This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa File: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (raw, json) Hash identifier: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA= Subject key identifier: 91:8D:22:3E:B9:69:D8:31:5C:22:CC:DF:2A:06:7B:8E:4D:C0:F6:5B Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d Certificate serial: 019B7DCAC5E7D0D661A6B62B50E5F5A04258 Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa Signing time: Fri 02 Jan 2026 08:19:59 +0000 ROA not before: Fri 02 Jan 2026 08:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2202 IP address blocks: 147.210.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c5:e7:d0:d6:61:a6:b6:2b:50:e5:f5:a0:42:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d Validity Not Before: Jan 2 08:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=918d223eb969d8315c22ccdf2a067b8e4dc0f65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:47:48:d7:ff:f2:8e:4f:49:03:a7:0d:db:87: f3:7c:14:c1:36:ad:2e:af:df:19:e6:4f:9b:19:57: d5:e5:6d:0f:fe:e1:5a:ab:da:16:28:c8:f6:5c:27: d7:5d:bc:dc:d9:84:23:eb:29:36:7d:68:72:17:9d: 7f:9e:8e:3c:e8:77:63:b7:c0:5e:02:f5:5e:84:b3: 0a:41:1e:7f:79:c8:dd:5b:e6:da:dc:c0:32:b3:06: 5f:fe:4b:b7:71:95:d7:bb:2a:81:9c:0f:19:45:32: 59:1b:d7:48:80:7f:6c:28:7c:63:b5:3a:41:6b:f3: ef:40:0f:49:8f:c2:23:12:b1:ce:43:05:f5:2b:d1: 0c:27:b0:7f:7b:5b:2c:ee:80:7a:6f:fd:e3:27:4f: d5:a2:ba:12:82:5e:7e:49:ab:7b:28:f5:29:11:64: 41:57:ff:fc:1c:2b:5d:f5:99:ba:7f:f3:aa:40:98: 92:78:87:eb:89:a2:c2:70:de:8c:fd:7b:d6:ea:05: 65:0f:1d:a3:c4:67:2f:cc:91:33:85:80:e3:d4:ed: ed:0f:78:72:5d:b1:3d:8b:fe:fc:e2:af:51:d8:a8: 5e:d9:e6:d8:d5:6f:35:25:97:6f:ff:aa:7c:ff:02: 4d:d8:e0:2d:73:47:b9:55:6f:79:d7:9d:4e:0c:d0: cc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8D:22:3E:B9:69:D8:31:5C:22:CC:DF:2A:06:7B:8E:4D:C0:F6:5B X509v3 Authority Key Identifier: keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.210.0.0/16 Signature Algorithm: sha256WithRSAEncryption c4:59:e0:58:98:20:f1:09:ca:dc:6e:b9:85:f9:b0:3e:8a:fb: 82:e6:36:7c:32:c4:39:54:cf:8d:72:c7:86:68:1f:a1:4e:a4: ba:16:a2:a8:0c:03:17:39:5f:9e:5f:2a:bf:fe:20:82:2d:d7: 0b:37:5c:bf:05:3e:1a:1a:bf:99:cf:d8:7e:ea:6c:1d:5a:9f: e5:6a:5f:e5:f0:e0:ba:50:84:e8:9f:31:e1:67:d4:5d:c3:15: 96:4a:f9:ad:03:08:0c:9e:15:2f:36:8f:a1:40:a3:b3:f5:4d: ad:28:28:53:22:57:62:ac:a9:ea:02:df:02:79:d1:d7:3e:06: 0a:47:07:02:6f:fb:96:fb:54:42:8d:5d:23:fd:74:06:cd:a0: d7:e2:f0:11:5a:53:fe:9f:13:68:5b:e5:4d:b3:29:21:8e:3c: 29:a0:dd:8d:d3:05:a7:18:f5:11:d0:b7:20:40:a4:ef:3e:12: 9d:eb:3a:05:15:28:ba:3d:ed:e7:46:75:cf:27:ef:79:fa:54: 3e:ef:2a:a4:c2:59:63:4d:bd:6e:37:74:bf:07:45:3e:b8:01: b9:ae:a7:8e:78:58:21:86:0a:47:68:12:fd:28:d5:99:8b:6d: 25:0f:63:36:d3:4a:7d:ca:ed:8f:4f:50:e9:47:86:dc:de:94: e5:b9:6d:86 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9ysXn0NZhprYrUOX1oEJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy MDFmMWQwHhcNMjYwMTAyMDgxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MThkMjIzZWI5NjlkODMxNWMyMmNjZGYyYTA2N2I4ZTRkYzBmNjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90dI1//yjk9JA6cN24fzfBTBNq0u r98Z5k+bGVfV5W0P/uFaq9oWKMj2XCfXXbzc2YQj6yk2fWhyF51/no486Hdjt8Be AvVehLMKQR5/ecjdW+ba3MAyswZf/ku3cZXXuyqBnA8ZRTJZG9dIgH9sKHxjtTpB a/PvQA9Jj8IjErHOQwX1K9EMJ7B/e1ss7oB6b/3jJ0/VoroSgl5+Sat7KPUpEWRB V//8HCtd9Zm6f/OqQJiSeIfriaLCcN6M/XvW6gVlDx2jxGcvzJEzhYDj1O3tD3hy XbE9i/784q9R2Khe2ebY1W81JZdv/6p8/wJN2OAtc0e5VW95151ODNDMSwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFJGNIj65adgxXCLM3yoGe45NwPZbMB8GA1UdIwQY MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt MGQyNzc2NzM3NGVjLzEva1kwaVBybHAyREZjSXN6ZktnWjdqazNBOWxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk9IwDQYJ KoZIhvcNAQELBQADggEBAMRZ4FiYIPEJytxuuYX5sD6K+4LmNnwyxDlUz41yx4Zo H6FOpLoWoqgMAxc5X55fKr/+IIIt1ws3XL8FPhoav5nP2H7qbB1an+VqX+Xw4LpQ hOifMeFn1F3DFZZK+a0DCAyeFS82j6FAo7P1Ta0oKFMiV2KsqeoC3wJ50dc+BgpH BwJv+5b7VEKNXSP9dAbNoNfi8BFaU/6fE2hb5U2zKSGOPCmg3Y3TBacY9RHQtyBA pO8+Ep3rOgUVKLo97edGdc8n73n6VD7vKqTCWWNNvW43dL8HRT64Abmup454WCGG CkdoEv0o1ZmLbSUPYzbTSn3K7Y9PUOlHhtzelOW5bYY= -----END CERTIFICATE-----Generated at Sun Jan 11 23:47:28 2026 by rpki-client