This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/wOjdRDY4rMDU4XDk35HoLt7uT2M.roa File: wOjdRDY4rMDU4XDk35HoLt7uT2M.roa (raw, json) Hash identifier: 7YjJqmLdz1HfJE+GpOkltOPkNzD9vAKu54sBhDV3osE= Subject key identifier: C0:E8:DD:44:36:38:AC:C0:D4:E1:70:E4:DF:91:E8:2E:DE:EE:4F:63 Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd Certificate serial: 019B7AC8D577DAAAF0EA39FEF67EE1BE062D Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/wOjdRDY4rMDU4XDk35HoLt7uT2M.roa Signing time: Thu 01 Jan 2026 18:19:00 +0000 ROA not before: Thu 01 Jan 2026 18:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42487 IP address blocks: 212.102.121.0/24 maxlen: 24 2a0f:c540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d5:77:da:aa:f0:ea:39:fe:f6:7e:e1:be:06:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd Validity Not Before: Jan 1 18:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0e8dd443638acc0d4e170e4df91e82edeee4f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:9a:bb:37:b4:cf:97:83:04:e4:d4:cf:7f: 05:91:d7:a9:d7:67:c7:39:02:e3:33:a7:29:38:fd: c2:6c:96:f1:7a:dd:6c:4f:a6:fa:83:2b:ef:c8:8a: 5e:7f:f9:1e:88:45:80:b0:84:d6:cc:2a:88:76:df: 17:bd:48:46:40:8d:33:16:54:9b:2e:07:fd:69:20: 45:78:d2:19:e3:90:f2:ad:cf:e0:87:d3:54:84:06: 7e:cc:71:bd:0d:0c:9b:b1:71:3c:c6:68:d5:f4:a7: 71:90:1d:81:7a:6e:fe:26:a9:c1:73:f6:87:43:e3: 91:bf:e0:5b:38:0d:05:0a:6c:89:f7:34:8e:28:e4: 7c:6c:6a:fa:8e:e7:f5:94:31:c3:44:5f:3a:68:78: 5d:9b:75:6f:47:af:9f:cc:4f:4d:5b:f0:ed:42:76: 57:58:7e:68:cd:27:61:3d:78:67:f2:77:a9:6d:9a: 35:e4:fa:c9:5a:04:96:11:90:f0:bd:48:98:76:15: 62:05:fc:01:1c:53:5e:53:52:bd:1c:1b:76:c8:0b: 14:73:50:bc:38:80:14:98:ac:18:a7:e0:c2:b2:9c: 98:dc:56:d9:ed:cd:ce:fa:39:86:89:47:18:68:5c: 3a:ce:bf:cc:38:61:f0:ae:88:1d:c6:03:3f:19:93: ef:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E8:DD:44:36:38:AC:C0:D4:E1:70:E4:DF:91:E8:2E:DE:EE:4F:63 X509v3 Authority Key Identifier: keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/wOjdRDY4rMDU4XDk35HoLt7uT2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.121.0/24 IPv6: 2a0f:c540::/29 Signature Algorithm: sha256WithRSAEncryption 81:99:e2:4e:c5:e1:72:2d:a2:9b:58:b2:ab:8d:7e:69:f6:7c: 4c:7e:0f:28:3c:58:27:10:8b:eb:e5:1b:19:db:a9:42:e0:7d: 68:fb:08:37:4a:ee:e2:3c:94:07:de:4b:af:f5:c0:8f:5c:e5: 71:ac:fa:f9:45:15:2d:9c:bf:30:8e:34:6d:7c:96:9e:cd:c2: db:a8:b9:bf:68:9d:80:ef:82:3c:f2:32:54:a4:2e:09:a0:6b: cc:61:d6:db:ca:4d:05:51:0e:ee:7d:46:bb:cf:06:9b:11:ed: a9:57:4f:73:12:55:39:85:6a:a1:02:4c:82:0f:57:e4:10:c9: 7b:a2:75:ca:16:4c:06:61:89:47:ea:f4:1f:78:e8:a4:81:b7: 49:a6:d9:1c:8a:27:4a:1b:4a:08:ad:36:47:a2:20:0d:5a:7a: bb:dd:04:7d:f9:30:22:1e:a6:af:ee:69:87:72:25:f9:26:f0: 09:5f:1e:f3:a6:10:95:69:5c:19:62:f6:57:99:93:25:d5:04: 25:a8:a0:8e:5f:77:11:fe:a1:d8:70:dc:fb:19:79:4f:a3:f9: 7d:fb:7f:6d:eb:71:e8:ef:b3:a1:a4:98:92:d1:db:1c:7b:86: 06:bc:97:29:06:6f:4f:8f:83:4c:a2:8d:96:28:75:d7:17:23: d4:70:50:53 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yNV32qrw6jn+9n7hvgYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTEzYzkxNmE1OWRhNGQ0M2I4ZWZhNzczOWFkMTE2N2Fj ZTU5ZmQwHhcNMjYwMTAxMTgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGU4ZGQ0NDM2MzhhY2MwZDRlMTcwZTRkZjkxZTgyZWRlZWU0ZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ+auze0z5eDBOTUz38Fkdep12fH OQLjM6cpOP3CbJbxet1sT6b6gyvvyIpef/keiEWAsITWzCqIdt8XvUhGQI0zFlSb Lgf9aSBFeNIZ45Dyrc/gh9NUhAZ+zHG9DQybsXE8xmjV9KdxkB2Bem7+JqnBc/aH Q+ORv+BbOA0FCmyJ9zSOKOR8bGr6juf1lDHDRF86aHhdm3VvR6+fzE9NW/DtQnZX WH5ozSdhPXhn8nepbZo15PrJWgSWEZDwvUiYdhViBfwBHFNeU1K9HBt2yAsUc1C8 OIAUmKwYp+DCspyY3FbZ7c3O+jmGiUcYaFw6zr/MOGHwrogdxgM/GZPvRwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMDo3UQ2OKzA1OFw5N+R6C7e7k9jMB8GA1UdIwQY MBaAFEgRPJFqWdpNQ7jvp3Oa0RZ6zln9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYt NjliYjI4MmNmNWFlLzEvd09qZFJEWTRyTURVNFhEazM1SG9MdDd1VDJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYtNjliYjI4MmNmNWFl LzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1GZ5MA0E AgACMAcDBQMqD8VAMA0GCSqGSIb3DQEBCwUAA4IBAQCBmeJOxeFyLaKbWLKrjX5p 9nxMfg8oPFgnEIvr5RsZ26lC4H1o+wg3Su7iPJQH3kuv9cCPXOVxrPr5RRUtnL8w jjRtfJaezcLbqLm/aJ2A74I88jJUpC4JoGvMYdbbyk0FUQ7ufUa7zwabEe2pV09z ElU5hWqhAkyCD1fkEMl7onXKFkwGYYlH6vQfeOikgbdJptkciidKG0oIrTZHoiAN Wnq73QR9+TAiHqav7mmHciX5JvAJXx7zphCVaVwZYvZXmZMl1QQlqKCOX3cR/qHY cNz7GXlPo/l9+39t63Ho77OhpJiS0dsce4YGvJcpBm9Pj4NMoo2WKHXXFyPUcFBT -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:19 2026 by rpki-client