This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/aASlAO3ULJvYcCaFwZuTImiJ--8.roa File: aASlAO3ULJvYcCaFwZuTImiJ--8.roa (raw, json) Hash identifier: 3IcV0cUF4DbrPmFVcmO8nyEBwkVXv6EWYEXI+8Y8SiM= Subject key identifier: 68:04:A5:00:ED:D4:2C:9B:D8:70:26:85:C1:9B:93:22:68:89:FB:EF Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Certificate serial: 019B77C73DEAE33588FC9DA6153FF1F461F9 Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/aASlAO3ULJvYcCaFwZuTImiJ--8.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47217 IP address blocks: 212.103.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3d:ea:e3:35:88:fc:9d:a6:15:3f:f1:f4:61:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6804a500edd42c9bd8702685c19b93226889fbef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:70:1d:5b:b0:cb:66:6a:b2:4a:b5:82:43: aa:28:11:33:dc:c5:b0:1c:eb:0d:47:ae:bd:b9:95: 38:c1:bc:64:75:8e:23:d4:0f:30:18:57:de:4e:c7: b3:56:8f:a8:53:74:81:cc:7a:89:b8:74:b3:a3:6a: f8:8e:ca:e6:33:0b:51:11:3d:0d:2a:d1:92:82:e8: 62:a2:14:f3:48:bc:4e:80:97:d3:6d:ce:e2:03:11: 7e:bb:60:11:5a:8e:3f:52:f5:97:dc:91:bc:cb:e8: 03:b0:f3:14:9d:e5:00:75:ff:04:8e:ec:24:90:52: 19:e0:77:d7:60:6e:2d:6e:a8:4d:ea:81:7e:ac:48: 02:35:a7:14:26:25:3b:99:c1:b8:67:c8:1f:b8:e1: 43:34:c3:23:57:1e:93:da:be:a4:4f:cd:d7:d7:9a: 86:28:c3:99:52:17:0c:a8:6e:db:30:27:2c:8e:b8: 8d:48:8c:20:cf:5f:50:0f:a8:e1:92:a5:78:82:d1: d2:cf:e5:e2:65:a2:9e:ac:ed:14:e3:0c:3b:33:3f: 58:76:3e:6a:14:4a:5d:72:c8:93:d6:07:cd:5d:20: 82:64:f6:77:3d:8f:1f:06:8f:cc:c1:60:a0:8c:2c: 0e:23:97:e8:33:37:21:9d:a8:cd:93:c1:f0:25:90: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:04:A5:00:ED:D4:2C:9B:D8:70:26:85:C1:9B:93:22:68:89:FB:EF X509v3 Authority Key Identifier: keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/aASlAO3ULJvYcCaFwZuTImiJ--8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.103.202.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:10:50:c7:0e:a3:b0:02:b7:0d:1e:2a:8d:43:0a:c3:00:c2: 4e:98:7d:f1:81:2a:b9:3f:4b:04:fa:ab:c6:a8:c1:56:c1:82: 58:38:e2:c8:8e:b9:9a:b4:7e:83:79:35:16:ea:42:7c:11:ba: 50:3d:49:b2:09:0b:24:6a:04:cb:cb:8b:af:6a:84:b4:ac:b0: 2f:ae:8d:f9:b1:62:78:cc:7c:06:0d:45:1a:0e:38:0f:82:f5: 0f:8e:1b:9d:11:17:64:7e:f9:f7:b3:ba:0c:d4:91:3e:09:c2: 81:ff:1d:0e:78:9c:c2:a5:95:4d:15:ed:73:6b:40:20:f2:37: d8:14:18:b5:fc:f5:8b:08:38:55:a5:e6:15:e0:28:fa:41:81: 00:a7:44:4d:c1:ed:3e:4e:50:32:2c:16:4b:74:46:d4:07:68: 89:ad:5e:79:f7:33:08:b1:e0:86:51:04:fa:26:fe:18:f4:88: 9d:aa:6f:66:1b:fc:be:93:0f:79:e7:73:cf:5b:96:4a:93:23: 85:d0:58:72:9b:ec:db:a6:66:2f:fe:43:48:9f:5a:d6:8c:9b: 72:59:9f:5c:00:f0:bb:88:b3:b4:c4:34:37:72:19:ce:58:24: 50:29:1b:8b:f1:62:f3:bc:82:4e:01:fd:92:88:50:e2:99:11: c9:45:c4:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xz3q4zWI/J2mFT/x9GH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYjBmNjRjNjlkMzMwYjY2ZWJjZDAzYTliZjBmZGMxOWYz MTQ3ZDgwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODA0YTUwMGVkZDQyYzliZDg3MDI2ODVjMTliOTMyMjY4ODlmYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXZwHVuwy2Zqskq1gkOqKBEz3MWw HOsNR669uZU4wbxkdY4j1A8wGFfeTsezVo+oU3SBzHqJuHSzo2r4jsrmMwtRET0N KtGSguhiohTzSLxOgJfTbc7iAxF+u2ARWo4/UvWX3JG8y+gDsPMUneUAdf8Ejuwk kFIZ4HfXYG4tbqhN6oF+rEgCNacUJiU7mcG4Z8gfuOFDNMMjVx6T2r6kT83X15qG KMOZUhcMqG7bMCcsjriNSIwgz19QD6jhkqV4gtHSz+XiZaKerO0U4ww7Mz9Ydj5q FEpdcsiT1gfNXSCCZPZ3PY8fBo/MwWCgjCwOI5foMzchnajNk8HwJZBfJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgEpQDt1Cyb2HAmhcGbkyJoifvvMB8GA1UdIwQY MBaAFDGw9kxp0zC2brzQOpvw/cGfMUfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAt ZDQ5MzQ0OTNhNjc5LzEvYUFTbEFPM1VMSnZZY0NhRndadVRJbWlKLS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAtZDQ5MzQ0OTNhNjc5 LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GfKMA0G CSqGSIb3DQEBCwUAA4IBAQA/EFDHDqOwArcNHiqNQwrDAMJOmH3xgSq5P0sE+qvG qMFWwYJYOOLIjrmatH6DeTUW6kJ8EbpQPUmyCQskagTLy4uvaoS0rLAvro35sWJ4 zHwGDUUaDjgPgvUPjhudERdkfvn3s7oM1JE+CcKB/x0OeJzCpZVNFe1za0Ag8jfY FBi1/PWLCDhVpeYV4Cj6QYEAp0RNwe0+TlAyLBZLdEbUB2iJrV559zMIseCGUQT6 Jv4Y9Iidqm9mG/y+kw9553PPW5ZKkyOF0Fhym+zbpmYv/kNIn1rWjJtyWZ9cAPC7 iLO0xDQ3chnOWCRQKRuL8WLzvIJOAf2SiFDimRHJRcST -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:22 2026 by rpki-client