This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/SRsY6kj5UGqnvlxagIJmGE1euUg.roa File: SRsY6kj5UGqnvlxagIJmGE1euUg.roa (raw, json) Hash identifier: pp/0wYUhglX69fSE7dDhNnaobIMP1ZMhV2ZCliiYC+s= Subject key identifier: 49:1B:18:EA:48:F9:50:6A:A7:BE:5C:5A:80:82:66:18:4D:5E:B9:48 Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813 Certificate serial: 019B7B3596074156E3A9465EEC2A08A2697D Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/SRsY6kj5UGqnvlxagIJmGE1euUg.roa Signing time: Thu 01 Jan 2026 20:17:48 +0000 ROA not before: Thu 01 Jan 2026 20:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51660 IP address blocks: 212.70.142.0/24 maxlen: 24 212.70.143.0/24 maxlen: 24 212.70.144.0/22 maxlen: 22 212.70.144.0/24 maxlen: 24 212.70.145.0/24 maxlen: 24 212.70.146.0/24 maxlen: 24 212.70.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:96:07:41:56:e3:a9:46:5e:ec:2a:08:a2:69:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813 Validity Not Before: Jan 1 20:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=491b18ea48f9506aa7be5c5a808266184d5eb948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:93:10:72:1a:3f:88:a0:64:a4:7e:86:c3:f8: fa:84:bf:57:8b:83:17:b4:dd:f2:f4:c0:01:14:82: eb:38:3e:ec:65:18:21:b8:cd:05:2e:05:da:2f:f0: 65:ec:d3:7f:53:31:bb:75:07:b2:70:62:d9:8a:d1: 4d:7e:f8:96:4d:bc:53:09:f6:6d:0e:0e:8c:95:36: e0:7d:73:d6:83:c9:d2:5c:56:33:a6:5d:37:f1:41: 13:d9:2e:15:bf:07:78:7d:ce:58:b2:aa:fa:c7:92: e4:88:c2:92:99:e6:c9:67:45:f3:04:0a:3b:7d:0c: b9:1a:c8:fc:82:0d:5b:34:05:72:d2:6e:e6:49:c3: af:a0:f3:27:05:aa:94:be:ae:51:9f:e4:df:f6:7a: dc:b3:b6:45:c0:3b:0c:17:80:c6:e0:e4:59:ee:17: 5b:c4:96:5f:41:56:a3:3a:e2:56:76:be:3e:1e:e0: c0:8b:4e:0b:28:db:cb:b4:1d:bf:a1:e0:11:56:ff: cb:03:c6:6a:8f:0e:94:ed:bd:f8:9a:14:c8:82:95: fc:88:de:f7:43:9d:9f:a2:89:96:e0:27:f5:72:04: 09:46:7e:e1:cb:29:4b:de:2c:0b:26:84:07:89:2c: 00:52:bb:fa:7f:43:13:e9:ec:d3:87:67:ee:84:ec: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1B:18:EA:48:F9:50:6A:A7:BE:5C:5A:80:82:66:18:4D:5E:B9:48 X509v3 Authority Key Identifier: keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/SRsY6kj5UGqnvlxagIJmGE1euUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.70.142.0-212.70.147.255 Signature Algorithm: sha256WithRSAEncryption 18:18:2d:25:95:4b:ca:47:81:f9:31:61:fb:4f:ab:67:f5:1b: 9c:86:85:8f:17:8d:41:c3:06:83:71:0d:fa:10:ad:ba:d5:8f: 27:19:dc:4c:8d:8d:50:fe:1c:0a:6a:58:23:33:98:45:8d:cf: 45:c3:d6:56:90:0b:b5:45:aa:98:c9:ef:a6:75:80:75:45:69: d3:e5:37:62:66:e5:24:e4:7a:0d:48:70:c8:a8:a2:c9:42:9f: 96:5c:5e:d6:36:73:5c:d9:95:3a:6f:bd:95:36:73:3d:17:ff: bb:09:2e:2b:f5:d2:ea:0c:71:fe:0d:57:a4:c7:a3:02:1d:e8: 18:bb:ff:16:ba:22:49:5b:ce:4c:e4:98:8d:a0:51:44:47:7e: b9:ef:b4:00:18:d3:9f:ec:8a:f0:46:fd:ed:c5:49:dc:4f:02: 94:96:48:78:62:0f:23:3a:be:da:38:e4:d1:f4:c9:5d:3f:d5: f9:d6:08:ca:b4:a1:83:00:45:4e:79:de:fe:67:b3:2c:c5:65: 0f:70:2a:d8:8f:e9:b6:88:40:53:a2:a1:72:56:54:15:40:54: 1f:a6:c7:c8:83:c0:b0:11:8f:7b:52:96:4d:93:ea:09:9e:9c: 5d:e6:2c:78:8b:f1:1c:46:9b:3c:1b:53:9e:eb:9d:0d:08:fb: bb:7c:e5:c0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NZYHQVbjqUZe7CoIoml9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMWY3MjFiN2I3ZTZkMDQ5ZmJmZTUyMGUxY2E4OWMxY2Ey NTY4MTMwHhcNMjYwMTAxMjAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTFiMThlYTQ4Zjk1MDZhYTdiZTVjNWE4MDgyNjYxODRkNWViOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5MQcho/iKBkpH6Gw/j6hL9Xi4MX tN3y9MABFILrOD7sZRghuM0FLgXaL/Bl7NN/UzG7dQeycGLZitFNfviWTbxTCfZt Dg6MlTbgfXPWg8nSXFYzpl038UET2S4Vvwd4fc5Ysqr6x5LkiMKSmebJZ0XzBAo7 fQy5Gsj8gg1bNAVy0m7mScOvoPMnBaqUvq5Rn+Tf9nrcs7ZFwDsMF4DG4ORZ7hdb xJZfQVajOuJWdr4+HuDAi04LKNvLtB2/oeARVv/LA8Zqjw6U7b34mhTIgpX8iN73 Q52foomW4Cf1cgQJRn7hyylL3iwLJoQHiSwAUrv6f0MT6ezTh2fuhOxeXwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEkbGOpI+VBqp75cWoCCZhhNXrlIMB8GA1UdIwQY MBaAFKwfcht7fm0En7/lIOHKicHKJWgTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjIt NjRkMjljODZiZjNlLzEvU1JzWTZrajVVR3Fudmx4YWdJSm1HRTFldVVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjItNjRkMjljODZiZjNl LzEvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHURo4D BALURpAwDQYJKoZIhvcNAQELBQADggEBABgYLSWVS8pHgfkxYftPq2f1G5yGhY8X jUHDBoNxDfoQrbrVjycZ3EyNjVD+HApqWCMzmEWNz0XD1laQC7VFqpjJ76Z1gHVF adPlN2Jm5STkeg1IcMiooslCn5ZcXtY2c1zZlTpvvZU2cz0X/7sJLiv10uoMcf4N V6THowId6Bi7/xa6IklbzkzkmI2gUURHfrnvtAAY05/sivBG/e3FSdxPApSWSHhi DyM6vto45NH0yV0/1fnWCMq0oYMARU553v5nsyzFZQ9wKtiP6baIQFOioXJWVBVA VB+mx8iDwLARj3tSlk2T6gmenF3mLHiL8RxGmzwbU57rnQ0I+7t85cA= -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:35 2026 by rpki-client