This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wiYJRoncGQ8uGk-YBDKA-jP4mpk.roa File: wiYJRoncGQ8uGk-YBDKA-jP4mpk.roa (raw, json) Hash identifier: 6dS0l5aZizhftz+fvQNnKg128l2zW/Xa7LCFZa3tGF4= Subject key identifier: C2:26:09:46:89:DC:19:0F:2E:1A:4F:98:04:32:80:FA:33:F8:9A:99 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15C3961DA82B7FB749CB9DAB513213 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wiYJRoncGQ8uGk-YBDKA-jP4mpk.roa Signing time: Fri 02 Jan 2026 14:21:31 +0000 ROA not before: Fri 02 Jan 2026 14:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206252 IP address blocks: 213.99.42.0/24 maxlen: 24 217.124.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c3:96:1d:a8:2b:7f:b7:49:cb:9d:ab:51:32:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c226094689dc190f2e1a4f98043280fa33f89a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:8d:8c:f2:b6:a7:f7:f1:a4:2c:9a:b6:0b: 23:f4:0a:f0:c8:4d:6f:85:98:ab:e7:57:67:42:b4: 7b:28:54:b0:fe:64:da:37:bd:f0:07:b4:ee:2f:8e: d6:e2:a4:a1:c3:11:b0:f3:fd:a7:0e:cd:0f:ee:fb: 77:6d:14:2d:28:33:9c:0e:3f:86:86:19:95:a1:0d: cf:0c:1c:fb:c8:69:5e:16:33:8f:76:7b:b6:dc:81: 95:f8:d0:8c:77:7c:90:06:72:d6:3a:55:e6:06:b5: ef:63:50:5a:f0:38:40:35:4e:71:dc:a5:24:18:5d: 8f:51:75:3b:eb:94:57:11:7d:69:2e:ff:5e:ac:04: f3:e1:05:86:42:f2:bd:4d:ff:b8:87:a1:f7:e5:b9: ff:19:11:7c:03:7e:89:8d:bc:d5:50:8d:41:36:50: 71:25:7a:32:6b:87:ba:65:96:e3:7b:b0:f8:28:f4: 11:db:6d:ed:32:ed:eb:3e:8c:0a:75:70:dc:d4:de: 7d:1b:1d:f7:39:51:9e:a1:5d:5a:1d:0c:3d:55:41: 53:da:f0:7b:29:a1:66:62:da:19:04:ef:bb:4b:98: 6f:8c:75:3f:b8:49:fe:f0:7f:1b:1d:25:f5:36:3a: 49:3f:2d:20:8c:de:2c:00:ce:04:14:2a:6f:e6:d9: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:26:09:46:89:DC:19:0F:2E:1A:4F:98:04:32:80:FA:33:F8:9A:99 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wiYJRoncGQ8uGk-YBDKA-jP4mpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.99.42.0/24 217.124.172.0/23 Signature Algorithm: sha256WithRSAEncryption cb:76:40:62:a0:b5:17:5c:01:b3:6a:59:38:45:52:80:4f:ae: a1:e6:da:f7:96:9d:ca:4e:f9:5b:7f:b9:0d:79:0a:e9:18:37: 72:2b:0c:c5:8f:b8:a5:44:a6:77:0d:b1:4b:c0:ab:75:d2:01: be:85:09:86:7d:9a:64:db:fb:55:ac:cf:52:75:b8:10:84:55: 34:f3:4a:ff:a9:19:1f:b0:aa:56:8b:21:11:e0:4a:dd:4d:8f: d6:fe:eb:53:d7:de:19:ff:36:37:5c:04:5e:8d:81:f0:bd:f5: 02:1c:4e:7b:15:46:f0:65:98:06:53:c6:70:89:c3:83:f6:5b: a2:b0:b6:2a:f4:e0:9a:1f:37:52:44:78:56:d7:67:91:1c:17: ac:b7:47:ae:96:52:fe:6b:9c:2a:4f:13:fc:6c:ad:25:6e:df: 71:3a:e9:0b:60:4a:c2:20:3c:88:23:9a:60:fc:ed:37:bb:17: c9:b5:81:67:cb:3f:9d:0d:c0:bb:0f:bf:8a:3d:1e:a8:03:15: d2:62:e3:dc:66:f4:06:af:65:e7:a1:7c:6c:8f:ed:d7:ee:48: 7b:41:94:c0:36:d4:6e:40:3e:24:66:f9:de:42:c3:c1:22:0e: a8:dd:ee:35:71:8b:11:b0:65:6f:18:94:84:51:1d:45:93:2c: 5e:4a:5a:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FcOWHagrf7dJy52rUTITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjI2MDk0Njg5ZGMxOTBmMmUxYTRmOTgwNDMyODBmYTMzZjg5YTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsaNjPK2p/fxpCyatgsj9ArwyE1v hZir51dnQrR7KFSw/mTaN73wB7TuL47W4qShwxGw8/2nDs0P7vt3bRQtKDOcDj+G hhmVoQ3PDBz7yGleFjOPdnu23IGV+NCMd3yQBnLWOlXmBrXvY1Ba8DhANU5x3KUk GF2PUXU765RXEX1pLv9erATz4QWGQvK9Tf+4h6H35bn/GRF8A36JjbzVUI1BNlBx JXoya4e6ZZbje7D4KPQR223tMu3rPowKdXDc1N59Gx33OVGeoV1aHQw9VUFT2vB7 KaFmYtoZBO+7S5hvjHU/uEn+8H8bHSX1NjpJPy0gjN4sAM4EFCpv5tmj5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMImCUaJ3BkPLhpPmAQygPoz+JqZMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvd2lZSlJvbmNHUTh1R2stWUJES0EtalA0bXBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1WMqAwQB 2XysMA0GCSqGSIb3DQEBCwUAA4IBAQDLdkBioLUXXAGzalk4RVKAT66h5tr3lp3K Tvlbf7kNeQrpGDdyKwzFj7ilRKZ3DbFLwKt10gG+hQmGfZpk2/tVrM9SdbgQhFU0 80r/qRkfsKpWiyER4ErdTY/W/utT194Z/zY3XARejYHwvfUCHE57FUbwZZgGU8Zw icOD9luisLYq9OCaHzdSRHhW12eRHBest0eullL+a5wqTxP8bK0lbt9xOukLYErC IDyII5pg/O03uxfJtYFnyz+dDcC7D7+KPR6oAxXSYuPcZvQGr2XnoXxsj+3X7kh7 QZTANtRuQD4kZvneQsPBIg6o3e41cYsRsGVvGJSEUR1FkyxeSlq0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:22 2026 by rpki-client