This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/wDNBjtjhirmC6HysMhN91EuISE4.roa File: wDNBjtjhirmC6HysMhN91EuISE4.roa (raw, json) Hash identifier: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM= Subject key identifier: C0:33:41:8E:D8:E1:8A:B9:82:E8:7C:AC:32:13:7D:D4:4B:88:48:4E Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9 Certificate serial: 019B7B36A8F2C720734EA31B9CD30F527C47 Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/wDNBjtjhirmC6HysMhN91EuISE4.roa Signing time: Thu 01 Jan 2026 20:18:58 +0000 ROA not before: Thu 01 Jan 2026 20:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39307 IP address blocks: 213.109.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a8:f2:c7:20:73:4e:a3:1b:9c:d3:0f:52:7c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9 Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c033418ed8e18ab982e87cac32137dd44b88484e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:25:c2:1a:93:4d:10:0d:c3:b4:e4:b6:f2: 7e:fd:bb:6d:95:b1:3a:51:81:79:f0:9a:5e:0f:9a: 82:3d:61:bc:9f:6e:ca:4c:e4:47:6b:ee:b7:94:77: 2b:d8:14:d5:c3:e1:4b:1a:be:b3:53:7b:b3:7e:f7: f3:15:2a:76:fe:d7:73:ae:5d:88:c5:db:81:a9:ad: 0b:72:a3:31:16:5c:16:dc:62:1d:9d:84:ee:23:c6: 3e:03:b6:5e:b1:65:7f:74:08:eb:0a:0c:67:6c:bd: c6:69:dc:c4:ff:b1:c6:d6:93:7a:03:74:c6:c1:b9: a2:61:45:55:40:38:19:a9:4a:f4:f4:47:f7:6f:69: 09:a6:c0:c0:7c:3f:de:81:50:d0:2c:a0:99:fb:81: cb:60:b4:91:14:ad:6b:d2:40:3f:d0:9b:c5:ae:58: c3:8f:cc:84:48:41:11:52:96:ee:bc:55:47:61:be: ba:b6:ba:ae:17:1c:60:45:95:f1:89:27:0d:d2:b9: 15:7f:f3:bb:ac:16:f0:fc:97:d1:2f:72:b1:33:15: cd:b2:ff:e5:06:d0:68:fb:e5:34:4c:b3:97:8f:de: ee:99:bb:0d:00:82:4a:81:c9:83:97:6a:d8:25:d8: e2:ac:e4:d4:3a:77:27:9a:09:52:93:06:e3:c1:9e: 3a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:33:41:8E:D8:E1:8A:B9:82:E8:7C:AC:32:13:7D:D4:4B:88:48:4E X509v3 Authority Key Identifier: keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/wDNBjtjhirmC6HysMhN91EuISE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.148.0/24 Signature Algorithm: sha256WithRSAEncryption 00:03:2d:3f:4b:f8:2c:e7:40:37:f0:fc:30:21:d2:fc:11:75: fa:74:cf:c9:60:b4:d8:29:0b:89:1f:20:ed:9e:ab:4a:23:05: be:ae:ea:d5:79:27:13:82:8d:77:14:e7:4a:c2:97:c3:72:a0: 56:0c:7f:f7:78:5e:0b:6f:12:6d:29:1f:60:26:71:4e:db:f6: 68:d4:07:a9:dc:10:1d:7e:c8:af:30:99:37:bf:d5:e5:28:99: 55:af:a1:fa:22:21:7e:ab:51:d7:80:b0:ee:bb:da:4c:0f:49: 1a:62:06:d5:47:4e:6b:96:33:ec:e7:a6:7e:a7:c6:ed:a7:e4: 24:3d:30:d4:8a:52:d4:3b:e2:f0:2b:73:0c:c6:93:78:6b:c9: 1d:d2:b5:c0:cf:a6:35:34:95:4b:54:ee:a4:0b:fa:f9:dc:64: fe:b4:b3:1c:15:69:1a:1d:c3:fe:87:e3:b6:92:aa:a4:48:b2: 24:3a:57:76:3f:dc:1d:0a:7b:0f:ce:d7:30:c3:fb:fc:fc:59: ca:4b:cc:18:08:7e:36:da:26:43:6b:57:89:09:eb:17:93:d6: 37:45:9e:00:8e:be:69:18:41:ea:3a:1d:57:fa:be:3d:b3:ef: 69:75:ea:70:f8:81:19:51:f3:55:6a:30:a0:3f:e4:e8:14:9f: 53:f6:3c:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqjyxyBzTqMbnNMPUnxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOTNkZjg3N2JmMmYwY2YwMWE5NzE4OTczZWFlZWU4N2Iw Njk3ZDkwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDMzNDE4ZWQ4ZTE4YWI5ODJlODdjYWMzMjEzN2RkNDRiODg0ODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BglwhqTTRANw7TktvJ+/bttlbE6 UYF58JpeD5qCPWG8n27KTORHa+63lHcr2BTVw+FLGr6zU3uzfvfzFSp2/tdzrl2I xduBqa0LcqMxFlwW3GIdnYTuI8Y+A7ZesWV/dAjrCgxnbL3GadzE/7HG1pN6A3TG wbmiYUVVQDgZqUr09Ef3b2kJpsDAfD/egVDQLKCZ+4HLYLSRFK1r0kA/0JvFrljD j8yESEERUpbuvFVHYb66trquFxxgRZXxiScN0rkVf/O7rBbw/JfRL3KxMxXNsv/l BtBo++U0TLOXj97umbsNAIJKgcmDl2rYJdjirOTUOncnmglSkwbjwZ46UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAzQY7Y4Yq5guh8rDITfdRLiEhOMB8GA1UdIwQY MBaAFLOT34d78vDPAalxiXPq7uh7BpfZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYt Mzk2YmM3MjBlMmI0LzEvd0ROQmp0amhpcm1DNkh5c01oTjkxRXVJU0U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYtMzk2YmM3MjBlMmI0 LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W2UMA0G CSqGSIb3DQEBCwUAA4IBAQAAAy0/S/gs50A38PwwIdL8EXX6dM/JYLTYKQuJHyDt nqtKIwW+rurVeScTgo13FOdKwpfDcqBWDH/3eF4LbxJtKR9gJnFO2/Zo1Aep3BAd fsivMJk3v9XlKJlVr6H6IiF+q1HXgLDuu9pMD0kaYgbVR05rljPs56Z+p8btp+Qk PTDUilLUO+LwK3MMxpN4a8kd0rXAz6Y1NJVLVO6kC/r53GT+tLMcFWkaHcP+h+O2 kqqkSLIkOld2P9wdCnsPztcww/v8/FnKS8wYCH422iZDa1eJCesXk9Y3RZ4Ajr5p GEHqOh1X+r49s+9pdepw+IEZUfNVajCgP+ToFJ9T9jz5 -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:12 2026 by rpki-client