This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/k9g2HSjpxtETjvvmli-wSHo-GCU.roa File: k9g2HSjpxtETjvvmli-wSHo-GCU.roa (raw, json) Hash identifier: scKaa9aBdckyktODEkOGuwYmySJZ3cmCI8jNYczbLys= Subject key identifier: 93:D8:36:1D:28:E9:C6:D1:13:8E:FB:E6:96:2F:B0:48:7A:3E:18:25 Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a Certificate serial: 019AC92EA33DB4DFFD881FEB230F7B07FA33 Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/k9g2HSjpxtETjvvmli-wSHo-GCU.roa Signing time: Fri 28 Nov 2025 06:37:48 +0000 ROA not before: Fri 28 Nov 2025 06:37:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 43.226.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:2e:a3:3d:b4:df:fd:88:1f:eb:23:0f:7b:07:fa:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a Validity Not Before: Nov 28 06:37:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=93d8361d28e9c6d1138efbe6962fb0487a3e1825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:a6:13:c4:c3:39:23:e3:58:12:4b:bc:bf: e7:4f:46:4f:1b:f2:9b:16:9b:8c:41:7a:b5:8c:9a: ea:67:eb:d3:d6:d3:7a:e7:ba:13:e6:54:2c:d9:a6: 0f:3a:2d:8f:7e:da:27:89:a1:9e:53:88:0a:4d:5a: 65:39:2e:6b:f5:12:4e:e8:fc:0a:d8:48:aa:4e:18: 8a:72:d8:44:a7:17:d5:36:c5:b0:21:75:54:80:05: 56:19:28:1e:58:9e:e3:e4:f9:bb:a1:ed:8d:64:32: 61:ba:01:23:f8:d9:43:2f:19:22:a0:90:f5:c2:38: 3f:03:dd:71:be:f4:c5:88:da:4a:be:f7:6d:52:72: a7:41:a9:89:cd:9a:38:50:9a:98:9f:23:46:d0:c7: 2c:84:1c:ad:1f:5a:67:62:8f:4b:54:54:5b:15:b3: b6:17:9f:b6:c4:29:bb:3a:35:1f:e9:46:58:73:c6: d3:29:ab:54:55:a5:a7:1b:fc:dc:ad:d3:85:52:e5: fc:b1:fe:d1:ca:e5:9c:fb:1e:d4:ea:b5:b1:d0:04: 4f:01:40:ae:40:ad:7a:69:90:63:55:d9:91:97:47: 33:d6:f3:29:25:58:e7:05:d9:20:fa:5e:b9:8e:c3: 3a:04:a7:31:f8:ad:d8:d6:3b:e3:ed:70:d5:ad:2b: b9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D8:36:1D:28:E9:C6:D1:13:8E:FB:E6:96:2F:B0:48:7A:3E:18:25 X509v3 Authority Key Identifier: keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/k9g2HSjpxtETjvvmli-wSHo-GCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.227.0/24 Signature Algorithm: sha256WithRSAEncryption b3:96:6e:56:be:54:5e:25:bc:a7:ff:c8:b2:60:3f:38:33:44: f2:05:3f:d8:8c:6c:87:23:cd:43:26:83:11:e4:19:e0:27:08: 66:60:d7:3e:60:0a:71:b4:47:b1:50:af:1c:32:2f:3f:82:cd: 8c:7e:f6:b0:eb:2f:d4:d0:78:bc:cc:bc:41:a7:98:1c:b8:c2: c6:e7:ba:a2:15:2e:ee:01:6e:42:c1:64:b2:ea:fa:5e:54:64: 57:9c:0c:f7:59:62:5e:b0:cf:a5:39:06:b8:ad:55:c6:4f:36: b2:b4:35:d0:f2:cb:00:a6:35:fa:b3:62:f0:26:8b:6b:41:5f: fa:0a:5c:1d:77:32:8b:90:61:e0:70:2b:56:a6:36:23:ec:a4: 82:fc:b2:88:83:7c:58:1c:00:12:2e:7a:3c:90:8d:80:30:0e: 76:99:f1:b1:a0:4e:70:fe:17:57:90:10:ad:5d:f7:0a:42:6d: fc:0c:29:45:db:45:ce:c5:96:c8:b9:c0:65:63:0b:a7:80:6a: a0:1f:d7:dc:42:79:c6:2b:1f:e0:0c:07:8c:ed:30:c0:08:55: 14:bb:1b:4a:98:50:e4:b7:b0:15:a3:e1:70:3b:8e:ad:c4:02: de:01:b5:ef:f9:d2:e1:7c:5f:f7:df:88:76:75:4e:6b:bb:a3: 54:6f:f6:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrJLqM9tN/9iB/rIw97B/ozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTIxMjk1OGQ4ZTFiYWExNDRhODJhODIxZjkzYTg5MGRj YmE0OWEwHhcNMjUxMTI4MDYzNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2Q4MzYxZDI4ZTljNmQxMTM4ZWZiZTY5NjJmYjA0ODdhM2UxODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o6mE8TDOSPjWBJLvL/nT0ZPG/Kb FpuMQXq1jJrqZ+vT1tN657oT5lQs2aYPOi2PftoniaGeU4gKTVplOS5r9RJO6PwK 2EiqThiKcthEpxfVNsWwIXVUgAVWGSgeWJ7j5Pm7oe2NZDJhugEj+NlDLxkioJD1 wjg/A91xvvTFiNpKvvdtUnKnQamJzZo4UJqYnyNG0McshBytH1pnYo9LVFRbFbO2 F5+2xCm7OjUf6UZYc8bTKatUVaWnG/zcrdOFUuX8sf7RyuWc+x7U6rWx0ARPAUCu QK16aZBjVdmRl0cz1vMpJVjnBdkg+l65jsM6BKcx+K3Y1jvj7XDVrSu5zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJPYNh0o6cbRE4775pYvsEh6PhglMB8GA1UdIwQY MBaAFKpSEpWNjhuqFEqCqCH5OokNy6SaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYt YjQwMWE0YTA0NDkyLzEvazlnMkhTanB4dEVUanZ2bWxpLXdTSG8tR0NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYtYjQwMWE0YTA0NDky LzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+LjMA0G CSqGSIb3DQEBCwUAA4IBAQCzlm5WvlReJbyn/8iyYD84M0TyBT/YjGyHI81DJoMR 5BngJwhmYNc+YApxtEexUK8cMi8/gs2Mfvaw6y/U0Hi8zLxBp5gcuMLG57qiFS7u AW5CwWSy6vpeVGRXnAz3WWJesM+lOQa4rVXGTzaytDXQ8ssApjX6s2LwJotrQV/6 ClwddzKLkGHgcCtWpjYj7KSC/LKIg3xYHAASLno8kI2AMA52mfGxoE5w/hdXkBCt XfcKQm38DClF20XOxZbIucBlYwungGqgH9fcQnnGKx/gDAeM7TDACFUUuxtKmFDk t7AVo+FwO46txALeAbXv+dLhfF/334h2dU5ru6NUb/bQ -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:39 2025 by rpki-client