This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1-w_96dZZvAhqknsLDQxMYnFiHlY.roa File: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (raw, json) Hash identifier: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE= Subject key identifier: FB:0F:FD:E9:D6:59:BC:08:6A:92:7B:0B:0D:0C:4C:62:71:62:1E:56 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC41BA6C1ADAB227ECA3CDECDA6B34 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1-w_96dZZvAhqknsLDQxMYnFiHlY.roa Signing time: Thu 01 Jan 2026 14:18:05 +0000 ROA not before: Thu 01 Jan 2026 14:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41269 IP address blocks: 212.110.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:41:ba:6c:1a:da:b2:27:ec:a3:cd:ec:da:6b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb0ffde9d659bc086a927b0b0d0c4c6271621e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:57:d0:10:f2:5f:11:28:8c:4f:5d:23:52:04: da:3c:f1:ca:e0:c7:ee:e6:4f:24:47:11:eb:05:88: 1b:ae:1c:2a:d0:71:88:b9:89:03:ae:60:75:3a:0b: 9e:e3:e9:76:66:bd:60:a3:b6:e9:70:86:fc:d8:d1: 5f:57:60:5b:b3:8f:1d:07:49:3d:2b:ed:6a:41:10: 28:fd:30:16:f4:bc:86:1a:de:df:ca:47:47:07:c5: f4:8b:e8:41:ed:a6:14:80:2a:12:74:00:c8:66:57: d3:55:33:e4:87:40:4b:8d:b0:9e:04:28:a3:ba:a9: 85:04:d0:8f:09:7d:71:80:7f:6c:2d:9c:13:88:49: 56:4a:79:6b:16:59:5c:10:1d:2a:62:cb:1e:be:19: 7d:4a:60:15:37:3b:af:95:b0:b7:f6:05:22:9c:9b: 02:05:a1:3b:f8:de:1c:d3:1b:e5:5f:b7:72:8a:65: ef:34:04:f3:8e:e2:b9:ff:90:22:cf:4c:20:79:8a: 38:98:62:bc:d5:24:2a:58:49:a6:48:71:0c:ce:fc: ba:1a:f4:30:27:9f:d6:d6:fd:fa:c5:e6:a5:e0:b3: 0b:42:47:e4:4e:fe:1b:a0:85:6a:ef:f4:50:fc:22: 53:5e:86:90:cd:dc:68:2f:4d:6f:7b:9f:cd:3f:7a: 0b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0F:FD:E9:D6:59:BC:08:6A:92:7B:0B:0D:0C:4C:62:71:62:1E:56 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1-w_96dZZvAhqknsLDQxMYnFiHlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.110.158.0/24 Signature Algorithm: sha256WithRSAEncryption 83:3c:f3:e7:76:c3:85:db:54:35:78:0a:f8:ce:af:f5:ad:c9: b4:56:4b:4e:44:77:9f:ab:90:04:46:b0:0b:e5:64:b4:3a:83: 55:06:90:fc:4b:94:44:4a:4a:f5:ba:b1:c4:6b:98:05:e9:21: 5d:f1:ca:d2:1d:a9:59:1e:f2:d7:a1:85:4e:60:77:fc:6c:1a: 37:72:23:21:ec:f1:66:42:ff:d9:d5:f4:04:62:b8:fd:41:db: 01:77:ee:5f:e0:00:50:4e:01:e4:b7:4a:1b:0e:35:34:33:be: 37:c8:2f:23:ab:b9:91:05:5d:cd:45:3e:18:a9:b8:73:31:47: 0c:2a:dc:b0:6d:23:25:14:d0:26:63:33:10:78:07:89:3e:5b: 09:b6:e3:a8:56:56:0f:df:30:7d:18:27:1a:bd:1e:7a:28:f0: e3:3e:67:2c:0a:8b:5c:77:7c:0d:82:b1:3c:a7:d3:4b:ba:cd: 6c:84:49:39:3e:fa:93:fe:49:43:85:24:ca:32:61:5f:28:ff: c2:98:57:9c:7f:23:80:6a:d6:ed:db:87:71:5a:ba:de:03:51: 9f:e1:db:80:0a:26:6b:c2:a9:c5:05:50:a9:a5:ca:b8:72:1b: 7a:ba:af:08:23:54:e5:2b:a4:4d:56:f5:4c:41:44:96:46:d8: 8d:85:60:5e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57EG6bBrasifso83s2ms0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjBmZmRlOWQ2NTliYzA4NmE5MjdiMGIwZDBjNGM2MjcxNjIxZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlfQEPJfESiMT10jUgTaPPHK4Mfu 5k8kRxHrBYgbrhwq0HGIuYkDrmB1Ogue4+l2Zr1go7bpcIb82NFfV2Bbs48dB0k9 K+1qQRAo/TAW9LyGGt7fykdHB8X0i+hB7aYUgCoSdADIZlfTVTPkh0BLjbCeBCij uqmFBNCPCX1xgH9sLZwTiElWSnlrFllcEB0qYssevhl9SmAVNzuvlbC39gUinJsC BaE7+N4c0xvlX7dyimXvNATzjuK5/5Aiz0wgeYo4mGK81SQqWEmmSHEMzvy6GvQw J5/W1v36xeal4LMLQkfkTv4boIVq7/RQ/CJTXoaQzdxoL01ve5/NP3oLXwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsP/enWWbwIapJ7Cw0MTGJxYh5WMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvMS13Xzk2ZFpadkFocWtuc0xEUXhNWW5GaUhsWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmYvZTU3ODlhLTE2MGQtNDg5Ni1hMjVhLThkZjM2MzM3ZTZi Yy8xL3p4MzJabjJqamxlaVd4bEYta0Rsay1XdC1nQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRunjAN BgkqhkiG9w0BAQsFAAOCAQEAgzzz53bDhdtUNXgK+M6v9a3JtFZLTkR3n6uQBEaw C+VktDqDVQaQ/EuUREpK9bqxxGuYBekhXfHK0h2pWR7y16GFTmB3/GwaN3IjIezx ZkL/2dX0BGK4/UHbAXfuX+AAUE4B5LdKGw41NDO+N8gvI6u5kQVdzUU+GKm4czFH DCrcsG0jJRTQJmMzEHgHiT5bCbbjqFZWD98wfRgnGr0eeijw4z5nLAqLXHd8DYKx PKfTS7rNbIRJOT76k/5JQ4UkyjJhXyj/wphXnH8jgGrW7duHcVq63gNRn+HbgAom a8KpxQVQqaXKuHIberqvCCNU5SukTVb1TEFElkbYjYVgXg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:21 2026 by rpki-client