This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa File: sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa (raw, json) Hash identifier: t6MnFRdD+DMOOopxl5hauoDky6UirAHK0zqLM5bjQWw= Subject key identifier: B1:21:2E:3E:E2:4A:4B:0B:C6:3E:5F:0E:62:D5:00:6C:D8:23:2C:5B Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019B7A5B8D3E73E38C184BA28BAB4E6416CF Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa Signing time: Thu 01 Jan 2026 16:19:38 +0000 ROA not before: Thu 01 Jan 2026 16:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34463 IP address blocks: 213.202.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8d:3e:73:e3:8c:18:4b:a2:8b:ab:4e:64:16:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jan 1 16:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1212e3ee24a4b0bc63e5f0e62d5006cd8232c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d5:f0:bb:82:e1:77:c9:4f:58:33:a8:59:3c: f9:4d:6c:e8:ff:26:c8:42:f6:1d:b0:ea:0d:3d:c9: 72:5b:1e:18:41:5f:eb:33:6d:e5:fa:2b:ee:9c:77: 41:92:2f:f2:2b:c6:c5:14:05:ea:67:9f:0e:0a:bd: 5d:92:af:86:84:7b:05:fa:b7:c0:26:de:a2:ec:dc: 12:fe:e5:32:ac:9d:f7:0f:84:f9:34:f2:14:f6:aa: a7:a3:ba:64:08:25:8f:34:d9:c7:8e:87:41:d7:94: 33:5e:3b:76:f3:27:90:14:ec:28:cf:10:73:c2:a0: b5:4c:61:bf:1f:07:df:e0:07:41:59:f7:c5:ca:97: 51:59:74:b7:4e:9b:5a:cf:b9:69:93:e3:39:52:99: 53:ae:ff:30:e9:50:a1:f3:d4:69:ce:85:f4:82:6f: f2:ef:cb:4e:56:09:e8:91:d9:b3:72:5a:7b:22:75: 5f:ab:f5:7a:07:1e:30:b4:b4:e2:0e:ea:10:25:77: 50:19:c8:a0:71:88:5b:89:1b:49:6a:29:82:68:68: 57:ba:84:a1:0c:7d:07:e5:6b:ea:23:bf:1a:02:c6: 7a:a1:5f:fe:e9:4c:74:7a:01:88:2b:70:67:de:ff: 8b:8c:55:6c:f2:a2:ba:97:d9:57:e9:5f:2e:b6:43: d4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:21:2E:3E:E2:4A:4B:0B:C6:3E:5F:0E:62:D5:00:6C:D8:23:2C:5B X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.202.118.0/24 Signature Algorithm: sha256WithRSAEncryption 70:f6:bc:c0:72:07:21:e6:ae:9d:7f:c4:d0:c8:09:3e:f9:b4: 60:95:b0:ba:d3:ca:11:52:12:a8:26:ba:87:e0:52:bd:a3:ad: d1:aa:ec:b1:58:37:4c:25:29:ad:fe:48:7e:c7:48:22:65:b7: c2:87:95:c3:ca:aa:60:82:67:a6:38:37:ee:d0:b7:cd:6e:61: ff:8f:9e:a9:e0:bf:3b:1b:1c:2f:96:bd:ad:eb:a8:bb:0a:82: 8e:7d:47:6d:02:6b:4b:fe:e9:25:76:91:b6:4e:ea:db:92:8a: 7e:78:01:92:42:1f:03:6d:b2:3e:64:1b:98:d1:54:35:51:6a: ee:e2:78:1d:19:17:d4:70:2c:86:32:69:cd:43:0c:75:9c:e7: af:4b:ae:a6:ad:fa:c6:92:d1:c5:1e:55:2a:87:7e:75:1e:80: 0a:a8:77:dd:23:5b:90:6b:07:67:8a:87:8d:e8:dc:ec:a6:b9: d2:24:c4:8c:92:21:40:9d:94:3e:f0:39:e0:62:91:61:34:42: 40:1b:73:b8:cc:bd:48:2d:d5:55:26:1c:54:3d:70:fa:91:26: d1:3f:28:e6:81:ee:36:82:6b:a0:ab:e8:e4:3e:5c:a6:9b:77: 48:78:a4:82:a7:fe:17:36:3f:67:ba:33:d4:d4:b3:cf:79:e1: 6d:74:5d:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W40+c+OMGEuii6tOZBbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMTAxMTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTIxMmUzZWUyNGE0YjBiYzYzZTVmMGU2MmQ1MDA2Y2Q4MjMyYzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNXwu4Lhd8lPWDOoWTz5TWzo/ybI QvYdsOoNPclyWx4YQV/rM23l+ivunHdBki/yK8bFFAXqZ58OCr1dkq+GhHsF+rfA Jt6i7NwS/uUyrJ33D4T5NPIU9qqno7pkCCWPNNnHjodB15QzXjt28yeQFOwozxBz wqC1TGG/Hwff4AdBWffFypdRWXS3Tptaz7lpk+M5UplTrv8w6VCh89RpzoX0gm/y 78tOVgnokdmzclp7InVfq/V6Bx4wtLTiDuoQJXdQGcigcYhbiRtJaimCaGhXuoSh DH0H5WvqI78aAsZ6oV/+6Ux0egGIK3Bn3v+LjFVs8qK6l9lX6V8utkPUyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLEhLj7iSksLxj5fDmLVAGzYIyxbMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvc1NFdVB1SktTd3ZHUGw4T1l0VUFiTmdqTEZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cp2MA0G CSqGSIb3DQEBCwUAA4IBAQBw9rzAcgch5q6df8TQyAk++bRglbC608oRUhKoJrqH 4FK9o63RquyxWDdMJSmt/kh+x0giZbfCh5XDyqpggmemODfu0LfNbmH/j56p4L87 Gxwvlr2t66i7CoKOfUdtAmtL/ukldpG2Turbkop+eAGSQh8DbbI+ZBuY0VQ1UWru 4ngdGRfUcCyGMmnNQwx1nOevS66mrfrGktHFHlUqh351HoAKqHfdI1uQawdnioeN 6NzsprnSJMSMkiFAnZQ+8DngYpFhNEJAG3O4zL1ILdVVJhxUPXD6kSbRPyjmge42 gmugq+jkPlymm3dIeKSCp/4XNj9nujPU1LPPeeFtdF1M -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:43 2026 by rpki-client