This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/kFGche0sUMJjtQYWtRrXVgbIroM.roa File: kFGche0sUMJjtQYWtRrXVgbIroM.roa (raw, json) Hash identifier: 34UZsa7v3vzkYl287UK/ejNXOYJMH9D9QG1MuCDxpCg= Subject key identifier: 90:51:9C:85:ED:2C:50:C2:63:B5:06:16:B5:1A:D7:56:06:C8:AE:83 Certificate issuer: /CN=a36619427c283fa3b2bb7b45cc35a51286398961 Certificate serial: 019B76EB7A4E980C77742D9D6BA6CDBB2340 Authority key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/kFGche0sUMJjtQYWtRrXVgbIroM.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43395 IP address blocks: 212.108.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7a:4e:98:0c:77:74:2d:9d:6b:a6:cd:bb:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36619427c283fa3b2bb7b45cc35a51286398961 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90519c85ed2c50c263b50616b51ad75606c8ae83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:a5:9f:7e:71:6b:c5:51:8c:c1:29:f8:03: bc:ab:bd:85:6b:b8:98:5c:e8:3b:5e:13:68:37:f9: 8b:c7:5b:e7:1c:67:e1:bb:8c:2a:91:7d:38:05:84: 39:d4:87:a5:04:98:ea:cc:02:c1:7b:c4:5d:85:df: 45:04:5f:61:35:f3:2d:02:d9:c1:d7:91:05:3c:6f: 08:3c:92:08:99:5b:ba:eb:49:12:6f:b9:9e:50:32: 49:a5:bc:f7:22:dc:1d:48:51:3b:e7:7a:af:93:35: 10:86:21:0b:87:df:57:ce:d9:30:d5:52:b4:e6:8d: 5a:28:8e:7b:89:81:17:a8:fc:2a:5e:ac:92:93:09: e8:33:b6:21:ac:ff:e4:46:54:e8:24:c9:dc:f7:a1: 6e:c2:dc:8d:ee:a4:9c:9d:d9:46:75:78:37:58:4c: 70:68:77:aa:7d:0c:d7:e2:18:b9:00:dc:c1:ba:8d: f9:85:72:43:03:92:a9:fe:59:be:f3:67:94:93:f2: 4b:b0:f1:87:b5:74:95:75:5c:e8:3a:b6:b9:fd:06: 51:53:a1:87:76:d9:e9:e3:a1:dc:99:49:87:92:84: e3:a5:5e:0a:6c:ed:f9:95:69:4d:0c:06:34:d8:77: a0:28:04:89:15:74:ee:76:0c:d6:39:26:5b:db:70: 5a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:51:9C:85:ED:2C:50:C2:63:B5:06:16:B5:1A:D7:56:06:C8:AE:83 X509v3 Authority Key Identifier: keyid:A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/kFGche0sUMJjtQYWtRrXVgbIroM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.125.0/24 Signature Algorithm: sha256WithRSAEncryption b4:2b:31:e5:8b:b8:26:73:c6:3d:2b:53:66:67:1f:f6:7d:7e: 53:57:43:8d:dd:28:8d:6b:6f:9a:7f:12:9b:1c:b6:3c:32:bd: 73:7a:8f:3d:72:8f:6b:96:5c:52:d5:df:4a:f9:6b:56:58:e6: b8:13:79:65:8f:2b:1e:f5:0f:8b:aa:9b:c4:47:1e:45:db:4f: a0:18:65:da:b1:e3:07:80:eb:a8:23:24:17:e9:3a:77:1f:9d: d7:67:9d:3e:bd:f6:65:5b:03:c9:80:4d:b2:ff:f0:cd:7d:f6: e8:37:b6:97:8c:41:ea:4c:9c:2d:44:c1:6a:4c:82:af:ed:00: 71:af:ff:27:b1:3f:85:a4:bd:d2:14:5c:37:d9:63:48:92:84: 4f:d5:7b:4f:f2:8d:e8:8d:49:f4:b0:dc:d1:9e:b8:1d:18:39: eb:a3:93:b6:f3:6b:76:d3:2b:bd:af:08:4e:37:8e:92:57:e9: ea:be:36:82:7e:0f:5c:b4:f8:2a:3a:28:0b:29:5a:0f:59:a0: b6:af:b3:89:53:a1:8f:eb:58:a1:65:be:1a:52:cc:78:1b:0e: 54:5a:56:ae:8c:31:07:91:fd:bf:c3:be:62:b2:87:25:3c:79: 69:08:75:a2:19:24:a8:74:81:1d:ef:ce:e8:fe:7a:a2:6a:fc: b9:23:21:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263pOmAx3dC2da6bNuyNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjYxOTQyN2MyODNmYTNiMmJiN2I0NWNjMzVhNTEyODYz OTg5NjEwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDUxOWM4NWVkMmM1MGMyNjNiNTA2MTZiNTFhZDc1NjA2YzhhZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyheln35xa8VRjMEp+AO8q72Fa7iY XOg7XhNoN/mLx1vnHGfhu4wqkX04BYQ51IelBJjqzALBe8Rdhd9FBF9hNfMtAtnB 15EFPG8IPJIImVu660kSb7meUDJJpbz3ItwdSFE753qvkzUQhiELh99Xztkw1VK0 5o1aKI57iYEXqPwqXqySkwnoM7YhrP/kRlToJMnc96FuwtyN7qScndlGdXg3WExw aHeqfQzX4hi5ANzBuo35hXJDA5Kp/lm+82eUk/JLsPGHtXSVdVzoOra5/QZRU6GH dtnp46HcmUmHkoTjpV4KbO35lWlNDAY02HegKASJFXTudgzWOSZb23Ba5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJBRnIXtLFDCY7UGFrUa11YGyK6DMB8GA1UdIwQY MBaAFKNmGUJ8KD+jsrt7Rcw1pRKGOYlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJZWlFud29QNk95dTN0RnpEV2xFb1k1aVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZmEyODAtMDJkZC00NTE3LTg5YTct M2I4MTc4ZGJiOTRjLzEva0ZHY2hlMHNVTUpqdFFZV3RSclhWZ2JJcm9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wZmEyODAtMDJkZC00NTE3LTg5YTctM2I4MTc4ZGJiOTRj LzEvbzJZWlFud29QNk95dTN0RnpEV2xFb1k1aVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Gx9MA0G CSqGSIb3DQEBCwUAA4IBAQC0KzHli7gmc8Y9K1NmZx/2fX5TV0ON3SiNa2+afxKb HLY8Mr1zeo89co9rllxS1d9K+WtWWOa4E3lljyse9Q+LqpvERx5F20+gGGXaseMH gOuoIyQX6Tp3H53XZ50+vfZlWwPJgE2y//DNffboN7aXjEHqTJwtRMFqTIKv7QBx r/8nsT+FpL3SFFw32WNIkoRP1XtP8o3ojUn0sNzRnrgdGDnro5O282t20yu9rwhO N46SV+nqvjaCfg9ctPgqOigLKVoPWaC2r7OJU6GP61ihZb4aUsx4Gw5UWlaujDEH kf2/w75isoclPHlpCHWiGSSodIEd787o/nqiavy5IyEB -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:18 2026 by rpki-client