This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/DsSKa3jlsMcS8PZEA_lBBDaVuS0.roa File: DsSKa3jlsMcS8PZEA_lBBDaVuS0.roa (raw, json) Hash identifier: sCNeXSE7wm7FbJmQ9E5zHLdMIcgEdKSApg1Y+J8Rl58= Subject key identifier: 0E:C4:8A:6B:78:E5:B0:C7:12:F0:F6:44:03:F9:41:04:36:95:B9:2D Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Certificate serial: 019B7D5CA2D36D9BB940545E43726AFA0056 Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/DsSKa3jlsMcS8PZEA_lBBDaVuS0.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9081 IP address blocks: 212.102.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a2:d3:6d:9b:b9:40:54:5e:43:72:6a:fa:00:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ec48a6b78e5b0c712f0f64403f941043695b92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:e9:05:c3:6f:42:03:30:75:a9:d3:a8:82: ab:57:84:45:c2:41:d5:09:a6:d1:19:5a:82:d2:cc: b1:85:e6:c5:cb:3a:38:26:76:1e:1c:e7:f8:af:41: c0:8c:a8:6c:6b:06:8f:bc:4d:5a:fc:50:8a:28:06: 53:db:04:59:cc:89:a0:20:14:af:84:5f:e7:fb:f9: ec:8e:9d:08:b4:14:85:b6:a3:1a:ce:e9:e3:72:15: 38:9b:a8:db:3c:fe:9e:86:bf:18:99:05:4e:f3:0a: 0a:3a:ab:4a:a7:c4:8a:8d:6b:a2:ed:85:af:e5:e9: ad:86:63:3a:2a:27:a4:77:16:47:da:6b:c8:22:2f: ef:69:d9:a7:bd:b7:0c:b2:90:47:49:f4:e8:ac:81: e9:5a:ac:16:10:84:25:a4:0e:b2:fa:f0:f7:55:de: 4f:c7:b7:42:03:bd:f4:ad:7a:fe:ec:59:ee:97:3f: c0:f6:82:67:f7:e1:1b:79:74:0c:44:c1:33:75:f8: 42:66:b3:ef:c3:0a:29:d3:fb:28:19:2c:da:78:4f: df:cf:01:f8:6d:d3:fc:aa:ed:12:00:7e:b6:f0:41: 86:63:a1:10:09:f5:8f:c4:00:98:cc:ae:01:a6:0b: 55:03:2c:77:db:4d:e5:9e:aa:3e:fe:e1:66:a2:9a: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C4:8A:6B:78:E5:B0:C7:12:F0:F6:44:03:F9:41:04:36:95:B9:2D X509v3 Authority Key Identifier: keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/DsSKa3jlsMcS8PZEA_lBBDaVuS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.128.0/20 Signature Algorithm: sha256WithRSAEncryption 87:20:69:0c:b2:98:5b:28:bd:f2:23:2f:df:2a:95:15:60:4f: fa:85:f4:1c:ec:71:ea:0b:cb:0b:46:96:43:c3:f6:58:d5:f1: 65:cc:70:55:1e:f8:e6:be:a9:25:b5:ae:d7:02:af:51:00:ff: 86:fb:86:be:44:58:21:90:75:46:67:47:09:55:2c:29:db:28: 27:f8:4c:e5:21:b7:7a:5e:55:c8:0a:67:ea:84:b1:d0:2c:0f: 25:51:91:6e:6c:e2:f1:50:cc:8d:04:66:ae:a6:fd:0e:bc:85: 0c:bb:dd:1f:2b:0c:d8:ee:b8:b4:97:62:cf:64:0e:a7:02:21: 76:72:7a:d8:bb:57:93:69:51:99:86:85:4f:53:d1:06:45:88: 8d:89:f7:db:57:3b:de:60:80:9e:c1:09:e3:bf:e4:8e:69:40: 3a:46:10:b8:2b:8f:85:07:d2:0d:87:2d:c6:2b:fc:04:c6:95: 85:3c:ac:62:e2:35:11:f2:da:04:9f:83:5f:a3:52:6e:78:fb: fb:7f:c9:59:07:ed:52:16:0e:3c:c9:b3:e0:1d:63:c9:69:96: 54:cb:bb:cd:38:b9:19:d8:fe:85:1b:02:66:7f:ab:e1:b9:8e: 0c:e5:10:1b:a4:16:d5:10:86:36:da:1d:5a:ab:9d:73:fa:9d: f6:77:c4:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKLTbZu5QFReQ3Jq+gBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjI2NDNiYTZhMGVhZWY1NzMyOWJmNWJkYzkwYjMxYzM4 NmY4YTcwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWM0OGE2Yjc4ZTViMGM3MTJmMGY2NDQwM2Y5NDEwNDM2OTViOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhnpBcNvQgMwdanTqIKrV4RFwkHV CabRGVqC0syxhebFyzo4JnYeHOf4r0HAjKhsawaPvE1a/FCKKAZT2wRZzImgIBSv hF/n+/nsjp0ItBSFtqMazunjchU4m6jbPP6ehr8YmQVO8woKOqtKp8SKjWui7YWv 5emthmM6KiekdxZH2mvIIi/vadmnvbcMspBHSfTorIHpWqwWEIQlpA6y+vD3Vd5P x7dCA730rXr+7Fnulz/A9oJn9+EbeXQMRMEzdfhCZrPvwwop0/soGSzaeE/fzwH4 bdP8qu0SAH628EGGY6EQCfWPxACYzK4BpgtVAyx3203lnqo+/uFmopolFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7Eimt45bDHEvD2RAP5QQQ2lbktMB8GA1UdIwQY MBaAFDwiZDumoOrvVzKb9b3JCzHDhvinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUt ZmExNDg2ZWE3OThjLzEvRHNTS2EzamxzTWNTOFBaRUFfbEJCRGFWdVMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUtZmExNDg2ZWE3OThj LzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1GaAMA0G CSqGSIb3DQEBCwUAA4IBAQCHIGkMsphbKL3yIy/fKpUVYE/6hfQc7HHqC8sLRpZD w/ZY1fFlzHBVHvjmvqklta7XAq9RAP+G+4a+RFghkHVGZ0cJVSwp2ygn+EzlIbd6 XlXICmfqhLHQLA8lUZFubOLxUMyNBGaupv0OvIUMu90fKwzY7ri0l2LPZA6nAiF2 cnrYu1eTaVGZhoVPU9EGRYiNiffbVzveYICewQnjv+SOaUA6RhC4K4+FB9INhy3G K/wExpWFPKxi4jUR8toEn4Nfo1JuePv7f8lZB+1SFg48ybPgHWPJaZZUy7vNOLkZ 2P6FGwJmf6vhuY4M5RAbpBbVEIY22h1aq51z+p32d8Rf -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:34 2026 by rpki-client