tlk+YRfhDKDv4fs28J3125aAEkz1aN8sNhz1X0gbfdvrUQ5K+QrQYZb8o3joJv86 Y8a6CC+pAWXc3MM63HakTrVjgxz8FlqI99xs5XN/h+vK -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:02 2026 by rpki-client