This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa File: nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa (raw, json) Hash identifier: Fv1RC7bFvxKYKp89cN52GIHsD0MHml/fLyyWKSWO5/k= Subject key identifier: 9C:CA:5A:31:B1:84:CE:3D:89:A6:0D:BF:1B:11:36:C5:87:34:A5:42 Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019B78351611EFAC55DE0D43DFC71947A752 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43019 IP address blocks: 212.30.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:16:11:ef:ac:55:de:0d:43:df:c7:19:47:a7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cca5a31b184ce3d89a60dbf1b1136c58734a542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:09:26:d4:ba:16:11:bb:b6:d0:77:df:04: 0f:6e:8d:b2:c6:a4:78:5f:2d:15:b2:17:49:b4:1f: 0c:52:98:5b:ef:29:65:17:fb:f7:94:56:d8:f9:7a: c5:af:f1:3b:81:ea:97:67:72:db:f3:ca:c6:02:0e: 89:f4:79:d8:57:13:39:38:84:49:4f:5a:7d:a0:b2: 82:93:c5:e1:11:79:d9:56:75:a8:80:1e:c4:03:ee: 27:c7:95:a4:ae:7d:a3:b5:a0:a1:a0:e9:3e:23:25: 44:08:c9:2c:7b:e7:80:58:99:35:20:d2:75:9e:6c: d2:d2:26:b2:61:e8:98:70:05:cc:57:46:c0:e2:6e: ba:3e:42:a7:8f:98:fc:1e:6b:a6:06:a2:4e:08:5d: b9:97:80:58:31:e1:af:3e:7d:e5:7b:c6:3d:81:ed: 19:6e:40:16:78:86:c1:5a:21:e8:79:df:a8:df:87: 4b:83:a0:4a:56:4e:92:3b:ae:c9:18:4b:d2:11:40: 8e:18:cd:93:c1:fa:f6:72:a4:79:2a:bf:5d:ff:72: f6:89:08:42:8f:97:7b:d0:eb:b2:be:00:97:ed:30: a3:25:24:d5:29:7d:16:ee:8d:90:8c:56:3a:9d:c4: 78:34:be:f6:96:b3:32:e9:29:e3:86:13:11:3f:47: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CA:5A:31:B1:84:CE:3D:89:A6:0D:BF:1B:11:36:C5:87:34:A5:42 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.30.41.0/24 Signature Algorithm: sha256WithRSAEncryption 71:1f:54:44:1c:d3:07:9d:c3:f0:c6:33:2d:69:37:10:6c:31: ad:d5:cd:b4:60:36:ba:cf:22:76:d1:39:33:e6:1e:b6:fc:4c: b3:e7:e3:2b:56:43:aa:db:fb:cf:4b:2f:8a:f4:a9:33:01:1e: 81:0d:30:d9:e0:dd:4d:c3:67:14:20:63:be:e2:54:15:39:fc: 3f:9b:89:9c:43:62:00:4a:2e:6f:49:89:61:ca:42:d7:46:27: 0c:3f:77:19:5f:3f:89:1e:d6:5a:6f:3e:0d:20:f4:76:7b:51: 48:28:f5:11:47:b6:0e:e8:2b:61:56:b7:b6:b1:fb:e4:20:aa: 22:d7:32:b3:fa:bf:fe:06:31:8e:15:f9:c1:39:ff:a7:22:9f: e7:8d:0c:ae:4f:5a:25:f8:67:0c:9f:c9:e0:cb:9c:64:4a:bc: ae:86:7d:ee:ed:cd:56:9e:b7:50:a1:74:e5:ab:25:ef:9f:b5: 14:3e:53:db:b1:25:1e:fd:5f:87:8d:45:25:95:a5:49:c8:3c: f4:70:19:a0:7a:00:48:cf:71:45:fd:34:b3:6d:6f:29:7a:2d: 8b:ef:2e:de:db:cc:7c:e4:9e:87:59:cc:52:1e:38:d4:d1:2a: c2:3a:95:d9:86:62:09:e9:c6:41:92:fd:06:48:32:e4:71:6e: 49:5d:12:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRYR76xV3g1D38cZR6dSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2NhNWEzMWIxODRjZTNkODlhNjBkYmYxYjExMzZjNTg3MzRhNTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+0JJtS6FhG7ttB33wQPbo2yxqR4 Xy0VshdJtB8MUphb7yllF/v3lFbY+XrFr/E7geqXZ3Lb88rGAg6J9HnYVxM5OIRJ T1p9oLKCk8XhEXnZVnWogB7EA+4nx5Wkrn2jtaChoOk+IyVECMkse+eAWJk1INJ1 nmzS0iayYeiYcAXMV0bA4m66PkKnj5j8HmumBqJOCF25l4BYMeGvPn3le8Y9ge0Z bkAWeIbBWiHoed+o34dLg6BKVk6SO67JGEvSEUCOGM2Twfr2cqR5Kr9d/3L2iQhC j5d70OuyvgCX7TCjJSTVKX0W7o2QjFY6ncR4NL72lrMy6SnjhhMRP0eiLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJzKWjGxhM49iaYNvxsRNsWHNKVCMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvbk1wYU1iR0V6ajJKcGcyX0d4RTJ4WWMwcFVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1B4pMA0G CSqGSIb3DQEBCwUAA4IBAQBxH1REHNMHncPwxjMtaTcQbDGt1c20YDa6zyJ20Tkz 5h62/Eyz5+MrVkOq2/vPSy+K9KkzAR6BDTDZ4N1Nw2cUIGO+4lQVOfw/m4mcQ2IA Si5vSYlhykLXRicMP3cZXz+JHtZabz4NIPR2e1FIKPURR7YO6CthVre2sfvkIKoi 1zKz+r/+BjGOFfnBOf+nIp/njQyuT1ol+GcMn8ngy5xkSryuhn3u7c1WnrdQoXTl qyXvn7UUPlPbsSUe/V+HjUUllaVJyDz0cBmgegBIz3FF/TSzbW8pei2L7y7e28x8 5J6HWcxSHjjU0SrCOpXZhmIJ6cZBkv0GSDLkcW5JXRKR -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:37 2026 by rpki-client