This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/CkpruVXBRC35FNzBxsHtHzElTcQ.roa File: CkpruVXBRC35FNzBxsHtHzElTcQ.roa (raw, json) Hash identifier: M8G0Fw/AyLb57D4pQj+p7wHrZ6ZAg2uq5cvqL/37hsU= Subject key identifier: 0A:4A:6B:B9:55:C1:44:2D:F9:14:DC:C1:C6:C1:ED:1F:31:25:4D:C4 Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019B783518C5AF037B95A23691DDF542DF90 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/CkpruVXBRC35FNzBxsHtHzElTcQ.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 212.30.36.0/24 maxlen: 24 212.30.37.0/24 maxlen: 24 212.30.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:18:c5:af:03:7b:95:a2:36:91:dd:f5:42:df:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a4a6bb955c1442df914dcc1c6c1ed1f31254dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:f2:4c:1e:ba:59:5e:d9:11:e8:b6:8a:3f: aa:63:de:eb:e1:bc:00:a6:e7:30:a6:76:e1:39:00: 44:4a:28:1f:4e:15:a5:b5:fe:02:3a:0d:87:9e:eb: c0:01:e1:eb:8b:f3:e0:de:40:69:80:37:06:f7:25: 54:a8:49:93:99:2e:a7:75:8b:2b:a2:cd:c3:65:15: 8d:24:bb:21:1e:3a:b4:b9:35:96:d9:b1:24:29:40: 7b:1f:0f:b9:c6:75:08:41:3f:fd:6f:08:fb:09:8d: e6:a5:4f:20:05:1b:33:af:78:41:09:b0:4b:b4:bb: 73:57:07:46:fe:2f:2b:dc:2d:36:e3:06:d8:e7:f6: 45:c1:cc:55:be:a3:64:cb:f1:36:1e:4f:1e:23:d2: b4:cb:26:52:35:98:c4:26:c4:21:f8:d1:31:e8:d5: 04:45:3f:f2:1f:d7:a9:08:10:01:36:00:04:e5:33: 00:3d:56:a6:f7:24:c3:c5:11:31:99:76:32:8d:57: 4b:4b:6b:42:61:48:b2:2c:88:ec:48:d9:38:6a:c2: 9b:22:6f:6f:32:8a:a9:d4:f4:0c:72:e2:c1:95:f3: 09:ed:1f:64:81:64:12:d7:2b:0c:04:8e:4c:32:68: de:07:d5:8d:55:2b:7b:d3:e2:2d:b7:b5:3b:5c:76: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4A:6B:B9:55:C1:44:2D:F9:14:DC:C1:C6:C1:ED:1F:31:25:4D:C4 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/CkpruVXBRC35FNzBxsHtHzElTcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.30.36.0/23 212.30.63.0/24 Signature Algorithm: sha256WithRSAEncryption 64:e1:a0:cf:c6:f7:01:97:99:08:71:41:76:49:a4:0c:0c:94: 71:d2:d4:0f:3f:da:66:bc:a6:c1:9c:38:50:6a:da:37:fe:3d: 66:a1:ce:a7:8a:5b:13:1a:b1:06:51:b0:8b:b2:45:f1:ac:de: 15:1e:09:29:97:66:d0:5b:1a:a8:80:24:99:f8:0e:7b:b8:9e: 64:4d:b7:48:a4:f3:f5:14:1c:e7:a7:49:86:1e:4d:4d:69:47: de:dd:3a:37:4b:20:f8:d5:72:fa:34:2d:da:46:b3:ae:21:33: 17:58:38:84:3b:74:ed:c9:aa:92:f9:b7:d5:5f:38:e2:60:d4: dc:c2:71:1e:c9:48:9c:c4:34:79:22:46:f1:89:c1:47:98:62: 2d:64:bf:f9:a0:6a:d4:45:7a:9f:9d:b4:5d:ac:65:79:8b:d8: c9:68:26:22:ab:fb:01:c0:a1:99:83:ef:30:08:c1:8b:ec:cf: 72:e9:22:df:74:18:8a:69:c9:e9:92:34:f7:5c:3a:be:a4:f6: ef:97:a7:97:e1:88:e3:8f:ca:99:d4:84:72:90:d0:2f:1d:da: 55:09:21:3c:8b:13:45:f9:ef:c9:e0:f0:7e:5b:eb:c3:24:74: f2:01:be:18:cc:9d:5b:f7:25:02:b8:53:82:0e:b1:05:6d:f4: e8:f4:01:db -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NRjFrwN7laI2kd31Qt+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTRhNmJiOTU1YzE0NDJkZjkxNGRjYzFjNmMxZWQxZjMxMjU0ZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFzyTB66WV7ZEei2ij+qY97r4bwA pucwpnbhOQBESigfThWltf4COg2HnuvAAeHri/Pg3kBpgDcG9yVUqEmTmS6ndYsr os3DZRWNJLshHjq0uTWW2bEkKUB7Hw+5xnUIQT/9bwj7CY3mpU8gBRszr3hBCbBL tLtzVwdG/i8r3C024wbY5/ZFwcxVvqNky/E2Hk8eI9K0yyZSNZjEJsQh+NEx6NUE RT/yH9epCBABNgAE5TMAPVam9yTDxRExmXYyjVdLS2tCYUiyLIjsSNk4asKbIm9v Moqp1PQMcuLBlfMJ7R9kgWQS1ysMBI5MMmjeB9WNVSt70+Itt7U7XHYo4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFApKa7lVwUQt+RTcwcbB7R8xJU3EMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvQ2twcnVWWEJSQzM1Rk56QnhzSHRIekVsVGNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1B4kAwQA 1B4/MA0GCSqGSIb3DQEBCwUAA4IBAQBk4aDPxvcBl5kIcUF2SaQMDJRx0tQPP9pm vKbBnDhQato3/j1moc6nilsTGrEGUbCLskXxrN4VHgkpl2bQWxqogCSZ+A57uJ5k TbdIpPP1FBznp0mGHk1NaUfe3To3SyD41XL6NC3aRrOuITMXWDiEO3TtyaqS+bfV XzjiYNTcwnEeyUicxDR5IkbxicFHmGItZL/5oGrURXqfnbRdrGV5i9jJaCYiq/sB wKGZg+8wCMGL7M9y6SLfdBiKacnpkjT3XDq+pPbvl6eX4Yjjj8qZ1IRykNAvHdpV CSE8ixNF+e/J4PB+W+vDJHTyAb4YzJ1b9yUCuFOCDrEFbfTo9AHb -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:30 2026 by rpki-client