This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/cfljug29MBdwZ2IRskxqcwdwGN0.roa File: cfljug29MBdwZ2IRskxqcwdwGN0.roa (raw, json) Hash identifier: RSO1UVd7bjnpUDUf4c2ob5lCf11GhEF8w59+h0O9Z8s= Subject key identifier: 71:F9:63:BA:0D:BD:30:17:70:67:62:11:B2:4C:6A:73:07:70:18:DD Certificate issuer: /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025 Certificate serial: 019B7F8472B186A154FE71F00F290980A71F Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/cfljug29MBdwZ2IRskxqcwdwGN0.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44947 IP address blocks: 212.108.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:72:b1:86:a1:54:fe:71:f0:0f:29:09:80:a7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025 Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71f963ba0dbd301770676211b24c6a73077018dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:4d:4a:68:64:9b:1b:8e:2a:0c:96:fd:c2: fb:52:81:98:8e:ef:7d:e1:22:e7:3e:e8:25:f7:9d: 4b:51:e6:7e:f1:33:e2:62:84:e8:46:57:03:94:9a: b1:87:5d:d3:4f:3c:36:00:2d:31:42:5d:11:72:77: 7d:08:84:5e:1d:36:d2:81:6d:1e:2d:63:07:d1:43: 8f:71:19:73:3f:da:af:db:91:15:cb:37:4c:db:2e: 9c:b9:c8:e8:8a:fc:bb:fe:04:c0:6b:bb:56:90:30: 5f:16:45:b3:61:11:4d:62:c0:fe:51:a5:3e:cd:de: a6:96:9b:fc:5e:30:73:d8:ed:57:03:cf:82:27:69: 69:02:dd:bb:41:a2:df:d9:8e:ba:03:39:c0:39:1f: 44:81:29:80:e7:c6:3d:1f:85:f7:cb:39:96:a2:31: a8:f7:60:f2:ab:37:81:2e:6e:a6:df:bd:1b:fd:e6: 55:8d:38:51:85:38:f3:a7:c9:70:cf:1f:ad:50:57: 27:13:7b:fa:f5:5c:af:af:fd:37:a4:07:a2:94:2f: b9:f9:ef:2e:b4:02:cc:06:b0:d7:6c:36:6f:76:52: b8:c0:5e:6f:ca:f4:32:e4:30:c3:eb:99:85:1a:8e: 9f:2f:87:cc:be:20:33:b9:51:f1:80:6d:d6:70:d7: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F9:63:BA:0D:BD:30:17:70:67:62:11:B2:4C:6A:73:07:70:18:DD X509v3 Authority Key Identifier: keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/cfljug29MBdwZ2IRskxqcwdwGN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.124.0/24 Signature Algorithm: sha256WithRSAEncryption 56:dd:13:38:df:d3:b2:9a:e9:f1:87:ab:96:fe:ee:83:26:1f: bc:90:27:8d:ec:ac:e9:c6:6a:be:1d:e9:67:27:28:4b:b3:b6: 6f:f2:dc:a8:0b:2a:31:92:13:4d:b3:e7:fd:61:79:92:96:d4: 61:4b:e3:d5:ab:16:b6:36:f0:0d:ee:e7:3a:fa:15:a0:f9:a4: d0:bf:81:3d:0f:c6:76:af:4c:bc:97:92:29:2b:cd:28:c6:81: d2:d2:12:0f:e1:ae:07:2e:da:df:76:5a:c8:f5:4b:db:44:e3: eb:74:81:08:e2:d9:8c:1a:17:0a:7d:07:b3:b3:f7:ed:24:3a: 5a:2b:e4:fc:1e:6d:50:e5:80:16:4f:75:a7:2d:ff:eb:ff:65: 60:ea:19:d5:73:8b:7e:a0:b8:40:26:8c:99:f3:09:9b:04:c5: 57:3f:b9:ec:43:fd:97:c9:91:33:9f:21:61:c9:76:16:02:03: 85:f7:b2:70:4f:ee:0a:bb:65:ba:55:c9:43:16:60:a5:f2:c1: b1:11:3b:a6:39:d9:5b:c3:f1:95:be:18:f3:1a:00:6e:10:c8: 72:7b:e3:71:d7:f9:6a:8c:b2:89:3a:8c:3c:16:19:00:d3:71: 85:f3:67:04:a3:a2:e1:a3:9c:f6:9b:9e:f9:e0:6a:40:e6:0e: 97:8a:15:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHKxhqFU/nHwDykJgKcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMjNiMDdhM2MwYWM5ZTMzM2Y1MmU4YjVkNDFhNzY4YTNk MzkwMjUwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWY5NjNiYTBkYmQzMDE3NzA2NzYyMTFiMjRjNmE3MzA3NzAxOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuJNSmhkmxuOKgyW/cL7UoGYju99 4SLnPugl951LUeZ+8TPiYoToRlcDlJqxh13TTzw2AC0xQl0Rcnd9CIReHTbSgW0e LWMH0UOPcRlzP9qv25EVyzdM2y6cucjoivy7/gTAa7tWkDBfFkWzYRFNYsD+UaU+ zd6mlpv8XjBz2O1XA8+CJ2lpAt27QaLf2Y66AznAOR9EgSmA58Y9H4X3yzmWojGo 92DyqzeBLm6m370b/eZVjThRhTjzp8lwzx+tUFcnE3v69Vyvr/03pAeilC+5+e8u tALMBrDXbDZvdlK4wF5vyvQy5DDD65mFGo6fL4fMviAzuVHxgG3WcNdy3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHH5Y7oNvTAXcGdiEbJManMHcBjdMB8GA1UdIwQY MBaAFLojsHo8CsnjM/Uui11Bp2ij05AlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xMGQ1YjItODVlMy00OWVkLWJkYzEt ODA2OWM0Njc3MWNjLzEvY2ZsanVnMjlNQmR3WjJJUnNreHFjd2R3R04wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xMGQ1YjItODVlMy00OWVkLWJkYzEtODA2OWM0Njc3MWNj LzEvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Gx8MA0G CSqGSIb3DQEBCwUAA4IBAQBW3RM439Oymunxh6uW/u6DJh+8kCeN7Kzpxmq+Heln JyhLs7Zv8tyoCyoxkhNNs+f9YXmSltRhS+PVqxa2NvAN7uc6+hWg+aTQv4E9D8Z2 r0y8l5IpK80oxoHS0hIP4a4HLtrfdlrI9UvbROPrdIEI4tmMGhcKfQezs/ftJDpa K+T8Hm1Q5YAWT3WnLf/r/2Vg6hnVc4t+oLhAJoyZ8wmbBMVXP7nsQ/2XyZEznyFh yXYWAgOF97JwT+4Ku2W6VclDFmCl8sGxETumOdlbw/GVvhjzGgBuEMhye+Nx1/lq jLKJOow8FhkA03GF82cEo6Lho5z2m5754GpA5g6XihVZ -----END CERTIFICATE-----Generated at Wed Jan 21 16:32:38 2026 by rpki-client