This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/CNslXorIhHcxu1ZmEwT8mrYvs6k.roa File: CNslXorIhHcxu1ZmEwT8mrYvs6k.roa (raw, json) Hash identifier: s1ROfgQwLlFxkAsbeS9eF9uhXnn1miGuc5wD3r3iLCo= Subject key identifier: 08:DB:25:5E:8A:C8:84:77:31:BB:56:66:13:04:FC:9A:B6:2F:B3:A9 Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6 Certificate serial: 019B7EA7272F41AD4D9CA1926878FCA335AB Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/CNslXorIhHcxu1ZmEwT8mrYvs6k.roa Signing time: Fri 02 Jan 2026 12:20:42 +0000 ROA not before: Fri 02 Jan 2026 12:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208943 IP address blocks: 213.108.131.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:27:2f:41:ad:4d:9c:a1:92:68:78:fc:a3:35:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6 Validity Not Before: Jan 2 12:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08db255e8ac8847731bb56661304fc9ab62fb3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5a:15:40:03:4b:4a:3e:62:f9:48:b3:16:07: ff:dd:0a:e6:fd:c3:34:43:9b:2e:f0:ee:da:a6:27: 76:49:eb:30:22:19:cd:3b:71:68:7e:7f:e1:9f:ff: 66:e1:fe:69:02:6b:3a:cb:69:37:04:ca:78:00:ab: 45:7a:3a:82:ef:71:81:14:c9:ca:17:97:0a:9b:54: 24:ba:1a:0f:71:dd:31:02:b7:0e:8d:95:e5:7f:de: 07:de:94:34:18:06:61:43:4b:70:9f:69:74:9b:5a: 8a:ec:1f:80:da:db:18:1c:ac:89:96:28:e4:31:8f: 16:a0:c7:8a:5b:93:1d:63:83:1c:67:36:8c:c7:a0: 45:41:17:7a:ae:cc:90:a5:37:c8:8b:00:a7:6c:be: 8a:3a:30:ba:cd:be:19:59:99:ce:49:7e:14:09:4a: 6b:16:20:b8:19:45:bd:d9:29:42:98:46:e0:cc:f2: 9b:7f:03:bd:16:c3:5c:f6:38:25:4f:c2:5b:61:30: 3d:0c:29:b9:d0:ea:41:ed:98:df:97:43:89:ac:e0: a4:05:96:d3:85:e7:51:1b:c2:54:df:95:96:3f:37: 38:87:22:a5:63:8b:6a:e3:cd:28:f2:92:a5:80:ef: 4e:df:23:c6:2d:e8:c8:6a:93:7e:27:70:b6:38:2d: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DB:25:5E:8A:C8:84:77:31:BB:56:66:13:04:FC:9A:B6:2F:B3:A9 X509v3 Authority Key Identifier: keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/CNslXorIhHcxu1ZmEwT8mrYvs6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.108.131.0/24 Signature Algorithm: sha256WithRSAEncryption a4:d3:c9:9c:77:c0:d7:41:eb:dd:e4:3d:6f:95:a2:62:09:fd: c3:c4:9d:71:49:cb:cc:fe:ae:0c:8d:26:4a:cf:43:25:4f:4a: 6a:38:69:6f:ff:a1:15:30:82:f7:ca:fb:5c:a7:98:fd:81:b2: 69:77:9a:fc:19:37:02:04:fe:27:0e:50:70:99:eb:71:01:b1: e4:58:7e:0f:d4:26:d4:b3:0e:82:28:a0:07:8e:14:59:72:38: 98:24:46:24:ca:85:f7:50:ce:84:6f:92:9a:01:c8:8b:60:2b: 74:cb:65:9c:e7:64:47:1b:93:4b:89:e3:8d:88:70:54:13:9b: 62:d5:df:e3:74:69:51:26:b5:da:70:a1:4c:22:a7:2f:a1:b0: 4b:60:03:ba:2e:f6:38:ac:6d:a2:94:d6:35:93:0d:53:d7:89: 1d:15:1d:a7:73:7a:61:8b:d5:f3:08:65:32:77:b8:78:89:97: ac:ea:06:93:76:54:40:e1:ab:cf:6e:b0:31:17:50:2d:cd:97: 5a:c7:93:a2:b8:2a:c0:88:4a:a7:87:ad:1a:b8:d9:e8:7c:73: f5:1f:08:35:10:a7:39:79:69:e6:6c:7e:ec:4b:27:5e:96:37: d5:4f:f1:fc:46:73:46:1a:ea:1e:0f:11:44:2b:e8:35:a5:b4: 2b:57:1f:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pycvQa1NnKGSaHj8ozWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZWM1N2JjODQ2NGZlYzJlOWExYjA5OGZmY2UzNGMyMWFh ZjljYTYwHhcNMjYwMTAyMTIyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGRiMjU1ZThhYzg4NDc3MzFiYjU2NjYxMzA0ZmM5YWI2MmZiM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVoVQANLSj5i+UizFgf/3Qrm/cM0 Q5su8O7apid2SeswIhnNO3Fofn/hn/9m4f5pAms6y2k3BMp4AKtFejqC73GBFMnK F5cKm1QkuhoPcd0xArcOjZXlf94H3pQ0GAZhQ0twn2l0m1qK7B+A2tsYHKyJlijk MY8WoMeKW5MdY4McZzaMx6BFQRd6rsyQpTfIiwCnbL6KOjC6zb4ZWZnOSX4UCUpr FiC4GUW92SlCmEbgzPKbfwO9FsNc9jglT8JbYTA9DCm50OpB7Zjfl0OJrOCkBZbT hedRG8JU35WWPzc4hyKlY4tq480o8pKlgO9O3yPGLejIapN+J3C2OC33XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjbJV6KyIR3MbtWZhME/Jq2L7OpMB8GA1UdIwQY MBaAFKnsV7yEZP7C6aGwmP/ONMIar5ymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMt MTlhM2M1NjQ5YjU3LzEvQ05zbFhvckloSGN4dTFabUV3VDhtcll2czZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMtMTlhM2M1NjQ5YjU3 LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1WyDMA0G CSqGSIb3DQEBCwUAA4IBAQCk08mcd8DXQevd5D1vlaJiCf3DxJ1xScvM/q4MjSZK z0MlT0pqOGlv/6EVMIL3yvtcp5j9gbJpd5r8GTcCBP4nDlBwmetxAbHkWH4P1CbU sw6CKKAHjhRZcjiYJEYkyoX3UM6Eb5KaAciLYCt0y2Wc52RHG5NLieONiHBUE5ti 1d/jdGlRJrXacKFMIqcvobBLYAO6LvY4rG2ilNY1kw1T14kdFR2nc3phi9XzCGUy d7h4iZes6gaTdlRA4avPbrAxF1AtzZdax5OiuCrAiEqnh60auNnofHP1Hwg1EKc5 eWnmbH7sSydeljfVT/H8RnNGGuoeDxFEK+g1pbQrVx8B -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:42 2026 by rpki-client