This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/WuM6D54bD9ZW12al4cadO05OlhA.roa File: WuM6D54bD9ZW12al4cadO05OlhA.roa (raw, json) Hash identifier: KSoGE/L4hSg6At0Y5RkAFE3o/b5P/zSmERN2VFp1fMQ= Subject key identifier: 5A:E3:3A:0F:9E:1B:0F:D6:56:D7:66:A5:E1:C6:9D:3B:4E:4E:96:10 Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019B78351D780E474C2E70AACBBB667C6C7A Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/WuM6D54bD9ZW12al4cadO05OlhA.roa Signing time: Thu 01 Jan 2026 06:18:25 +0000 ROA not before: Thu 01 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215650 IP address blocks: 212.30.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1d:78:0e:47:4c:2e:70:aa:cb:bb:66:7c:6c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ae33a0f9e1b0fd656d766a5e1c69d3b4e4e9610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:b4:7c:25:66:c4:98:35:0e:86:6d:39:6f: 5f:10:88:2f:44:dc:3f:6f:9d:63:32:4b:bc:29:0f: cd:df:e2:83:cd:64:68:03:10:a1:70:79:58:87:2f: c3:19:80:a7:e9:22:7f:6f:08:81:9c:e2:b1:54:8a: 8a:a0:96:b1:52:18:a1:6b:eb:4f:d8:42:6b:0d:d7: db:e2:59:d2:27:e5:7e:cd:c8:02:bf:08:e8:83:79: 0d:26:4c:5e:00:4a:8d:74:35:59:13:7c:55:9c:0b: f3:7c:cf:a1:f5:4f:ac:52:ed:48:77:84:d1:f9:77: 8f:1c:14:c3:62:be:dc:50:36:f3:36:f4:a0:39:85: eb:9d:20:eb:0b:f1:25:92:a5:6c:ab:f0:ac:7b:00: d0:ba:2c:39:a4:39:96:39:e0:36:d1:e5:5c:3d:92: 85:db:c9:54:0e:b3:cc:63:21:d7:26:29:a5:27:9a: e4:b3:96:de:55:35:3d:a6:e1:ef:0d:44:d2:a4:02: 1c:61:56:03:9a:f6:07:99:ed:d2:bc:9c:69:61:2c: b6:e2:28:05:5a:d4:f0:09:09:e4:ad:b2:b3:84:ef: b4:00:28:1a:62:bf:2f:47:26:bf:47:96:c7:18:1a: 0d:64:b0:c3:8a:cd:3b:ec:51:43:95:8d:04:80:54: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E3:3A:0F:9E:1B:0F:D6:56:D7:66:A5:E1:C6:9D:3B:4E:4E:96:10 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/WuM6D54bD9ZW12al4cadO05OlhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.30.38.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:15:16:c7:55:6f:0e:ec:a4:06:ea:be:dc:5c:94:47:3c:b4: 4d:4a:1d:6c:4c:87:bc:c8:dc:69:86:89:63:74:3d:0d:b3:94: 02:f5:a6:fe:f6:ec:98:78:67:b4:a9:1f:a7:86:40:71:78:a2: 69:7f:e5:78:a3:e8:7b:4e:69:98:16:27:25:cc:77:11:a7:3d: c3:f9:b1:62:c2:96:7b:55:0e:c5:e8:6e:fb:b1:2e:fe:cd:75: d1:4e:2c:2e:77:9f:9f:d7:b9:f7:f1:6c:f3:f2:e9:a4:46:27: 5e:63:14:2b:13:e6:07:9c:29:bd:23:d0:35:9c:c3:38:ad:8e: 63:b3:ef:65:91:88:19:e9:75:49:a5:b6:66:cb:4f:14:e3:ed: 39:21:2c:10:96:0f:7d:e6:3b:aa:ba:d7:65:4f:26:23:a9:ab: a7:e6:2d:0c:dd:af:72:78:05:fe:66:99:b0:3f:3f:2f:08:58: 57:c5:39:0f:48:0b:b2:bb:18:b9:6f:d5:65:2f:ca:ce:c5:a8: 2b:62:18:c0:7a:de:13:b1:5a:65:c5:f2:df:e9:e6:86:7a:9a: f0:46:e1:67:99:70:75:e7:20:d9:7f:54:d5:c1:52:77:38:5e: 34:0a:ce:69:df:1b:00:8b:c2:97:35:1f:d9:64:76:b5:b3:83: 66:b8:f0:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NR14DkdMLnCqy7tmfGx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWUzM2EwZjllMWIwZmQ2NTZkNzY2YTVlMWM2OWQzYjRlNGU5NjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQm0fCVmxJg1DoZtOW9fEIgvRNw/ b51jMku8KQ/N3+KDzWRoAxChcHlYhy/DGYCn6SJ/bwiBnOKxVIqKoJaxUhiha+tP 2EJrDdfb4lnSJ+V+zcgCvwjog3kNJkxeAEqNdDVZE3xVnAvzfM+h9U+sUu1Id4TR +XePHBTDYr7cUDbzNvSgOYXrnSDrC/ElkqVsq/CsewDQuiw5pDmWOeA20eVcPZKF 28lUDrPMYyHXJimlJ5rks5beVTU9puHvDUTSpAIcYVYDmvYHme3SvJxpYSy24igF WtTwCQnkrbKzhO+0ACgaYr8vRya/R5bHGBoNZLDDis077FFDlY0EgFRIuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrjOg+eGw/WVtdmpeHGnTtOTpYQMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvV3VNNkQ1NGJEOVpXMTJhbDRjYWRPMDVPbGhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1B4mMA0G CSqGSIb3DQEBCwUAA4IBAQAeFRbHVW8O7KQG6r7cXJRHPLRNSh1sTIe8yNxpholj dD0Ns5QC9ab+9uyYeGe0qR+nhkBxeKJpf+V4o+h7TmmYFiclzHcRpz3D+bFiwpZ7 VQ7F6G77sS7+zXXRTiwud5+f17n38Wzz8umkRideYxQrE+YHnCm9I9A1nMM4rY5j s+9lkYgZ6XVJpbZmy08U4+05ISwQlg995juqutdlTyYjqaun5i0M3a9yeAX+Zpmw Pz8vCFhXxTkPSAuyuxi5b9VlL8rOxagrYhjAet4TsVplxfLf6eaGeprwRuFnmXB1 5yDZf1TVwVJ3OF40Cs5p3xsAi8KXNR/ZZHa1s4NmuPAV -----END CERTIFICATE-----Generated at Tue Jan 20 12:51:50 2026 by rpki-client