This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SvdwvRatp8DB0r8tXSm323eQMIU.roa File: SvdwvRatp8DB0r8tXSm323eQMIU.roa (raw, json) Hash identifier: T3ZwGWbcDDlWodZ1TINlz0OJlY/AkHYVm5FJTxw3oyQ= Subject key identifier: 4A:F7:70:BD:16:AD:A7:C0:C1:D2:BF:2D:5D:29:B7:DB:77:90:30:85 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AA3D40A8620282BA1B7899A671C81 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SvdwvRatp8DB0r8tXSm323eQMIU.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42927 IP address blocks: 213.210.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a3:d4:0a:86:20:28:2b:a1:b7:89:9a:67:1c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4af770bd16ada7c0c1d2bf2d5d29b7db77903085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3e:7e:c3:d0:72:7b:11:fd:0a:63:b4:5e:ff: 2b:48:54:73:21:19:a4:66:54:fb:0c:4d:45:be:ac: 5d:f2:8e:ad:4b:21:2c:82:33:54:ed:9f:6a:c7:e5: fc:5c:40:78:3e:36:be:f2:0e:b1:1c:9f:e8:1d:d6: 16:63:98:f6:8b:b1:a0:9d:1d:4d:31:af:13:36:c3: 94:9d:66:ee:9a:b4:fc:2c:b6:10:8b:64:d2:31:a8: 39:dc:85:ba:91:1d:1c:58:ff:db:d1:7a:8c:81:a7: cc:86:b5:15:8a:be:72:22:ad:9c:66:05:be:14:5b: e1:fb:98:6f:1d:06:86:2a:dd:97:7e:7a:1f:5a:cb: 30:92:7c:8b:f4:28:f5:2a:65:b3:34:8e:ce:48:90: 4f:18:7b:f2:7e:b3:c2:dd:a4:96:4e:26:e2:85:50: c4:7e:f2:62:aa:73:03:98:ff:8e:63:5b:18:a8:ad: a0:78:8c:02:48:10:37:20:21:ee:a7:dc:ce:98:70: 69:83:5c:f2:4b:35:f7:16:bc:e0:6e:33:d4:e4:be: f1:a2:a3:48:31:4d:c2:6c:1f:85:7a:0d:0e:ee:5d: 6e:73:33:1d:83:84:27:38:0d:d4:74:00:09:8c:3c: b6:95:84:26:5c:2b:84:9b:3c:f3:6b:c3:1d:f3:c9: 40:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F7:70:BD:16:AD:A7:C0:C1:D2:BF:2D:5D:29:B7:DB:77:90:30:85 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SvdwvRatp8DB0r8tXSm323eQMIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.210.35.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:34:b9:03:d9:50:83:9f:3b:99:c9:e0:1d:55:47:aa:7e:a9: 78:79:61:a6:a0:40:e7:a0:a5:b0:6f:37:78:bb:f8:46:73:4f: 2f:32:d9:46:73:91:32:55:47:a6:af:d9:08:b7:32:39:a4:b4: 7d:b7:97:ae:55:e2:76:15:38:39:a3:bb:44:00:95:38:63:6c: 41:6c:f8:19:c8:f3:ea:a2:5c:f9:45:91:c2:42:10:61:f5:be: 7d:64:fa:3b:03:d5:cb:f6:5b:37:69:93:3a:2d:92:c0:71:b5: 0d:c5:09:0f:13:05:ca:9e:02:01:cf:56:20:25:5b:5b:5c:f4: ac:44:71:e3:22:80:11:79:c0:f7:e4:d5:0d:db:ee:af:6b:27: d9:1a:4f:30:e6:d5:77:08:db:d5:64:e7:eb:65:9d:73:77:3b: 6e:7f:79:c1:48:e6:6c:55:a0:1a:83:35:88:ef:c2:0b:25:f0: 4e:7b:cf:4a:7f:68:c7:16:22:6c:79:24:96:59:57:81:0e:bb: d6:11:28:7b:30:64:9a:cb:c5:ee:a3:29:24:ce:53:9e:d5:8a: 93:27:67:99:43:ec:21:aa:30:59:37:c8:70:d0:08:b6:a4:56: 35:1b:3a:25:07:58:55:ca:f9:3e:3c:86:20:58:50:7c:21:7c: a7:00:eb:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqPUCoYgKCuht4maZxyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWY3NzBiZDE2YWRhN2MwYzFkMmJmMmQ1ZDI5YjdkYjc3OTAzMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT5+w9ByexH9CmO0Xv8rSFRzIRmk ZlT7DE1Fvqxd8o6tSyEsgjNU7Z9qx+X8XEB4Pja+8g6xHJ/oHdYWY5j2i7GgnR1N Ma8TNsOUnWbumrT8LLYQi2TSMag53IW6kR0cWP/b0XqMgafMhrUVir5yIq2cZgW+ FFvh+5hvHQaGKt2XfnofWsswknyL9Cj1KmWzNI7OSJBPGHvyfrPC3aSWTibihVDE fvJiqnMDmP+OY1sYqK2geIwCSBA3ICHup9zOmHBpg1zySzX3FrzgbjPU5L7xoqNI MU3CbB+Feg0O7l1uczMdg4QnOA3UdAAJjDy2lYQmXCuEmzzza8Md88lAkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEr3cL0WrafAwdK/LV0pt9t3kDCFMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvU3Zkd3ZSYXRwOERCMHI4dFhTbTMyM2VRTUlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dIjMA0G CSqGSIb3DQEBCwUAA4IBAQBvNLkD2VCDnzuZyeAdVUeqfql4eWGmoEDnoKWwbzd4 u/hGc08vMtlGc5EyVUemr9kItzI5pLR9t5euVeJ2FTg5o7tEAJU4Y2xBbPgZyPPq olz5RZHCQhBh9b59ZPo7A9XL9ls3aZM6LZLAcbUNxQkPEwXKngIBz1YgJVtbXPSs RHHjIoARecD35NUN2+6vayfZGk8w5tV3CNvVZOfrZZ1zdztuf3nBSOZsVaAagzWI 78ILJfBOe89Kf2jHFiJseSSWWVeBDrvWESh7MGSay8XuoykkzlOe1YqTJ2eZQ+wh qjBZN8hw0Ai2pFY1GzolB1hVyvk+PIYgWFB8IXynAOu+ -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:53 2026 by rpki-client