This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cqXbqQWt4Vr_-T5sHuRo4H1YEIc.roa File: cqXbqQWt4Vr_-T5sHuRo4H1YEIc.roa (raw, json) Hash identifier: 9NkZKNZmYTi+jaklseQACLrYaCheatEnxde4mSZdIF8= Subject key identifier: 72:A5:DB:A9:05:AD:E1:5A:FF:F9:3E:6C:1E:E4:68:E0:7D:58:10:87 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB81D53390A4A1BFCFC20AB75EFEA Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cqXbqQWt4Vr_-T5sHuRo4H1YEIc.roa Signing time: Thu 01 Jan 2026 16:18:44 +0000 ROA not before: Thu 01 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200131 IP address blocks: 213.210.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b8:1d:53:39:0a:4a:1b:fc:fc:20:ab:75:ef:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72a5dba905ade15afff93e6c1ee468e07d581087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d6:45:9c:21:3c:57:57:b5:07:4a:f8:22:70: db:86:d0:6f:f3:88:a2:e9:c2:27:1a:14:d7:b0:41: c1:05:79:e2:69:84:c2:df:35:3e:dd:3d:e3:ff:93: b4:ed:cf:25:86:4e:aa:18:cd:30:a4:78:39:3d:fd: aa:94:ba:2f:99:71:1f:fd:84:57:8a:88:53:4c:18: 7d:18:17:30:da:a2:b0:80:1f:5b:5e:0c:1b:ac:68: 8a:e7:7d:db:eb:31:4c:fd:87:31:2d:1c:1d:02:ea: 5e:79:47:49:97:ef:8f:88:84:e1:95:97:ed:ec:29: 3f:62:84:9c:13:a7:b0:aa:12:4e:62:d0:52:5c:9b: 4f:cc:51:73:c8:ab:9d:8e:d2:04:67:40:c3:85:f9: 90:58:c2:67:d5:b5:ef:2b:cd:00:02:75:d5:69:7f: aa:27:08:41:1b:a0:71:99:9f:4f:4b:94:66:92:62: 0b:48:9b:68:12:4f:f4:0e:7d:05:be:2e:9e:5a:e5: 1c:af:92:20:a3:75:63:da:42:29:26:c5:da:c4:fc: c3:76:80:95:26:fd:03:fb:d3:f1:c3:fe:32:1b:d7: 1a:ff:82:f3:4c:ae:b7:29:ce:40:bb:30:de:1b:cb: b3:2d:04:d8:8c:da:30:60:27:fe:a6:e4:d7:b1:c2: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A5:DB:A9:05:AD:E1:5A:FF:F9:3E:6C:1E:E4:68:E0:7D:58:10:87 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cqXbqQWt4Vr_-T5sHuRo4H1YEIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.210.40.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:98:69:86:a4:85:a5:37:5b:0c:83:43:e8:a6:e4:c8:28:54: cb:db:2e:af:7c:f1:18:de:1e:e1:96:42:d4:b5:80:58:0a:4c: 86:16:dc:87:e4:be:ae:d3:87:a0:20:53:f3:16:26:b3:7c:27: c8:ca:26:34:f6:ca:c0:9f:0c:7a:5c:be:0c:52:86:7e:13:9e: 90:fe:13:d5:ff:95:24:c9:e2:53:12:6e:7d:3e:ff:8d:2e:90: ae:93:18:6f:60:e4:d5:2a:94:07:a8:f1:37:b9:1d:84:b4:c6: fd:d5:c9:43:84:96:62:84:5a:3b:f9:a4:25:2b:6d:c8:5f:8f: af:49:3a:ba:46:b8:1b:7f:30:00:73:b4:ac:ec:63:7b:f1:0c: c0:56:7f:26:45:2b:59:48:1a:e9:b9:2b:be:75:ba:13:88:65: a1:29:14:3b:35:77:5b:bf:be:a6:03:a0:46:33:07:14:fc:0f: 3b:fe:68:40:7e:b9:81:db:cf:81:87:7d:55:3d:e7:c5:10:29: 1d:d3:47:59:99:f5:ff:6f:78:98:53:76:09:d3:3f:cc:44:3d: 9a:7a:4f:c3:8c:8b:6f:3f:68:b0:7a:5c:41:99:bb:4f:04:69: d2:1e:82:3a:ff:da:f7:8f:b4:bf:5b:80:16:2c:e6:ea:2b:c7: 4a:bc:1d:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrgdUzkKShv8/CCrde/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmE1ZGJhOTA1YWRlMTVhZmZmOTNlNmMxZWU0NjhlMDdkNTgxMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tZFnCE8V1e1B0r4InDbhtBv84ii 6cInGhTXsEHBBXniaYTC3zU+3T3j/5O07c8lhk6qGM0wpHg5Pf2qlLovmXEf/YRX iohTTBh9GBcw2qKwgB9bXgwbrGiK533b6zFM/YcxLRwdAupeeUdJl++PiIThlZft 7Ck/YoScE6ewqhJOYtBSXJtPzFFzyKudjtIEZ0DDhfmQWMJn1bXvK80AAnXVaX+q JwhBG6BxmZ9PS5RmkmILSJtoEk/0Dn0Fvi6eWuUcr5Igo3Vj2kIpJsXaxPzDdoCV Jv0D+9Pxw/4yG9ca/4LzTK63Kc5AuzDeG8uzLQTYjNowYCf+puTXscKyIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKl26kFreFa//k+bB7kaOB9WBCHMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvY3FYYnFRV3Q0VnJfLVQ1c0h1Um80SDFZRUljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dIoMA0G CSqGSIb3DQEBCwUAA4IBAQCLmGmGpIWlN1sMg0PopuTIKFTL2y6vfPEY3h7hlkLU tYBYCkyGFtyH5L6u04egIFPzFiazfCfIyiY09srAnwx6XL4MUoZ+E56Q/hPV/5Uk yeJTEm59Pv+NLpCukxhvYOTVKpQHqPE3uR2EtMb91clDhJZihFo7+aQlK23IX4+v STq6RrgbfzAAc7Ss7GN78QzAVn8mRStZSBrpuSu+dboTiGWhKRQ7NXdbv76mA6BG MwcU/A87/mhAfrmB28+Bh31VPefFECkd00dZmfX/b3iYU3YJ0z/MRD2aek/DjItv P2iwelxBmbtPBGnSHoI6/9r3j7S/W4AWLObqK8dKvB2Z -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:21 2026 by rpki-client