This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/0xjlkzMLHzYUOQzM0T_hixdH3Vc.roa File: 0xjlkzMLHzYUOQzM0T_hixdH3Vc.roa (raw, json) Hash identifier: w3LcFmfi5o+ZqCPWaVzw9mcyP3jYqj4m9ROiWLMpgAY= Subject key identifier: D3:18:E5:93:33:0B:1F:36:14:39:0C:CC:D1:3F:E1:8B:17:47:DD:57 Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b Certificate serial: 019B7C1366244F68A717B870B44286FB9552 Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/0xjlkzMLHzYUOQzM0T_hixdH3Vc.roa Signing time: Fri 02 Jan 2026 00:20:04 +0000 ROA not before: Fri 02 Jan 2026 00:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201184 IP address blocks: 213.109.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:66:24:4f:68:a7:17:b8:70:b4:42:86:fb:95:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b Validity Not Before: Jan 2 00:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d318e593330b1f3614390cccd13fe18b1747dd57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:38:56:9e:77:41:75:19:28:ea:e6:56:e3: 13:18:6b:c9:17:82:2c:40:24:a4:f3:94:20:e3:08: 70:ad:88:8b:01:12:82:bc:f2:50:be:fd:aa:9f:4d: 3d:8d:97:f0:72:c7:ae:b9:1f:b7:ca:a2:40:23:27: 8c:13:ae:4e:d5:8b:eb:ff:b8:33:3e:4a:0d:08:bc: 8c:3f:26:86:0c:af:f7:33:ef:85:87:a8:28:5d:ab: af:69:d8:f0:c7:7e:2e:60:3d:8a:54:a2:56:61:95: ff:6f:aa:47:21:d9:c3:d0:de:65:07:32:72:f6:f8: 6c:c6:59:83:80:8b:ec:b8:2e:4d:59:c8:98:89:47: 52:59:d5:fe:96:08:d7:9b:e5:9a:9d:1d:16:39:f3: b7:a2:48:38:17:c9:e3:5a:83:5c:31:7d:c7:6f:45: 27:ec:b6:24:3c:bb:bc:d5:1c:e4:30:2d:22:0b:0e: 02:8d:aa:c0:b4:9e:ef:e0:63:2a:a3:2b:ff:e6:62: 68:ea:19:b4:7a:40:0f:0f:77:45:26:84:30:d7:cc: de:40:24:bf:2e:d3:7c:8a:ed:1a:96:f3:0e:0d:a1: ee:c3:00:d0:88:e0:09:52:fd:74:2a:e2:4b:10:29: 3b:9f:71:56:ca:bb:10:aa:ec:43:3e:95:9d:7b:9d: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:18:E5:93:33:0B:1F:36:14:39:0C:CC:D1:3F:E1:8B:17:47:DD:57 X509v3 Authority Key Identifier: keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/0xjlkzMLHzYUOQzM0T_hixdH3Vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.81.0/24 Signature Algorithm: sha256WithRSAEncryption 30:7a:c4:22:71:22:cb:09:cb:09:de:00:a6:9f:ff:33:04:6f: 85:ed:0a:18:25:f5:89:ee:38:51:90:1a:ba:09:4f:fd:10:b8: 14:aa:c1:f3:78:b8:a0:fc:fc:b4:b9:c5:c6:d8:6d:5a:f8:d9: 66:42:ee:ff:8c:d1:a4:19:54:ce:d1:67:ab:29:70:10:20:17: 1e:0e:2e:77:64:90:73:0f:db:40:81:ff:5d:6e:ec:f8:18:4e: db:46:b6:b3:a5:6f:76:2d:c3:1e:4c:73:fb:75:9a:dc:35:8a: 83:d1:c1:e7:7c:a3:37:df:18:07:36:93:85:83:5b:fe:ba:bb: 7c:65:d6:fd:7d:f6:a2:8a:ef:ba:f7:e2:52:58:80:fb:91:d3: e9:ca:d2:2f:cb:f7:0c:79:df:35:76:da:5b:21:f5:c1:b2:1c: 75:04:8c:58:37:d2:4f:34:05:9b:09:73:48:8c:09:b3:bf:6f: ca:44:8e:ea:fa:92:49:93:47:49:b4:8b:c4:4c:01:e2:3b:5a: cd:ab:22:53:da:43:99:e1:5f:9d:53:99:10:74:41:af:73:d3: 57:06:d3:a3:55:2f:00:29:81:5a:d2:1c:ab:01:b6:e1:c2:23: c1:51:92:76:92:fe:df:ae:57:5a:fb:51:1e:7c:c7:2a:b3:b7: 13:2b:4f:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2YkT2inF7hwtEKG+5VSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGMzYTZjNWNiZmYwNzM5ZTQzOGQwNTc0NDQwNWIxNjE5 N2IxNWIwHhcNMjYwMTAyMDAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzE4ZTU5MzMzMGIxZjM2MTQzOTBjY2NkMTNmZTE4YjE3NDdkZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcA4Vp53QXUZKOrmVuMTGGvJF4Is QCSk85Qg4whwrYiLARKCvPJQvv2qn009jZfwcseuuR+3yqJAIyeME65O1Yvr/7gz PkoNCLyMPyaGDK/3M++Fh6goXauvadjwx34uYD2KVKJWYZX/b6pHIdnD0N5lBzJy 9vhsxlmDgIvsuC5NWciYiUdSWdX+lgjXm+WanR0WOfO3okg4F8njWoNcMX3Hb0Un 7LYkPLu81RzkMC0iCw4CjarAtJ7v4GMqoyv/5mJo6hm0ekAPD3dFJoQw18zeQCS/ LtN8iu0alvMODaHuwwDQiOAJUv10KuJLECk7n3FWyrsQquxDPpWde50pLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNMY5ZMzCx82FDkMzNE/4YsXR91XMB8GA1UdIwQY MBaAFICMOmxcv/BznkONBXREBbFhl7FbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUt NjE4MTljNDgwY2JlLzEvMHhqbGt6TUxIellVT1F6TTBUX2hpeGRIM1ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUtNjE4MTljNDgwY2Jl LzEvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W1RMA0G CSqGSIb3DQEBCwUAA4IBAQAwesQicSLLCcsJ3gCmn/8zBG+F7QoYJfWJ7jhRkBq6 CU/9ELgUqsHzeLig/Py0ucXG2G1a+NlmQu7/jNGkGVTO0WerKXAQIBceDi53ZJBz D9tAgf9dbuz4GE7bRrazpW92LcMeTHP7dZrcNYqD0cHnfKM33xgHNpOFg1v+urt8 Zdb9ffaiiu+69+JSWID7kdPpytIvy/cMed81dtpbIfXBshx1BIxYN9JPNAWbCXNI jAmzv2/KRI7q+pJJk0dJtIvETAHiO1rNqyJT2kOZ4V+dU5kQdEGvc9NXBtOjVS8A KYFa0hyrAbbhwiPBUZJ2kv7frlda+1EefMcqs7cTK0/A -----END CERTIFICATE-----Generated at Mon Jan 26 03:15:01 2026 by rpki-client