This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/f-9ciEqv18Kub9fxi8gMgTEDiN8.roa File: f-9ciEqv18Kub9fxi8gMgTEDiN8.roa (raw, json) Hash identifier: ys7Se75WP1iZvGd8oeyIka2FlXVNvmTKA8g4Bz+pUFE= Subject key identifier: 7F:EF:5C:88:4A:AF:D7:C2:AE:6F:D7:F1:8B:C8:0C:81:31:03:88:DF Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019B7A5B8CF691DBABB083CCA2F53CE34BE3 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/f-9ciEqv18Kub9fxi8gMgTEDiN8.roa Signing time: Thu 01 Jan 2026 16:19:38 +0000 ROA not before: Thu 01 Jan 2026 16:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25045 IP address blocks: 213.202.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8c:f6:91:db:ab:b0:83:cc:a2:f5:3c:e3:4b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jan 1 16:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fef5c884aafd7c2ae6fd7f18bc80c81310388df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:d5:05:69:79:96:03:30:ae:93:2a:06:c3: bf:be:0f:e5:3a:b0:ea:ab:12:d2:68:37:97:f0:06: d9:d1:50:35:07:2f:07:9f:3f:ad:a0:b1:82:35:b8: 8d:8c:e7:d9:f7:10:8a:22:e5:03:5c:df:fb:3f:ca: 02:81:bf:ee:fd:c2:00:06:b4:70:b0:8d:a7:78:54: 98:79:09:ae:a5:07:08:08:20:0d:5d:82:11:a0:62: 1d:02:ce:30:d5:1d:7a:8d:34:80:75:7e:9a:ef:9a: 8c:73:6d:e3:55:85:4a:c9:5c:8c:57:28:ae:b0:54: 9c:65:e3:58:7f:fe:df:eb:17:60:9e:62:7d:d2:78: 7c:8a:41:ea:e5:c0:29:a9:cf:9c:9c:db:b6:b9:dd: 86:b4:5f:18:96:cb:e2:81:2a:4d:e1:4c:2e:eb:fb: f0:af:82:50:9a:a7:83:98:44:4e:11:f5:15:58:71: 10:76:2c:e7:e4:ba:ea:47:c4:90:e0:c9:1b:08:c2: 51:3a:5d:ca:33:e1:ba:e1:0a:80:0d:85:75:b4:16: 16:e2:a1:62:5f:74:b2:ba:39:9e:73:33:a7:6a:65: c0:ef:7e:c3:b6:3f:95:37:c7:b3:ec:9d:25:8a:2f: b0:3f:2b:bd:08:01:2d:e4:f2:93:77:b9:40:0e:cf: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EF:5C:88:4A:AF:D7:C2:AE:6F:D7:F1:8B:C8:0C:81:31:03:88:DF X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/f-9ciEqv18Kub9fxi8gMgTEDiN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.202.78.0/24 Signature Algorithm: sha256WithRSAEncryption a1:c9:f6:86:45:29:f8:1d:fa:96:5f:08:8b:82:35:bf:cc:45: 1a:75:be:2a:00:bd:80:5d:5e:36:c5:77:02:a9:2e:4a:5f:44: db:75:e6:f2:4e:c3:f1:24:63:a8:5f:15:c5:b4:b0:10:a5:3d: 9d:1a:1d:41:1d:65:20:e7:61:02:5f:6e:19:8a:e4:0f:a0:dd: 64:ca:d8:38:78:66:c1:6a:97:28:2a:19:24:45:4e:45:d3:16: 47:a0:4e:95:26:c1:ed:1c:47:98:90:e9:e8:77:9e:b3:02:89: 33:94:f8:86:70:62:ce:71:96:7a:14:9a:01:3e:b8:a9:28:f2: e1:a4:0b:02:34:55:b3:88:42:08:43:7b:8e:1a:20:19:9f:76: 4e:3a:7f:bd:6c:59:5a:e8:e0:d7:1a:5d:19:16:59:bf:43:d2: 89:4b:f1:af:42:7e:06:79:00:46:c3:86:37:5c:9c:15:b3:bf: 9a:2d:86:43:93:55:68:5b:6d:53:40:b0:c6:aa:b8:a8:85:4e: bd:73:14:90:f3:be:28:94:17:b6:b9:85:e9:fb:03:a6:7a:81: 39:44:ec:5b:3d:92:19:1e:0c:a4:8b:26:44:78:10:39:a3:41: 66:21:b3:f4:f1:fb:19:7b:64:15:9d:bd:bc:87:7d:2d:cd:cc: 29:b1:34:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4z2kdursIPMovU840vjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMTAxMTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmVmNWM4ODRhYWZkN2MyYWU2ZmQ3ZjE4YmM4MGM4MTMxMDM4OGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG/VBWl5lgMwrpMqBsO/vg/lOrDq qxLSaDeX8AbZ0VA1By8Hnz+toLGCNbiNjOfZ9xCKIuUDXN/7P8oCgb/u/cIABrRw sI2neFSYeQmupQcICCANXYIRoGIdAs4w1R16jTSAdX6a75qMc23jVYVKyVyMVyiu sFScZeNYf/7f6xdgnmJ90nh8ikHq5cApqc+cnNu2ud2GtF8YlsvigSpN4Uwu6/vw r4JQmqeDmEROEfUVWHEQdizn5LrqR8SQ4MkbCMJROl3KM+G64QqADYV1tBYW4qFi X3SyujmeczOnamXA737Dtj+VN8ez7J0lii+wPyu9CAEt5PKTd7lADs8yxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/vXIhKr9fCrm/X8YvIDIExA4jfMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvZi05Y2lFcXYxOEt1YjlmeGk4Z01nVEVEaU44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cpOMA0G CSqGSIb3DQEBCwUAA4IBAQChyfaGRSn4HfqWXwiLgjW/zEUadb4qAL2AXV42xXcC qS5KX0TbdebyTsPxJGOoXxXFtLAQpT2dGh1BHWUg52ECX24ZiuQPoN1kytg4eGbB apcoKhkkRU5F0xZHoE6VJsHtHEeYkOnod56zAokzlPiGcGLOcZZ6FJoBPripKPLh pAsCNFWziEIIQ3uOGiAZn3ZOOn+9bFla6ODXGl0ZFlm/Q9KJS/GvQn4GeQBGw4Y3 XJwVs7+aLYZDk1VoW21TQLDGqriohU69cxSQ874olBe2uYXp+wOmeoE5ROxbPZIZ HgykiyZEeBA5o0FmIbP08fsZe2QVnb28h30tzcwpsTTO -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:41 2026 by rpki-client