This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/fUMdT6lI64Bv4Jkf73ANEyHRFAE.roa File: fUMdT6lI64Bv4Jkf73ANEyHRFAE.roa (raw, json) Hash identifier: c7k/7bwGWS94lD7bytyzXs9TRu2O8hHs4yYe3Ht6PLY= Subject key identifier: 7D:43:1D:4F:A9:48:EB:80:6F:E0:99:1F:EF:70:0D:13:21:D1:14:01 Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e Certificate serial: 019B78A2C28AE47E44A105087AB888327A03 Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/fUMdT6lI64Bv4Jkf73ANEyHRFAE.roa Signing time: Thu 01 Jan 2026 08:18:11 +0000 ROA not before: Thu 01 Jan 2026 08:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15717 IP address blocks: 213.30.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c2:8a:e4:7e:44:a1:05:08:7a:b8:88:32:7a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e Validity Not Before: Jan 1 08:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d431d4fa948eb806fe0991fef700d1321d11401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:f7:21:85:3c:18:7b:4d:d6:f3:2c:0e:3c: 39:c9:a4:d1:5b:d0:d6:b5:45:80:ec:13:42:c3:f0: 4a:e9:45:38:36:5e:79:fa:52:94:d6:d8:2d:18:b8: 0a:87:ef:4a:61:2e:be:b8:66:f4:e2:af:45:d1:ca: 5c:1a:76:84:e7:07:c6:d4:e8:1b:c3:75:6a:e4:90: c1:64:a4:dc:ce:aa:cd:8d:ab:e5:8c:2f:ea:f6:ac: 5f:be:4f:4c:a3:e6:34:42:1b:49:eb:f4:ec:fb:fc: 3d:f7:06:2f:bc:85:7e:a8:7e:ae:64:38:ca:b5:42: d9:7c:97:56:a5:1d:a1:83:01:9b:3a:e7:c8:0b:c7: 62:6d:7b:f2:d5:88:07:1b:98:01:5e:f7:31:55:d7: 06:2b:b0:79:74:35:c9:a3:ce:88:ea:9d:a2:64:3b: 96:83:c3:76:7a:2e:95:94:21:90:9f:d8:b0:3a:ad: 2f:0a:40:f0:09:06:e2:39:7d:e1:bb:1f:9e:d3:5f: c4:58:cd:36:56:6a:a6:a8:56:21:c4:e9:81:9a:dd: f4:e1:e3:0f:83:76:39:70:18:db:6a:be:5b:2c:7f: ba:af:34:96:ba:ad:29:f6:97:7d:b8:48:d1:0b:4d: ae:63:03:49:4e:26:6a:10:1f:cc:1a:6b:7a:e9:1b: ac:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:43:1D:4F:A9:48:EB:80:6F:E0:99:1F:EF:70:0D:13:21:D1:14:01 X509v3 Authority Key Identifier: keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/fUMdT6lI64Bv4Jkf73ANEyHRFAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.30.192.0/22 Signature Algorithm: sha256WithRSAEncryption 49:eb:f9:a2:ca:0e:5e:57:39:9e:84:c2:f4:41:62:79:53:d3: 3e:28:53:51:a6:86:3a:f1:44:36:6c:a4:3a:bc:5f:51:8a:fd: 62:ff:bd:04:a8:0d:fa:4e:c9:96:1d:8e:ee:47:30:f8:50:0a: e1:ff:3c:4e:7a:09:d7:2b:ff:93:48:21:a8:1f:01:bc:fa:b5: 32:f7:2f:90:50:25:99:b0:43:fb:1f:75:9b:2c:ea:0e:9e:28: 4a:12:97:72:17:2c:39:28:93:ae:20:d7:f2:99:bc:3f:43:f1: b3:e2:d9:a8:4b:b7:c8:bf:7f:9d:9f:06:34:5d:4a:9d:5e:7c: cd:4a:7f:7b:ba:c5:47:e0:da:24:c5:f7:24:7b:dc:ff:7a:60: 0e:f6:18:63:9c:86:2d:4b:5a:e1:b3:39:26:7d:8c:30:26:58: ea:20:b3:dc:c1:ea:bb:de:4c:bb:d5:5d:94:68:7f:05:47:c4: d9:b3:4d:5e:cf:10:a7:13:73:ea:37:9a:33:d8:1b:32:db:56: b7:80:94:bd:a1:4f:66:dc:d9:b0:58:82:94:cf:e1:82:f0:5c: 2c:71:97:bc:4a:aa:ce:c4:45:02:92:95:7b:2f:1a:04:e5:d0: f4:f5:d0:5f:64:da:bb:a0:75:10:51:f6:68:44:1d:37:3e:73: 75:e1:5b:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osKK5H5EoQUIeriIMnoDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0 NjQzMmUwHhcNMjYwMTAxMDgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQzMWQ0ZmE5NDhlYjgwNmZlMDk5MWZlZjcwMGQxMzIxZDExNDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNn3IYU8GHtN1vMsDjw5yaTRW9DW tUWA7BNCw/BK6UU4Nl55+lKU1tgtGLgKh+9KYS6+uGb04q9F0cpcGnaE5wfG1Ogb w3Vq5JDBZKTczqrNjavljC/q9qxfvk9Mo+Y0QhtJ6/Ts+/w99wYvvIV+qH6uZDjK tULZfJdWpR2hgwGbOufIC8dibXvy1YgHG5gBXvcxVdcGK7B5dDXJo86I6p2iZDuW g8N2ei6VlCGQn9iwOq0vCkDwCQbiOX3hux+e01/EWM02VmqmqFYhxOmBmt304eMP g3Y5cBjbar5bLH+6rzSWuq0p9pd9uEjRC02uYwNJTiZqEB/MGmt66RusrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1DHU+pSOuAb+CZH+9wDRMh0RQBMB8GA1UdIwQY MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt NjQzYTQxNTlhYjQ2LzEvZlVNZFQ2bEk2NEJ2NEprZjczQU5FeUhSRkFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2 LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1R7AMA0G CSqGSIb3DQEBCwUAA4IBAQBJ6/miyg5eVzmehML0QWJ5U9M+KFNRpoY68UQ2bKQ6 vF9Riv1i/70EqA36TsmWHY7uRzD4UArh/zxOegnXK/+TSCGoHwG8+rUy9y+QUCWZ sEP7H3WbLOoOnihKEpdyFyw5KJOuINfymbw/Q/Gz4tmoS7fIv3+dnwY0XUqdXnzN Sn97usVH4Nokxfcke9z/emAO9hhjnIYtS1rhszkmfYwwJljqILPcweq73ky71V2U aH8FR8TZs01ezxCnE3PqN5oz2Bsy21a3gJS9oU9m3NmwWIKUz+GC8FwscZe8SqrO xEUCkpV7LxoE5dD09dBfZNq7oHUQUfZoRB03PnN14VuC -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:35 2026 by rpki-client