This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/IWbknyGy46FRq6gNdwoFIsl62Uo.roa File: IWbknyGy46FRq6gNdwoFIsl62Uo.roa (raw, json) Hash identifier: vLaeE+9DhP9CD6c4IcuLRUKdo6A5ZsrKJTeWTDS+gXw= Subject key identifier: 21:66:E4:9F:21:B2:E3:A1:51:AB:A8:0D:77:0A:05:22:C9:7A:D9:4A Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75F889DBBBD189423AEB052139C8A Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/IWbknyGy46FRq6gNdwoFIsl62Uo.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15934 IP address blocks: 213.145.32.0/19 maxlen: 19 213.145.43.0/24 maxlen: 24 217.14.240.0/20 maxlen: 20 217.14.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5f:88:9d:bb:bd:18:94:23:ae:b0:52:13:9c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2166e49f21b2e3a151aba80d770a0522c97ad94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:74:29:24:8b:8f:01:28:8d:d6:80:b2:c4:7f: 7a:e9:fc:dc:e7:15:04:aa:78:23:79:90:f9:33:d3: a7:13:bb:4c:1c:21:b3:a6:fa:7b:80:8f:81:e7:f9: 3e:95:b5:3d:ad:9c:78:5f:1f:63:90:bf:9b:24:75: ba:ed:29:a5:39:20:9b:24:ea:aa:8c:60:0d:b6:4a: 5e:cf:9b:4a:de:cb:ec:2f:30:78:7e:6a:ae:e3:b0: 1b:3a:09:e7:d4:29:58:f2:9b:d6:0c:ee:be:d7:30: e5:e6:ef:03:19:26:89:65:68:32:74:40:10:e9:e7: 4e:8a:cd:0c:e3:f7:3a:33:a1:a5:73:d8:15:8a:07: ff:3f:39:3e:4b:29:88:4d:bc:12:02:ca:32:f5:fb: 14:af:06:6a:a4:a6:c8:5f:6b:7f:ef:0e:7f:f5:be: 5c:b2:da:1f:9d:a1:53:8c:b1:bc:3a:85:7a:a7:00: 2c:a4:fc:24:bd:65:0f:32:50:b2:ce:36:81:7e:2e: 28:f3:98:40:a4:44:92:02:87:a0:b0:c7:17:b9:c3: 08:ee:af:60:0c:7b:1c:5e:45:83:68:89:4a:79:4c: e3:51:39:99:ff:42:86:f3:84:a8:c4:b9:c0:9a:ef: 68:12:d9:73:fb:37:85:a1:be:8a:55:cc:79:ae:c5: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:66:E4:9F:21:B2:E3:A1:51:AB:A8:0D:77:0A:05:22:C9:7A:D9:4A X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/IWbknyGy46FRq6gNdwoFIsl62Uo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.32.0/19 217.14.240.0/20 Signature Algorithm: sha256WithRSAEncryption 5c:11:c2:39:62:d1:04:ba:5f:26:fa:04:20:f8:6c:91:77:37: 1d:35:df:22:31:60:a2:fa:3c:25:2f:0e:05:70:3f:2d:4d:b7: ea:af:7b:36:09:32:78:15:03:8f:1a:fd:62:ff:d2:a2:85:8b: 04:b8:cc:18:c7:ef:58:ed:98:ae:45:d4:ca:b1:27:da:08:47: e3:f9:a8:ba:a3:e1:39:05:33:0c:38:5d:a6:48:1c:5e:62:33: 50:76:37:0f:17:3f:ec:a2:1b:10:59:dd:c8:b6:e9:b4:99:6d: 84:7c:7b:e5:39:9f:ce:88:0b:b9:90:87:75:a0:41:37:e1:a8: 80:f8:83:e1:e0:02:3f:b8:25:cd:b9:09:35:a6:97:f0:43:cd: 5f:8d:2d:bc:96:f6:b6:ab:02:1f:5e:d3:74:da:ef:1f:36:99: 0f:70:49:fc:cb:69:ef:5b:a0:b0:a9:46:70:9c:c4:b8:70:b0: ed:c4:8f:90:f8:c3:1d:f1:fe:3b:e5:e8:3f:d4:45:ce:51:57: df:71:66:be:b6:29:36:f2:13:3e:b5:18:3f:33:ad:93:06:8a: 2a:7a:4d:d5:98:5e:a1:91:45:34:67:d4:92:3d:44:5b:e6:21: 92:0d:ab:7f:f2:50:6f:9c:9f:78:7a:66:7e:11:66:48:1b:ec: 2b:a4:77:0d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+p1+Inbu9GJQjrrBSE5yKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTY2ZTQ5ZjIxYjJlM2ExNTFhYmE4MGQ3NzBhMDUyMmM5N2FkOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73QpJIuPASiN1oCyxH966fzc5xUE qngjeZD5M9OnE7tMHCGzpvp7gI+B5/k+lbU9rZx4Xx9jkL+bJHW67SmlOSCbJOqq jGANtkpez5tK3svsLzB4fmqu47AbOgnn1ClY8pvWDO6+1zDl5u8DGSaJZWgydEAQ 6edOis0M4/c6M6Glc9gVigf/Pzk+SymITbwSAsoy9fsUrwZqpKbIX2t/7w5/9b5c stofnaFTjLG8OoV6pwAspPwkvWUPMlCyzjaBfi4o85hApESSAoegsMcXucMI7q9g DHscXkWDaIlKeUzjUTmZ/0KG84SoxLnAmu9oEtlz+zeFob6KVcx5rsWQ1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCFm5J8hsuOhUauoDXcKBSLJetlKMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvSVdia255R3k0NkZScTZnTmR3b0ZJc2w2MlVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQF1ZEgAwQE 2Q7wMA0GCSqGSIb3DQEBCwUAA4IBAQBcEcI5YtEEul8m+gQg+GyRdzcdNd8iMWCi +jwlLw4FcD8tTbfqr3s2CTJ4FQOPGv1i/9KihYsEuMwYx+9Y7ZiuRdTKsSfaCEfj +ai6o+E5BTMMOF2mSBxeYjNQdjcPFz/sohsQWd3Itum0mW2EfHvlOZ/OiAu5kId1 oEE34aiA+IPh4AI/uCXNuQk1ppfwQ81fjS28lva2qwIfXtN02u8fNpkPcEn8y2nv W6CwqUZwnMS4cLDtxI+Q+MMd8f475eg/1EXOUVffcWa+tik28hM+tRg/M62TBooq ek3VmF6hkUU0Z9SSPURb5iGSDat/8lBvnJ94emZ+EWZIG+wrpHcN -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:11 2026 by rpki-client