This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/74xdlthipiPwmQdVtWpcn9yMpH0.roa File: 74xdlthipiPwmQdVtWpcn9yMpH0.roa (raw, json) Hash identifier: p90jbIWz3kNDEWy5wNiYtEyIp2vg1/zc3mIlW5yWFFQ= Subject key identifier: EF:8C:5D:96:D8:62:A6:23:F0:99:07:55:B5:6A:5C:9F:DC:8C:A4:7D Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Certificate serial: 019B7D5CA383E125D8153D2ACD21ACD2AF34 Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/74xdlthipiPwmQdVtWpcn9yMpH0.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 212.102.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a3:83:e1:25:d8:15:3d:2a:cd:21:ac:d2:af:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef8c5d96d862a623f0990755b56a5c9fdc8ca47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:ba:60:4e:68:37:11:58:8a:63:60:1a:1f: ac:bd:d2:e1:05:d2:66:46:c5:49:20:79:fd:57:da: 5f:58:5f:66:e9:8c:c9:c7:cd:ac:3b:2c:b8:6f:45: a5:3d:fe:61:cc:ec:5c:85:6e:58:c3:b1:54:3b:48: 60:30:35:ac:7f:c1:61:82:60:07:d8:4d:67:e9:53: 4b:ea:b4:11:fc:6c:18:51:b4:cf:3e:03:5b:30:0e: 17:ff:2a:ab:a7:99:6a:25:c8:f7:46:7d:ba:59:83: 8a:92:19:45:7a:70:e7:bf:d1:59:41:45:e8:cd:8c: 61:06:fc:e0:d3:1a:a8:36:59:75:bd:c2:19:b4:33: db:a5:e5:da:a9:80:51:ff:e7:08:e7:43:83:03:7f: 79:40:7f:b9:3e:7d:d1:e3:64:90:8d:7c:25:10:b2: eb:8e:dd:00:73:c5:b3:16:e6:52:b5:47:f4:4b:69: e5:29:c1:87:fc:86:f2:33:f5:9c:9e:8d:a7:8e:3d: 86:00:13:35:d7:d2:32:a6:b1:c3:50:16:59:e9:dc: b5:6c:8c:ef:75:69:39:59:9b:83:92:01:8b:7b:b8: 21:fe:2b:30:0d:be:62:bc:38:51:69:64:a5:8a:b6: 95:2a:8a:ca:b9:2d:57:fb:6e:37:09:68:ed:fb:df: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8C:5D:96:D8:62:A6:23:F0:99:07:55:B5:6A:5C:9F:DC:8C:A4:7D X509v3 Authority Key Identifier: keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/74xdlthipiPwmQdVtWpcn9yMpH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.144.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:2a:e6:15:83:fa:64:b8:85:ae:42:bb:7e:38:4e:d2:e5:b8: cc:ae:9f:33:22:de:2c:81:89:91:da:79:f6:1a:d7:75:f5:bb: 28:01:03:bb:f3:2f:73:95:cb:7e:ba:8b:1e:c3:94:bf:40:16: ea:4f:a1:08:e3:f8:b3:82:00:0d:e5:96:d4:ce:25:00:2d:fe: ee:b3:b3:8d:9a:ea:4b:67:ba:6d:1e:c8:a0:4d:85:2b:f0:e5: 76:99:9f:4b:4a:95:ea:6f:1a:4b:8d:6f:06:d3:7c:5f:c5:e6: c8:6c:37:16:6a:ca:f3:79:af:b1:83:d9:2a:65:a7:e2:46:0b: e1:57:30:b5:e5:ae:43:cf:de:56:1a:5f:7b:52:8d:fe:c8:d4: 5e:29:32:eb:3f:47:0d:2d:4c:0c:7c:d9:c2:8e:3b:1d:92:0c: c0:38:b0:1e:b0:08:57:e4:8d:79:1d:84:92:ed:b5:a9:e0:00: 41:c2:16:25:32:d6:42:10:e7:0c:4a:7d:51:d3:e8:72:51:a8: 57:7c:61:76:85:8d:5a:25:94:e9:59:5d:54:c3:d7:d0:3a:e8: 5d:c1:da:36:e8:04:66:3e:30:00:6c:74:7f:a3:e8:fa:b3:13: e1:d7:3f:cf:a9:88:5d:e6:0f:98:8c:e7:d0:a1:91:cd:b6:66: ac:cc:63:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKOD4SXYFT0qzSGs0q80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjI2NDNiYTZhMGVhZWY1NzMyOWJmNWJkYzkwYjMxYzM4 NmY4YTcwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjhjNWQ5NmQ4NjJhNjIzZjA5OTA3NTViNTZhNWM5ZmRjOGNhNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvru6YE5oNxFYimNgGh+svdLhBdJm RsVJIHn9V9pfWF9m6YzJx82sOyy4b0WlPf5hzOxchW5Yw7FUO0hgMDWsf8FhgmAH 2E1n6VNL6rQR/GwYUbTPPgNbMA4X/yqrp5lqJcj3Rn26WYOKkhlFenDnv9FZQUXo zYxhBvzg0xqoNll1vcIZtDPbpeXaqYBR/+cI50ODA395QH+5Pn3R42SQjXwlELLr jt0Ac8WzFuZStUf0S2nlKcGH/IbyM/Wcno2njj2GABM119IyprHDUBZZ6dy1bIzv dWk5WZuDkgGLe7gh/iswDb5ivDhRaWSliraVKorKuS1X+243CWjt+98GdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO+MXZbYYqYj8JkHVbVqXJ/cjKR9MB8GA1UdIwQY MBaAFDwiZDumoOrvVzKb9b3JCzHDhvinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUt ZmExNDg2ZWE3OThjLzEvNzR4ZGx0aGlwaVB3bVFkVnRXcGNuOXlNcEgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUtZmExNDg2ZWE3OThj LzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1GaQMA0G CSqGSIb3DQEBCwUAA4IBAQB9KuYVg/pkuIWuQrt+OE7S5bjMrp8zIt4sgYmR2nn2 Gtd19bsoAQO78y9zlct+uosew5S/QBbqT6EI4/izggAN5ZbUziUALf7us7ONmupL Z7ptHsigTYUr8OV2mZ9LSpXqbxpLjW8G03xfxebIbDcWasrzea+xg9kqZafiRgvh VzC15a5Dz95WGl97Uo3+yNReKTLrP0cNLUwMfNnCjjsdkgzAOLAesAhX5I15HYSS 7bWp4ABBwhYlMtZCEOcMSn1R0+hyUahXfGF2hY1aJZTpWV1Uw9fQOuhdwdo26ARm PjAAbHR/o+j6sxPh1z/PqYhd5g+YjOfQoZHNtmaszGOf -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:41 2026 by rpki-client