This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/0hivjmx3zESdF4O-A2SSYqLGRzk.roa File: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (raw, json) Hash identifier: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg= Subject key identifier: D2:18:AF:8E:6C:77:CC:44:9D:17:83:BE:03:64:92:62:A2:C6:47:39 Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019B9CA6C6DE5F748649D1F15CF65D529E9C Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/0hivjmx3zESdF4O-A2SSYqLGRzk.roa Signing time: Thu 08 Jan 2026 08:08:54 +0000 ROA not before: Thu 08 Jan 2026 08:08:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13121 IP address blocks: 213.169.64.0/19 maxlen: 24 213.169.74.0/23 maxlen: 32 213.169.76.0/23 maxlen: 32 213.169.83.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:a6:c6:de:5f:74:86:49:d1:f1:5c:f6:5d:52:9e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Jan 8 08:08:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d218af8e6c77cc449d1783be03649262a2c64739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:95:54:be:f6:92:c1:b0:ad:65:25:17:f9: 1e:39:f5:51:77:0e:3e:e3:cb:0f:76:17:32:ad:9e: 8c:da:8b:35:bf:7b:7c:6a:81:19:e3:b1:94:ec:26: 3b:87:85:05:73:7e:cc:9b:dd:ca:b1:73:6e:32:c3: 08:85:73:42:e3:e1:6f:fb:fa:ee:18:9a:fd:81:18: 18:fe:08:dd:6b:11:2d:5e:7e:14:f9:ae:20:4d:c2: 4f:7e:7a:01:fd:79:11:72:cc:ae:b9:11:be:49:c0: 5c:08:2e:39:06:7a:73:9e:b4:72:3c:b2:66:fe:1f: 49:44:15:5e:eb:73:c9:30:b8:3c:e8:28:f2:a9:cc: 37:96:c4:8c:21:cb:9e:a9:60:47:f8:92:5b:17:bb: bb:59:11:c2:46:52:24:a9:69:f8:40:09:0b:06:56: 5f:20:22:da:38:bf:66:37:da:ab:82:ae:79:82:57: 30:11:f1:a3:ec:ef:6d:27:d7:01:46:61:f8:d7:08: e3:e3:7b:09:aa:be:46:d6:d2:a9:23:b6:83:f6:c6: 57:08:48:33:a0:77:f9:67:ba:3c:31:29:90:16:e2: d9:2f:d7:98:3d:14:1d:96:2c:42:b8:3d:90:7f:02: a1:32:c6:6c:d2:d2:35:f5:d7:bc:85:43:20:36:c6: 46:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:18:AF:8E:6C:77:CC:44:9D:17:83:BE:03:64:92:62:A2:C6:47:39 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/0hivjmx3zESdF4O-A2SSYqLGRzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.169.64.0/19 Signature Algorithm: sha256WithRSAEncryption a1:4a:57:f5:6b:a2:82:dc:ad:8b:64:27:8a:5c:06:4d:73:e1: 88:b2:25:3a:7f:7c:3d:51:a8:e7:6a:fd:e4:8a:a4:b3:7f:69: 5f:81:a6:40:ef:85:d7:98:e6:0f:c9:e7:c8:f0:3c:2b:a1:ba: a5:a3:27:f9:85:3b:81:7c:71:c7:f1:86:75:b0:20:85:d7:06: 0e:d2:07:c1:f5:5e:62:07:ad:f9:09:31:5d:cb:71:4d:31:5a: e1:dd:87:87:02:91:cb:30:95:a1:40:09:da:99:c2:1a:35:65: 5b:ec:8b:65:b6:56:3d:f1:60:94:fa:e9:e9:ec:b1:df:43:c5: cb:aa:25:04:7f:37:c9:3b:be:8a:d6:50:dd:9e:1e:71:e1:d1: da:7c:d2:4e:03:f3:5e:49:b0:a7:32:17:36:88:55:5c:2d:a9: fd:62:b3:27:09:58:70:53:cf:65:9e:cf:03:a3:ae:ab:1b:18: aa:30:a9:41:a5:ba:3a:99:f2:50:04:b5:96:54:ea:f6:8f:52: 3e:a3:1b:32:4d:88:28:5f:11:d3:e4:f5:97:96:21:e1:a0:59: 6f:21:cc:c2:4e:24:7d:d7:5a:f5:7e:a2:b4:f5:fc:09:c0:81: b1:c0:70:d4:ff:02:b8:99:c8:43:10:ec:bb:31:cc:6c:57:7e: 2d:ca:a1:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZucpsbeX3SGSdHxXPZdUp6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwMTA4MDgwODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjE4YWY4ZTZjNzdjYzQ0OWQxNzgzYmUwMzY0OTI2MmEyYzY0NzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PCVVL72ksGwrWUlF/keOfVRdw4+ 48sPdhcyrZ6M2os1v3t8aoEZ47GU7CY7h4UFc37Mm93KsXNuMsMIhXNC4+Fv+/ru GJr9gRgY/gjdaxEtXn4U+a4gTcJPfnoB/XkRcsyuuRG+ScBcCC45BnpznrRyPLJm /h9JRBVe63PJMLg86Cjyqcw3lsSMIcueqWBH+JJbF7u7WRHCRlIkqWn4QAkLBlZf ICLaOL9mN9qrgq55glcwEfGj7O9tJ9cBRmH41wjj43sJqr5G1tKpI7aD9sZXCEgz oHf5Z7o8MSmQFuLZL9eYPRQdlixCuD2QfwKhMsZs0tI19de8hUMgNsZGUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNIYr45sd8xEnReDvgNkkmKixkc5MB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvMGhpdmpteDN6RVNkRjRPLUEyU1NZcUxHUnprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1alAMA0G CSqGSIb3DQEBCwUAA4IBAQChSlf1a6KC3K2LZCeKXAZNc+GIsiU6f3w9Uajnav3k iqSzf2lfgaZA74XXmOYPyefI8Dwrobqloyf5hTuBfHHH8YZ1sCCF1wYO0gfB9V5i B635CTFdy3FNMVrh3YeHApHLMJWhQAnamcIaNWVb7ItltlY98WCU+unp7LHfQ8XL qiUEfzfJO76K1lDdnh5x4dHafNJOA/NeSbCnMhc2iFVcLan9YrMnCVhwU89lns8D o66rGxiqMKlBpbo6mfJQBLWWVOr2j1I+oxsyTYgoXxHT5PWXliHhoFlvIczCTiR9 11r1fqK09fwJwIGxwHDU/wK4mchDEOy7McxsV34tyqE4 -----END CERTIFICATE-----Generated at Tue Feb 3 00:18:16 2026 by rpki-client