This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa File: 1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa (raw, json) Hash identifier: HvTSCO8dnKWpIGNv0ZhtPHvjO7rUBO8uy6VJMUgGVj0= Subject key identifier: F8:E6:27:37:35:EB:E9:5A:39:BF:4B:5D:4D:8E:6E:5C:F7:9B:79:71 Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c Certificate serial: 019B7BA450E7D4B74E59FC552CD43A90A3A5 Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa Signing time: Thu 01 Jan 2026 22:18:44 +0000 ROA not before: Thu 01 Jan 2026 22:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30823 IP address blocks: 212.114.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:50:e7:d4:b7:4e:59:fc:55:2c:d4:3a:90:a3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c Validity Not Before: Jan 1 22:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8e6273735ebe95a39bf4b5d4d8e6e5cf79b7971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:25:97:bc:f8:da:2c:8e:19:4c:ee:2e:d1: e9:dd:02:44:1f:f4:9e:bb:b0:07:bc:f5:e3:93:2b: 26:dc:69:77:7e:22:6c:ac:40:8a:7a:c3:14:a6:4b: f5:37:ec:07:f4:a8:0c:9e:38:b4:a1:72:be:55:50: 25:d7:e5:ea:cf:c9:3f:98:dd:42:f1:b1:0c:32:5c: 74:ea:e8:6e:a9:85:89:58:cc:b8:cb:2f:e9:44:f4: d2:1d:b4:95:2a:bc:71:d6:db:f3:1a:ba:fc:04:5b: 48:e2:7c:1c:9b:e0:0b:23:03:1a:28:f0:d0:0c:e4: 18:3c:ad:ad:08:21:dd:47:30:65:1f:2c:85:60:4f: ca:2f:7a:53:11:d8:19:8e:62:43:ef:42:5b:56:29: d6:43:62:b0:62:79:a3:e3:59:db:2e:0d:a1:5b:f3: 0a:b8:ce:50:e3:fa:12:00:b5:3f:f7:c3:5e:06:45: a3:81:9f:4d:dc:fb:fd:70:ed:8d:44:36:ef:a8:46: 6b:bb:87:41:f1:c8:99:6a:5c:ec:03:9b:29:60:1a: 22:65:62:1c:0d:8e:2a:72:5e:ab:e0:14:1d:8c:ec: 67:62:14:ae:a3:56:c9:5a:eb:fc:83:5f:21:7f:4b: e5:9d:30:70:8e:56:d1:8a:05:c9:d7:3a:cc:ed:57: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E6:27:37:35:EB:E9:5A:39:BF:4B:5D:4D:8E:6E:5C:F7:9B:79:71 X509v3 Authority Key Identifier: keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.114.52.0/24 Signature Algorithm: sha256WithRSAEncryption 83:27:24:33:5a:70:9b:4c:36:81:96:42:2b:3b:ff:72:3e:c2: f5:67:c6:4c:c1:b5:85:00:75:92:48:b8:ae:9d:be:36:75:c6: 88:ae:f0:2d:22:cd:38:bd:93:54:56:ac:b0:33:41:2a:57:07: 90:58:5b:5a:ad:ed:bd:de:4e:8e:4e:c9:ee:4f:74:db:97:ff: 4c:2c:15:9b:74:51:85:1e:b9:e2:9e:c5:ad:0f:bf:f3:db:2b: 4e:a8:36:4c:35:ed:2c:8e:88:1f:8f:f6:ca:bc:68:15:79:ac: f3:65:85:99:db:3d:f7:ef:87:90:55:b6:84:1e:0d:f4:44:35: d5:b0:10:26:91:aa:14:5c:46:50:af:44:b4:74:0f:bc:09:d6: be:75:d0:46:bf:5c:4e:9b:c6:9d:dd:3f:e8:a3:5d:8a:f0:b3: fe:a0:ca:5c:1a:94:70:bc:6d:72:7a:33:99:1b:86:5a:35:55: 5b:28:d2:43:9f:03:df:99:ac:43:6f:51:9c:ce:0f:4d:b8:e3: c5:81:56:f4:e8:dd:48:21:cc:25:a9:97:7f:25:7a:3e:d1:df: c3:3f:fd:a5:2a:34:c3:3a:66:d1:06:92:63:25:a9:8d:7e:31: cd:4f:dc:61:68:3e:40:e3:42:e9:77:38:44:58:d0:10:db:5a: 30:fc:06:cc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pFDn1LdOWfxVLNQ6kKOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOWM2ODVjZjY2NzFjYzY1NmY5MmU3NjQ1NTdhMzgzNzhm MjgyN2MwHhcNMjYwMTAxMjIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGU2MjczNzM1ZWJlOTVhMzliZjRiNWQ0ZDhlNmU1Y2Y3OWI3OTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEMll7z42iyOGUzuLtHp3QJEH/Se u7AHvPXjkysm3Gl3fiJsrECKesMUpkv1N+wH9KgMnji0oXK+VVAl1+Xqz8k/mN1C 8bEMMlx06uhuqYWJWMy4yy/pRPTSHbSVKrxx1tvzGrr8BFtI4nwcm+ALIwMaKPDQ DOQYPK2tCCHdRzBlHyyFYE/KL3pTEdgZjmJD70JbVinWQ2KwYnmj41nbLg2hW/MK uM5Q4/oSALU/98NeBkWjgZ9N3Pv9cO2NRDbvqEZru4dB8ciZalzsA5spYBoiZWIc DY4qcl6r4BQdjOxnYhSuo1bJWuv8g18hf0vlnTBwjlbRigXJ1zrM7VeNnQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPjmJzc16+laOb9LXU2Oblz3m3lxMB8GA1UdIwQY MBaAFOycaFz2ZxzGVvkudkVXo4N48oJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUt YmFiNDhkYWI0Y2Q2LzEvMS1PWW5OelhyNlZvNXYwdGRUWTV1WFBlYmVYRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWIvZTliNTZlLTNiNWItNDNiMS04YmI1LWJhYjQ4ZGFiNGNk Ni8xLzdKeG9YUFpuSE1aVy1TNTJSVmVqZzNqeWdudy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRyNDAN BgkqhkiG9w0BAQsFAAOCAQEAgyckM1pwm0w2gZZCKzv/cj7C9WfGTMG1hQB1kki4 rp2+NnXGiK7wLSLNOL2TVFassDNBKlcHkFhbWq3tvd5Ojk7J7k9025f/TCwVm3RR hR654p7FrQ+/89srTqg2TDXtLI6IH4/2yrxoFXms82WFmds99++HkFW2hB4N9EQ1 1bAQJpGqFFxGUK9EtHQPvAnWvnXQRr9cTpvGnd0/6KNdivCz/qDKXBqUcLxtcnoz mRuGWjVVWyjSQ58D35msQ29RnM4PTbjjxYFW9OjdSCHMJamXfyV6PtHfwz/9pSo0 wzpm0QaSYyWpjX4xzU/cYWg+QONC6Xc4RFjQENtaMPwGzA== -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:01 2026 by rpki-client