This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Y-rwo6ja1_SXsDsjjZenySjEjo8.roa File: Y-rwo6ja1_SXsDsjjZenySjEjo8.roa (raw, json) Hash identifier: ZsKC9kHfKh+n+8/Xir5wlK+HjS6IcJLLArYCrxMRmAk= Subject key identifier: 63:EA:F0:A3:A8:DA:D7:F4:97:B0:3B:23:8D:97:A7:C9:28:C4:8E:8F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019B783518553E79254EFA7E6D632A991C46 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Y-rwo6ja1_SXsDsjjZenySjEjo8.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136744 IP address blocks: 212.30.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:18:55:3e:79:25:4e:fa:7e:6d:63:2a:99:1c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63eaf0a3a8dad7f497b03b238d97a7c928c48e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:3e:b1:2f:0d:36:0d:ee:db:56:59:e7:77: cd:0f:ce:fb:46:fc:86:6f:5b:12:64:82:67:e4:69: 8b:09:3e:d2:85:ae:aa:2c:8b:e5:f5:25:47:4d:9d: 1b:0c:df:4a:aa:86:7f:12:24:b4:32:c2:d4:23:93: 57:0f:98:81:e9:a4:3b:42:90:d6:42:c9:58:65:a2: c4:a5:a4:97:c3:3a:d8:28:7b:dc:c4:e7:8c:1a:39: d7:db:ea:06:f9:a0:05:3f:4b:ee:0e:a0:8b:1a:58: d5:ee:93:c1:de:e0:4b:eb:ea:e0:b6:79:f9:44:b3: d5:9a:cb:e8:e1:85:13:cf:4d:c3:d0:2f:0d:fb:68: f1:51:bb:4d:b6:3e:cb:32:d3:ee:13:d4:b6:a7:4a: 70:75:04:43:13:99:03:16:96:e1:e0:c3:16:01:3f: b7:dd:c0:e1:7e:c9:9b:69:ea:ae:6d:94:79:52:f3: 5c:68:c8:c7:e9:41:b1:30:82:f0:93:28:55:a2:c5: 12:52:29:40:6e:63:02:10:42:46:23:1c:69:29:36: 25:78:00:fd:82:2d:7f:11:41:e2:d0:ec:36:2b:b5: 32:ac:ae:47:7f:af:1f:75:7b:58:1b:8d:80:5b:89: df:20:1c:7d:fc:71:37:ed:c1:9b:d6:de:76:f2:dc: c6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EA:F0:A3:A8:DA:D7:F4:97:B0:3B:23:8D:97:A7:C9:28:C4:8E:8F X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Y-rwo6ja1_SXsDsjjZenySjEjo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.30.61.0/24 Signature Algorithm: sha256WithRSAEncryption 92:8f:65:d0:06:c7:fb:e7:0a:3b:e4:26:0d:4f:0b:6c:4f:dd: fa:9b:91:d0:61:cb:e2:8a:69:b6:52:ec:45:42:ac:c4:ab:dd: 2d:70:6a:b5:8c:3f:b5:5f:2b:7c:84:02:4d:22:0b:d6:08:17: c0:e7:a0:58:48:32:84:ad:08:9a:88:2c:93:5a:49:f6:98:cf: 2e:23:84:1a:63:1e:fe:2c:c8:e6:6a:39:bf:d0:e9:50:4d:88: 10:f7:5e:d1:7f:9c:be:22:01:c2:a4:35:6f:ba:2d:59:bf:1d: 6d:c9:bd:bb:a7:e3:fd:89:8d:28:f6:34:65:e8:05:71:eb:e6: d0:75:80:be:2e:67:d9:79:b6:ed:5f:00:b4:97:c9:39:c2:0b: c2:d0:7b:f8:55:e2:bc:f8:7e:40:ba:cf:c5:44:5b:1e:a1:f0: 3b:db:4e:20:d7:4a:99:09:c4:23:b0:72:52:f9:e0:8e:26:d9: f7:4a:40:c4:27:a0:3f:b2:97:c9:46:ba:c3:cc:70:17:65:6b: 76:47:13:6d:cc:ed:ba:5d:3f:8b:67:9d:ca:d2:93:5f:0a:99: 9d:b3:0e:ad:66:4d:33:f2:79:02:ac:b7:4c:66:14:9b:ac:b3: c4:c1:b0:e2:fb:dd:ee:19:69:79:40:71:f9:03:9d:aa:3e:82: f9:27:eb:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRhVPnklTvp+bWMqmRxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2VhZjBhM2E4ZGFkN2Y0OTdiMDNiMjM4ZDk3YTdjOTI4YzQ4ZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofk+sS8NNg3u21ZZ53fND877RvyG b1sSZIJn5GmLCT7Sha6qLIvl9SVHTZ0bDN9KqoZ/EiS0MsLUI5NXD5iB6aQ7QpDW QslYZaLEpaSXwzrYKHvcxOeMGjnX2+oG+aAFP0vuDqCLGljV7pPB3uBL6+rgtnn5 RLPVmsvo4YUTz03D0C8N+2jxUbtNtj7LMtPuE9S2p0pwdQRDE5kDFpbh4MMWAT+3 3cDhfsmbaequbZR5UvNcaMjH6UGxMILwkyhVosUSUilAbmMCEEJGIxxpKTYleAD9 gi1/EUHi0Ow2K7UyrK5Hf68fdXtYG42AW4nfIBx9/HE37cGb1t528tzGeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGPq8KOo2tf0l7A7I42Xp8koxI6PMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvWS1yd282amExX1NYc0RzampaZW55U2pFam84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1B49MA0G CSqGSIb3DQEBCwUAA4IBAQCSj2XQBsf75wo75CYNTwtsT936m5HQYcviimm2UuxF QqzEq90tcGq1jD+1Xyt8hAJNIgvWCBfA56BYSDKErQiaiCyTWkn2mM8uI4QaYx7+ LMjmajm/0OlQTYgQ917Rf5y+IgHCpDVvui1Zvx1tyb27p+P9iY0o9jRl6AVx6+bQ dYC+LmfZebbtXwC0l8k5wgvC0Hv4VeK8+H5Aus/FRFseofA7204g10qZCcQjsHJS +eCOJtn3SkDEJ6A/spfJRrrDzHAXZWt2RxNtzO26XT+LZ53K0pNfCpmdsw6tZk0z 8nkCrLdMZhSbrLPEwbDi+93uGWl5QHH5A52qPoL5J+u/ -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:59 2026 by rpki-client