This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/fAM3pa0EE7jiHrAFo6eOqMsPdek.roa File: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (raw, json) Hash identifier: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk= Subject key identifier: 7C:03:37:A5:AD:04:13:B8:E2:1E:B0:05:A3:A7:8E:A8:CB:0F:75:E9 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A31C52647C6331B3B28C971B94C4C3 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/fAM3pa0EE7jiHrAFo6eOqMsPdek.roa Signing time: Thu 01 Jan 2026 08:18:34 +0000 ROA not before: Thu 01 Jan 2026 08:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 212.113.98.0/24 maxlen: 24 212.113.107.0/24 maxlen: 24 212.113.109.0/24 maxlen: 24 212.113.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1c:52:64:7c:63:31:b3:b2:8c:97:1b:94:c4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c0337a5ad0413b8e21eb005a3a78ea8cb0f75e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8f:d3:8f:59:7d:6e:a8:62:a3:fb:d1:62:50: 2f:b6:ac:85:9a:ca:c0:a5:3d:5f:47:70:92:02:38: d1:ee:40:af:ef:69:42:13:87:06:63:1e:eb:47:6f: b9:0a:31:e5:86:b8:ae:55:06:3c:fb:39:cc:bb:82: a3:33:94:d3:9b:51:1d:0e:75:a8:45:ef:34:bc:5c: 88:6f:0b:9e:18:d0:ed:b6:44:cd:79:13:84:43:f2: d3:bc:4c:61:da:2b:81:d3:43:a0:9f:43:63:88:85: 67:9f:9f:09:75:4e:58:24:73:d7:5e:c7:bd:cc:32: 57:54:fa:fb:31:16:c3:f7:8f:82:48:6c:c2:e6:7a: 09:67:3b:bf:ad:a5:3a:04:c9:a0:48:19:31:3d:c6: fa:ab:db:b9:39:bc:78:7e:42:22:04:89:2d:4e:38: 76:f5:37:23:53:3f:1f:dc:79:5a:e7:4b:c5:b1:de: 1b:e2:b0:c6:43:af:d7:15:43:77:dd:09:86:eb:4f: 43:22:1e:51:fe:06:5a:52:02:07:9f:a7:d6:ef:26: be:39:c7:ed:41:9f:47:a4:74:69:2b:98:37:93:58: 35:74:35:81:60:ec:8f:8b:b9:03:87:56:7e:37:69: 73:8f:77:39:3f:a2:a9:00:1d:74:56:05:23:6c:9f: 85:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:03:37:A5:AD:04:13:B8:E2:1E:B0:05:A3:A7:8E:A8:CB:0F:75:E9 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/fAM3pa0EE7jiHrAFo6eOqMsPdek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.113.98.0/24 212.113.107.0/24 212.113.109.0/24 212.113.112.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:b3:40:a4:63:62:fe:43:96:28:8c:62:08:bc:f8:d3:ef:f3: 75:65:bc:f7:ad:8d:66:a6:ac:c6:45:d4:cb:1d:d5:f6:aa:b5: f3:e6:79:38:a4:e8:3c:0b:f6:07:21:df:f1:3f:4c:66:16:64: 63:88:66:27:9e:87:7f:e1:33:25:e7:fe:1c:7a:32:8f:20:5b: 68:27:bc:aa:b8:b4:2e:a1:43:b7:54:22:4c:3e:da:e9:7d:f1: 2e:c2:0d:09:eb:21:a2:1a:de:f4:ad:7f:c6:23:07:32:7d:9a: a8:0e:87:06:ee:19:8b:b3:1d:e1:83:f8:4d:3f:de:d0:f3:a6: 68:b8:09:27:5c:b0:78:77:51:64:2d:84:77:08:55:45:47:9a: cf:6d:b8:b7:ce:0e:5e:ea:d2:86:86:66:da:b2:43:fc:f6:8f: b1:21:2d:5b:8b:99:74:93:a3:af:96:2a:80:15:c3:3a:23:a3: 42:cf:8c:09:95:73:69:4e:a7:b2:0f:77:1b:26:ce:17:2b:da: 1b:2f:cb:34:fe:59:5e:9d:99:90:9b:30:25:61:dc:98:8f:7f: 6f:c1:95:10:ba:ed:25:fb:66:85:84:5c:c0:c4:a7:b3:c8:ef: c0:8a:fb:c0:28:ac:0a:b1:09:78:b2:81:10:b2:8c:9f:94:23: 98:86:cb:39 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4oxxSZHxjMbOyjJcblMTDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzAzMzdhNWFkMDQxM2I4ZTIxZWIwMDVhM2E3OGVhOGNiMGY3NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY/Tj1l9bqhio/vRYlAvtqyFmsrA pT1fR3CSAjjR7kCv72lCE4cGYx7rR2+5CjHlhriuVQY8+znMu4KjM5TTm1EdDnWo Re80vFyIbwueGNDttkTNeROEQ/LTvExh2iuB00Ogn0NjiIVnn58JdU5YJHPXXse9 zDJXVPr7MRbD94+CSGzC5noJZzu/raU6BMmgSBkxPcb6q9u5Obx4fkIiBIktTjh2 9TcjUz8f3Hla50vFsd4b4rDGQ6/XFUN33QmG609DIh5R/gZaUgIHn6fW7ya+Ocft QZ9HpHRpK5g3k1g1dDWBYOyPi7kDh1Z+N2lzj3c5P6KpAB10VgUjbJ+FlQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHwDN6WtBBO44h6wBaOnjqjLD3XpMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvZkFNM3BhMEVFN2ppSHJBRm82ZU9xTXNQZGVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1HFiAwQA 1HFrAwQA1HFtAwQA1HFwMA0GCSqGSIb3DQEBCwUAA4IBAQCKs0CkY2L+Q5YojGII vPjT7/N1Zbz3rY1mpqzGRdTLHdX2qrXz5nk4pOg8C/YHId/xP0xmFmRjiGYnnod/ 4TMl5/4cejKPIFtoJ7yquLQuoUO3VCJMPtrpffEuwg0J6yGiGt70rX/GIwcyfZqo DocG7hmLsx3hg/hNP97Q86ZouAknXLB4d1FkLYR3CFVFR5rPbbi3zg5e6tKGhmba skP89o+xIS1bi5l0k6OvliqAFcM6I6NCz4wJlXNpTqeyD3cbJs4XK9obL8s0/lle nZmQmzAlYdyYj39vwZUQuu0l+2aFhFzAxKezyO/AivvAKKwKsQl4soEQsoyflCOY hss5 -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:54 2026 by rpki-client