This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/cjM0znzLJC2QR0PgnNVfAe1h_mI.roa File: cjM0znzLJC2QR0PgnNVfAe1h_mI.roa (raw, json) Hash identifier: niPdw0pZGGHLaXhD+OqWZAWoags/W4iskvjHWI94b6k= Subject key identifier: 72:33:34:CE:7C:CB:24:2D:90:47:43:E0:9C:D5:5F:01:ED:61:FE:62 Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574 Certificate serial: 019B7F15462265AFC351B749F8BC9D0CE353 Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/cjM0znzLJC2QR0PgnNVfAe1h_mI.roa Signing time: Fri 02 Jan 2026 14:20:59 +0000 ROA not before: Fri 02 Jan 2026 14:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216472 IP address blocks: 212.108.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:46:22:65:af:c3:51:b7:49:f8:bc:9d:0c:e3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574 Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=723334ce7ccb242d904743e09cd55f01ed61fe62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:f9:25:57:29:2c:49:51:51:01:7c:39:55: ff:9f:00:1f:c4:2e:75:4f:d2:d0:b6:12:0c:4d:51: 1d:5a:f8:ed:ba:3e:0c:6e:e0:03:e0:df:c1:5d:eb: d7:a8:9c:2c:b5:66:23:7c:6d:99:c0:64:0e:90:aa: df:4f:82:98:a2:0f:ad:f2:01:51:34:ce:c6:75:de: 58:97:fa:a0:d1:f2:6f:17:ee:03:9e:d1:3f:ba:f8: 86:10:42:65:37:9d:bc:64:93:bc:5a:88:ce:c9:3b: e7:e3:78:d2:a3:41:50:62:88:d4:04:97:12:4b:12: fe:5e:5f:ae:7a:3c:cb:c8:e7:49:76:db:9f:cc:d8: 88:0f:81:06:6f:83:11:90:56:d1:1f:63:4a:71:53: 4d:c3:98:d0:d3:34:f4:05:05:c5:06:c9:16:b5:d5: 3b:95:53:43:f0:5b:1d:e5:7b:00:9c:f5:25:6f:95: 58:75:32:f0:cf:95:a4:77:ec:e4:b0:f2:58:38:4d: 1a:e6:b2:ae:ac:ff:77:b7:af:e5:4b:b5:bc:78:7b: 84:73:c2:46:e9:90:9b:88:04:ad:0c:68:71:d3:dc: b5:a5:4f:37:d8:84:cf:ce:2b:bd:0c:8c:c5:19:be: ac:cd:08:af:0c:c3:1d:6a:ee:a7:37:5a:34:5f:25: fb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:33:34:CE:7C:CB:24:2D:90:47:43:E0:9C:D5:5F:01:ED:61:FE:62 X509v3 Authority Key Identifier: keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/cjM0znzLJC2QR0PgnNVfAe1h_mI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.114.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:7b:31:44:1d:dd:53:43:85:d1:f5:fa:36:a3:48:64:ff:b9: 7b:64:e1:f1:ca:d0:bd:3b:5d:a3:68:ee:89:78:53:02:58:4c: 28:67:e9:4c:a4:b0:fb:6c:c4:4e:3c:72:b5:ee:bb:91:42:35: 26:e1:1a:38:34:cb:24:fd:92:a4:21:77:0e:85:3a:ed:d5:f1: 0d:f0:a1:9d:1d:3e:4f:f5:f3:80:89:4a:de:37:73:09:2c:4c: 5d:23:3d:8c:52:0e:ba:19:6a:73:41:a4:0a:1e:b3:6c:71:8d: 5e:44:3a:2f:ae:ec:97:33:7c:67:28:9d:01:e6:de:70:04:3e: b4:6a:85:f4:3b:6a:d9:75:19:04:05:bf:ca:de:cf:18:6b:0b: 39:9b:a6:46:bd:46:f2:20:8a:2e:b8:1e:5f:9a:10:3e:64:0b: 07:65:70:0a:7b:2d:ae:58:3b:9a:5e:8c:0e:58:f9:dc:06:4b: 9e:82:dc:f3:c4:1a:1a:2c:10:2b:bf:fe:f9:7a:52:55:c8:81: fc:4f:f4:23:3a:2a:6b:c4:e9:8f:6d:43:48:c5:1a:78:e0:3c: 9f:7a:85:23:d1:aa:30:41:ae:6e:48:e0:74:16:c7:c4:ba:cf: 80:94:99:f7:64:c7:22:04:24:5e:27:93:16:07:5c:66:2c:76: e2:e1:2a:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FUYiZa/DUbdJ+LydDONTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTE4MThmOTViZTY2OTBlOGFhYmM1YmVmYTIxNzM0NmFi Y2Q1NzQwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjMzMzRjZTdjY2IyNDJkOTA0NzQzZTA5Y2Q1NWYwMWVkNjFmZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVj5JVcpLElRUQF8OVX/nwAfxC51 T9LQthIMTVEdWvjtuj4MbuAD4N/BXevXqJwstWYjfG2ZwGQOkKrfT4KYog+t8gFR NM7Gdd5Yl/qg0fJvF+4DntE/uviGEEJlN528ZJO8WojOyTvn43jSo0FQYojUBJcS SxL+Xl+uejzLyOdJdtufzNiID4EGb4MRkFbRH2NKcVNNw5jQ0zT0BQXFBskWtdU7 lVND8Fsd5XsAnPUlb5VYdTLwz5Wkd+zksPJYOE0a5rKurP93t6/lS7W8eHuEc8JG 6ZCbiAStDGhx09y1pU832ITPziu9DIzFGb6szQivDMMdau6nN1o0XyX7wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHIzNM58yyQtkEdD4JzVXwHtYf5iMB8GA1UdIwQY MBaAFCgRgY+VvmaQ6Kq8W++iFzRqvNV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84OWU2NTUtYmQ3OS00OTg0LWI2NDkt NDJlNTdlZjYwMDBhLzEvY2pNMHpuekxKQzJRUjBQZ25OVmZBZTFoX21JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84OWU2NTUtYmQ3OS00OTg0LWI2NDktNDJlNTdlZjYwMDBh LzEvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GxyMA0G CSqGSIb3DQEBCwUAA4IBAQBKezFEHd1TQ4XR9fo2o0hk/7l7ZOHxytC9O12jaO6J eFMCWEwoZ+lMpLD7bMROPHK17ruRQjUm4Ro4NMsk/ZKkIXcOhTrt1fEN8KGdHT5P 9fOAiUreN3MJLExdIz2MUg66GWpzQaQKHrNscY1eRDovruyXM3xnKJ0B5t5wBD60 aoX0O2rZdRkEBb/K3s8Yaws5m6ZGvUbyIIouuB5fmhA+ZAsHZXAKey2uWDuaXowO WPncBkuegtzzxBoaLBArv/75elJVyIH8T/QjOiprxOmPbUNIxRp44DyfeoUj0aow Qa5uSOB0FsfEus+AlJn3ZMciBCReJ5MWB1xmLHbi4Srb -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:06 2026 by rpki-client