This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/f1NorhFBqsHviG1UfhMeCAK683U.roa File: f1NorhFBqsHviG1UfhMeCAK683U.roa (raw, json) Hash identifier: 8C4v9gvuZz7MRXJ58Eh6PFV96i5Y7WMlUoJQyuz4Fmo= Subject key identifier: 7F:53:68:AE:11:41:AA:C1:EF:88:6D:54:7E:13:1E:08:02:BA:F3:75 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82BC7AE1129FA7D6FEAD6387FFAA61 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/f1NorhFBqsHviG1UfhMeCAK683U.roa Signing time: Fri 02 Jan 2026 16:20:32 +0000 ROA not before: Fri 02 Jan 2026 16:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 212.107.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:bc:7a:e1:12:9f:a7:d6:fe:ad:63:87:ff:aa:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f5368ae1141aac1ef886d547e131e0802baf375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:1d:0a:d3:02:53:31:3e:a2:8c:29:5b:e4: 19:58:d1:ea:f6:68:38:69:61:b6:82:c3:ec:a2:3d: 22:ed:cf:c4:93:00:ce:77:8c:81:cc:8d:e8:61:24: 43:79:b7:fb:2d:8d:5d:71:30:d5:53:f9:4d:fb:bf: f8:d1:3c:0a:1d:52:34:8a:1f:fb:0f:6f:91:13:58: 0e:a2:e0:6f:45:89:b9:61:1f:c5:e1:2b:62:c8:fb: 39:a6:a9:76:d7:3c:c8:93:a9:43:6f:ef:1e:eb:d4: b9:94:4d:74:60:53:d5:0a:d4:f6:00:1a:3d:05:c6: a1:68:44:8b:6e:c0:5b:fb:df:6d:7e:0c:32:53:39: f1:d2:4d:60:90:d8:c8:1b:39:c4:17:01:7d:59:8f: 4a:e6:93:d1:65:cb:0c:8e:18:8f:0e:41:a0:06:7a: e1:24:0a:f5:55:7a:02:48:21:79:4c:eb:83:3e:be: 63:c3:f2:24:cb:55:09:15:68:2d:4e:80:ff:a7:d7: 55:ed:a2:dc:b5:5e:b5:e8:bf:bd:01:38:24:33:0d: f2:69:98:f6:30:0f:f1:82:ee:9c:e1:4a:af:08:1a: 84:ce:80:bc:44:a9:46:e9:ff:20:5c:55:0c:2e:83: fe:57:b6:cd:c1:06:07:6c:02:4b:c3:3b:5a:15:3c: 4d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:53:68:AE:11:41:AA:C1:EF:88:6D:54:7E:13:1E:08:02:BA:F3:75 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/f1NorhFBqsHviG1UfhMeCAK683U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.107.15.0/24 Signature Algorithm: sha256WithRSAEncryption 90:63:4e:08:4c:ee:4b:53:5c:60:98:00:99:12:09:e0:54:b8: a9:3f:30:4a:8c:20:4e:dd:74:93:6a:4c:17:85:cb:ed:64:ee: 83:fd:51:10:c1:fa:0c:e7:04:0b:57:22:86:5a:d2:65:75:81: b5:49:d2:20:26:13:c7:df:f1:8a:14:ea:05:44:ec:81:78:a1: 76:ea:92:e7:1b:42:a3:df:4d:c0:c0:45:be:2e:12:a7:ae:4b: 25:5b:b9:f1:f2:3b:3d:e0:57:88:9c:e9:c2:b2:06:04:04:81: 8f:cd:e0:98:3e:8d:86:a0:12:b8:8e:f1:08:58:5e:c1:6e:4e: 54:6f:2c:da:76:40:d5:27:14:2f:2a:c5:dc:a3:f0:6c:6b:09: a1:15:18:59:ab:d7:a6:77:44:d4:31:c9:0f:eb:46:54:f9:bb: 53:b4:39:d8:9e:c4:d7:21:10:dd:55:05:6f:77:0b:5c:cb:4b: 1e:b9:bc:d6:6f:88:1b:09:07:ef:af:a9:72:26:fe:3c:e9:48: 3b:8a:f2:93:1b:22:b6:1c:c7:9a:5c:33:4b:5e:d4:5f:f8:e3: 66:30:dc:73:25:76:0c:a6:10:53:14:f7:37:e6:93:14:bb:8d: 6a:04:08:d9:0a:c7:ef:82:eb:12:30:d9:ee:8a:88:a3:94:c7: ae:8e:c9:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/grx64RKfp9b+rWOH/6phMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjUzNjhhZTExNDFhYWMxZWY4ODZkNTQ3ZTEzMWUwODAyYmFmMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQQdCtMCUzE+oowpW+QZWNHq9mg4 aWG2gsPsoj0i7c/EkwDOd4yBzI3oYSRDebf7LY1dcTDVU/lN+7/40TwKHVI0ih/7 D2+RE1gOouBvRYm5YR/F4StiyPs5pql21zzIk6lDb+8e69S5lE10YFPVCtT2ABo9 BcahaESLbsBb+99tfgwyUznx0k1gkNjIGznEFwF9WY9K5pPRZcsMjhiPDkGgBnrh JAr1VXoCSCF5TOuDPr5jw/Iky1UJFWgtToD/p9dV7aLctV616L+9ATgkMw3yaZj2 MA/xgu6c4UqvCBqEzoC8RKlG6f8gXFUMLoP+V7bNwQYHbAJLwztaFTxNqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH9TaK4RQarB74htVH4THggCuvN1MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvZjFOb3JoRkJxc0h2aUcxVWZoTWVDQUs2ODNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GsPMA0G CSqGSIb3DQEBCwUAA4IBAQCQY04ITO5LU1xgmACZEgngVLipPzBKjCBO3XSTakwX hcvtZO6D/VEQwfoM5wQLVyKGWtJldYG1SdIgJhPH3/GKFOoFROyBeKF26pLnG0Kj 303AwEW+LhKnrkslW7nx8js94FeInOnCsgYEBIGPzeCYPo2GoBK4jvEIWF7Bbk5U byzadkDVJxQvKsXco/BsawmhFRhZq9emd0TUMckP60ZU+btTtDnYnsTXIRDdVQVv dwtcy0seubzWb4gbCQfvr6lyJv486Ug7ivKTGyK2HMeaXDNLXtRf+ONmMNxzJXYM phBTFPc35pMUu41qBAjZCsfvgusSMNnuioijlMeujsnX -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:44 2026 by rpki-client