This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/rlx2TFrnsWfNyt69GTJcopl2RRg.roa File: rlx2TFrnsWfNyt69GTJcopl2RRg.roa (raw, json) Hash identifier: nBXOutrLGZzfmQxQk2a+ssP5ZodYo/5AbNM+eSuj5rA= Subject key identifier: AE:5C:76:4C:5A:E7:B1:67:CD:CA:DE:BD:19:32:5C:A2:99:76:45:18 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A31B707B847D0E1A8AABEAB3071026 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/rlx2TFrnsWfNyt69GTJcopl2RRg.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215443 IP address blocks: 212.113.99.0/24 maxlen: 24 212.113.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1b:70:7b:84:7d:0e:1a:8a:ab:ea:b3:07:10:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae5c764c5ae7b167cdcadebd19325ca299764518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:47:a1:4f:ea:09:df:4f:02:14:22:f1:1d: 51:26:29:29:c2:20:86:23:a3:44:19:aa:06:78:ee: 33:23:69:17:d7:16:43:eb:ba:88:44:a8:4b:f9:5a: b2:f5:f6:d1:24:0d:ee:35:6c:a7:24:a2:fb:8e:87: f6:48:b0:68:20:1a:2f:8f:0e:1b:eb:28:62:fb:9b: d0:7e:78:1d:7a:14:81:53:31:dc:64:a9:d9:0e:ec: 6d:70:e5:8a:6f:70:68:32:ce:b8:ca:10:92:a9:03: 8f:6f:ab:8d:69:33:c4:b1:85:9b:0d:e5:d6:96:5e: 7d:1a:77:da:81:36:16:00:c8:15:f2:7f:ff:df:16: 80:f8:17:c5:0b:0d:8f:dd:2e:4c:41:9f:9a:6f:1b: ba:54:74:c7:e5:33:66:1f:fb:0b:d9:ae:25:a0:26: cf:fa:c6:8e:fe:4e:76:10:3f:af:1c:90:f5:92:5a: 2e:5f:db:af:72:2c:49:45:f7:c9:a2:74:6e:62:43: 81:5a:e0:1c:e6:0c:07:e6:ee:4a:0e:03:11:14:96: 15:b8:e9:92:64:6c:6b:ab:20:70:ed:2e:a9:51:d9: f9:03:e0:48:46:28:10:21:a5:2b:ba:12:3c:41:59: 8d:0d:e0:d8:bb:05:aa:d3:7e:41:f7:51:8f:2c:ce: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5C:76:4C:5A:E7:B1:67:CD:CA:DE:BD:19:32:5C:A2:99:76:45:18 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/rlx2TFrnsWfNyt69GTJcopl2RRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.113.99.0/24 212.113.104.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:29:3b:93:cb:5c:49:a8:08:a7:c5:11:42:22:a6:77:f6:fc: 6d:61:54:8d:34:66:db:3e:aa:84:d5:07:62:6b:4e:0e:56:cf: 83:85:93:d9:fc:73:db:32:f2:d7:39:b5:d3:ec:f8:bc:ad:b9: eb:b4:22:1e:35:21:84:66:db:35:ee:b0:14:10:08:e8:f5:85: c9:b7:fb:34:37:59:de:d8:67:41:1a:54:15:d9:10:b4:eb:6f: c2:67:e3:9a:49:23:f8:83:3b:13:c7:aa:8d:54:32:3e:0f:21: 43:19:f8:6c:6f:a9:83:e3:95:00:57:63:6e:01:22:1e:da:9b: d0:95:c5:3c:13:64:39:9a:3c:cd:65:97:82:1c:c8:a3:fc:86: e6:77:e7:14:2d:0c:cc:85:54:f2:f9:bc:ca:8c:3d:6b:0a:51: b1:01:ab:73:b0:22:15:af:e7:a9:a2:63:b2:9f:c3:08:2a:dc: 2a:63:ed:29:98:3c:17:dc:57:ab:9c:77:72:97:74:ea:68:bb: d3:f5:7f:47:16:21:d1:c9:01:dc:e0:76:8c:b9:40:bd:b7:03: 8b:88:4d:f3:86:b6:10:38:e0:ac:f1:dd:d1:f8:2a:a8:4d:e1: 3f:1f:95:df:9a:f0:c7:ee:2c:5c:65:f5:9f:0a:be:a5:46:08: c1:b6:8c:5b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxtwe4R9DhqKq+qzBxAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTVjNzY0YzVhZTdiMTY3Y2RjYWRlYmQxOTMyNWNhMjk5NzY0NTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzdHoU/qCd9PAhQi8R1RJikpwiCG I6NEGaoGeO4zI2kX1xZD67qIRKhL+Vqy9fbRJA3uNWynJKL7jof2SLBoIBovjw4b 6yhi+5vQfngdehSBUzHcZKnZDuxtcOWKb3BoMs64yhCSqQOPb6uNaTPEsYWbDeXW ll59GnfagTYWAMgV8n//3xaA+BfFCw2P3S5MQZ+abxu6VHTH5TNmH/sL2a4loCbP +saO/k52ED+vHJD1klouX9uvcixJRffJonRuYkOBWuAc5gwH5u5KDgMRFJYVuOmS ZGxrqyBw7S6pUdn5A+BIRigQIaUruhI8QVmNDeDYuwWq035B91GPLM60HwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK5cdkxa57FnzcrevRkyXKKZdkUYMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvcmx4MlRGcm5zV2ZOeXQ2OUdUSmNvcGwyUlJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1HFjAwQA 1HFoMA0GCSqGSIb3DQEBCwUAA4IBAQANKTuTy1xJqAinxRFCIqZ39vxtYVSNNGbb PqqE1Qdia04OVs+DhZPZ/HPbMvLXObXT7Pi8rbnrtCIeNSGEZts17rAUEAjo9YXJ t/s0N1ne2GdBGlQV2RC062/CZ+OaSSP4gzsTx6qNVDI+DyFDGfhsb6mD45UAV2Nu ASIe2pvQlcU8E2Q5mjzNZZeCHMij/Ibmd+cULQzMhVTy+bzKjD1rClGxAatzsCIV r+epomOyn8MIKtwqY+0pmDwX3FernHdyl3TqaLvT9X9HFiHRyQHc4HaMuUC9twOL iE3zhrYQOOCs8d3R+CqoTeE/H5XfmvDH7ixcZfWfCr6lRgjBtoxb -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:21 2026 by rpki-client