This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/Kfpukp1mfPmVOexK4iRI3WWUkLE.roa File: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (raw, json) Hash identifier: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY= Subject key identifier: 29:FA:6E:92:9D:66:7C:F9:95:39:EC:4A:E2:24:48:DD:65:94:90:B1 Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Certificate serial: 019B7DCA5EE8E21D14D2B7C75395E164B63A Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/Kfpukp1mfPmVOexK4iRI3WWUkLE.roa Signing time: Fri 02 Jan 2026 08:19:33 +0000 ROA not before: Fri 02 Jan 2026 08:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9132 IP address blocks: 212.110.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5e:e8:e2:1d:14:d2:b7:c7:53:95:e1:64:b6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Validity Not Before: Jan 2 08:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29fa6e929d667cf99539ec4ae22448dd659490b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:57:4d:15:af:7a:94:85:81:09:56:62:e2: ee:e1:06:ce:77:47:9c:90:fc:12:19:a9:9d:e7:99: a1:92:13:2c:52:64:97:02:b9:04:60:ed:52:59:96: 3f:83:7c:ba:70:a5:fb:65:b7:d6:ab:bc:a3:e6:2a: f5:ad:46:d0:06:1b:8d:65:80:57:05:c9:52:1a:82: b6:55:c0:77:36:df:7f:71:cb:2d:9e:3b:00:da:84: 84:80:82:ab:06:43:10:85:de:07:bb:f5:99:6d:4f: 78:1a:62:70:05:c0:1a:39:82:d9:d6:a2:7c:19:8f: c8:fe:c6:92:38:63:9c:ce:3a:38:d5:13:9b:62:e4: 1c:8d:c7:df:17:e5:ca:72:0c:b5:c8:88:39:2f:70: 49:09:9b:73:0b:1b:b7:40:33:74:ff:46:48:03:46: 51:72:87:26:fe:30:00:b5:d3:48:d5:c8:60:66:89: b5:e7:52:68:e9:5d:0c:18:0a:00:43:07:30:41:e9: 67:1e:09:0d:b0:66:6f:28:e5:d3:a4:a1:16:33:5d: 22:44:7a:82:a0:57:d2:62:b8:70:ae:76:5e:64:4f: 58:06:21:03:c3:d5:54:fa:27:a0:70:83:e5:a0:06: 22:04:43:8c:5e:03:ad:51:fc:ce:a5:89:bc:c8:f3: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FA:6E:92:9D:66:7C:F9:95:39:EC:4A:E2:24:48:DD:65:94:90:B1 X509v3 Authority Key Identifier: keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/Kfpukp1mfPmVOexK4iRI3WWUkLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.110.193.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:06:14:3a:94:1d:f1:6d:67:ff:2a:40:dc:80:ff:ea:29:04: 03:8c:cf:54:56:b5:f3:3c:41:bc:a1:a6:fe:8d:6c:37:dc:6d: 35:d7:bc:12:1e:d5:15:8c:ae:8e:cc:7f:1c:54:1d:a6:20:94: 3e:38:41:f3:34:b7:64:93:d4:dd:70:07:c8:3d:bf:61:6d:66: 83:c5:bc:db:eb:e0:98:a7:a8:d4:ca:ff:cb:85:c3:0b:fd:c5: c1:c5:7a:1c:cd:e8:87:35:7c:da:ce:b0:5e:e4:d9:09:bb:99: bc:20:e3:81:b7:ed:45:4b:92:40:0e:18:36:22:c6:28:ac:a0: c6:f1:28:24:5e:fc:0f:ca:66:6a:03:00:2c:4a:95:c5:43:ff: 4b:ae:fc:2b:be:81:a9:ee:1e:e9:f2:86:8a:ba:32:e7:e7:6e: a6:69:d8:27:73:93:d7:5d:6e:a1:da:ad:c6:ce:49:6e:c3:a7: c0:3c:fe:52:31:fc:24:17:3d:be:50:aa:8c:4a:86:e3:9f:b5: 94:d3:6f:8e:58:9e:4e:b3:2c:38:5e:2e:a2:e3:df:7f:3e:4c: 47:13:24:ad:7c:a9:95:4d:12:40:b8:12:84:37:7e:3d:80:a4: c0:53:14:63:8a:83:32:9b:aa:1a:b2:fb:72:6b:17:f5:c0:a5: 97:a8:c1:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yl7o4h0U0rfHU5XhZLY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx ZmU1YjEwHhcNMjYwMTAyMDgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWZhNmU5MjlkNjY3Y2Y5OTUzOWVjNGFlMjI0NDhkZDY1OTQ5MGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18ZXTRWvepSFgQlWYuLu4QbOd0ec kPwSGamd55mhkhMsUmSXArkEYO1SWZY/g3y6cKX7ZbfWq7yj5ir1rUbQBhuNZYBX BclSGoK2VcB3Nt9/ccstnjsA2oSEgIKrBkMQhd4Hu/WZbU94GmJwBcAaOYLZ1qJ8 GY/I/saSOGOczjo41RObYuQcjcffF+XKcgy1yIg5L3BJCZtzCxu3QDN0/0ZIA0ZR cocm/jAAtdNI1chgZom151Jo6V0MGAoAQwcwQelnHgkNsGZvKOXTpKEWM10iRHqC oFfSYrhwrnZeZE9YBiEDw9VU+iegcIPloAYiBEOMXgOtUfzOpYm8yPOiBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCn6bpKdZnz5lTnsSuIkSN1llJCxMB8GA1UdIwQY MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt M2VmMDJkNTE0MGI3LzEvS2ZwdWtwMW1mUG1WT2V4SzRpUkkzV1dVa0xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3 LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1G7BMA0G CSqGSIb3DQEBCwUAA4IBAQCfBhQ6lB3xbWf/KkDcgP/qKQQDjM9UVrXzPEG8oab+ jWw33G0117wSHtUVjK6OzH8cVB2mIJQ+OEHzNLdkk9TdcAfIPb9hbWaDxbzb6+CY p6jUyv/LhcML/cXBxXoczeiHNXzazrBe5NkJu5m8IOOBt+1FS5JADhg2IsYorKDG 8SgkXvwPymZqAwAsSpXFQ/9LrvwrvoGp7h7p8oaKujLn526madgnc5PXXW6h2q3G zkluw6fAPP5SMfwkFz2+UKqMSobjn7WU02+OWJ5Osyw4Xi6i499/PkxHEyStfKmV TRJAuBKEN349gKTAUxRjioMym6oasvtyaxf1wKWXqMGK -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:39 2026 by rpki-client