This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tC8vyyiGchG1uJNMqiS4cuq07os.roa File: tC8vyyiGchG1uJNMqiS4cuq07os.roa (raw, json) Hash identifier: JghxC8rU6Eq4hw6nwGEk2XCx9UDX/+fpgciiwH2Ch68= Subject key identifier: B4:2F:2F:CB:28:86:72:11:B5:B8:93:4C:AA:24:B8:72:EA:B4:EE:8B Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14C3BFC0EB60C77B12DE83FDD4A254 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tC8vyyiGchG1uJNMqiS4cuq07os.roa Signing time: Fri 02 Jan 2026 14:20:25 +0000 ROA not before: Fri 02 Jan 2026 14:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212097 IP address blocks: 212.115.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c3:bf:c0:eb:60:c7:7b:12:de:83:fd:d4:a2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b42f2fcb28867211b5b8934caa24b872eab4ee8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2c:53:fa:ba:c8:7c:a7:ad:29:52:57:42:c1: 68:16:e0:71:d9:bc:ab:1b:26:8b:56:b1:0f:c1:dd: 9b:98:10:9b:d7:76:2c:2d:e3:e3:a0:51:de:3a:05: f4:72:5c:b7:c5:c9:42:16:b4:1a:1d:dd:56:79:12: 4c:a2:75:e4:a3:b0:b9:91:be:c9:5a:0d:48:95:ed: 16:89:37:80:f3:2a:75:90:a8:17:05:e7:4f:6a:5a: 99:02:f3:28:c2:21:62:ed:ad:f3:c8:f1:67:36:4e: 3a:43:fa:7e:7c:f2:18:6c:9e:73:1e:b9:52:e5:77: 9e:23:8b:21:99:48:99:f9:37:0a:9b:a4:0f:23:91: 11:c9:d7:a0:99:df:3c:14:44:97:eb:bf:98:80:34: f7:01:df:d6:ed:06:2f:f5:ce:7e:9f:06:81:83:81: 67:4e:60:c3:e5:16:9e:56:b7:4b:bd:56:93:de:f8: 8e:f8:78:a0:7e:76:93:23:b4:79:61:1d:bd:8e:bc: 07:57:11:b6:be:ca:e0:42:ba:fb:0c:ad:51:a2:96: c4:b9:bd:d9:a0:96:74:5f:39:1c:8b:5b:41:c8:47: ae:1d:b7:ab:4f:07:be:c8:34:d8:74:87:fb:d3:d0: 94:ef:a7:7c:42:8c:20:09:02:f7:e3:1c:aa:59:f3: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2F:2F:CB:28:86:72:11:B5:B8:93:4C:AA:24:B8:72:EA:B4:EE:8B X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tC8vyyiGchG1uJNMqiS4cuq07os.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.115.130.0/24 Signature Algorithm: sha256WithRSAEncryption 35:6d:7a:5d:11:70:3d:fc:a1:dc:b5:db:48:ac:7d:1c:86:44: 48:48:7f:eb:4e:27:6b:34:08:8a:af:34:13:4f:4a:23:5d:c5: 4c:05:e4:75:69:b2:c2:46:92:ef:d6:20:80:94:49:64:04:80: 70:c3:ff:82:fd:61:f9:ff:c5:c9:f4:47:d3:a0:02:17:1c:f2: 00:9e:13:df:b5:52:37:a1:31:4e:62:b2:b5:9a:5e:27:f4:74: c0:eb:d1:62:90:ed:00:1e:d5:7c:c3:33:50:b5:cf:4b:f6:79: 4c:da:43:f0:32:d1:ce:11:dd:42:b3:49:78:8e:75:89:7d:7e: 9c:0f:9b:ee:2e:fb:48:27:62:30:a8:33:95:43:b3:74:99:e1: 8a:a0:12:bd:09:b2:4f:26:3c:8b:77:a1:5c:7e:93:09:4d:f8: ef:d5:ca:84:c9:6a:3e:16:3f:d4:c3:31:db:5e:e3:5c:71:3f: f0:7a:b8:58:5d:7e:68:57:e9:43:19:9a:33:d2:7f:d7:69:13: db:b2:16:5d:e1:22:54:61:42:e9:27:96:ff:0d:4e:27:a2:4a: f1:aa:9a:0e:75:ee:48:83:2a:39:b5:6d:dd:e5:6d:48:45:ff: d1:ce:3a:bb:f6:f5:a3:37:21:f2:55:a7:fc:01:9c:96:52:7f: 7b:72:bd:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FMO/wOtgx3sS3oP91KJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDJmMmZjYjI4ODY3MjExYjViODkzNGNhYTI0Yjg3MmVhYjRlZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CxT+rrIfKetKVJXQsFoFuBx2byr GyaLVrEPwd2bmBCb13YsLePjoFHeOgX0cly3xclCFrQaHd1WeRJMonXko7C5kb7J Wg1Ile0WiTeA8yp1kKgXBedPalqZAvMowiFi7a3zyPFnNk46Q/p+fPIYbJ5zHrlS 5XeeI4shmUiZ+TcKm6QPI5ERydegmd88FESX67+YgDT3Ad/W7QYv9c5+nwaBg4Fn TmDD5RaeVrdLvVaT3viO+HigfnaTI7R5YR29jrwHVxG2vsrgQrr7DK1RopbEub3Z oJZ0Xzkci1tByEeuHberTwe+yDTYdIf709CU76d8QowgCQL34xyqWfPN5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLQvL8sohnIRtbiTTKokuHLqtO6LMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvdEM4dnl5aUdjaEcxdUpOTXFpUzRjdXEwN29zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HOCMA0G CSqGSIb3DQEBCwUAA4IBAQA1bXpdEXA9/KHctdtIrH0chkRISH/rTidrNAiKrzQT T0ojXcVMBeR1abLCRpLv1iCAlElkBIBww/+C/WH5/8XJ9EfToAIXHPIAnhPftVI3 oTFOYrK1ml4n9HTA69FikO0AHtV8wzNQtc9L9nlM2kPwMtHOEd1Cs0l4jnWJfX6c D5vuLvtIJ2IwqDOVQ7N0meGKoBK9CbJPJjyLd6FcfpMJTfjv1cqEyWo+Fj/UwzHb XuNccT/werhYXX5oV+lDGZoz0n/XaRPbshZd4SJUYULpJ5b/DU4nokrxqpoOde5I gyo5tW3d5W1IRf/Rzjq79vWjNyHyVaf8AZyWUn97cr0t -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:51 2026 by rpki-client