This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/3xGhx8NZgWxLSKCDfcPFLQ8-OsI.roa File: 3xGhx8NZgWxLSKCDfcPFLQ8-OsI.roa (raw, json) Hash identifier: nrPCTtkuQDIcy3WjV2PDeyqXdxGsNrOVS6dTe/yokSw= Subject key identifier: DF:11:A1:C7:C3:59:81:6C:4B:48:A0:83:7D:C3:C5:2D:0F:3E:3A:C2 Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 019B7C120ED22B473EB4FF102CCE8D6FBB24 Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/3xGhx8NZgWxLSKCDfcPFLQ8-OsI.roa Signing time: Fri 02 Jan 2026 00:18:36 +0000 ROA not before: Fri 02 Jan 2026 00:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34970 IP address blocks: 212.103.22.0/23 maxlen: 24 212.103.24.0/24 maxlen: 24 212.103.25.0/24 maxlen: 24 212.103.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:0e:d2:2b:47:3e:b4:ff:10:2c:ce:8d:6f:bb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Jan 2 00:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df11a1c7c359816c4b48a0837dc3c52d0f3e3ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b4:b3:d1:0d:12:21:f2:60:94:0c:22:88:fe: 6c:41:0d:d4:b1:2f:17:47:90:fb:32:d5:f8:6c:5e: 0c:56:b7:93:d6:38:c0:ec:02:de:7d:22:6f:6e:33: b5:3e:5b:55:05:5a:33:11:d5:ef:59:e3:a6:c5:8b: d0:b4:b0:ff:01:eb:23:4c:39:c8:b7:e1:a4:5d:b3: 3d:ed:7e:c5:b8:a1:27:70:24:75:76:a9:74:eb:00: f3:94:3c:ef:3c:5b:62:93:7a:7e:9c:1c:c4:c3:f8: b8:ba:97:e4:a0:31:31:e1:39:f7:55:e7:07:89:41: 02:f2:af:46:87:4e:de:9a:b4:99:ab:9d:17:32:13: b4:49:98:f1:46:a1:c6:eb:88:5a:80:4e:64:3e:f6: db:32:05:52:f9:21:aa:dc:29:0d:f6:fb:27:c5:5d: 78:27:c0:8a:6d:a8:38:74:af:43:8a:9a:ad:09:dd: 49:b9:4d:19:cd:37:14:77:4a:2b:48:4c:be:6f:8d: 70:70:d4:77:89:fc:17:cf:8e:0e:04:1b:63:e2:c2: 76:66:e8:93:22:71:d7:c8:5e:c0:66:46:9c:32:5c: 86:02:18:82:7c:00:21:e7:d6:ab:12:27:97:6d:63: 29:8e:af:e1:e9:0b:21:8b:31:60:cf:27:7b:dd:f7: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:11:A1:C7:C3:59:81:6C:4B:48:A0:83:7D:C3:C5:2D:0F:3E:3A:C2 X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/3xGhx8NZgWxLSKCDfcPFLQ8-OsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.103.22.0-212.103.25.255 212.103.28.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:64:5f:ac:5b:53:77:61:da:93:d2:03:91:2f:85:d2:48:ca: dc:dd:8b:9c:7c:17:5d:28:45:1b:67:de:e1:9f:d7:37:dd:a0: 46:76:ee:2d:f7:4b:5b:bd:67:71:81:89:de:88:ed:37:0d:33: 89:e0:0a:86:78:b9:3c:c0:44:77:33:7a:3b:2a:5f:28:a1:e3: 9b:e7:80:53:a3:bd:e0:d3:06:89:78:d4:69:0c:3f:7b:52:0c: f5:29:33:2b:ca:98:43:2f:a8:47:2d:8a:57:77:fc:e4:99:71: a4:36:20:6f:86:cc:94:9c:02:23:a6:3f:4c:08:85:5b:8e:9c: 35:fe:40:c3:bb:45:22:cc:c3:e6:6a:1f:0c:5b:92:9e:7c:b4: d8:f6:4d:c1:3d:c3:93:95:6c:f8:58:b0:7d:8f:54:10:70:5b: 3c:67:fb:2e:af:56:08:73:d9:8a:e0:80:19:5e:5b:03:48:51: 29:7a:d2:a5:af:db:11:75:5e:8b:82:03:af:61:9b:92:eb:50: 10:1b:a4:7c:85:55:96:c8:fc:71:39:0a:2a:94:28:35:35:f1: 0a:d7:ec:43:21:f4:18:58:41:35:31:f3:7e:84:c9:d7:77:93: 88:c0:49:de:b3:28:c2:fc:6f:9d:7f:57:e3:90:46:93:58:0a: df:0d:42:5c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8Eg7SK0c+tP8QLM6Nb7skMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjYwMTAyMDAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjExYTFjN2MzNTk4MTZjNGI0OGEwODM3ZGMzYzUyZDBmM2UzYWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bSz0Q0SIfJglAwiiP5sQQ3UsS8X R5D7MtX4bF4MVreT1jjA7ALefSJvbjO1PltVBVozEdXvWeOmxYvQtLD/AesjTDnI t+GkXbM97X7FuKEncCR1dql06wDzlDzvPFtik3p+nBzEw/i4upfkoDEx4Tn3VecH iUEC8q9Gh07emrSZq50XMhO0SZjxRqHG64hagE5kPvbbMgVS+SGq3CkN9vsnxV14 J8CKbag4dK9DipqtCd1JuU0ZzTcUd0orSEy+b41wcNR3ifwXz44OBBtj4sJ2ZuiT InHXyF7AZkacMlyGAhiCfAAh59arEieXbWMpjq/h6QshizFgzyd73ffBQQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFN8RocfDWYFsS0igg33DxS0PPjrCMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvM3hHaHg4TlpnV3hMU0tDRGZjUEZMUTgtT3NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAHUZxYD BAHUZxgDBADUZxwwDQYJKoZIhvcNAQELBQADggEBAEpkX6xbU3dh2pPSA5EvhdJI ytzdi5x8F10oRRtn3uGf1zfdoEZ27i33S1u9Z3GBid6I7TcNM4ngCoZ4uTzARHcz ejsqXyih45vngFOjveDTBol41GkMP3tSDPUpMyvKmEMvqEctild3/OSZcaQ2IG+G zJScAiOmP0wIhVuOnDX+QMO7RSLMw+ZqHwxbkp58tNj2TcE9w5OVbPhYsH2PVBBw Wzxn+y6vVghz2YrggBleWwNIUSl60qWv2xF1XouCA69hm5LrUBAbpHyFVZbI/HE5 CiqUKDU18QrX7EMh9BhYQTUx836Eydd3k4jASd6zKML8b51/V+OQRpNYCt8NQlw= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:51 2026 by rpki-client