This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/n0SJ4KeUzNquOXFnsn7UXXs5uA4.roa File: n0SJ4KeUzNquOXFnsn7UXXs5uA4.roa (raw, json) Hash identifier: UHDuCtTbAhM5ebBHj8A7JRlGmHIH4jkubrvkYTgK64Q= Subject key identifier: 9F:44:89:E0:A7:94:CC:DA:AE:39:71:67:B2:7E:D4:5D:7B:39:B8:0E Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606 Certificate serial: 019A9BE8D0CE1EA1005CAE0FC5A35D3D185C Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/n0SJ4KeUzNquOXFnsn7UXXs5uA4.roa Signing time: Wed 19 Nov 2025 11:38:37 +0000 ROA not before: Wed 19 Nov 2025 11:38:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50022 IP address blocks: 213.110.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:e8:d0:ce:1e:a1:00:5c:ae:0f:c5:a3:5d:3d:18:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606 Validity Not Before: Nov 19 11:38:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f4489e0a794ccdaae397167b27ed45d7b39b80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:15:5d:f0:3f:af:d1:37:6b:3a:f6:69:3c: 3b:7a:9d:ff:5e:52:84:04:d7:51:98:09:9f:f6:b7: 6f:58:c5:99:fb:d4:66:7b:51:f5:91:90:99:08:3c: 18:5b:41:25:ae:29:00:8a:b8:cc:01:c7:46:98:99: 53:ed:d8:c2:47:13:8b:76:b3:b8:d1:4d:ef:ec:c8: 61:c2:6e:6b:a5:6e:a2:75:a9:b7:49:11:a7:2d:9a: 7b:2b:cd:ca:a3:13:e0:3d:fc:94:9a:7d:d0:5c:90: af:b7:52:a9:a1:ed:a2:d3:0a:11:76:bc:cb:3e:17: 7c:3b:8a:d3:b8:fc:c7:c3:99:db:d2:93:0a:d3:4c: 45:94:3e:39:5c:69:e5:d2:1d:8f:13:4e:3b:1d:a1: a5:a0:f3:29:a5:b7:15:df:48:35:eb:0b:b8:9f:06: da:3d:9d:55:4a:62:24:dd:99:64:22:80:b8:7a:58: ff:06:4b:13:78:63:25:3d:fe:83:ed:4e:ff:96:9d: 29:88:9c:a2:6c:25:38:90:f0:25:c2:a1:00:c8:bf: db:86:99:3b:c0:95:64:f2:f7:f9:48:cb:ca:aa:33: cc:dc:f6:aa:0f:ed:cf:ac:e1:e5:96:e5:12:5a:5c: 8b:a1:bc:da:e3:76:94:a2:3d:f1:fe:27:55:62:c4: 7d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:44:89:E0:A7:94:CC:DA:AE:39:71:67:B2:7E:D4:5D:7B:39:B8:0E X509v3 Authority Key Identifier: keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/n0SJ4KeUzNquOXFnsn7UXXs5uA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.110.240.0/20 Signature Algorithm: sha256WithRSAEncryption 72:cf:9e:32:54:29:bb:00:0d:80:20:f2:21:19:03:cd:49:11: 81:97:9b:1b:e1:51:4c:0c:bd:69:9b:c9:75:75:5d:a1:93:76: 0d:ba:85:98:51:bc:4d:b2:31:e7:55:8a:a2:77:70:e6:82:00: 0d:ee:4c:c5:a0:54:8e:dc:52:cf:25:c4:e7:c9:26:8e:b3:f5: f6:e1:0a:c8:26:f3:96:c9:3a:aa:62:c9:5e:e0:3a:13:2d:b7: 5b:7b:48:0a:89:af:0b:d3:cb:6d:bb:48:36:e3:39:ff:cf:47: 46:00:95:aa:9d:f7:73:61:90:3c:93:69:23:e9:d3:f3:74:92: 05:f4:7f:88:31:e2:a6:b0:d7:e2:1f:38:fd:93:69:be:6f:fe: 9a:4e:70:10:59:26:a9:0a:73:70:63:a3:95:be:fc:84:04:f7: ab:cb:77:0d:29:15:1b:e5:e5:f7:ed:c1:d9:91:2d:11:b3:d8: 21:8e:c9:c2:0b:9f:fa:4c:33:0d:21:3f:01:51:72:4b:da:48: 25:40:d5:e6:9e:db:64:5e:85:48:49:04:49:65:29:a4:65:73: db:2a:98:ff:61:cc:88:d1:fb:4f:d2:1b:37:82:ad:04:6a:85: 60:e8:82:20:f5:ff:ec:e3:ce:e6:75:5f:41:90:ad:c2:7e:98: 0a:0b:fd:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqb6NDOHqEAXK4PxaNdPRhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNjE4ZGYwMDZkNTQ4ZDFkODdlZDY0MTk1NTA2NjJkYjZm YzA2MDYwHhcNMjUxMTE5MTEzODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjQ0ODllMGE3OTRjY2RhYWUzOTcxNjdiMjdlZDQ1ZDdiMzliODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2gVXfA/r9E3azr2aTw7ep3/XlKE BNdRmAmf9rdvWMWZ+9Rme1H1kZCZCDwYW0ElrikAirjMAcdGmJlT7djCRxOLdrO4 0U3v7Mhhwm5rpW6idam3SRGnLZp7K83KoxPgPfyUmn3QXJCvt1Kpoe2i0woRdrzL Phd8O4rTuPzHw5nb0pMK00xFlD45XGnl0h2PE047HaGloPMppbcV30g16wu4nwba PZ1VSmIk3ZlkIoC4elj/BksTeGMlPf6D7U7/lp0piJyibCU4kPAlwqEAyL/bhpk7 wJVk8vf5SMvKqjPM3PaqD+3PrOHlluUSWlyLobza43aUoj3x/idVYsR9SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9EieCnlMzarjlxZ7J+1F17ObgOMB8GA1UdIwQY MBaAFFFhjfAG1UjR2H7WQZVQZi22/AYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEt MzE3YzJmYjBhMzViLzEvbjBTSjRLZVV6TnF1T1hGbnNuN1VYWHM1dUE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEtMzE3YzJmYjBhMzVi LzEvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1W7wMA0G CSqGSIb3DQEBCwUAA4IBAQByz54yVCm7AA2AIPIhGQPNSRGBl5sb4VFMDL1pm8l1 dV2hk3YNuoWYUbxNsjHnVYqid3DmggAN7kzFoFSO3FLPJcTnySaOs/X24QrIJvOW yTqqYsle4DoTLbdbe0gKia8L08ttu0g24zn/z0dGAJWqnfdzYZA8k2kj6dPzdJIF 9H+IMeKmsNfiHzj9k2m+b/6aTnAQWSapCnNwY6OVvvyEBPery3cNKRUb5eX37cHZ kS0Rs9ghjsnCC5/6TDMNIT8BUXJL2kglQNXmnttkXoVISQRJZSmkZXPbKpj/YcyI 0ftP0hs3gq0EaoVg6IIg9f/s487mdV9BkK3CfpgKC/1X -----END CERTIFICATE-----Generated at Sun Dec 7 01:05:34 2025 by rpki-client