This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v_raLlr8jsbSU0vTCBB4huE92YY.roa File: v_raLlr8jsbSU0vTCBB4huE92YY.roa (raw, json) Hash identifier: dOe441xoI95dVtCFiiLeok3mPpEh1kmWB4uRncjnEAo= Subject key identifier: BF:FA:DA:2E:5A:FC:8E:C6:D2:53:4B:D3:08:10:78:86:E1:3D:D9:86 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ACAD0C227EE5D2FFC2FFDD99913BA Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v_raLlr8jsbSU0vTCBB4huE92YY.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212416 IP address blocks: 213.210.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ca:d0:c2:27:ee:5d:2f:fc:2f:fd:d9:99:13:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bffada2e5afc8ec6d2534bd308107886e13dd986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:d1:77:41:ac:c0:46:a9:0d:bd:cf:31:b0: 3e:60:6f:b0:40:7d:5d:82:fc:49:da:84:09:7f:ca: 20:13:66:b1:db:24:4f:fb:91:db:21:be:c4:9b:85: 5f:96:11:12:b5:11:a1:b0:b9:ac:e8:a6:56:78:22: dd:02:8f:cd:9f:69:ae:5b:bd:47:cf:71:ea:9e:f1: 63:b3:ae:5f:c5:11:e7:7a:9f:7d:63:a6:61:bb:06: 9c:36:e6:46:d6:53:3a:06:6c:d0:49:ab:01:c7:e0: e2:ad:80:73:b6:9d:4f:f6:e7:2b:0c:85:da:75:72: 73:3e:c7:c1:6e:e5:e2:e4:0d:8e:01:32:fe:27:0e: d6:0a:a6:aa:ac:52:1b:44:78:79:d8:06:f2:90:f2: 57:6f:4f:24:da:f0:69:72:8c:08:59:b4:1f:77:44: d1:4b:9c:95:ec:2a:1c:86:0f:c8:c7:10:9a:8b:cb: 94:18:5c:a2:d8:41:41:30:a6:d9:84:98:d5:b5:95: 21:e4:1f:6b:e3:96:bf:cc:d0:d4:47:67:f2:eb:71: 3f:1a:be:23:7c:0a:11:2b:04:8d:6d:b0:67:e9:32: e6:0d:db:c9:9b:e7:4f:2c:dc:4d:2f:5e:85:ca:ae: 28:69:42:4e:86:a1:87:21:11:3b:f0:ea:0f:73:9a: 69:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FA:DA:2E:5A:FC:8E:C6:D2:53:4B:D3:08:10:78:86:E1:3D:D9:86 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v_raLlr8jsbSU0vTCBB4huE92YY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.210.59.0/24 Signature Algorithm: sha256WithRSAEncryption 48:d7:65:6c:13:26:5d:d2:a0:da:0a:8e:5f:e9:ef:49:2a:be: 96:e9:3f:de:3a:11:f3:4f:50:10:84:de:92:61:35:bd:00:49: 8c:d7:4d:0b:63:c6:10:3d:8b:f7:39:d6:4c:7d:d0:ae:77:fa: bd:bd:9b:c1:a5:a3:e8:28:c8:0c:e1:4f:ae:c5:d0:01:27:82: 22:de:f2:e2:b0:24:87:11:b1:8d:f2:cc:80:2f:70:4e:7f:a5: 3f:79:04:44:21:ea:50:dd:3d:0e:1c:05:8e:ae:a6:03:ce:80: 5d:4b:c2:80:37:3d:2b:bb:bf:c2:12:3e:22:08:43:8d:05:f0: 4f:94:42:2b:55:9e:1f:6c:7e:a1:54:64:21:da:19:53:28:d6: 0f:44:03:28:a0:a4:cc:d5:6a:a8:08:b7:8f:ab:33:d4:75:ea: b3:bb:9e:d5:7d:9f:3d:84:05:d1:36:00:31:b1:f2:9f:c3:d3: e5:21:b5:6f:aa:a4:c2:09:21:0a:f1:bc:c7:8a:f8:64:79:65: b6:77:7e:55:62:a9:d4:0a:95:4a:3b:58:40:d5:14:5c:43:5f: 30:aa:87:ea:ac:3b:5a:42:27:45:92:04:83:42:25:b0:4c:54: 29:7a:44:5d:ea:33:bf:89:dc:62:1c:a4:50:23:3d:7a:fe:48: f3:d3:5f:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsrQwifuXS/8L/3ZmRO6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmZhZGEyZTVhZmM4ZWM2ZDI1MzRiZDMwODEwNzg4NmUxM2RkOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kvRd0GswEapDb3PMbA+YG+wQH1d gvxJ2oQJf8ogE2ax2yRP+5HbIb7Em4VflhEStRGhsLms6KZWeCLdAo/Nn2muW71H z3HqnvFjs65fxRHnep99Y6ZhuwacNuZG1lM6BmzQSasBx+DirYBztp1P9ucrDIXa dXJzPsfBbuXi5A2OATL+Jw7WCqaqrFIbRHh52AbykPJXb08k2vBpcowIWbQfd0TR S5yV7Cochg/IxxCai8uUGFyi2EFBMKbZhJjVtZUh5B9r45a/zNDUR2fy63E/Gr4j fAoRKwSNbbBn6TLmDdvJm+dPLNxNL16Fyq4oaUJOhqGHIRE78OoPc5pp/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL/62i5a/I7G0lNL0wgQeIbhPdmGMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvdl9yYUxscjhqc2JTVTB2VENCQjRodUU5MllZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dI7MA0G CSqGSIb3DQEBCwUAA4IBAQBI12VsEyZd0qDaCo5f6e9JKr6W6T/eOhHzT1AQhN6S YTW9AEmM100LY8YQPYv3OdZMfdCud/q9vZvBpaPoKMgM4U+uxdABJ4Ii3vLisCSH EbGN8syAL3BOf6U/eQREIepQ3T0OHAWOrqYDzoBdS8KANz0ru7/CEj4iCEONBfBP lEIrVZ4fbH6hVGQh2hlTKNYPRAMooKTM1WqoCLePqzPUdeqzu57VfZ89hAXRNgAx sfKfw9PlIbVvqqTCCSEK8bzHivhkeWW2d35VYqnUCpVKO1hA1RRcQ18wqofqrDta QidFkgSDQiWwTFQpekRd6jO/idxiHKRQIz16/kjz019I -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:53 2026 by rpki-client