This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/fJBYOrLyzk14UTEo1zFCG7NWE2o.roa File: fJBYOrLyzk14UTEo1zFCG7NWE2o.roa (raw, json) Hash identifier: zOjZk7XtL8k8a26MB1UedbKFLjYjzmbLPnFplVavzVo= Subject key identifier: 7C:90:58:3A:B2:F2:CE:4D:78:51:31:28:D7:31:42:1B:B3:56:13:6A Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413 Certificate serial: 019B78A22C113D3DAAB826791C36907B0949 Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/fJBYOrLyzk14UTEo1zFCG7NWE2o.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212123 IP address blocks: 212.94.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2c:11:3d:3d:aa:b8:26:79:1c:36:90:7b:09:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c90583ab2f2ce4d78513128d731421bb356136a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:56:e5:42:07:6c:79:ef:61:b8:46:c6:da: 62:f0:eb:98:d5:d3:4d:ef:a0:c1:82:6b:90:cf:8e: b6:9b:0d:55:56:5e:fc:26:98:43:d5:0d:a2:3c:57: 21:24:2e:c0:0f:c9:be:76:89:bc:10:aa:29:63:24: 73:92:0f:da:02:00:db:61:ba:67:46:d9:62:94:df: 42:42:a8:80:06:fb:81:93:c6:a5:70:d1:08:24:f6: 2f:01:b3:46:bd:1e:35:e9:dd:70:77:e9:98:3e:75: 58:c5:6b:6e:b8:8f:34:f2:a0:5b:b6:a3:98:cd:94: b9:c1:f7:f6:b0:63:81:03:04:5d:4b:8e:5d:3f:ee: a9:ed:d7:05:67:af:54:4f:d6:b0:8b:9c:53:8c:da: 5f:b5:53:13:2c:51:4a:f8:52:be:f9:ba:cb:26:ce: 0a:a3:0d:19:c8:56:13:1c:4e:dc:9a:17:ea:20:78: 2e:18:b4:e7:14:22:45:6c:00:2c:a0:82:5d:fe:00: 31:c2:ba:d0:1e:8b:75:e6:31:df:cc:29:6d:22:d2: a0:78:07:6c:5a:26:59:fc:53:9b:2f:96:1b:d9:bf: 57:4a:02:dc:16:06:e4:18:4e:7d:58:5f:e4:12:5d: eb:05:aa:20:b1:98:77:6f:1e:d3:ab:db:f6:40:bf: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:90:58:3A:B2:F2:CE:4D:78:51:31:28:D7:31:42:1B:B3:56:13:6A X509v3 Authority Key Identifier: keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/fJBYOrLyzk14UTEo1zFCG7NWE2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.94.55.0/24 Signature Algorithm: sha256WithRSAEncryption 93:76:31:38:f2:6d:a6:fd:ed:62:d9:73:e8:60:40:18:71:2b: af:62:d1:98:ef:ae:b1:8c:95:40:53:b1:64:f9:53:a9:68:eb: 7d:81:33:82:7c:56:2d:4c:5c:38:4f:ec:d6:a0:62:a0:08:c0: 19:04:9b:b3:98:6e:4b:02:3e:99:2e:18:f0:a2:21:a4:fb:6f: ba:3a:99:c7:61:7f:2a:b3:4f:7a:ae:ec:0c:3a:c8:20:50:3f: fb:8d:71:e0:ba:89:ae:89:eb:0f:ba:2e:55:95:b4:3b:1c:67: ff:ea:ff:97:d8:f7:86:be:60:9e:7e:34:e6:aa:be:e1:0f:5c: a5:c9:96:8c:d6:26:f1:ca:16:67:7f:1c:8d:cb:6c:29:21:e6: 22:a0:43:7e:80:48:df:b6:08:17:d8:a1:98:2e:67:dc:ba:94: df:e4:93:d0:98:be:ce:b7:be:72:b4:c8:d8:e1:08:79:b6:80: 06:a4:6a:4c:9f:b4:ba:70:ce:58:c9:ca:c7:b8:72:4a:8a:df: 53:8b:d2:ff:a8:c2:6a:42:56:f6:11:59:03:0c:0a:38:33:c1: 76:62:e8:29:5a:13:87:7d:b1:1e:05:f6:95:13:87:b5:50:8e: 08:b4:c6:80:e8:1a:ca:d5:9a:f1:55:be:02:df:fd:c4:1f:85: 74:8b:38:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiwRPT2quCZ5HDaQewlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGFjMThhN2FkNTAxYmE3ZWExMzU2NzkwOWYxN2U0Zjcz Mjc0MTMwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzkwNTgzYWIyZjJjZTRkNzg1MTMxMjhkNzMxNDIxYmIzNTYxMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5VW5UIHbHnvYbhGxtpi8OuY1dNN 76DBgmuQz462mw1VVl78JphD1Q2iPFchJC7AD8m+dom8EKopYyRzkg/aAgDbYbpn RtlilN9CQqiABvuBk8alcNEIJPYvAbNGvR416d1wd+mYPnVYxWtuuI808qBbtqOY zZS5wff2sGOBAwRdS45dP+6p7dcFZ69UT9awi5xTjNpftVMTLFFK+FK++brLJs4K ow0ZyFYTHE7cmhfqIHguGLTnFCJFbAAsoIJd/gAxwrrQHot15jHfzCltItKgeAds WiZZ/FObL5Yb2b9XSgLcFgbkGE59WF/kEl3rBaogsZh3bx7Tq9v2QL9W2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHyQWDqy8s5NeFExKNcxQhuzVhNqMB8GA1UdIwQY MBaAFIvawYp61QG6fqE1Z5CfF+T3MnQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzkt YzNjYzVkZTFlY2U5LzEvZkpCWU9yTHl6azE0VVRFbzF6RkNHN05XRTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzktYzNjYzVkZTFlY2U5 LzEvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1F43MA0G CSqGSIb3DQEBCwUAA4IBAQCTdjE48m2m/e1i2XPoYEAYcSuvYtGY766xjJVAU7Fk +VOpaOt9gTOCfFYtTFw4T+zWoGKgCMAZBJuzmG5LAj6ZLhjwoiGk+2+6OpnHYX8q s096ruwMOsggUD/7jXHguomuiesPui5VlbQ7HGf/6v+X2PeGvmCefjTmqr7hD1yl yZaM1ibxyhZnfxyNy2wpIeYioEN+gEjftggX2KGYLmfcupTf5JPQmL7Ot75ytMjY 4Qh5toAGpGpMn7S6cM5YycrHuHJKit9Ti9L/qMJqQlb2EVkDDAo4M8F2YugpWhOH fbEeBfaVE4e1UI4ItMaA6BrK1ZrxVb4C3/3EH4V0izgK -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:57 2026 by rpki-client