This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1_5LM72CWbwXTZGBwuMGoCxr0MM.roa File: 1_5LM72CWbwXTZGBwuMGoCxr0MM.roa (raw, json) Hash identifier: ULS15HjSJQ3eLI5PGGKAuw2/j4VBn69jMvqIdr9FdXE= Subject key identifier: D7:FE:4B:33:BD:82:59:BC:17:4D:91:81:C2:E3:06:A0:2C:6B:D0:C3 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD76184E09F6819DC11E3F75B50CB Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1_5LM72CWbwXTZGBwuMGoCxr0MM.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214285 IP address blocks: 213.210.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d7:61:84:e0:9f:68:19:dc:11:e3:f7:5b:50:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7fe4b33bd8259bc174d9181c2e306a02c6bd0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b4:70:4a:08:14:64:d0:86:e4:dd:dd:91:07: ac:43:d3:2c:29:d3:13:32:51:c7:3b:07:77:53:10: e4:06:12:de:f4:de:a9:46:a4:00:d9:9a:25:28:14: 9d:6f:59:cc:ad:42:2a:b5:78:6b:f1:25:5d:5e:7f: 87:25:0d:a7:41:3f:4f:e1:38:c6:b3:09:67:ea:0b: e2:b1:e0:cb:6d:72:3e:b1:18:4a:36:83:50:ad:8a: 74:21:a5:4f:eb:c5:be:88:30:5b:61:19:ca:f3:c0: c1:e1:03:0d:67:b7:90:a4:73:e0:8f:67:57:92:9e: 72:ac:cd:65:9c:cf:c3:ec:b0:d4:e9:1e:61:5c:30: 5e:78:3f:4f:ec:94:60:3b:92:77:da:78:09:71:d2: 15:d4:d6:c3:c1:3a:9f:30:3e:fd:47:78:49:78:55: 18:38:bc:4d:39:4d:d4:87:2a:08:8e:64:04:ac:bd: 7e:53:ec:7b:33:93:be:c6:a6:46:7d:3c:0d:a6:88: aa:c2:93:fb:29:19:de:06:2d:c6:38:87:45:55:67: 60:e3:0e:b5:64:9a:09:cb:1f:9e:b6:d0:8c:c9:d2: 00:69:d4:c0:06:68:75:43:52:9d:60:8c:7e:da:42: 74:a4:7a:ef:35:5a:55:96:32:f1:c0:11:d7:3f:a7: b0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FE:4B:33:BD:82:59:BC:17:4D:91:81:C2:E3:06:A0:2C:6B:D0:C3 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1_5LM72CWbwXTZGBwuMGoCxr0MM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.210.39.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:1e:d3:5f:f0:74:a3:74:2d:e8:b5:ee:92:82:17:26:79:1a: d4:fe:a0:9f:8f:65:80:eb:40:7f:57:48:df:f2:48:0c:24:44: d7:6f:98:6a:b4:21:09:c8:66:c6:69:5d:57:c8:67:c0:ad:05: 55:2b:96:e2:95:01:54:1e:49:e0:3a:48:9e:35:30:24:e5:50: 51:de:4f:12:0e:58:83:b7:55:14:83:ac:59:90:28:d2:7d:f9: 51:6e:d4:73:1b:9e:4c:1c:ee:da:ed:b6:87:ea:62:b0:05:4c: a4:f6:15:b3:85:84:da:65:cd:40:b1:13:13:7a:a2:42:a5:83: 6c:38:00:6d:03:55:62:b1:3b:48:47:7d:de:0b:d8:42:b0:cb: fa:a6:bf:85:60:0a:d0:41:56:b9:aa:25:aa:b5:16:a0:2e:fb: 9f:98:57:43:5f:42:46:30:95:cd:06:a0:cf:30:ab:79:97:5f: 22:10:e0:11:af:36:f4:ca:c1:81:27:b0:d1:65:30:b7:1d:20: 9c:d4:55:48:be:9d:d3:6f:76:9a:54:58:71:87:97:99:95:7b: 7f:af:47:1d:26:8c:9b:b7:22:1c:56:95:03:d0:2a:83:76:22: c2:f4:66:b0:a3:a9:41:f7:68:2c:bd:f7:8d:90:ff:eb:8b:3b: 1c:8b:77:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtdhhOCfaBncEeP3W1DLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2ZlNGIzM2JkODI1OWJjMTc0ZDkxODFjMmUzMDZhMDJjNmJkMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7RwSggUZNCG5N3dkQesQ9MsKdMT MlHHOwd3UxDkBhLe9N6pRqQA2ZolKBSdb1nMrUIqtXhr8SVdXn+HJQ2nQT9P4TjG swln6gviseDLbXI+sRhKNoNQrYp0IaVP68W+iDBbYRnK88DB4QMNZ7eQpHPgj2dX kp5yrM1lnM/D7LDU6R5hXDBeeD9P7JRgO5J32ngJcdIV1NbDwTqfMD79R3hJeFUY OLxNOU3UhyoIjmQErL1+U+x7M5O+xqZGfTwNpoiqwpP7KRneBi3GOIdFVWdg4w61 ZJoJyx+ettCMydIAadTABmh1Q1KdYIx+2kJ0pHrvNVpVljLxwBHXP6ew8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNf+SzO9glm8F02RgcLjBqAsa9DDMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMV81TE03MkNXYndYVFpHQnd1TUdvQ3hyME1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dInMA0G CSqGSIb3DQEBCwUAA4IBAQB/HtNf8HSjdC3ote6SghcmeRrU/qCfj2WA60B/V0jf 8kgMJETXb5hqtCEJyGbGaV1XyGfArQVVK5bilQFUHkngOkieNTAk5VBR3k8SDliD t1UUg6xZkCjSfflRbtRzG55MHO7a7baH6mKwBUyk9hWzhYTaZc1AsRMTeqJCpYNs OABtA1VisTtIR33eC9hCsMv6pr+FYArQQVa5qiWqtRagLvufmFdDX0JGMJXNBqDP MKt5l18iEOARrzb0ysGBJ7DRZTC3HSCc1FVIvp3Tb3aaVFhxh5eZlXt/r0cdJoyb tyIcVpUD0CqDdiLC9Gawo6lB92gsvfeNkP/rizsci3fU -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:47 2026 by rpki-client