This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/H4PmoPs09fxsoMyeNbvcLTDl7tg.roa File: H4PmoPs09fxsoMyeNbvcLTDl7tg.roa (raw, json) Hash identifier: g6se6YwWnPf1EHgnkVuLefIVI+viGWgQPBM+Zec15uI= Subject key identifier: 1F:83:E6:A0:FB:34:F5:FC:6C:A0:CC:9E:35:BB:DC:2D:30:E5:EE:D8 Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019B78351BAD645F0440A932B5B5326E7DC9 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/H4PmoPs09fxsoMyeNbvcLTDl7tg.roa Signing time: Thu 01 Jan 2026 06:18:25 +0000 ROA not before: Thu 01 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 212.30.33.0/24 maxlen: 24 212.30.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1b:ad:64:5f:04:40:a9:32:b5:b5:32:6e:7d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f83e6a0fb34f5fc6ca0cc9e35bbdc2d30e5eed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:ff:96:0e:84:82:4a:ec:d2:10:35:9c:6e: e8:d1:9f:bd:ce:bc:e9:5b:02:09:82:1f:fa:86:51: 95:25:45:38:71:eb:f3:e0:c2:8d:95:64:b3:ce:b0: e9:e2:fa:3f:24:92:a7:aa:f5:5d:e5:1b:a4:43:67: 45:53:52:c8:34:7d:71:44:36:4a:92:4b:59:db:68: ea:f9:08:e6:64:7c:fc:e2:f8:7e:ed:01:bc:0e:1a: 1f:a9:0b:91:5f:47:ae:e2:09:ec:4c:70:4f:08:d6: d7:22:c8:83:2b:cf:46:a6:5f:e0:5c:50:72:86:af: a7:88:48:39:2d:f4:fd:0e:f9:51:38:f6:ee:18:d0: 6e:6f:39:88:81:e6:c5:2e:72:e3:1e:b9:4b:13:fa: 7c:ec:c4:48:35:eb:e7:09:ad:e0:2d:71:00:b8:fa: 65:3b:90:d3:1f:ba:45:93:9f:56:25:59:f4:35:3f: 0a:f9:8c:1e:fe:0f:93:87:32:c2:55:90:11:32:9f: 43:3c:3e:5b:2a:53:41:ab:45:0e:7a:81:0c:4b:4e: f6:18:c2:a3:57:0a:91:52:23:40:f7:b4:58:c6:3b: b8:81:14:d3:22:b3:d8:d4:a7:0b:a7:02:aa:46:89: 9f:5b:c4:d7:5a:9e:41:90:4e:14:99:65:db:5f:60: ab:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:83:E6:A0:FB:34:F5:FC:6C:A0:CC:9E:35:BB:DC:2D:30:E5:EE:D8 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/H4PmoPs09fxsoMyeNbvcLTDl7tg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.30.33.0/24 212.30.60.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:0d:09:1c:ab:ad:11:0b:70:87:78:3d:54:c3:68:c4:75:8c: 13:9f:4d:2b:2f:cf:b5:6e:83:dc:f8:57:ee:8b:35:d7:89:2d: b0:b9:9a:e4:e2:87:b2:0c:d7:6d:e7:28:dd:8f:a6:d2:24:f0: 5a:94:77:c7:7f:10:ef:94:2d:9a:e7:26:b0:92:71:13:5a:5c: db:07:49:41:4a:62:b8:14:5e:89:ca:b7:31:38:36:82:79:96: 5e:1f:8b:a2:77:17:4a:96:9c:14:08:50:c8:fa:d8:d3:ed:c7: 89:4d:5b:2e:27:4c:71:dc:0d:44:7f:c4:d5:3f:5d:53:db:29: 88:09:e9:b5:54:34:dc:47:05:47:26:df:96:30:46:c8:1e:c6: fb:63:70:c3:e7:f6:25:63:f3:a8:81:94:61:43:a6:04:35:61: 33:5c:42:7e:3a:61:07:fe:41:ec:26:aa:91:08:63:dc:7a:19: 03:c7:ab:63:36:fb:13:b6:5a:98:e3:d5:77:ee:73:9d:a8:e0: 07:34:1c:a4:37:14:70:3a:7f:d4:e1:0b:75:f7:fd:4c:15:8e: 98:e8:7b:80:34:95:4a:e6:8f:6d:ea:ba:a8:80:93:b7:82:9d: 02:5b:36:2c:3d:f6:a6:cf:ca:84:4c:82:61:80:5f:12:16:f2: f4:7b:05:39 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NRutZF8EQKkytbUybn3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjgzZTZhMGZiMzRmNWZjNmNhMGNjOWUzNWJiZGMyZDMwZTVlZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm7/lg6Egkrs0hA1nG7o0Z+9zrzp WwIJgh/6hlGVJUU4cevz4MKNlWSzzrDp4vo/JJKnqvVd5RukQ2dFU1LINH1xRDZK kktZ22jq+QjmZHz84vh+7QG8DhofqQuRX0eu4gnsTHBPCNbXIsiDK89Gpl/gXFBy hq+niEg5LfT9DvlROPbuGNBubzmIgebFLnLjHrlLE/p87MRINevnCa3gLXEAuPpl O5DTH7pFk59WJVn0NT8K+Ywe/g+ThzLCVZARMp9DPD5bKlNBq0UOeoEMS072GMKj VwqRUiNA97RYxju4gRTTIrPY1KcLpwKqRomfW8TXWp5BkE4UmWXbX2Cr1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB+D5qD7NPX8bKDMnjW73C0w5e7YMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSDRQbW9QczA5Znhzb015ZU5idmNMVERsN3RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1B4hAwQA 1B48MA0GCSqGSIb3DQEBCwUAA4IBAQAeDQkcq60RC3CHeD1Uw2jEdYwTn00rL8+1 boPc+FfuizXXiS2wuZrk4oeyDNdt5yjdj6bSJPBalHfHfxDvlC2a5yawknETWlzb B0lBSmK4FF6JyrcxODaCeZZeH4uidxdKlpwUCFDI+tjT7ceJTVsuJ0xx3A1Ef8TV P11T2ymICem1VDTcRwVHJt+WMEbIHsb7Y3DD5/YlY/OogZRhQ6YENWEzXEJ+OmEH /kHsJqqRCGPcehkDx6tjNvsTtlqY49V37nOdqOAHNBykNxRwOn/U4Qt19/1MFY6Y 6HuANJVK5o9t6rqogJO3gp0CWzYsPfamz8qETIJhgF8SFvL0ewU5 -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:42 2026 by rpki-client