This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/sW8W0-8WOsG0evmu2fYzqrWdI9U.roa File: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (raw, json) Hash identifier: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ= Subject key identifier: B1:6F:16:D3:EF:16:3A:C1:B4:7A:F9:AE:D9:F6:33:AA:B5:9D:23:D5 Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14 Certificate serial: 019B797F27BE3B45503CF3048EFE38A9F8A8 Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/sW8W0-8WOsG0evmu2fYzqrWdI9U.roa Signing time: Thu 01 Jan 2026 12:18:54 +0000 ROA not before: Thu 01 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12735 IP address blocks: 212.102.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:27:be:3b:45:50:3c:f3:04:8e:fe:38:a9:f8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14 Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b16f16d3ef163ac1b47af9aed9f633aab59d23d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:15:2c:cd:ef:ce:89:da:ff:18:e2:47:ea: 74:9a:81:c6:40:52:8b:ac:83:81:05:b1:ae:58:e9: 81:86:a9:16:af:cc:4e:68:a7:ff:01:ad:96:30:92: 8e:fa:cc:fb:47:32:bb:93:82:55:76:39:82:cd:a6: cf:a7:cc:85:06:da:5d:08:d3:78:f1:9b:90:e4:08: 9a:28:16:24:e2:07:41:97:4b:06:a1:38:84:68:17: fa:da:71:ab:c8:d6:e6:49:bb:5d:0a:3e:7e:73:39: 97:05:7a:ca:4e:2c:74:9b:29:cb:da:b2:4b:e1:70: 8a:f3:7b:29:37:1c:76:c6:45:16:ee:7e:f7:1c:4a: 02:4c:6a:8c:99:5b:9a:da:4d:f2:5a:a9:43:d0:31: 9b:0f:cc:27:54:df:db:3f:96:e9:ed:3d:63:86:71: e7:b5:49:e4:ac:4d:99:fa:bd:40:1c:c7:9b:18:14: 37:24:22:a0:1e:77:74:4d:68:45:3c:80:e9:87:0d: 65:28:44:59:e0:6d:5c:75:e7:ce:09:66:30:30:62: f7:ef:5c:bd:62:91:90:d1:e4:46:eb:90:97:b4:c9: 12:1e:0e:72:95:50:57:45:b2:4b:72:94:67:35:9c: 47:dc:7f:5a:a6:7a:ee:46:05:23:75:99:c3:94:2b: ce:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6F:16:D3:EF:16:3A:C1:B4:7A:F9:AE:D9:F6:33:AA:B5:9D:23:D5 X509v3 Authority Key Identifier: keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/sW8W0-8WOsG0evmu2fYzqrWdI9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.103.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:9c:29:ce:a9:c7:95:a7:09:d4:e4:9d:6e:6d:26:a2:4a:77: 75:73:e9:29:83:02:8b:70:95:ac:32:a9:00:12:77:07:4c:9f: 99:a1:a5:e6:7d:d6:60:0d:70:e3:a0:c9:e5:67:bc:2e:4e:db: 31:95:8d:f4:de:8c:7e:6a:d1:b8:ec:35:2c:f5:ec:91:be:e1: 5d:89:1e:b7:7b:db:fb:88:2e:62:9d:27:93:d0:eb:14:0e:cb: a1:4d:f4:ab:ec:b1:0c:1e:5e:fc:d1:ea:e4:b6:b7:d3:a2:fe: 1a:da:5f:3c:7b:97:e0:dc:c9:57:04:84:21:01:65:56:ab:d3: 63:81:04:e0:ee:31:3f:77:65:18:d7:d9:b3:1e:7d:3c:6e:b8: db:fc:ad:08:45:e8:aa:19:da:3e:89:7a:ab:63:72:f1:3f:70: 93:e0:fc:b7:a1:65:28:2a:e3:23:56:fb:32:2f:83:31:da:4f: fa:17:9f:93:cb:49:8d:ca:8f:80:bd:cd:50:28:5b:15:71:2a: be:ee:59:8b:12:a0:00:a5:3e:4e:d1:90:51:23:46:b7:5f:ff: 85:5c:7c:b8:09:89:00:58:d0:3c:bb:5a:9d:12:66:c3:28:0a: 95:35:6d:44:94:31:82:64:1c:ea:37:26:aa:de:48:12:6a:2d: a8:60:fd:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fye+O0VQPPMEjv44qfioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjI1OWYxNThiOWFhNzZhYWQwYjFhZGZhNjJjMWVlZDQ1 NTlkMTQwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTZmMTZkM2VmMTYzYWMxYjQ3YWY5YWVkOWY2MzNhYWI1OWQyM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEsVLM3vzona/xjiR+p0moHGQFKL rIOBBbGuWOmBhqkWr8xOaKf/Aa2WMJKO+sz7RzK7k4JVdjmCzabPp8yFBtpdCNN4 8ZuQ5AiaKBYk4gdBl0sGoTiEaBf62nGryNbmSbtdCj5+czmXBXrKTix0mynL2rJL 4XCK83spNxx2xkUW7n73HEoCTGqMmVua2k3yWqlD0DGbD8wnVN/bP5bp7T1jhnHn tUnkrE2Z+r1AHMebGBQ3JCKgHnd0TWhFPIDphw1lKERZ4G1cdefOCWYwMGL371y9 YpGQ0eRG65CXtMkSHg5ylVBXRbJLcpRnNZxH3H9apnruRgUjdZnDlCvO4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLFvFtPvFjrBtHr5rtn2M6q1nSPVMB8GA1UdIwQY MBaAFO4iWfFYuap2qtCxrfpiwe7UVZ0UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQt MzQ5N2NlMWI3MWJmLzEvc1c4VzAtOFdPc0cwZXZtdTJmWXpxcldkSTlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQtMzQ5N2NlMWI3MWJm LzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GZnMA0G CSqGSIb3DQEBCwUAA4IBAQCdnCnOqceVpwnU5J1ubSaiSnd1c+kpgwKLcJWsMqkA EncHTJ+ZoaXmfdZgDXDjoMnlZ7wuTtsxlY303ox+atG47DUs9eyRvuFdiR63e9v7 iC5inSeT0OsUDsuhTfSr7LEMHl780erktrfTov4a2l88e5fg3MlXBIQhAWVWq9Nj gQTg7jE/d2UY19mzHn08brjb/K0IReiqGdo+iXqrY3LxP3CT4Py3oWUoKuMjVvsy L4Mx2k/6F5+Ty0mNyo+Avc1QKFsVcSq+7lmLEqAApT5O0ZBRI0a3X/+FXHy4CYkA WNA8u1qdEmbDKAqVNW1ElDGCZBzqNyaq3kgSai2oYP2d -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:43 2026 by rpki-client