This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/nBKubqHJCPmxZed95Pwvup7veOk.roa File: nBKubqHJCPmxZed95Pwvup7veOk.roa (raw, json) Hash identifier: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o= Subject key identifier: 9C:12:AE:6E:A1:C9:08:F9:B1:65:E7:7D:E4:FC:2F:BA:9E:EF:78:E9 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019B7AC78AFABFF0696FB9754E06BC06F5E4 Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/nBKubqHJCPmxZed95Pwvup7veOk.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41436 IP address blocks: 113.30.188.0/24 maxlen: 24 113.30.189.0/24 maxlen: 24 185.167.96.0/24 maxlen: 24 185.167.97.0/24 maxlen: 24 185.167.98.0/24 maxlen: 24 185.167.99.0/24 maxlen: 24 185.229.224.0/24 maxlen: 24 185.229.225.0/24 maxlen: 24 185.229.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8a:fa:bf:f0:69:6f:b9:75:4e:06:bc:06:f5:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c12ae6ea1c908f9b165e77de4fc2fba9eef78e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:15:29:44:fe:24:df:7a:fb:9a:64:b6:33: 86:77:83:f1:c0:16:ea:32:0a:03:b8:f6:04:ff:0b: fa:15:d4:ef:9d:18:7c:5c:a9:e1:c6:93:95:ac:4f: f0:2e:51:95:63:11:a8:0a:50:45:5c:9a:56:51:65: 77:ed:43:a8:a4:41:77:18:ba:2d:cf:c2:a7:69:f4: 7a:d1:02:46:e2:78:f5:fe:dc:53:ad:fc:71:40:21: 2c:82:c1:6a:d4:f2:55:f7:d4:18:d4:c0:03:ac:99: 4f:ef:15:70:e8:1d:77:75:37:71:ce:96:84:3e:5f: 2b:6f:bc:9b:ec:2d:df:9b:ad:1e:df:e3:0c:50:2d: be:60:24:b5:12:6e:1f:05:d2:34:c9:88:2d:d7:d5: fa:b0:2e:8f:6b:fb:69:75:33:ff:14:7d:58:91:71: 03:5e:63:37:9c:95:37:ab:89:98:a4:24:f2:64:ec: 42:72:b6:10:ce:c4:6a:ee:3a:8b:91:45:a9:74:7a: 45:9d:2f:c9:a6:3b:d7:59:40:46:df:76:7f:e0:8d: 52:f6:4a:90:d7:99:ce:fe:33:c6:44:c6:75:82:3f: 53:0e:db:cb:01:ea:16:75:ba:4b:e8:35:18:8a:a5: ec:a3:be:25:bb:b1:d8:1f:56:16:6e:d5:ac:f6:07: dd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:12:AE:6E:A1:C9:08:F9:B1:65:E7:7D:E4:FC:2F:BA:9E:EF:78:E9 X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/nBKubqHJCPmxZed95Pwvup7veOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.30.188.0/23 185.167.96.0/22 185.229.224.0/23 185.229.227.0/24 Signature Algorithm: sha256WithRSAEncryption e6:df:96:a8:9b:fa:e9:0d:d9:36:a2:7b:01:d0:cd:a5:e0:a7: 81:ce:86:7b:ae:bc:43:98:ea:bf:31:89:9a:26:74:7b:5a:f5: 93:bf:c1:c7:03:fc:33:3d:64:9b:b2:8d:cb:ac:ee:67:23:03: 69:50:d9:6c:02:27:9e:b9:ca:73:0a:45:e3:9c:a6:34:b9:53: b4:67:a0:aa:a1:88:77:65:33:ba:d2:d5:cd:1e:7d:ae:40:73: e9:60:32:a3:fb:5d:3f:98:26:90:53:76:aa:e0:2a:e9:e1:62: 0b:04:66:64:5e:31:d1:95:c8:bc:5c:1f:da:b2:c3:bb:f2:95: ef:83:71:8c:e4:2d:4b:5e:f4:d5:c6:53:e7:a1:4f:cb:4e:6b: fa:ed:ea:88:8d:0d:95:78:81:20:54:2a:1f:21:b8:e5:08:a7: 39:d0:d9:ec:c3:01:99:f5:c9:e4:e6:92:d1:0a:40:2a:75:59: 66:be:29:e0:de:20:bf:9c:eb:dc:92:d5:68:c0:cb:ab:a0:80: ae:db:5c:09:1d:29:9f:12:c7:05:66:5b:47:70:b8:ca:3f:94: ca:81:00:5d:57:ae:29:1b:89:e3:95:c7:03:8b:8d:75:2d:dc: af:f5:f0:ef:b3:06:bd:cc:18:b4:70:36:f1:55:fb:78:a1:e6: 7a:2d:7e:20 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6x4r6v/Bpb7l1Tga8BvXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzEyYWU2ZWExYzkwOGY5YjE2NWU3N2RlNGZjMmZiYTllZWY3OGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr50VKUT+JN96+5pktjOGd4PxwBbq MgoDuPYE/wv6FdTvnRh8XKnhxpOVrE/wLlGVYxGoClBFXJpWUWV37UOopEF3GLot z8KnafR60QJG4nj1/txTrfxxQCEsgsFq1PJV99QY1MADrJlP7xVw6B13dTdxzpaE Pl8rb7yb7C3fm60e3+MMUC2+YCS1Em4fBdI0yYgt19X6sC6Pa/tpdTP/FH1YkXED XmM3nJU3q4mYpCTyZOxCcrYQzsRq7jqLkUWpdHpFnS/JpjvXWUBG33Z/4I1S9kqQ 15nO/jPGRMZ1gj9TDtvLAeoWdbpL6DUYiqXso74lu7HYH1YWbtWs9gfdTQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJwSrm6hyQj5sWXnfeT8L7qe73jpMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvbkJLdWJxSEpDUG14WmVkOTVQd3Z1cDd2ZU9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBcR68AwQC uadgAwQBueXgAwQAueXjMA0GCSqGSIb3DQEBCwUAA4IBAQDm35aom/rpDdk2onsB 0M2l4KeBzoZ7rrxDmOq/MYmaJnR7WvWTv8HHA/wzPWSbso3LrO5nIwNpUNlsAiee ucpzCkXjnKY0uVO0Z6CqoYh3ZTO60tXNHn2uQHPpYDKj+10/mCaQU3aq4Crp4WIL BGZkXjHRlci8XB/assO78pXvg3GM5C1LXvTVxlPnoU/LTmv67eqIjQ2VeIEgVCof IbjlCKc50NnswwGZ9cnk5pLRCkAqdVlmving3iC/nOvcktVowMuroICu21wJHSmf EscFZltHcLjKP5TKgQBdV64pG4njlccDi411Ldyv9fDvswa9zBi0cDbxVft4oeZ6 LX4g -----END CERTIFICATE-----Generated at Sun Jan 25 23:50:53 2026 by rpki-client