This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/8qGSgqlkHDr914hHEHKKhmYVXnE.roa File: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (raw, json) Hash identifier: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI= Subject key identifier: F2:A1:92:82:A9:64:1C:3A:FD:D7:88:47:10:72:8A:86:66:15:5E:71 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019B7F824985559329EC385517B5FF8A5350 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/8qGSgqlkHDr914hHEHKKhmYVXnE.roa Signing time: Fri 02 Jan 2026 16:20:03 +0000 ROA not before: Fri 02 Jan 2026 16:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63142 IP address blocks: 212.118.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:49:85:55:93:29:ec:38:55:17:b5:ff:8a:53:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jan 2 16:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2a19282a9641c3afdd7884710728a8666155e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:73:df:62:92:f5:6e:26:9b:76:36:5b:d9:cd: 4b:32:18:68:8b:97:f0:57:66:a0:57:78:5f:cc:fa: c4:a2:ec:99:0f:0e:97:30:01:d6:10:08:27:50:00: 38:76:31:d1:32:5f:77:93:9b:53:ef:3f:e0:76:d8: 36:36:1c:83:28:96:83:15:e5:ec:ed:09:d7:91:49: 96:bf:bf:78:fb:29:21:5c:db:5f:6b:04:1d:a5:f6: 65:8b:65:97:43:83:63:7e:6a:f7:2d:57:36:ca:9f: df:51:5d:f4:7b:29:d0:00:31:91:e1:1f:7d:95:1c: 69:81:a2:25:59:d3:d3:4d:b0:c6:76:ee:66:8e:85: 92:1b:2c:54:72:e2:cc:55:c8:58:d7:3b:38:7d:ed: 56:9c:4e:5b:4e:bf:c3:0d:8a:f5:fb:4b:11:ec:f8: 77:b4:1a:e7:25:2a:ca:72:77:0f:00:fa:7f:bc:98: 1d:5b:bf:ca:78:f9:0c:85:89:ed:73:70:34:cb:df: 3b:88:65:24:43:09:fa:9b:51:20:3f:bd:a2:b7:4e: d0:c2:af:fc:91:7a:c5:af:d0:38:9a:bd:49:20:fc: 57:22:e5:58:f8:8d:03:d7:6f:12:1f:fc:bc:9b:00: ac:81:0a:d2:cd:44:67:95:64:5a:09:06:56:b9:00: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A1:92:82:A9:64:1C:3A:FD:D7:88:47:10:72:8A:86:66:15:5E:71 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/8qGSgqlkHDr914hHEHKKhmYVXnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.118.245.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:1b:b7:1e:b8:02:ba:40:36:19:53:f9:95:b8:59:54:83:41: b2:56:4d:2e:75:f3:22:fe:71:7d:8d:a4:e9:15:5a:12:8a:54: e2:5d:54:33:17:1d:ee:f8:d0:a7:69:89:cd:ed:56:0d:6a:e6: 22:47:1c:b4:27:6e:f4:1f:d1:81:06:7b:9f:8f:75:75:be:fc: ba:18:5d:8e:7c:80:60:a6:23:5a:36:bc:5c:6c:4b:4c:00:e9: 78:b1:ef:ca:9b:af:8d:e4:5d:55:3b:e7:60:af:d6:fc:09:12: f9:58:05:37:55:aa:f5:d7:05:79:1c:e2:59:fc:e5:ae:2d:ca: 06:61:38:35:ea:17:bd:6c:08:06:77:2b:a2:d8:0e:a7:97:21: 72:f7:3c:42:9c:aa:de:d1:99:75:15:53:bc:df:85:8f:4c:fc: 60:bb:b7:ec:eb:73:00:28:52:19:bd:4b:dc:94:34:5d:3a:68: 38:be:c3:fe:27:82:b3:52:7f:24:5c:82:8a:40:87:55:d5:fe: bc:d8:99:57:fa:8a:db:14:e3:e1:79:ac:4d:76:e1:d9:0b:1b: b3:79:f9:c2:77:30:f8:8a:a3:58:1a:10:c0:fd:36:25:7c:50: fb:3a:f1:ce:f5:c0:6b:85:ec:6e:9a:62:26:e6:47:44:a3:31: e0:b2:08:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gkmFVZMp7DhVF7X/ilNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwMTAyMTYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmExOTI4MmE5NjQxYzNhZmRkNzg4NDcxMDcyOGE4NjY2MTU1ZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHPfYpL1biabdjZb2c1LMhhoi5fw V2agV3hfzPrEouyZDw6XMAHWEAgnUAA4djHRMl93k5tT7z/gdtg2NhyDKJaDFeXs 7QnXkUmWv794+ykhXNtfawQdpfZli2WXQ4Njfmr3LVc2yp/fUV30eynQADGR4R99 lRxpgaIlWdPTTbDGdu5mjoWSGyxUcuLMVchY1zs4fe1WnE5bTr/DDYr1+0sR7Ph3 tBrnJSrKcncPAPp/vJgdW7/KePkMhYntc3A0y987iGUkQwn6m1EgP72it07Qwq/8 kXrFr9A4mr1JIPxXIuVY+I0D128SH/y8mwCsgQrSzURnlWRaCQZWuQDtIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPKhkoKpZBw6/deIRxByioZmFV5xMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvOHFHU2dxbGtIRHI5MTRoSEVIS0tobVlWWG5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Hb1MA0G CSqGSIb3DQEBCwUAA4IBAQBdG7ceuAK6QDYZU/mVuFlUg0GyVk0udfMi/nF9jaTp FVoSilTiXVQzFx3u+NCnaYnN7VYNauYiRxy0J270H9GBBnufj3V1vvy6GF2OfIBg piNaNrxcbEtMAOl4se/Km6+N5F1VO+dgr9b8CRL5WAU3Var11wV5HOJZ/OWuLcoG YTg16he9bAgGdyui2A6nlyFy9zxCnKre0Zl1FVO834WPTPxgu7fs63MAKFIZvUvc lDRdOmg4vsP+J4KzUn8kXIKKQIdV1f682JlX+orbFOPheaxNduHZCxuzefnCdzD4 iqNYGhDA/TYlfFD7OvHO9cBrhexummIm5kdEozHgsggK -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:36 2026 by rpki-client