This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa File: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (raw, json) Hash identifier: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo= Subject key identifier: D4:E8:D0:3A:49:5E:98:4D:5C:D8:E7:DD:EE:C1:1B:B5:5E:96:08:B4 Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2 Certificate serial: 019B7BA3963BFFBC428ABD41240C8FFADA27 Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa Signing time: Thu 01 Jan 2026 22:17:56 +0000 ROA not before: Thu 01 Jan 2026 22:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43754 IP address blocks: 212.23.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:96:3b:ff:bc:42:8a:bd:41:24:0c:8f:fa:da:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2 Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4e8d03a495e984d5cd8e7ddeec11bb55e9608b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:2b:26:cd:ef:68:0c:29:4e:d4:a5:23:6e: 5d:a1:2e:9f:df:d5:4c:1c:d0:ee:48:48:79:bd:79: 17:ed:32:9a:3b:61:d9:b4:47:b7:f2:39:f5:94:16: e2:54:b6:87:63:2d:2e:91:b9:f7:cc:46:df:aa:e1: 0b:d3:0b:a7:e1:a0:10:3b:7e:cc:0f:f9:85:18:c0: 2b:8c:2c:3f:80:02:92:69:f3:19:67:e0:ac:ed:7d: 34:f8:eb:a5:ef:9c:f3:6c:dd:0a:38:06:f4:47:f6: d2:3f:dd:d7:db:23:67:b6:64:c4:a0:7a:3b:ef:d1: 8c:e6:4b:2a:8e:91:b2:9d:fe:de:b9:e8:fc:8f:4b: 4d:5d:4e:e2:38:b8:b9:20:93:a7:89:e3:87:23:4b: 1c:06:25:88:36:0b:47:72:39:fb:cc:48:35:37:ee: 90:07:f6:c3:28:65:49:b3:2b:e1:7f:5f:47:ea:cc: 23:36:e9:cb:0c:58:35:5f:31:82:79:9a:a3:96:9a: 1c:43:70:53:92:c7:cf:50:b8:2c:00:c3:ac:19:5c: 2d:15:9f:c6:d8:19:cd:82:21:b5:06:af:77:a0:2a: 41:b6:89:99:8e:86:60:20:88:ff:92:48:51:be:da: d1:44:2b:25:d5:3b:cb:7b:1f:d6:de:3c:d8:48:fd: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E8:D0:3A:49:5E:98:4D:5C:D8:E7:DD:EE:C1:1B:B5:5E:96:08:B4 X509v3 Authority Key Identifier: keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.23.216.0/24 Signature Algorithm: sha256WithRSAEncryption 90:44:00:3b:43:73:37:90:cf:10:b4:ca:15:c3:ec:a6:e9:cb: 42:e6:d6:98:ed:ef:96:35:04:41:56:c2:1d:23:86:33:3f:1b: 40:ba:95:ed:34:9b:57:5a:87:3b:91:86:29:96:4a:07:de:8e: f4:32:c4:71:3a:0f:b7:74:d1:eb:ed:b6:10:af:a6:da:a5:b1: 3e:9c:eb:a2:84:27:0d:31:e8:4b:9f:26:a5:44:19:1e:e0:34: 5e:d4:b9:b1:f0:52:77:99:ae:e0:ac:07:52:46:4a:d6:8c:27: 8f:ef:62:86:55:fc:d2:90:74:7b:1b:b1:a7:98:5e:51:83:84: 82:62:46:73:43:a7:66:aa:99:11:17:a8:19:fd:1a:5a:a4:6c: 80:85:14:9d:a1:ad:fe:4b:96:7b:38:b9:c6:df:dd:60:93:38: fb:bd:2d:05:07:72:69:4e:03:ef:49:70:79:1b:b2:28:6e:79: df:ee:6f:42:7b:b7:0a:15:b5:3e:d5:e9:ed:ee:3e:89:b6:58: df:1a:d6:c0:9f:ec:73:07:a7:79:c0:9d:c1:44:e5:cc:e5:36: 14:2d:39:ce:69:3f:e7:57:6e:e8:6a:f0:cb:1e:c6:95:1c:c0: a1:56:4e:7e:2b:81:71:a7:72:ec:28:12:c4:28:86:51:4a:8f: e4:2c:fd:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o5Y7/7xCir1BJAyP+tonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx ZmI0ZjIwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGU4ZDAzYTQ5NWU5ODRkNWNkOGU3ZGRlZWMxMWJiNTVlOTYwOGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0srJs3vaAwpTtSlI25doS6f39VM HNDuSEh5vXkX7TKaO2HZtEe38jn1lBbiVLaHYy0ukbn3zEbfquEL0wun4aAQO37M D/mFGMArjCw/gAKSafMZZ+Cs7X00+Oul75zzbN0KOAb0R/bSP93X2yNntmTEoHo7 79GM5ksqjpGynf7euej8j0tNXU7iOLi5IJOnieOHI0scBiWINgtHcjn7zEg1N+6Q B/bDKGVJsyvhf19H6swjNunLDFg1XzGCeZqjlpocQ3BTksfPULgsAMOsGVwtFZ/G 2BnNgiG1Bq93oCpBtomZjoZgIIj/kkhRvtrRRCsl1TvLex/W3jzYSP2v9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTo0DpJXphNXNjn3e7BG7Velgi0MB8GA1UdIwQY MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt ZmQ0OWViM2YxOWIxLzEvMU9qUU9rbGVtRTFjMk9mZDdzRWJ0VjZXQ0xRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfYMA0G CSqGSIb3DQEBCwUAA4IBAQCQRAA7Q3M3kM8QtMoVw+ym6ctC5taY7e+WNQRBVsId I4YzPxtAupXtNJtXWoc7kYYplkoH3o70MsRxOg+3dNHr7bYQr6bapbE+nOuihCcN MehLnyalRBke4DRe1Lmx8FJ3ma7grAdSRkrWjCeP72KGVfzSkHR7G7GnmF5Rg4SC YkZzQ6dmqpkRF6gZ/RpapGyAhRSdoa3+S5Z7OLnG391gkzj7vS0FB3JpTgPvSXB5 G7Iobnnf7m9Ce7cKFbU+1ent7j6JtljfGtbAn+xzB6d5wJ3BROXM5TYULTnOaT/n V27oavDLHsaVHMChVk5+K4Fxp3LsKBLEKIZRSo/kLP3H -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:25 2026 by rpki-client