This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa File: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (raw, json) Hash identifier: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8= Subject key identifier: C5:3B:E7:00:19:B3:35:D4:3B:AD:0F:64:52:86:1B:86:C5:D9:19:AA Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9 Certificate serial: 019B7E38F4EB58F6CED753797A65EA3FAF4E Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa Signing time: Fri 02 Jan 2026 10:20:20 +0000 ROA not before: Fri 02 Jan 2026 10:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 213.171.3.0/24 maxlen: 24 213.171.4.0/24 maxlen: 24 213.171.5.0/24 maxlen: 24 213.171.6.0/24 maxlen: 24 213.171.7.0/24 maxlen: 24 213.171.8.0/24 maxlen: 24 213.171.9.0/24 maxlen: 24 213.171.10.0/24 maxlen: 24 213.171.12.0/24 maxlen: 24 213.171.14.0/24 maxlen: 24 213.171.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 13:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f4:eb:58:f6:ce:d7:53:79:7a:65:ea:3f:af:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9 Validity Not Before: Jan 2 10:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c53be70019b335d43bad0f6452861b86c5d919aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:a7:3c:a5:78:12:53:8d:72:a5:07:ee:01: 62:29:95:2f:08:ce:de:1b:ef:ff:ae:41:6f:90:5e: 07:ae:f2:6e:46:c4:3f:4d:d8:36:9b:98:ce:ce:34: f6:9a:5d:a7:22:af:fd:85:fc:48:11:f2:0b:75:00: 25:f8:30:cd:58:c9:5b:be:d9:8b:2b:53:a2:20:60: 53:15:05:ef:ef:4d:17:c3:0f:3b:f4:38:27:8e:87: 2f:13:6b:5b:61:ff:6e:db:d9:91:56:f7:1f:30:48: 92:48:83:3e:0e:ad:57:12:cf:fa:5a:de:cd:2a:6a: 69:12:09:3a:50:db:b3:7f:a4:7d:51:b9:01:0d:fd: 41:e4:8d:2e:c6:c9:fe:c9:cd:da:e4:54:41:88:f9: 0d:aa:b0:5f:d1:01:17:0d:fe:fd:5b:8d:86:1f:1c: a9:db:e7:f2:fc:58:45:d2:3a:99:fb:3e:71:d3:3d: b0:36:ff:20:ee:96:70:7e:6b:6b:10:a2:06:98:91: fa:86:d5:cb:97:b3:9f:29:2a:42:9b:1a:5a:6b:de: 2d:81:d6:06:ed:5c:e4:6e:ab:87:86:64:e5:83:c9: 87:e3:88:f6:f2:7c:c7:63:58:73:ed:47:30:6a:f7: 20:0a:78:24:03:8d:c2:47:22:07:f3:bd:0e:f8:be: b7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:E7:00:19:B3:35:D4:3B:AD:0F:64:52:86:1B:86:C5:D9:19:AA X509v3 Authority Key Identifier: keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.171.3.0-213.171.10.255 213.171.12.0/24 213.171.14.0/23 Signature Algorithm: sha256WithRSAEncryption 40:25:c6:09:4c:b0:94:6a:b9:71:12:0b:24:f5:78:09:2d:58: 9d:ec:62:2a:59:c9:d1:c3:26:dd:74:90:0f:0c:aa:30:e5:36: 64:d0:d8:e0:91:b1:da:f8:8f:c9:d9:37:95:e8:d4:66:4a:af: f1:74:8b:0e:b6:3b:c4:5f:82:5c:cd:1e:57:6a:de:9c:37:a7: 39:78:4a:4d:16:b8:dd:40:37:64:cc:64:1f:fd:f2:fd:cd:49: 03:24:44:c3:b7:c2:1a:fd:df:7e:c9:d7:a3:63:93:4c:f1:ef: 23:e6:b5:c5:8a:c9:f9:6b:56:ce:ba:b2:e2:bb:12:ad:d7:d3: c6:22:56:21:95:19:8f:f3:0e:e7:50:e8:d8:b8:2a:9d:37:5e: d0:b5:50:f2:3c:e8:d5:e6:7b:ba:b9:6f:dc:44:21:77:6e:0a: f5:0a:e5:2b:0d:ad:34:94:44:00:d9:f2:88:12:90:56:dd:e0: d2:12:38:27:08:e6:c6:75:a3:54:e2:c0:fd:2e:65:49:cb:5d: 8e:d2:27:66:dd:c4:5e:5a:3c:bd:64:e6:fe:54:11:f6:ca:0a: bf:79:ef:49:9f:da:0e:eb:fd:67:67:1b:0f:ce:2d:d4:1f:69: f9:bb:50:f2:ed:ea:84:2d:33:54:38:74:23:d1:ed:13:b4:70: 2e:64:b6:7c -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OPTrWPbO11N5emXqP69OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ODg2MDA3ZGExNzMwYjA3NzBkODYwNGRiNzNkMTJmZDI2 NGYzZjkwHhcNMjYwMTAyMTAyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTNiZTcwMDE5YjMzNWQ0M2JhZDBmNjQ1Mjg2MWI4NmM1ZDkxOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBOnPKV4ElONcqUH7gFiKZUvCM7e G+//rkFvkF4HrvJuRsQ/Tdg2m5jOzjT2ml2nIq/9hfxIEfILdQAl+DDNWMlbvtmL K1OiIGBTFQXv700Xww879DgnjocvE2tbYf9u29mRVvcfMEiSSIM+Dq1XEs/6Wt7N KmppEgk6UNuzf6R9UbkBDf1B5I0uxsn+yc3a5FRBiPkNqrBf0QEXDf79W42GHxyp 2+fy/FhF0jqZ+z5x0z2wNv8g7pZwfmtrEKIGmJH6htXLl7OfKSpCmxpaa94tgdYG 7VzkbquHhmTlg8mH44j28nzHY1hz7UcwavcgCngkA43CRyIH870O+L637QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMU75wAZszXUO60PZFKGG4bF2RmqMB8GA1UdIwQY MBaAFBiIYAfaFzCwdw2GBNtz0S/SZPP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEt MTY5YzgzNmJkNmIwLzEveFR2bkFCbXpOZFE3clE5a1VvWWJoc1haR2FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEtMTY5YzgzNmJkNmIw LzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADVqwMD BADVqwoDBADVqwwDBAHVqw4wDQYJKoZIhvcNAQELBQADggEBAEAlxglMsJRquXES CyT1eAktWJ3sYipZydHDJt10kA8MqjDlNmTQ2OCRsdr4j8nZN5Xo1GZKr/F0iw62 O8RfglzNHldq3pw3pzl4Sk0WuN1AN2TMZB/98v3NSQMkRMO3whr9337J16Njk0zx 7yPmtcWKyflrVs66suK7Eq3X08YiViGVGY/zDudQ6Ni4Kp03XtC1UPI86NXme7q5 b9xEIXduCvUK5SsNrTSURADZ8ogSkFbd4NISOCcI5sZ1o1TiwP0uZUnLXY7SJ2bd xF5aPL1k5v5UEfbKCr9570mf2g7r/WdnGw/OLdQfafm7UPLt6oQtM1Q4dCPR7RO0 cC5ktnw= -----END CERTIFICATE-----Generated at Mon Jan 12 17:18:36 2026 by rpki-client