This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/gFKFjKkgIO-KVO5jt9pXSmRvu7A.roa File: gFKFjKkgIO-KVO5jt9pXSmRvu7A.roa (raw, json) Hash identifier: 3nypr+BViTxjnIhNWNvaI7QKK8oJ+yRGmb8HpNhEYes= Subject key identifier: 80:52:85:8C:A9:20:20:EF:8A:54:EE:63:B7:DA:57:4A:64:6F:BB:B0 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4AA011B0DDE38EA75F344F790BA3A Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/gFKFjKkgIO-KVO5jt9pXSmRvu7A.roa Signing time: Thu 01 Jan 2026 22:19:07 +0000 ROA not before: Thu 01 Jan 2026 22:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216202 IP address blocks: 213.109.98.0/24 maxlen: 24 213.109.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:aa:01:1b:0d:de:38:ea:75:f3:44:f7:90:ba:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8052858ca92020ef8a54ee63b7da574a646fbbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:29:41:9b:89:48:08:f2:53:ba:05:68:be: 0f:ff:ce:11:df:68:af:3d:2a:2d:a4:f0:47:03:18: 1c:fc:9c:34:b5:cc:98:ef:ab:03:a0:8d:cf:70:fb: 61:e1:38:27:ad:dc:d3:b8:37:27:18:9e:d1:95:54: ea:7a:35:18:44:17:39:20:dd:27:ae:93:a6:ed:b0: bf:0d:34:5e:a0:ab:a2:9f:70:1d:d4:c9:39:37:b5: c3:f5:ed:cd:44:38:86:29:77:f7:de:36:47:db:79: f7:f0:ba:32:ee:61:08:e1:a3:58:e3:f1:b9:a7:cb: 1c:79:af:58:ee:64:48:b5:19:4f:61:51:6a:f5:3a: 4b:e4:18:2d:40:aa:9e:40:5e:56:d8:eb:88:b5:60: 04:54:ee:12:36:2b:e2:77:58:44:71:79:26:bc:4f: 38:8c:12:c6:e1:f4:02:9d:68:d2:cb:87:f7:30:45: 53:6b:ae:dd:de:5e:81:64:26:ae:40:e4:83:06:dd: 51:ef:ee:f9:19:07:0c:b6:27:76:85:01:22:1f:85: ae:43:10:f1:18:bb:6a:d5:ca:c7:a1:27:2e:93:4e: 9f:a5:50:4d:e8:bc:ba:00:8e:3a:6b:86:5e:e3:b7: 96:1a:c7:d5:68:34:99:7e:7c:fb:42:97:e4:ff:da: 9c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:52:85:8C:A9:20:20:EF:8A:54:EE:63:B7:DA:57:4A:64:6F:BB:B0 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/gFKFjKkgIO-KVO5jt9pXSmRvu7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.98.0/23 Signature Algorithm: sha256WithRSAEncryption 71:c6:29:38:63:1d:f2:97:37:e1:b7:e4:a0:18:44:d4:2e:f2: 17:25:5b:39:d0:1a:db:b0:74:8d:94:20:a8:38:d9:be:bb:54: 74:bb:4f:e3:14:be:81:7c:5c:b8:61:8b:90:5d:a9:89:54:27: 1c:cd:e9:fc:20:9d:16:aa:57:c4:e2:66:c1:10:c1:b8:a3:04: 1d:aa:43:fe:a4:7f:2f:55:45:c3:a9:1f:51:fd:3b:c1:fc:ef: e0:1d:2c:f6:5b:5a:2d:23:8a:8a:8c:d9:75:00:82:4c:b3:c4: f6:62:38:e1:d4:59:1f:72:3c:5e:82:e0:ae:6e:65:41:dd:60: 48:a3:a4:74:ad:e4:68:50:7b:c5:f3:60:d3:75:c0:11:be:61: 78:f4:f1:2e:78:5c:df:3d:9c:42:29:74:40:dc:c2:7f:bf:72: b0:fc:10:63:fc:92:cd:95:44:49:3a:e1:73:9d:1a:4f:ad:f9: b5:2b:53:46:c4:17:05:74:7b:df:b1:19:76:9e:e7:0c:6d:f0: ed:7b:63:7e:8a:84:48:4a:9f:ea:84:4e:fc:15:b9:4f:63:95: 15:a6:c1:dd:46:a2:a8:fd:6f:fa:ba:c5:e7:9b:3b:df:a2:d0: 84:64:bf:49:82:b9:0b:2c:95:e6:93:bb:1f:6a:99:4c:a2:28: 2d:ad:a7:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pKoBGw3eOOp180T3kLo6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDUyODU4Y2E5MjAyMGVmOGE1NGVlNjNiN2RhNTc0YTY0NmZiYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYgpQZuJSAjyU7oFaL4P/84R32iv PSotpPBHAxgc/Jw0tcyY76sDoI3PcPth4TgnrdzTuDcnGJ7RlVTqejUYRBc5IN0n rpOm7bC/DTReoKuin3Ad1Mk5N7XD9e3NRDiGKXf33jZH23n38Loy7mEI4aNY4/G5 p8scea9Y7mRItRlPYVFq9TpL5BgtQKqeQF5W2OuItWAEVO4SNivid1hEcXkmvE84 jBLG4fQCnWjSy4f3MEVTa67d3l6BZCauQOSDBt1R7+75GQcMtid2hQEiH4WuQxDx GLtq1crHoScuk06fpVBN6Ly6AI46a4Ze47eWGsfVaDSZfnz7Qpfk/9qcqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIBShYypICDvilTuY7faV0pkb7uwMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvZ0ZLRmpLa2dJTy1LVk81anQ5cFhTbVJ2dTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1W1iMA0G CSqGSIb3DQEBCwUAA4IBAQBxxik4Yx3ylzfht+SgGETULvIXJVs50BrbsHSNlCCo ONm+u1R0u0/jFL6BfFy4YYuQXamJVCcczen8IJ0WqlfE4mbBEMG4owQdqkP+pH8v VUXDqR9R/TvB/O/gHSz2W1otI4qKjNl1AIJMs8T2Yjjh1FkfcjxeguCubmVB3WBI o6R0reRoUHvF82DTdcARvmF49PEueFzfPZxCKXRA3MJ/v3Kw/BBj/JLNlURJOuFz nRpPrfm1K1NGxBcFdHvfsRl2nucMbfDte2N+ioRISp/qhE78FblPY5UVpsHdRqKo /W/6usXnmzvfotCEZL9JgrkLLJXmk7sfaplMoigtraef -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:09 2026 by rpki-client