This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa File: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (raw, json) Hash identifier: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE= Subject key identifier: 1D:97:6F:91:A0:81:E0:82:CA:AC:94:A9:4A:42:18:A8:8A:DF:5B:59 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A316DCD837004DAC13CDBA6B991F7E Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200935 IP address blocks: 212.113.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:16:dc:d8:37:00:4d:ac:13:cd:ba:6b:99:1f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d976f91a081e082caac94a94a4218a88adf5b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:85:93:11:e7:80:db:52:51:3b:97:b5:4c: 00:1a:36:6b:e1:6b:c3:99:a3:22:d0:c6:cd:88:d8: 85:5f:04:09:31:f7:3d:91:96:67:3b:af:9e:8a:da: 68:61:7d:b5:06:e6:2e:d1:7b:b9:4b:f9:b0:12:5a: c7:b1:2d:66:47:9f:5e:cb:79:11:6d:75:51:ff:03: 57:f5:2a:7c:0a:53:00:2d:46:36:72:81:24:19:5f: 63:fc:5e:d7:0b:6b:b5:d4:ee:67:69:4a:34:8e:e0: b8:d1:64:b9:a8:b5:97:c4:8f:c3:e5:63:8e:72:4d: 5a:e9:ce:fd:2a:44:16:ec:66:e7:52:bf:ce:69:42: 34:60:e0:f3:1f:03:69:6c:68:4e:fe:a5:dd:78:c4: a0:44:20:42:89:54:3e:6e:5a:5b:07:52:0b:d0:3d: c4:3b:83:bb:f0:03:de:fe:a9:99:85:94:9e:0f:1a: 0c:d6:02:d5:de:f0:66:5b:10:bd:89:22:fd:d1:ea: 49:60:8c:d7:b2:1a:e6:65:e2:52:d0:d6:ee:c3:58: 90:bf:aa:d2:c0:3e:76:12:d8:7d:48:f3:9d:af:d6: ab:c3:d1:ef:e9:75:4c:de:43:c8:68:81:37:32:30: 8b:a5:58:a2:4f:ae:0b:bc:29:f7:50:8a:3a:8a:f7: 12:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:97:6F:91:A0:81:E0:82:CA:AC:94:A9:4A:42:18:A8:8A:DF:5B:59 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.113.110.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:ef:bb:bf:59:bd:73:d8:5b:30:a4:21:98:1b:a3:f5:6b:b4: e5:87:46:71:b8:f3:25:7f:27:7c:de:cb:e7:f7:49:e4:7d:51: ba:22:26:59:29:cd:4c:63:3f:33:fd:44:22:f2:99:1a:d9:1a: ee:3e:84:b5:91:7a:d0:71:8a:b4:18:c9:f0:ae:67:2b:cd:6f: de:16:de:9a:83:53:6c:eb:97:1c:ce:22:e8:71:f0:cb:dc:9a: 24:c9:c1:cf:a0:72:82:6b:41:4a:ad:cc:41:ec:ff:0c:7e:33: 08:b6:12:4b:c2:e7:f5:59:1b:e1:59:c7:d0:bd:0e:bc:95:0b: 2e:60:79:62:1f:eb:09:eb:6f:9b:18:1e:a3:fb:d6:5b:e4:8c: 8c:01:c7:e6:dd:45:bb:43:08:30:11:99:33:44:de:d7:ba:ea: ec:86:0b:88:3a:39:cb:0c:07:fd:b5:93:6d:dc:d9:80:03:0d: d4:fc:b2:95:54:6b:5c:10:49:0c:ee:3a:8b:4d:13:cb:c6:e4: 60:01:c2:b4:d3:e0:cc:c3:7d:5c:6c:a5:25:58:45:f2:03:fc: ba:d8:53:d9:a6:27:23:78:50:02:d7:bb:2b:3a:be:7d:bf:d7: eb:d7:5a:35:e9:4d:11:0c:ce:a3:7c:90:54:d1:39:59:76:bc: f4:b8:d6:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxbc2DcATawTzbprmR9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDk3NmY5MWEwODFlMDgyY2FhYzk0YTk0YTQyMThhODhhZGY1YjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MyFkxHngNtSUTuXtUwAGjZr4WvD maMi0MbNiNiFXwQJMfc9kZZnO6+eitpoYX21BuYu0Xu5S/mwElrHsS1mR59ey3kR bXVR/wNX9Sp8ClMALUY2coEkGV9j/F7XC2u11O5naUo0juC40WS5qLWXxI/D5WOO ck1a6c79KkQW7GbnUr/OaUI0YODzHwNpbGhO/qXdeMSgRCBCiVQ+blpbB1IL0D3E O4O78APe/qmZhZSeDxoM1gLV3vBmWxC9iSL90epJYIzXshrmZeJS0Nbuw1iQv6rS wD52Eth9SPOdr9arw9Hv6XVM3kPIaIE3MjCLpViiT64LvCn3UIo6ivcSawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB2Xb5GggeCCyqyUqUpCGKiK31tZMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvSFpkdmthQ0I0SUxLckpTcFNrSVlxSXJmVzFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HFuMA0G CSqGSIb3DQEBCwUAA4IBAQB677u/Wb1z2FswpCGYG6P1a7Tlh0ZxuPMlfyd83svn 90nkfVG6IiZZKc1MYz8z/UQi8pka2RruPoS1kXrQcYq0GMnwrmcrzW/eFt6ag1Ns 65ccziLocfDL3JokycHPoHKCa0FKrcxB7P8MfjMIthJLwuf1WRvhWcfQvQ68lQsu YHliH+sJ62+bGB6j+9Zb5IyMAcfm3UW7QwgwEZkzRN7XuurshguIOjnLDAf9tZNt 3NmAAw3U/LKVVGtcEEkM7jqLTRPLxuRgAcK00+DMw31cbKUlWEXyA/y62FPZpicj eFAC17srOr59v9fr11o16U0RDM6jfJBU0TlZdrz0uNaw -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:43 2026 by rpki-client