This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/P2LjaDtYMpe_CWSncsWRaVlnCFw.roa File: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (raw, json) Hash identifier: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M= Subject key identifier: 3F:62:E3:68:3B:58:32:97:BF:09:64:A7:72:C5:91:69:59:67:08:5C Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E38A30B23E6098C4D02B0EB817F2750 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/P2LjaDtYMpe_CWSncsWRaVlnCFw.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214143 IP address blocks: 213.220.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a3:0b:23:e6:09:8c:4d:02:b0:eb:81:7f:27:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f62e3683b583297bf0964a772c591695967085c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:93:5b:e0:48:b9:8c:25:ba:6a:60:d1:bb: ee:11:18:07:4f:8f:a2:37:73:1a:9e:8d:52:40:fd: e3:c5:08:9e:09:24:c3:c8:14:82:65:35:e5:f0:be: dd:13:f7:ad:c5:22:70:f7:26:52:ef:b0:b5:f8:0c: b7:ad:0c:9c:7c:20:61:90:e0:d3:fd:ca:84:aa:e3: af:ec:4f:34:d8:ca:29:49:27:f2:b5:f5:4c:3d:5f: 11:6a:06:1a:48:8d:62:cb:bd:31:a4:9e:b6:dd:55: 0a:e8:0f:7e:2a:37:e4:a6:10:40:56:45:c0:ed:37: 75:a6:e3:44:ee:7f:a1:97:c8:a3:ae:70:4a:5f:1d: a9:97:84:58:8b:83:c7:0f:3e:07:88:c8:b0:0f:df: 95:49:3d:b8:c3:0d:7a:fd:2c:ae:62:07:5f:1f:e7: e4:b2:08:13:23:0e:1f:b3:55:35:f4:9b:de:5d:14: eb:a5:21:a4:8a:db:18:c7:15:28:91:02:6d:28:e3: 19:e9:03:50:d6:2b:8a:8e:c1:90:71:cf:29:14:eb: 90:5b:8d:10:de:b6:1e:45:93:4d:18:c2:f8:77:19: e8:47:e9:32:1b:7d:29:a6:02:b3:8a:ab:09:5f:a2: 62:04:6a:f7:ac:7b:d8:fa:26:7d:2f:af:61:e4:38: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:62:E3:68:3B:58:32:97:BF:09:64:A7:72:C5:91:69:59:67:08:5C X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/P2LjaDtYMpe_CWSncsWRaVlnCFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.220.9.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:ce:a6:72:18:34:0d:31:94:74:86:b0:b6:06:55:44:74:25: fa:ce:eb:1c:46:09:b4:70:75:f3:5e:4a:ad:fc:d6:67:10:32: de:1d:ae:58:94:42:3a:5c:b3:1d:07:50:14:d0:d6:f0:66:e0: d7:9a:03:e5:22:e1:56:cc:28:0a:15:bd:49:f3:4c:d6:91:39: 27:6a:dd:c5:7a:b6:34:91:69:d5:28:43:a2:03:74:f1:02:d5: 82:81:e3:9d:7b:e8:96:c0:9a:9a:ff:a7:23:34:d2:d8:68:5d: 3a:17:1d:fd:c3:2f:30:96:7b:9c:e6:f3:cb:aa:d7:49:49:98: 5a:95:79:16:b0:df:9f:76:56:3b:d9:f0:51:25:27:23:b8:c2: b5:d4:91:2c:77:38:64:9b:c4:c2:87:df:6a:b0:bc:3e:e7:af: 95:0b:7e:a1:a5:ed:70:d2:7e:94:3b:32:09:67:f0:5a:70:31: 0c:06:c1:2f:77:9f:ff:ba:86:ec:2f:67:79:c9:f5:5a:43:a4: 5b:b7:ce:82:60:97:e5:9d:e3:4f:b1:4f:7f:19:3e:48:1e:93: 14:52:73:67:0f:e3:0f:6a:c2:a1:86:c7:70:62:e0:dc:5b:9e: 6e:b8:a2:20:c6:3b:fd:8a:c4:b5:24:d7:36:ce:84:92:b1:2e: 93:63:a7:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKMLI+YJjE0CsOuBfydQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjYyZTM2ODNiNTgzMjk3YmYwOTY0YTc3MmM1OTE2OTU5NjcwODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuOTW+BIuYwlumpg0bvuERgHT4+i N3Mano1SQP3jxQieCSTDyBSCZTXl8L7dE/etxSJw9yZS77C1+Ay3rQycfCBhkODT /cqEquOv7E802MopSSfytfVMPV8RagYaSI1iy70xpJ623VUK6A9+KjfkphBAVkXA 7Td1puNE7n+hl8ijrnBKXx2pl4RYi4PHDz4HiMiwD9+VST24ww16/SyuYgdfH+fk sggTIw4fs1U19JveXRTrpSGkitsYxxUokQJtKOMZ6QNQ1iuKjsGQcc8pFOuQW40Q 3rYeRZNNGML4dxnoR+kyG30ppgKziqsJX6JiBGr3rHvY+iZ9L69h5DjcPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD9i42g7WDKXvwlkp3LFkWlZZwhcMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvUDJMamFEdFlNcGVfQ1dTbmNzV1JhVmxuQ0Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dwJMA0G CSqGSIb3DQEBCwUAA4IBAQB8zqZyGDQNMZR0hrC2BlVEdCX6zuscRgm0cHXzXkqt /NZnEDLeHa5YlEI6XLMdB1AU0NbwZuDXmgPlIuFWzCgKFb1J80zWkTknat3FerY0 kWnVKEOiA3TxAtWCgeOde+iWwJqa/6cjNNLYaF06Fx39wy8wlnuc5vPLqtdJSZha lXkWsN+fdlY72fBRJScjuMK11JEsdzhkm8TCh99qsLw+56+VC36hpe1w0n6UOzIJ Z/BacDEMBsEvd5//uobsL2d5yfVaQ6Rbt86CYJflneNPsU9/GT5IHpMUUnNnD+MP asKhhsdwYuDcW55uuKIgxjv9isS1JNc2zoSSsS6TY6cL -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:52 2026 by rpki-client