This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/dfv3LSNj2V7BvnxQDjPYXNhLTeY.roa
File: dfv3LSNj2V7BvnxQDjPYXNhLTeY.roa (raw, json)
Hash identifier: +CS62sl2ChgX++5UXeYQ9A8BJy1JzvdoEucP6DULUqI=
Subject key identifier: 75:FB:F7:2D:23:63:D9:5E:C1:BE:7C:50:0E:33:D8:5C:D8:4B:4D:E6
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019B783451DBF8569A756EE234C4CA6DBEB7
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/dfv3LSNj2V7BvnxQDjPYXNhLTeY.roa
Signing time: Thu 01 Jan 2026 06:17:33 +0000
ROA not before: Thu 01 Jan 2026 06:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39216
IP address blocks: 212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
212.126.99.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.103.0/24 maxlen: 24
212.126.104.0/21 maxlen: 21
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/23 maxlen: 23
212.126.108.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:1d::/48 maxlen: 48
2a04:2dc0:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:51:db:f8:56:9a:75:6e:e2:34:c4:ca:6d:be:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 06:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75fbf72d2363d95ec1be7c500e33d85cd84b4de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:ce:83:91:9f:b5:dc:53:31:81:d3:68:04:
60:8d:19:57:5d:1b:15:42:f9:ec:87:39:f3:c7:f5:
ca:09:cd:80:24:fd:69:21:1d:f1:ae:a8:4e:fa:ca:
86:6d:07:e4:b1:44:2b:2d:9a:74:e5:33:69:b9:c2:
62:7a:1b:54:02:84:c4:bf:d8:be:13:46:b6:8d:b1:
9e:2f:7b:74:62:49:96:a0:ed:94:fa:30:f6:85:f6:
71:a9:4b:bf:82:c6:cc:67:87:70:c8:aa:da:2e:8a:
5d:2b:75:59:67:35:b4:2d:dc:5a:b9:72:37:80:fe:
6d:2a:45:2b:de:65:d4:e0:de:97:8b:83:43:5a:c3:
eb:5f:7d:ae:a0:22:ec:9a:d8:ba:fa:fc:4d:b6:1f:
2c:ce:39:e5:33:28:50:97:dd:e9:2b:e9:9d:34:18:
db:70:35:e9:3c:d2:11:63:b9:b1:7a:b2:10:1f:85:
3a:c3:99:c2:14:90:88:cc:2a:19:3f:33:5b:3d:69:
fa:81:15:f8:33:45:23:33:7f:53:96:94:15:bc:3a:
0f:53:e8:d9:b7:e8:6a:78:b4:17:f6:03:db:2c:80:
ca:09:58:b2:4f:36:7f:fc:3b:5a:df:f8:52:42:8e:
b2:66:b3:7c:61:fa:a2:3f:ad:f3:64:4a:b1:eb:a2:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FB:F7:2D:23:63:D9:5E:C1:BE:7C:50:0E:33:D8:5C:D8:4B:4D:E6
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/dfv3LSNj2V7BvnxQDjPYXNhLTeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0/20
212.126.115.0/24
212.126.117.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::-2a04:2dc0:19:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:1d::-2a04:2dc0:1e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
e0:90:9c:d8:74:38:1a:6a:f2:a8:8a:a4:bd:4a:d9:07:c7:f0:
8a:54:e7:66:39:27:51:23:85:3c:d7:b5:7d:d8:91:5a:4e:40:
8b:b0:00:a5:c6:92:56:52:d0:fa:e1:cb:d8:a3:2c:c6:85:56:
ed:f5:62:12:8e:5a:1e:5e:98:43:33:02:87:37:b5:49:9d:4e:
43:be:de:7a:18:da:b8:fb:c6:a6:7d:f7:a8:fb:7f:07:af:0b:
8f:94:ed:42:ff:94:71:46:3d:38:24:18:30:ef:3b:b1:20:dc:
4a:15:6b:cd:8b:0a:84:f8:11:3d:89:68:bb:9b:b8:02:aa:e5:
e1:ae:34:c0:51:d9:e6:97:46:ba:25:c9:36:86:a7:8a:28:86:
42:8f:ac:ce:6d:82:3c:4e:2e:c9:67:e0:72:af:f8:ec:67:d3:
2b:01:26:98:1e:b0:fb:85:9d:7b:51:79:a4:f5:ee:be:46:aa:
8e:6c:2b:8a:cf:bb:66:76:b0:e1:d6:60:74:6f:4a:ec:5a:94:
61:3f:8a:69:fe:1a:5c:27:94:01:3a:77:0e:f6:0e:41:03:cd:
1d:6b:61:e5:61:19:58:51:7c:c0:d6:6c:6d:27:57:cb:b9:9d:
b0:c4:73:61:14:49:94:b0:22:5c:5b:5a:98:a7:29:6b:34:d0:
ae:c4:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:58:42 2026 by rpki-client