This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/21R_t7vKnYEIDQebm-7zjxxy-lo.roa File: 21R_t7vKnYEIDQebm-7zjxxy-lo.roa (raw, json) Hash identifier: uGSGk5iT+FrqnBLQlW6LsLr35tMh1jia+p+sY2P//70= Subject key identifier: DB:54:7F:B7:BB:CA:9D:81:08:0D:07:9B:9B:EE:F3:8F:1C:72:FA:5A Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4 Certificate serial: 019B7B36B94DD9C586A571C3E0FA788582D7 Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/21R_t7vKnYEIDQebm-7zjxxy-lo.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206790 IP address blocks: 193.223.254.0/23 maxlen: 24 2001:678:e04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b9:4d:d9:c5:86:a5:71:c3:e0:fa:78:85:82:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4 Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db547fb7bbca9d81080d079b9beef38f1c72fa5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a1:d7:92:b6:09:fb:65:44:a9:e9:37:69:6f: 16:37:b7:e6:27:1e:0b:9b:9b:b5:63:8d:00:5e:02: ab:89:96:39:47:03:fb:01:57:b6:54:5e:f2:71:79: 6b:9b:a3:22:af:57:5b:ff:6b:2b:0b:7d:db:be:ac: 0c:07:d3:a1:db:f8:a0:3d:14:18:65:c8:ae:6d:56: f5:3f:43:1e:d6:16:ef:cb:1e:f4:2b:a5:86:b2:78: 8b:40:23:bc:b7:6f:f2:33:f8:29:85:e9:71:2d:bf: 8b:78:66:74:a5:f4:59:d2:16:5a:48:9e:92:96:3e: a8:05:04:f3:3b:02:e2:37:49:ee:78:e2:d8:fc:f5: 24:f3:8d:f3:d5:b2:68:1d:d2:6e:8e:b9:a0:75:75: 57:04:35:04:b7:83:85:cc:4f:15:09:0a:23:aa:df: 38:a7:d6:3d:a0:33:fa:89:b1:83:c1:53:6f:1d:a6: 63:4e:79:eb:ed:c9:5a:1d:04:c7:7a:5e:7a:75:c6: cb:a6:cb:9e:66:ef:84:d7:1a:5b:e2:67:36:77:95: 40:27:2b:92:9f:23:94:7b:07:39:c6:6b:e4:da:da: c6:b4:1d:09:24:2f:6e:69:60:f4:4a:20:24:d8:03: cf:9a:5a:70:0f:03:23:70:39:ba:ee:4c:f4:eb:13: f1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:54:7F:B7:BB:CA:9D:81:08:0D:07:9B:9B:EE:F3:8F:1C:72:FA:5A X509v3 Authority Key Identifier: keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/21R_t7vKnYEIDQebm-7zjxxy-lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.223.254.0/23 IPv6: 2001:678:e04::/48 Signature Algorithm: sha256WithRSAEncryption ae:2e:15:e8:47:82:7c:02:60:0f:ff:7a:0b:f4:55:8f:9f:96: d1:3f:a7:80:d1:38:32:d7:06:05:69:b6:ea:fd:c6:ca:f5:58: 22:93:48:d3:82:ed:63:d6:a2:a2:9d:0c:ac:fc:32:7c:a7:39: 6c:8f:40:74:25:fb:f7:27:d2:99:e3:2e:f4:27:be:c7:83:62: f7:3d:38:a0:1a:b0:cb:ea:3b:ef:2e:11:de:6a:e5:3b:27:d7: 21:7a:46:fd:17:dd:3c:40:34:4f:ae:d1:66:58:d3:a4:e4:26: 2b:57:cf:82:f7:a6:6c:bd:89:86:39:eb:9e:c9:25:53:b7:58: b6:d7:6d:72:fd:b7:b3:42:a0:93:6d:ce:5d:48:14:a9:38:48: 78:6b:93:12:d4:f9:aa:5f:99:56:81:d4:b7:58:f4:4d:8a:bf: 5c:a4:bb:00:1d:c7:d8:b6:e4:54:e5:1f:e9:b1:77:ec:9f:ad: d1:5a:5d:04:76:5b:39:4a:46:41:47:95:92:3f:93:3d:70:c5: a2:08:44:b6:e6:e1:04:dd:13:ad:3b:67:d3:f0:72:bc:a1:e7: be:ac:a2:40:d8:73:16:fc:d1:5d:9f:9f:b9:33:5a:16:fd:99: 74:d5:93:87:e0:cf:38:db:37:a2:90:12:09:3d:ac:0f:26:3e: 0a:34:6d:fe -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NrlN2cWGpXHD4Pp4hYLXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZmYzYTczODY4ZGMxMWNkOGRiZjVlMWMzODBiYmI3MTA2 MDJmYjQwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjU0N2ZiN2JiY2E5ZDgxMDgwZDA3OWI5YmVlZjM4ZjFjNzJmYTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06HXkrYJ+2VEqek3aW8WN7fmJx4L m5u1Y40AXgKriZY5RwP7AVe2VF7ycXlrm6Mir1db/2srC33bvqwMB9Oh2/igPRQY ZciubVb1P0Me1hbvyx70K6WGsniLQCO8t2/yM/gphelxLb+LeGZ0pfRZ0hZaSJ6S lj6oBQTzOwLiN0nueOLY/PUk843z1bJoHdJujrmgdXVXBDUEt4OFzE8VCQojqt84 p9Y9oDP6ibGDwVNvHaZjTnnr7claHQTHel56dcbLpsueZu+E1xpb4mc2d5VAJyuS nyOUewc5xmvk2trGtB0JJC9uaWD0SiAk2APPmlpwDwMjcDm67kz06xPxBwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNtUf7e7yp2BCA0Hm5vu848ccvpaMB8GA1UdIwQY MBaAFKn/OnOGjcEc2Nv14cOAu7cQYC+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgt NDc5NzRmNWM3MDRhLzEvMjFSX3Q3dktuWUVJRFFlYm0tN3pqeHh5LWxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgtNDc5NzRmNWM3MDRh LzEvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwd/+MA8E AgACMAkDBwAgAQZ4DgQwDQYJKoZIhvcNAQELBQADggEBAK4uFehHgnwCYA//egv0 VY+fltE/p4DRODLXBgVptur9xsr1WCKTSNOC7WPWoqKdDKz8MnynOWyPQHQl+/cn 0pnjLvQnvseDYvc9OKAasMvqO+8uEd5q5Tsn1yF6Rv0X3TxANE+u0WZY06TkJitX z4L3pmy9iYY5657JJVO3WLbXbXL9t7NCoJNtzl1IFKk4SHhrkxLU+apfmVaB1LdY 9E2Kv1ykuwAdx9i25FTlH+mxd+yfrdFaXQR2WzlKRkFHlZI/kz1wxaIIRLbm4QTd E607Z9Pwcryh576sokDYcxb80V2fn7kzWhb9mXTVk4fgzzjbN6KQEgk9rA8mPgo0 bf4= -----END CERTIFICATE-----Generated at Tue Feb 10 04:28:10 2026 by rpki-client