This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/M0wNnqU_1DLmYVDdUs4avMQhe8s.roa File: M0wNnqU_1DLmYVDdUs4avMQhe8s.roa (raw, json) Hash identifier: fIfKhvWtJwrxjzjm4hZW5+IdLNHxi4+A23VOYUPdMUs= Subject key identifier: 33:4C:0D:9E:A5:3F:D4:32:E6:61:50:DD:52:CE:1A:BC:C4:21:7B:CB Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546 Certificate serial: 019B77C7031179BA727665F5E4D014DC5DD2 Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/M0wNnqU_1DLmYVDdUs4avMQhe8s.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13237 IP address blocks: 212.108.184.0/21 maxlen: 24 2a02:358:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:03:11:79:ba:72:76:65:f5:e4:d0:14:dc:5d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=334c0d9ea53fd432e66150dd52ce1abcc4217bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:3c:39:3f:a6:db:cf:a4:6d:84:7d:9d:da: 66:01:75:e6:25:a7:d2:28:e5:34:90:c0:94:ed:ca: 4e:7a:ea:2b:1f:f9:2d:22:a8:c7:e6:3b:e9:af:7c: 58:be:18:4b:38:ef:21:aa:0a:3f:fe:e5:70:df:cd: 95:24:fa:8c:4a:d4:61:4c:a7:3d:26:7a:08:62:2f: 61:0f:a8:f9:4f:33:b6:58:46:ae:3d:9b:4c:31:33: 18:0b:6e:60:b1:bb:0c:a2:7b:6c:18:43:ba:95:f2: fc:42:b2:be:86:7f:80:0c:24:a2:84:a1:f2:a8:cf: 68:92:35:38:6b:1c:3c:4e:da:dc:b4:f5:24:36:3f: b4:10:bd:82:d3:c7:0d:c9:9d:70:91:a4:b9:06:b4: 43:c0:79:ad:81:9a:69:a1:47:a0:2f:cf:47:d5:98: 82:80:28:00:3d:cd:0b:a0:94:f6:34:38:f6:5f:4b: 22:7a:28:78:9f:f6:a3:d1:1c:de:ff:bc:fc:87:91: ef:1a:b3:f6:6d:ed:5a:84:29:25:8a:07:41:13:b3: 71:24:72:e0:8e:31:dc:9a:6c:94:2e:5a:79:ac:95: 23:48:da:df:f6:96:f1:a8:48:ca:6c:db:6a:49:e1: 50:0e:2e:33:10:a2:a8:86:c3:b5:80:97:a2:2b:da: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4C:0D:9E:A5:3F:D4:32:E6:61:50:DD:52:CE:1A:BC:C4:21:7B:CB X509v3 Authority Key Identifier: keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/M0wNnqU_1DLmYVDdUs4avMQhe8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.184.0/21 IPv6: 2a02:358:1000::/36 Signature Algorithm: sha256WithRSAEncryption 65:a9:a3:8a:cb:bf:23:e6:76:72:d4:86:79:56:b9:8a:fd:09: d4:5e:1a:4e:19:1f:76:bf:d6:ee:42:15:cd:ce:70:bd:71:2b: 03:18:3f:37:aa:13:64:75:0a:27:52:b2:d0:dc:39:c0:e3:cf: 11:db:f3:5e:3e:66:ab:90:eb:a2:1a:73:03:4b:b5:4d:e0:00: 66:eb:0d:af:7d:a0:70:ce:2a:dd:a8:43:0a:52:1d:1b:8d:01: 64:11:ec:d9:cf:28:cf:8e:92:08:b9:58:2b:07:74:36:49:5d: 96:b1:df:3e:30:29:91:c9:fc:cf:e2:ae:19:94:bd:46:76:85: 57:47:03:8b:67:fd:62:56:a7:6d:94:b4:4d:32:f1:70:eb:43: 32:0f:90:98:96:e8:12:54:c0:f8:58:04:c0:60:00:05:52:9a: 37:c1:c8:17:be:34:02:19:c2:3f:1a:c6:fa:ca:89:f8:27:69: 71:52:11:e3:9b:c2:57:97:7b:10:43:5c:5e:89:8f:c2:03:29: 58:17:6d:b0:1d:ee:6b:00:4b:5b:5e:85:a6:a1:e2:69:d9:dc: 0a:23:88:0b:ed:e2:b7:97:21:84:0e:d6:3a:f2:14:6d:56:dd: 2f:40:70:98:bc:ce:0e:e8:64:e5:db:73:fb:55:a9:1d:20:d9: 96:fe:79:f1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt3xwMRebpydmX15NAU3F3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MDE5MGJkZmIwYTNmMjNiNDQxMWU3ZDc0OGVkZGJiZDA5 Zjg1NDYwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzRjMGQ5ZWE1M2ZkNDMyZTY2MTUwZGQ1MmNlMWFiY2M0MjE3YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdw8OT+m28+kbYR9ndpmAXXmJafS KOU0kMCU7cpOeuorH/ktIqjH5jvpr3xYvhhLOO8hqgo//uVw382VJPqMStRhTKc9 JnoIYi9hD6j5TzO2WEauPZtMMTMYC25gsbsMontsGEO6lfL8QrK+hn+ADCSihKHy qM9okjU4axw8TtrctPUkNj+0EL2C08cNyZ1wkaS5BrRDwHmtgZppoUegL89H1ZiC gCgAPc0LoJT2NDj2X0sieih4n/aj0Rze/7z8h5HvGrP2be1ahCkligdBE7NxJHLg jjHcmmyULlp5rJUjSNrf9pbxqEjKbNtqSeFQDi4zEKKohsO1gJeiK9p6xwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFDNMDZ6lP9Qy5mFQ3VLOGrzEIXvLMB8GA1UdIwQY MBaAFFYBkL37Cj8jtEEefXSO3bvQn4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmdHUXZmc0tQeU8wUVI1OWRJN2R1OUNmaFVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iNjZjODMtMGQ2MS00MjFmLWIwODMt MmI5ZmM0MWUwYTgwLzEvTTB3Tm5xVV8xRExtWVZEZFVzNGF2TVFoZThzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9iNjZjODMtMGQ2MS00MjFmLWIwODMtMmI5ZmM0MWUwYTgw LzEvVmdHUXZmc0tQeU8wUVI1OWRJN2R1OUNmaFVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQD1Gy4MA4E AgACMAgDBgQqAgNYEDANBgkqhkiG9w0BAQsFAAOCAQEAZamjisu/I+Z2ctSGeVa5 iv0J1F4aThkfdr/W7kIVzc5wvXErAxg/N6oTZHUKJ1Ky0Nw5wOPPEdvzXj5mq5Dr ohpzA0u1TeAAZusNr32gcM4q3ahDClIdG40BZBHs2c8oz46SCLlYKwd0NkldlrHf PjApkcn8z+KuGZS9RnaFV0cDi2f9YlanbZS0TTLxcOtDMg+QmJboElTA+FgEwGAA BVKaN8HIF740AhnCPxrG+sqJ+CdpcVIR45vCV5d7EENcXomPwgMpWBdtsB3uawBL W16FpqHiadncCiOIC+3it5chhA7WOvIUbVbdL0BwmLzODuhk5dtz+1WpHSDZlv55 8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:46 2026 by rpki-client