This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/1-Sx_jXGlBlQATOQ5K8nNNuSrK8M.roa File: 1-Sx_jXGlBlQATOQ5K8nNNuSrK8M.roa (raw, json) Hash identifier: J1Zq7teTeIcSMmJFWstQ0vbrU882ZzSFqMi7WzJyvRs= Subject key identifier: F9:2C:7F:8D:71:A5:06:54:00:4C:E4:39:2B:C9:CD:36:E4:AB:2B:C3 Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Certificate serial: 019B76EB1F0B376B32169F89163F56195BF5 Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/1-Sx_jXGlBlQATOQ5K8nNNuSrK8M.roa Signing time: Thu 01 Jan 2026 00:17:59 +0000 ROA not before: Thu 01 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35179 IP address blocks: 212.127.78.0/24 maxlen: 24 212.127.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1f:0b:37:6b:32:16:9f:89:16:3f:56:19:5b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f92c7f8d71a50654004ce4392bc9cd36e4ab2bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:18:24:91:5a:ea:78:15:76:db:b7:f8:f5:7b: d9:3a:ff:61:0c:55:e5:91:f2:19:d2:ca:1c:a7:70: e8:2f:a2:44:48:68:b1:c6:c9:77:c9:84:fd:c8:85: 62:32:d5:9d:96:5b:47:67:16:13:63:60:e8:6a:71: 78:c3:fe:bd:a3:a6:fd:b5:11:da:49:dc:6d:cb:05: c8:13:e1:3d:5a:fa:2f:12:c5:aa:36:c5:cb:0b:85: df:9b:8d:74:6c:d7:26:03:08:7e:cb:46:3f:07:df: 62:db:66:82:65:15:58:97:4d:48:e2:ac:fe:c5:13: b0:dd:48:f7:e7:63:a4:7e:5d:2d:9f:06:61:e3:d9: 44:9a:f8:36:03:71:cc:e1:70:70:02:9b:86:a7:7d: 6e:79:21:0d:c0:e7:42:04:99:f3:f4:b1:9f:b5:04: cf:46:8e:b4:92:fb:2b:a4:08:cd:18:23:4c:f1:2f: 5c:e6:f4:c7:5c:9a:7f:63:5e:3a:71:9d:e2:d2:13: eb:90:32:11:89:28:e7:bc:ad:6f:54:e7:0f:98:81: 47:5e:d0:b9:53:24:ee:d4:0e:45:02:75:cb:3d:ef: 74:10:97:99:05:1e:7c:c5:5b:75:d6:f6:15:04:95: 49:7a:bd:40:cf:3a:9f:72:f3:47:46:2d:12:ad:84: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2C:7F:8D:71:A5:06:54:00:4C:E4:39:2B:C9:CD:36:E4:AB:2B:C3 X509v3 Authority Key Identifier: keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/1-Sx_jXGlBlQATOQ5K8nNNuSrK8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.127.78.0/24 212.127.88.0/21 Signature Algorithm: sha256WithRSAEncryption 59:fe:ca:bf:1d:dd:0d:0b:c3:b8:2b:56:88:08:a7:d7:04:63: d9:74:0a:8a:3c:ab:b4:74:28:35:e2:57:37:91:6c:fb:49:36: 41:8d:56:b4:92:7e:a5:0b:58:ee:8c:59:e4:b5:75:28:3a:f3: 36:34:23:10:9e:ad:c5:56:99:02:bb:54:1d:c0:d4:a2:96:5d: 6a:28:16:19:eb:10:d8:37:de:75:a9:36:e5:5d:a0:70:98:c9: 5f:87:8a:a9:c2:ee:17:80:06:ec:2e:c6:35:e7:ff:93:7e:d4: 17:82:31:66:b0:68:db:db:d4:38:79:1c:c7:6b:f0:c4:18:2d: dc:5c:98:11:20:3b:dd:bb:fa:0d:11:1c:1b:16:b4:c0:e6:40: 9c:a3:33:3c:74:ad:ba:1b:6b:8b:a4:5e:e4:85:aa:df:11:ee: 7b:d6:bd:d4:11:04:33:8c:93:09:ce:0f:63:b9:f2:df:9b:3f: a9:e8:af:48:30:f5:f8:c4:a1:35:ae:6a:9c:32:73:5c:99:bc: 29:22:8c:ab:bf:cf:a0:b3:36:42:13:9e:52:50:2a:2a:f3:54: a7:b1:b7:c5:11:c7:73:a1:20:ce:a1:b8:6c:f8:14:4e:1a:9c: 41:94:28:9f:0f:a1:01:94:3b:2d:e4:b5:26:1f:ad:a4:d1:47: 89:7b:3e:97 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt26x8LN2syFp+JFj9WGVv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj ZDVhYWUwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTJjN2Y4ZDcxYTUwNjU0MDA0Y2U0MzkyYmM5Y2QzNmU0YWIyYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BgkkVrqeBV227f49XvZOv9hDFXl kfIZ0socp3DoL6JESGixxsl3yYT9yIViMtWdlltHZxYTY2DoanF4w/69o6b9tRHa SdxtywXIE+E9WvovEsWqNsXLC4Xfm410bNcmAwh+y0Y/B99i22aCZRVYl01I4qz+ xROw3Uj352Okfl0tnwZh49lEmvg2A3HM4XBwApuGp31ueSENwOdCBJnz9LGftQTP Ro60kvsrpAjNGCNM8S9c5vTHXJp/Y146cZ3i0hPrkDIRiSjnvK1vVOcPmIFHXtC5 UyTu1A5FAnXLPe90EJeZBR58xVt11vYVBJVJer1AzzqfcvNHRi0SrYT6mwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPksf41xpQZUAEzkOSvJzTbkqyvDMB8GA1UdIwQY MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt ZjZiNzhlMmIxN2ExLzEvMS1TeF9qWEdsQmxRQVRPUTVLOG5OTnVTcks4TS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvZWRiOGNkLTAwM2QtNDgzYS05MDZhLWY2Yjc4ZTJiMTdh MS8xL0lDOU1HamZwTVR6ZEx1cDNVSzRDalJqTldxNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEANR/TgME A9R/WDANBgkqhkiG9w0BAQsFAAOCAQEAWf7Kvx3dDQvDuCtWiAin1wRj2XQKijyr tHQoNeJXN5Fs+0k2QY1WtJJ+pQtY7oxZ5LV1KDrzNjQjEJ6txVaZArtUHcDUopZd aigWGesQ2Dfedak25V2gcJjJX4eKqcLuF4AG7C7GNef/k37UF4IxZrBo29vUOHkc x2vwxBgt3FyYESA73bv6DREcGxa0wOZAnKMzPHStuhtri6Re5IWq3xHue9a91BEE M4yTCc4PY7ny35s/qeivSDD1+MShNa5qnDJzXJm8KSKMq7/PoLM2QhOeUlAqKvNU p7G3xRHHc6EgzqG4bPgUThqcQZQonw+hAZQ7LeS1Jh+tpNFHiXs+lw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:05 2026 by rpki-client