This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ufjaDLPum5mRkBKXDuMb146baHg.roa File: ufjaDLPum5mRkBKXDuMb146baHg.roa (raw, json) Hash identifier: oNF4RqIC9pQOPmU+xyL4C1SBlQau5hDsBq8wufytphI= Subject key identifier: B9:F8:DA:0C:B3:EE:9B:99:91:90:12:97:0E:E3:1B:D7:8E:9B:68:78 Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019B78351C3C9003356C8267F38B96D4646F Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ufjaDLPum5mRkBKXDuMb146baHg.roa Signing time: Thu 01 Jan 2026 06:18:25 +0000 ROA not before: Thu 01 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212435 IP address blocks: 212.30.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1c:3c:90:03:35:6c:82:67:f3:8b:96:d4:64:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9f8da0cb3ee9b99919012970ee31bd78e9b6878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:41:7c:78:b0:52:b2:7e:de:38:71:e8:c6: 94:98:29:e9:7e:66:89:1e:ae:f5:f7:08:31:e6:ae: 53:6b:27:32:4a:c3:4d:cc:59:3c:51:17:06:94:c1: fc:1b:19:26:d6:49:68:d3:f8:f0:dd:8d:67:90:56: 71:82:af:5d:4f:95:c1:13:ec:ce:d0:57:a2:13:17: 07:59:f0:63:d7:21:f8:d5:b3:8a:6b:12:3a:9d:54: b9:89:d8:ac:76:90:b6:77:e3:0e:eb:6a:df:26:49: a9:5c:31:99:e5:fc:45:c6:c5:ed:3d:bd:f5:59:40: b2:f8:8b:c4:f3:fa:a7:43:c4:22:37:48:40:0a:04: 53:a3:19:ed:9d:9b:ba:2a:78:22:1c:1d:92:cd:61: 6f:7b:e2:14:bf:e7:ed:47:44:0f:4e:90:2a:ed:f4: da:eb:65:4f:ca:4a:36:80:13:e0:46:02:1e:14:8b: 57:9c:0c:06:33:91:22:b1:d8:98:a5:83:27:94:e3: 2a:60:76:21:63:c9:ef:b9:bb:9f:bc:cb:27:7e:70: 41:50:2a:40:70:cb:8f:e2:0e:ca:d2:c0:ac:43:80: 6e:e5:b3:d5:22:c1:fc:8d:f3:74:00:6c:ba:87:e3: 1b:ef:69:41:bb:a4:24:72:cb:3b:34:3e:03:4f:38: 5c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F8:DA:0C:B3:EE:9B:99:91:90:12:97:0E:E3:1B:D7:8E:9B:68:78 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ufjaDLPum5mRkBKXDuMb146baHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.30.62.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:2f:c8:44:86:81:4c:17:67:35:23:1e:aa:c1:f1:8c:7b:5e: 89:f1:75:23:98:37:b4:9a:99:67:cc:5a:b1:26:04:42:26:e9: cc:72:8c:ad:2d:65:ec:17:54:e9:c3:f4:e3:d8:54:84:a1:e4: ba:ad:24:4c:8e:f5:cc:77:2b:61:01:0f:f4:4c:0f:a6:e4:ca: 57:0b:58:d9:05:3e:e8:e1:0d:0f:f3:77:ef:5d:ea:3f:5d:38: 11:24:57:27:fc:e9:f2:3e:8f:a7:4c:ba:08:d3:d4:0c:7e:12: de:2c:a7:32:b0:18:92:20:40:94:31:5b:e5:cc:e1:a2:79:90: 80:b5:00:58:25:56:53:ed:e9:ba:3d:49:0d:ab:63:33:f1:27: 5a:c8:f2:62:32:a2:16:30:f7:91:e6:7a:65:0a:7f:67:3a:22: d8:19:f7:ca:be:ce:26:d6:a5:f8:cd:8f:de:93:f1:9e:bd:b4: 61:27:03:a7:7b:ed:89:bb:7d:95:02:1b:aa:e4:ad:a1:87:5f: 71:d7:b6:03:1d:46:33:58:2b:a9:dd:60:72:a0:69:3e:3e:f5: cb:7e:63:b2:fb:fc:78:f4:78:4c:ed:bc:2a:be:60:04:b4:47: 59:2a:20:ee:6f:1a:af:8d:92:26:5b:04:6c:a3:e6:64:79:0b: 60:a3:97:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRw8kAM1bIJn84uW1GRvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWY4ZGEwY2IzZWU5Yjk5OTE5MDEyOTcwZWUzMWJkNzhlOWI2ODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCNBfHiwUrJ+3jhx6MaUmCnpfmaJ Hq719wgx5q5TaycySsNNzFk8URcGlMH8Gxkm1klo0/jw3Y1nkFZxgq9dT5XBE+zO 0FeiExcHWfBj1yH41bOKaxI6nVS5idisdpC2d+MO62rfJkmpXDGZ5fxFxsXtPb31 WUCy+IvE8/qnQ8QiN0hACgRToxntnZu6KngiHB2SzWFve+IUv+ftR0QPTpAq7fTa 62VPyko2gBPgRgIeFItXnAwGM5EisdiYpYMnlOMqYHYhY8nvubufvMsnfnBBUCpA cMuP4g7K0sCsQ4Bu5bPVIsH8jfN0AGy6h+Mb72lBu6Qkcss7ND4DTzhc8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLn42gyz7puZkZASlw7jG9eOm2h4MB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvdWZqYURMUHVtNW1Sa0JLWER1TWIxNDZiYUhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1B4+MA0G CSqGSIb3DQEBCwUAA4IBAQB9L8hEhoFMF2c1Ix6qwfGMe16J8XUjmDe0mplnzFqx JgRCJunMcoytLWXsF1Tpw/Tj2FSEoeS6rSRMjvXMdythAQ/0TA+m5MpXC1jZBT7o 4Q0P83fvXeo/XTgRJFcn/OnyPo+nTLoI09QMfhLeLKcysBiSIECUMVvlzOGieZCA tQBYJVZT7em6PUkNq2Mz8SdayPJiMqIWMPeR5nplCn9nOiLYGffKvs4m1qX4zY/e k/GevbRhJwOne+2Ju32VAhuq5K2hh19x17YDHUYzWCup3WByoGk+PvXLfmOy+/x4 9HhM7bwqvmAEtEdZKiDubxqvjZImWwRso+ZkeQtgo5el -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:40 2026 by rpki-client