This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/n1DMRdKzm8oeQmtnP_k6lYoYRn4.roa File: n1DMRdKzm8oeQmtnP_k6lYoYRn4.roa (raw, json) Hash identifier: CzHWxSnIwKSP4ZEcY55YGCHA51157aAGFagW8+Jl+6s= Subject key identifier: 9F:50:CC:45:D2:B3:9B:CA:1E:42:6B:67:3F:F9:3A:95:8A:18:46:7E Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5 Certificate serial: 019B7E37D6D61A7DDD3D80BD017669E05F87 Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/n1DMRdKzm8oeQmtnP_k6lYoYRn4.roa Signing time: Fri 02 Jan 2026 10:19:07 +0000 ROA not before: Fri 02 Jan 2026 10:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203012 IP address blocks: 43.230.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d6:d6:1a:7d:dd:3d:80:bd:01:76:69:e0:5f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5 Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f50cc45d2b39bca1e426b673ff93a958a18467e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a3:11:25:27:c9:aa:df:76:bf:e2:82:5c:c6: 38:6c:cf:23:f1:77:d6:9f:89:b1:48:2d:dd:9c:5b: db:3a:9d:12:96:a0:c8:6b:b8:08:77:4b:f1:c0:2f: 7c:c0:ec:8d:53:30:28:a4:65:5e:3d:eb:11:b6:27: f9:fd:0f:28:65:e0:e3:7b:20:91:1a:fc:97:f3:b8: ba:c4:e1:c7:b1:c6:ee:34:f3:d1:32:d7:4b:3d:9b: 8f:e4:b0:63:2b:e8:3e:3a:5e:6d:2e:69:cc:df:ff: d8:10:ce:58:89:17:fc:d6:72:13:01:85:76:11:81: c2:ae:9a:30:ab:21:47:62:c8:74:b9:4c:09:dc:a3: d8:6a:fb:46:65:a0:26:39:fa:27:2b:b5:bf:e0:b8: 28:68:26:83:49:de:02:28:26:78:15:ac:a1:7e:1f: f3:c7:0a:a6:3e:88:c8:34:de:37:45:55:fa:de:e8: be:93:08:ee:85:c8:3b:26:78:05:03:5e:6e:60:ec: fb:01:61:c4:7d:8d:87:cd:fe:f4:0d:e6:56:c5:cf: e2:e2:d5:67:66:6b:a5:65:f7:0c:26:f6:09:93:7c: a9:1e:63:65:af:df:30:16:ca:87:59:a4:bd:33:66: 75:c5:e2:48:20:d5:51:2e:4d:ea:e9:c7:89:9e:f5: bb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:50:CC:45:D2:B3:9B:CA:1E:42:6B:67:3F:F9:3A:95:8A:18:46:7E X509v3 Authority Key Identifier: keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/n1DMRdKzm8oeQmtnP_k6lYoYRn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.184.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:06:bd:e3:78:3d:fd:4f:e8:01:1b:10:c0:c4:ad:3b:03:39: 8e:e4:d2:72:86:f6:0e:13:14:7d:9f:80:2e:69:18:fb:a4:c6: 36:f5:5a:88:40:9d:5c:fa:4f:e0:d1:5f:47:4a:c1:90:ef:d0: 22:ca:11:54:04:2f:fe:b8:8f:c3:ac:fc:49:c2:3a:c1:bb:e8: e5:89:13:2f:11:11:b3:88:88:f1:a6:12:db:11:82:a1:85:91: ec:7b:72:9c:2c:88:14:5a:12:ec:d4:c7:b7:bb:6c:7e:7b:80: c1:c6:b1:14:a1:45:02:35:27:1a:e0:38:0f:3a:93:ca:1d:0f: e1:8c:58:83:56:a4:36:e3:08:60:bc:e2:d6:d2:2a:25:28:fe: 58:22:19:a7:5d:c3:50:b9:09:6b:b5:7c:23:b9:00:10:e8:31: cb:8a:61:b9:21:4a:11:3b:3f:38:89:3d:30:e4:89:a9:82:71: 5c:ad:53:f9:3c:e9:3f:fc:84:12:ce:16:69:db:6c:e3:e2:6e: 3b:4a:8d:da:88:42:ad:08:85:7f:86:c1:5a:0a:ef:3a:05:a6: 7d:58:9b:e3:4f:a6:f7:15:d5:a7:a0:01:3d:7b:30:2e:69:6d: 79:a8:48:bd:7e:3d:77:a5:8b:24:ff:98:41:0a:a2:88:7d:ad: 59:f5:fe:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N9bWGn3dPYC9AXZp4F+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODUwNjEzNjFiMTlmMjEyZWZlOTBjMmQ4Y2YzZWVlNjE3 ZjIwZTUwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjUwY2M0NWQyYjM5YmNhMWU0MjZiNjczZmY5M2E5NThhMTg0NjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKMRJSfJqt92v+KCXMY4bM8j8XfW n4mxSC3dnFvbOp0SlqDIa7gId0vxwC98wOyNUzAopGVePesRtif5/Q8oZeDjeyCR GvyX87i6xOHHscbuNPPRMtdLPZuP5LBjK+g+Ol5tLmnM3//YEM5YiRf81nITAYV2 EYHCrpowqyFHYsh0uUwJ3KPYavtGZaAmOfonK7W/4LgoaCaDSd4CKCZ4Fayhfh/z xwqmPojINN43RVX63ui+kwjuhcg7JngFA15uYOz7AWHEfY2Hzf70DeZWxc/i4tVn ZmulZfcMJvYJk3ypHmNlr98wFsqHWaS9M2Z1xeJIINVRLk3q6ceJnvW79QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9QzEXSs5vKHkJrZz/5OpWKGEZ+MB8GA1UdIwQY MBaAFG2FBhNhsZ8hLv6QwtjPPu5hfyDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYt NjdhZDYwZDM4NmRkLzEvbjFETVJkS3ptOG9lUW10blBfazZsWW9ZUm40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYtNjdhZDYwZDM4NmRk LzEvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+a4MA0G CSqGSIb3DQEBCwUAA4IBAQCPBr3jeD39T+gBGxDAxK07AzmO5NJyhvYOExR9n4Au aRj7pMY29VqIQJ1c+k/g0V9HSsGQ79AiyhFUBC/+uI/DrPxJwjrBu+jliRMvERGz iIjxphLbEYKhhZHse3KcLIgUWhLs1Me3u2x+e4DBxrEUoUUCNSca4DgPOpPKHQ/h jFiDVqQ24whgvOLW0iolKP5YIhmnXcNQuQlrtXwjuQAQ6DHLimG5IUoROz84iT0w 5ImpgnFcrVP5POk//IQSzhZp22zj4m47So3aiEKtCIV/hsFaCu86BaZ9WJvjT6b3 FdWnoAE9ezAuaW15qEi9fj13pYsk/5hBCqKIfa1Z9f6y -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:35 2026 by rpki-client