This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oNsIfKS1ojnrcx_UCRqk6Q_Tw8c.roa File: oNsIfKS1ojnrcx_UCRqk6Q_Tw8c.roa (raw, json) Hash identifier: RlcTkoKNN87TZalTH3vLn0iYnbuuP9aa9+X3Sb6o9pU= Subject key identifier: A0:DB:08:7C:A4:B5:A2:39:EB:73:1F:D4:09:1A:A4:E9:0F:D3:C3:C7 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB58ECF778C4E6E724AFF384620D5 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oNsIfKS1ojnrcx_UCRqk6Q_Tw8c.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198831 IP address blocks: 213.130.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b5:8e:cf:77:8c:4e:6e:72:4a:ff:38:46:20:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0db087ca4b5a239eb731fd4091aa4e90fd3c3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:c8:83:6b:6d:1a:24:af:52:20:fe:3a:a7: d9:4e:fb:23:46:c1:49:9f:f4:12:7d:ee:53:d3:1e: 55:6e:f6:88:5c:3a:09:0b:1b:7f:15:d1:e2:f8:7d: 84:c0:91:6a:a6:a5:ab:da:7f:b7:51:be:4b:58:2c: 8a:bc:25:51:b4:51:61:76:2a:29:b0:f8:91:29:a8: f4:09:4a:f3:3f:19:1f:7e:42:28:1c:7c:fd:01:32: 9a:00:76:e6:53:c4:ca:91:09:f0:fc:74:92:a9:e8: cb:2a:2a:c5:1f:ba:15:00:f7:55:bb:9e:06:6a:99: ef:cc:f5:ba:a6:cc:4e:ed:3a:da:ad:40:43:4f:f7: 62:4b:fd:22:7d:bf:2d:f4:6c:cd:f8:ea:9b:9a:38: f0:26:b1:27:85:1d:76:5a:51:0a:f5:01:7f:14:c2: 3d:d1:e9:1a:53:8b:36:78:e2:6e:1b:4e:6b:81:68: a2:ba:f4:f1:09:55:d1:8e:99:22:8a:8c:f2:a5:16: cb:34:b0:ef:48:1c:39:aa:ae:61:82:03:9c:d6:7e: ab:cd:54:95:a2:d0:d8:93:56:0b:50:6f:73:a6:69: d2:02:bb:47:51:6a:e8:b3:e9:d6:5a:31:ee:ac:5b: d0:01:9a:24:56:d6:69:12:82:4d:93:55:3f:43:12: fa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DB:08:7C:A4:B5:A2:39:EB:73:1F:D4:09:1A:A4:E9:0F:D3:C3:C7 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oNsIfKS1ojnrcx_UCRqk6Q_Tw8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.130.153.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:65:86:79:46:b7:7c:b8:a3:fb:be:f6:c0:ec:83:ee:c2:f3: ca:b3:ad:5c:3d:42:4c:e2:37:b0:d2:fd:72:3b:a6:7c:07:2a: 7d:6c:ce:68:3c:80:1d:2b:3d:df:6d:34:7a:96:44:04:7b:64: e1:80:f9:9f:bd:f3:be:11:f7:f4:cd:58:9a:d9:e2:12:a9:71: 21:07:33:ae:56:b7:01:54:81:b2:95:da:09:c9:f5:20:00:b4: 3f:20:ec:9d:b4:83:2a:a2:6f:7e:cd:ae:00:e1:95:3f:8b:ba: 39:b8:b9:f0:d4:e0:85:fb:c7:e0:14:85:23:78:f5:a3:40:7f: 1f:41:b9:f6:d2:8f:45:96:ce:07:1d:74:6c:1c:70:be:c9:df: a0:c1:74:1c:9c:68:e8:47:d3:13:b9:0d:9b:d3:0d:d8:14:0c: 9c:5c:e7:19:3f:d3:66:ff:82:56:b5:92:70:45:93:87:72:12: 92:23:01:70:a2:9f:00:9c:fa:54:a4:ac:1b:07:aa:c2:b8:af: a2:bd:1e:b7:74:bb:38:d7:7c:2e:43:d5:87:66:0a:8b:f2:d0: 02:87:d3:56:7b:ec:62:cc:83:22:6f:04:e2:98:67:82:4a:1c: 09:a8:82:46:72:c7:2c:91:b7:ff:94:f3:4e:b6:20:ab:4d:3c: 2b:d0:dc:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrWOz3eMTm5ySv84RiDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGRiMDg3Y2E0YjVhMjM5ZWI3MzFmZDQwOTFhYTRlOTBmZDNjM2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcXIg2ttGiSvUiD+OqfZTvsjRsFJ n/QSfe5T0x5VbvaIXDoJCxt/FdHi+H2EwJFqpqWr2n+3Ub5LWCyKvCVRtFFhdiop sPiRKaj0CUrzPxkffkIoHHz9ATKaAHbmU8TKkQnw/HSSqejLKirFH7oVAPdVu54G apnvzPW6psxO7TrarUBDT/diS/0ifb8t9GzN+OqbmjjwJrEnhR12WlEK9QF/FMI9 0ekaU4s2eOJuG05rgWiiuvTxCVXRjpkiiozypRbLNLDvSBw5qq5hggOc1n6rzVSV otDYk1YLUG9zpmnSArtHUWros+nWWjHurFvQAZokVtZpEoJNk1U/QxL6oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKDbCHyktaI563Mf1AkapOkP08PHMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvb05zSWZLUzFvam5yY3hfVUNScWs2UV9UdzhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YKZMA0G CSqGSIb3DQEBCwUAA4IBAQB/ZYZ5Rrd8uKP7vvbA7IPuwvPKs61cPUJM4jew0v1y O6Z8Byp9bM5oPIAdKz3fbTR6lkQEe2ThgPmfvfO+Eff0zVia2eISqXEhBzOuVrcB VIGyldoJyfUgALQ/IOydtIMqom9+za4A4ZU/i7o5uLnw1OCF+8fgFIUjePWjQH8f Qbn20o9Fls4HHXRsHHC+yd+gwXQcnGjoR9MTuQ2b0w3YFAycXOcZP9Nm/4JWtZJw RZOHchKSIwFwop8AnPpUpKwbB6rCuK+ivR63dLs413wuQ9WHZgqL8tACh9NWe+xi zIMibwTimGeCShwJqIJGcscskbf/lPNOtiCrTTwr0Nyh -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:02 2026 by rpki-client