This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/rjPbS80wLPhwF4ETCKbrHWAdxvw.roa File: rjPbS80wLPhwF4ETCKbrHWAdxvw.roa (raw, json) Hash identifier: 0e9ndNtpFQMzhAU9T854jFmEVmFNvWMXh2KdMpHi8jk= Subject key identifier: AE:33:DB:4B:CD:30:2C:F8:70:17:81:13:08:A6:EB:1D:60:1D:C6:FC Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019B7835196FA83CD2EC7D374D9A92FC1472 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/rjPbS80wLPhwF4ETCKbrHWAdxvw.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204356 IP address blocks: 212.30.32.0/24 maxlen: 24 212.30.34.0/24 maxlen: 24 212.30.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:19:6f:a8:3c:d2:ec:7d:37:4d:9a:92:fc:14:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae33db4bcd302cf87017811308a6eb1d601dc6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cb:f2:52:fb:43:2e:f0:49:03:0c:78:82:91: ed:ad:46:ab:64:f3:26:cf:06:86:83:3a:28:73:d3: 6e:6c:b2:a7:de:ee:6f:1e:d0:08:01:0d:d9:fc:e9: 48:e9:ce:b7:7b:4d:2e:ab:f5:39:ce:88:cc:10:07: 85:9a:8f:a3:69:4f:91:f6:35:72:d5:82:18:2f:ea: 92:a8:59:54:2c:c9:54:1c:77:01:0c:17:8e:72:24: ac:2f:be:9c:ab:1a:f5:b7:4f:92:97:7e:3d:96:ee: 3d:1f:96:7a:aa:a8:8c:a4:4d:fb:a6:9d:99:d9:83: d2:b8:27:f6:23:35:fa:12:8d:2a:22:6f:ee:78:96: 10:2c:62:b7:1b:3e:77:92:21:02:b1:68:ba:be:bd: e4:4c:5e:af:a2:62:75:11:40:ce:b4:93:67:69:0d: 74:b9:80:4b:16:b3:61:5e:36:8d:e0:fd:0e:3f:a9: cd:ae:66:cd:b9:ca:a4:3e:ad:05:7c:56:d5:dc:c2: 8c:09:eb:30:c9:db:54:b6:e4:54:3b:dc:2e:36:8c: d7:57:34:6b:7d:be:1c:ef:a2:ee:56:3a:b2:85:9b: f4:4a:9f:73:4d:92:bc:12:2a:2d:5f:80:5c:45:46: ca:75:86:0e:cb:f2:16:bf:63:69:ba:69:20:bd:32: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:33:DB:4B:CD:30:2C:F8:70:17:81:13:08:A6:EB:1D:60:1D:C6:FC X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/rjPbS80wLPhwF4ETCKbrHWAdxvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.30.32.0/24 212.30.34.0/24 212.30.39.0/24 Signature Algorithm: sha256WithRSAEncryption 48:1e:7b:1d:dd:9a:ce:34:ab:cc:41:18:6b:6f:51:8c:66:a5: 84:01:a6:42:08:a0:f0:a2:81:3f:64:70:28:56:7a:67:07:e6: 47:9b:3c:01:40:8b:cb:28:a1:80:65:3c:52:ec:8e:b4:68:b5: 28:58:62:8d:cf:ac:4a:85:d9:91:3f:5e:9f:1e:ea:ff:6b:26: 0e:c8:84:a2:58:a0:80:14:40:cc:75:de:4a:ed:da:35:29:80: f8:d0:d5:86:1c:00:a8:b5:eb:ac:3a:02:ae:ec:6e:95:fb:f8: f9:90:fd:8f:68:74:6e:fe:b5:f9:e2:05:48:0f:39:e1:bd:cd: 95:80:14:c8:fe:22:5f:0c:95:94:3d:14:16:a3:6f:eb:75:67: 48:c1:22:33:7e:98:6f:da:3f:97:c5:eb:a6:41:bf:ac:7b:91: 14:b1:69:9e:2f:f3:e0:14:c3:1d:70:e4:e6:89:9b:b6:a4:ce: f3:d8:5a:d1:10:26:6b:b9:27:e7:5e:c1:74:52:72:6b:49:8e: a7:48:7e:f7:8c:b7:f2:85:69:8c:a0:6b:c3:a2:1f:42:90:a0: da:ca:f3:2c:13:01:13:a1:cf:bd:7a:e9:b6:e9:51:fe:8a:16: 40:83:a3:51:89:76:f9:4b:c7:85:ab:c4:4d:d2:69:23:6f:ab: 80:79:cd:de -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NRlvqDzS7H03TZqS/BRyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTMzZGI0YmNkMzAyY2Y4NzAxNzgxMTMwOGE2ZWIxZDYwMWRjNmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycvyUvtDLvBJAwx4gpHtrUarZPMm zwaGgzooc9NubLKn3u5vHtAIAQ3Z/OlI6c63e00uq/U5zojMEAeFmo+jaU+R9jVy 1YIYL+qSqFlULMlUHHcBDBeOciSsL76cqxr1t0+Sl349lu49H5Z6qqiMpE37pp2Z 2YPSuCf2IzX6Eo0qIm/ueJYQLGK3Gz53kiECsWi6vr3kTF6vomJ1EUDOtJNnaQ10 uYBLFrNhXjaN4P0OP6nNrmbNucqkPq0FfFbV3MKMCeswydtUtuRUO9wuNozXVzRr fb4c76LuVjqyhZv0Sp9zTZK8EiotX4BcRUbKdYYOy/IWv2NpumkgvTLHuQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK4z20vNMCz4cBeBEwim6x1gHcb8MB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvcmpQYlM4MHdMUGh3RjRFVENLYnJIV0FkeHZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1B4gAwQA 1B4iAwQA1B4nMA0GCSqGSIb3DQEBCwUAA4IBAQBIHnsd3ZrONKvMQRhrb1GMZqWE AaZCCKDwooE/ZHAoVnpnB+ZHmzwBQIvLKKGAZTxS7I60aLUoWGKNz6xKhdmRP16f Hur/ayYOyISiWKCAFEDMdd5K7do1KYD40NWGHACoteusOgKu7G6V+/j5kP2PaHRu /rX54gVIDznhvc2VgBTI/iJfDJWUPRQWo2/rdWdIwSIzfphv2j+XxeumQb+se5EU sWmeL/PgFMMdcOTmiZu2pM7z2FrRECZruSfnXsF0UnJrSY6nSH73jLfyhWmMoGvD oh9CkKDayvMsEwEToc+9eum26VH+ihZAg6NRiXb5S8eFq8RN0mkjb6uAec3e -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:38 2026 by rpki-client