This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/Hp7ZxnJnTofRkI5yIDI7Zq99dYI.roa File: Hp7ZxnJnTofRkI5yIDI7Zq99dYI.roa (raw, json) Hash identifier: LDoLh+KsavvEWEveDP6iNRXft7TiHt7VWaryI9phpYQ= Subject key identifier: 1E:9E:D9:C6:72:67:4E:87:D1:90:8E:72:20:32:3B:66:AF:7D:75:82 Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0 Certificate serial: 019B797F05F023FF303B51D8872CCD175843 Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/Hp7ZxnJnTofRkI5yIDI7Zq99dYI.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38237 IP address blocks: 123.253.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:05:f0:23:ff:30:3b:51:d8:87:2c:cd:17:58:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e9ed9c672674e87d1908e7220323b66af7d7582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3e:f7:8a:96:09:f3:9e:ce:f1:6c:e9:a3:63: fe:31:46:39:0f:36:bb:dc:ac:eb:01:33:be:92:82: 00:73:47:9e:39:15:ef:30:93:2c:13:18:80:c5:bf: e2:57:5e:53:f3:36:12:9f:da:6f:44:8a:88:d6:6b: c8:dd:a4:96:f9:a3:65:b5:1e:83:3e:6f:1f:80:ef: e0:e8:d9:52:c0:7f:63:53:77:09:fd:c8:3b:83:1e: 7a:69:f3:ab:ec:d2:6d:8b:9a:80:b0:89:35:ee:02: a2:89:b8:49:a2:54:54:49:bf:37:75:00:9d:27:fc: 87:17:6d:85:4b:42:1b:fc:1f:e7:d4:a0:77:6f:ba: 9f:84:6f:45:cb:30:a3:f4:4f:6e:73:a3:0e:a0:d4: e1:ce:14:7d:cb:46:e2:69:de:bf:d4:65:b6:20:9f: a0:36:08:a0:42:1a:15:46:d2:a1:8f:e7:0d:e1:54: 16:a9:c0:d7:09:d2:a1:1e:bb:02:a0:a7:57:07:3f: 9a:66:64:0b:f5:c5:a3:11:68:ad:63:81:4f:01:e4: f9:2a:01:fd:f3:88:79:5a:f7:30:9d:c6:51:65:f1: 15:0f:7c:1d:f6:d2:22:b5:ec:6d:f3:a7:75:84:ad: 7b:ef:ba:5d:61:2e:ca:04:18:83:e1:ad:17:8f:c2: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9E:D9:C6:72:67:4E:87:D1:90:8E:72:20:32:3B:66:AF:7D:75:82 X509v3 Authority Key Identifier: keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/Hp7ZxnJnTofRkI5yIDI7Zq99dYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.104.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f5:e8:ac:3b:3a:26:00:6f:da:4b:b4:71:03:c7:eb:5e:2e: 00:e0:65:38:8a:a9:7d:09:12:eb:68:8e:4e:ef:20:83:15:39: c8:ec:44:24:e0:3c:53:87:ca:77:45:cd:17:2a:70:ab:8f:35: 83:0e:b6:e7:84:07:8c:7f:e5:93:37:00:b5:e7:86:4a:c6:c8: 7e:5f:69:ec:12:2f:d1:1b:93:43:70:96:cd:ab:d1:72:ef:61: a5:de:51:ea:ef:b5:88:e4:f3:ae:94:9d:7f:11:73:8a:8d:e6: d5:d5:ed:3c:78:74:c3:f8:13:e3:6e:e7:8d:4e:f6:1d:11:1c: 8e:a5:c3:51:22:6e:39:3d:67:23:3b:45:e2:49:f3:95:d3:9b: 1c:97:29:33:fc:f2:c2:60:9f:fa:6b:be:97:8e:23:ee:00:a5: 50:14:65:dc:ce:ec:02:eb:24:dc:91:f1:f2:58:ab:0d:bc:b0: 26:ea:c5:e4:2b:ae:cf:bc:2f:41:e1:90:7c:b4:be:86:8c:f5: 5e:b1:67:3e:c9:8a:3e:86:5e:1b:a5:0d:04:8e:2f:82:6c:69: 9d:28:fc:27:31:73:84:e9:d1:53:ae:c5:13:e3:ab:1d:40:a0: cd:cf:49:2e:3e:4d:e0:81:36:fc:65:9c:70:2d:3d:e1:62:d1: bd:af:e2:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwXwI/8wO1HYhyzNF1hDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NWZiY2I0ZWEzMDhhOThiMDkzOTc2MjVlNjM4NjYzODNj MTZkZDAwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTllZDljNjcyNjc0ZTg3ZDE5MDhlNzIyMDMyM2I2NmFmN2Q3NTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T73ipYJ857O8Wzpo2P+MUY5Dza7 3KzrATO+koIAc0eeORXvMJMsExiAxb/iV15T8zYSn9pvRIqI1mvI3aSW+aNltR6D Pm8fgO/g6NlSwH9jU3cJ/cg7gx56afOr7NJti5qAsIk17gKiibhJolRUSb83dQCd J/yHF22FS0Ib/B/n1KB3b7qfhG9FyzCj9E9uc6MOoNThzhR9y0biad6/1GW2IJ+g NgigQhoVRtKhj+cN4VQWqcDXCdKhHrsCoKdXBz+aZmQL9cWjEWitY4FPAeT5KgH9 84h5WvcwncZRZfEVD3wd9tIitext86d1hK1777pdYS7KBBiD4a0Xj8KpAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB6e2cZyZ06H0ZCOciAyO2avfXWCMB8GA1UdIwQY MBaAFKZfvLTqMIqYsJOXYl5jhmODwW3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUt NjJkNDJmZTZmZDNjLzEvSHA3WnhuSm5Ub2ZSa0k1eUlESTdacTk5ZFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUtNjJkNDJmZTZmZDNj LzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe/1oMA0G CSqGSIb3DQEBCwUAA4IBAQBZ9eisOzomAG/aS7RxA8frXi4A4GU4iql9CRLraI5O 7yCDFTnI7EQk4DxTh8p3Rc0XKnCrjzWDDrbnhAeMf+WTNwC154ZKxsh+X2nsEi/R G5NDcJbNq9Fy72Gl3lHq77WI5POulJ1/EXOKjebV1e08eHTD+BPjbueNTvYdERyO pcNRIm45PWcjO0XiSfOV05sclykz/PLCYJ/6a76XjiPuAKVQFGXczuwC6yTckfHy WKsNvLAm6sXkK67PvC9B4ZB8tL6GjPVesWc+yYo+hl4bpQ0Eji+CbGmdKPwnMXOE 6dFTrsUT46sdQKDNz0kuPk3ggTb8ZZxwLT3hYtG9r+JM -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:34 2026 by rpki-client