This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/cCVfq15MkQwWtM1jPJjocJnH1Wc.roa File: cCVfq15MkQwWtM1jPJjocJnH1Wc.roa (raw, json) Hash identifier: r85fd8Uvcz/76R6OT32K3Lqo+sirunePwgftHCYO6ns= Subject key identifier: 70:25:5F:AB:5E:4C:91:0C:16:B4:CD:63:3C:98:E8:70:99:C7:D5:67 Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Certificate serial: 019B7D5CA33C5E1DB73929CED81BD20BD654 Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/cCVfq15MkQwWtM1jPJjocJnH1Wc.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 212.102.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a3:3c:5e:1d:b7:39:29:ce:d8:1b:d2:0b:d6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70255fab5e4c910c16b4cd633c98e87099c7d567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:5d:23:c0:b8:b4:bf:a5:6c:75:39:6a:26: eb:a1:67:d1:40:68:c5:03:ac:88:a9:21:f7:65:c2: ec:c4:71:48:fd:a4:50:aa:3a:e3:26:e1:13:d4:db: 2e:5d:dd:e4:7b:98:28:8d:44:d9:05:62:d1:e8:4c: 84:96:86:b6:af:ac:4c:86:86:51:11:77:76:f0:dd: f6:71:12:44:7c:4d:7f:13:0f:8e:22:f2:af:e6:3b: 6e:4a:d0:72:99:43:9e:a9:7b:4e:34:9b:f0:8b:9c: 48:36:4f:e1:c6:d0:5d:c9:ed:53:12:d7:95:2a:05: 26:43:fc:de:4a:78:38:ba:ed:c3:e9:a6:02:9e:d2: 29:f4:8f:df:7d:85:84:1e:5c:70:ee:1d:ef:cb:8c: 0c:4b:a5:01:79:bc:61:66:86:1e:c0:e8:27:87:01: 77:92:8a:25:82:66:a5:e1:90:c8:ce:15:f5:58:a7: bf:9b:62:dd:da:cd:b5:49:67:42:e8:aa:dd:62:ea: 32:d9:54:81:72:99:4e:b4:26:ac:bf:49:c1:23:a1: ee:42:36:67:7a:8a:86:5f:68:83:84:2b:59:6d:39: 4f:2a:5e:d5:4d:a1:bd:7f:12:52:75:fd:f3:09:77: ad:11:fa:37:12:6b:65:1f:fe:13:6e:e0:41:04:59: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:25:5F:AB:5E:4C:91:0C:16:B4:CD:63:3C:98:E8:70:99:C7:D5:67 X509v3 Authority Key Identifier: keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/cCVfq15MkQwWtM1jPJjocJnH1Wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.144.0/20 Signature Algorithm: sha256WithRSAEncryption a3:64:98:d2:99:d1:51:2f:c7:37:7c:9c:9d:cc:f8:49:be:c6: 6b:55:6b:af:be:c2:d9:2f:ca:33:3c:3d:9e:5f:2c:04:60:9d: af:a9:28:a4:10:4d:08:81:07:86:39:36:93:35:57:bd:ae:5e: a9:87:e7:1c:9f:f9:16:16:98:2e:42:5c:f2:d1:ce:e9:34:7a: 97:9c:6e:b7:63:63:1b:ed:2a:06:94:43:09:0e:cc:fb:ef:c0: f7:bc:f5:a0:68:3c:48:39:3d:ea:30:68:22:aa:29:0b:c0:5a: 21:ed:06:8f:34:79:0f:32:27:33:5e:43:1a:d8:2a:c4:e8:d3: 3b:aa:c6:79:f4:ac:62:09:46:a2:29:68:ad:b9:7b:62:8f:06: b5:51:b6:a1:8e:7c:e9:09:6a:6a:99:3e:8d:f4:7c:1e:25:70: 41:c3:21:94:13:58:d3:0c:ba:88:e0:5f:e2:a4:bf:2e:b3:fc: 65:59:49:97:48:6a:c4:24:0c:6a:69:5d:b0:0e:ca:ce:d4:44: a5:eb:08:38:b0:f9:05:72:88:94:21:5b:3c:6d:ff:e7:00:d6: 02:d7:bf:b0:2c:40:cc:71:f6:69:ec:18:71:b7:f8:f0:28:1d: 5e:fb:cc:90:61:43:35:b4:f7:4e:90:ca:ba:75:9b:92:76:8e: 09:5e:50:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKM8Xh23OSnO2BvSC9ZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjI2NDNiYTZhMGVhZWY1NzMyOWJmNWJkYzkwYjMxYzM4 NmY4YTcwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDI1NWZhYjVlNGM5MTBjMTZiNGNkNjMzYzk4ZTg3MDk5YzdkNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrddI8C4tL+lbHU5aibroWfRQGjF A6yIqSH3ZcLsxHFI/aRQqjrjJuET1NsuXd3ke5gojUTZBWLR6EyEloa2r6xMhoZR EXd28N32cRJEfE1/Ew+OIvKv5jtuStBymUOeqXtONJvwi5xINk/hxtBdye1TEteV KgUmQ/zeSng4uu3D6aYCntIp9I/ffYWEHlxw7h3vy4wMS6UBebxhZoYewOgnhwF3 koolgmal4ZDIzhX1WKe/m2Ld2s21SWdC6KrdYuoy2VSBcplOtCasv0nBI6HuQjZn eoqGX2iDhCtZbTlPKl7VTaG9fxJSdf3zCXetEfo3EmtlH/4TbuBBBFnA5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHAlX6teTJEMFrTNYzyY6HCZx9VnMB8GA1UdIwQY MBaAFDwiZDumoOrvVzKb9b3JCzHDhvinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUt ZmExNDg2ZWE3OThjLzEvY0NWZnExNU1rUXdXdE0xalBKam9jSm5IMVdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUtZmExNDg2ZWE3OThj LzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1GaQMA0G CSqGSIb3DQEBCwUAA4IBAQCjZJjSmdFRL8c3fJydzPhJvsZrVWuvvsLZL8ozPD2e XywEYJ2vqSikEE0IgQeGOTaTNVe9rl6ph+ccn/kWFpguQlzy0c7pNHqXnG63Y2Mb 7SoGlEMJDsz778D3vPWgaDxIOT3qMGgiqikLwFoh7QaPNHkPMiczXkMa2CrE6NM7 qsZ59KxiCUaiKWituXtijwa1UbahjnzpCWpqmT6N9HweJXBBwyGUE1jTDLqI4F/i pL8us/xlWUmXSGrEJAxqaV2wDsrO1ESl6wg4sPkFcoiUIVs8bf/nANYC17+wLEDM cfZp7Bhxt/jwKB1e+8yQYUM1tPdOkMq6dZuSdo4JXlBy -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:48 2026 by rpki-client