This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/oOrjHph7LCFfAGNpngQ3mhai8xA.roa File: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (raw, json) Hash identifier: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc= Subject key identifier: A0:EA:E3:1E:98:7B:2C:21:5F:00:63:69:9E:04:37:9A:16:A2:F3:10 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A31970A84EC2A361AD4773676D499D Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/oOrjHph7LCFfAGNpngQ3mhai8xA.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207967 IP address blocks: 212.113.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:19:70:a8:4e:c2:a3:61:ad:47:73:67:6d:49:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0eae31e987b2c215f0063699e04379a16a2f310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:6f:fb:bc:a7:58:ad:81:ef:bf:d5:c0:0a: bb:be:1e:1e:9e:9e:72:8b:a0:43:7f:88:15:38:1d: 7e:31:12:42:95:46:43:5a:8e:a9:52:10:9d:d6:6a: 5d:37:34:d8:80:2a:b0:97:3c:ec:d6:d2:5e:64:87: 29:ad:73:80:54:db:e8:9b:4d:80:55:98:50:3b:92: 07:c8:c1:6f:9c:30:6e:73:89:22:dc:86:84:c4:35: 09:0d:d8:1d:ac:77:ab:70:03:90:86:31:e9:cc:bb: 2f:7a:3a:8f:a6:a6:a9:2e:ed:ff:62:45:03:45:51: b5:1c:e9:43:0e:ce:20:5b:99:e3:b9:48:60:47:a2: 13:a6:a6:f7:8e:6b:29:23:28:9b:5e:49:01:ad:c5: 2c:6c:89:a3:6a:a9:5b:09:b7:df:9d:9c:32:56:0d: d0:86:fb:d6:2c:d6:50:6d:a2:b1:d7:25:b9:f4:6e: 4d:92:23:a4:4d:b9:7f:ce:25:fb:23:70:84:f6:fa: 13:3b:03:70:5c:a9:f0:a7:c2:b9:fb:f4:08:b8:2d: 2c:47:9a:91:a4:4f:08:f4:77:94:98:78:b4:dd:fa: f6:7f:17:f3:bd:4a:7a:30:33:58:94:11:2a:e4:31: 9a:ed:90:56:ac:74:37:26:88:bd:00:79:b2:d0:63: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EA:E3:1E:98:7B:2C:21:5F:00:63:69:9E:04:37:9A:16:A2:F3:10 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/oOrjHph7LCFfAGNpngQ3mhai8xA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.113.119.0/24 Signature Algorithm: sha256WithRSAEncryption 68:3e:06:fe:4b:f4:7f:a6:a8:3e:6c:ea:08:4f:0c:eb:f2:00: e3:64:95:3a:70:7c:47:18:91:f0:81:91:8a:ba:03:03:bb:9d: 56:74:2f:a1:6d:3b:fd:60:32:c3:c9:76:c2:a1:a5:9b:df:b5: 27:66:d7:5d:2e:3c:54:66:fa:77:6e:e2:63:53:09:fc:2a:11: 6b:e8:82:d7:fb:ef:dc:1d:c7:2f:30:ee:b4:7f:c5:19:71:7c: 49:10:8a:90:94:0e:ad:63:fb:58:ef:6f:0e:14:19:0a:05:a4: c0:0f:19:cf:8f:48:3b:69:92:6f:44:d3:b6:8a:3a:3e:7c:fe: a9:e2:9e:96:e1:e0:3f:67:7a:d8:99:9e:7d:50:0c:3a:c9:84: 45:c1:7e:cd:25:7c:10:7c:a8:80:58:18:58:2f:bc:dd:e6:7a: 9e:77:db:e7:f4:9a:e8:b4:cd:b4:f1:83:3e:59:9f:f4:c9:7d: ca:73:23:92:f0:2a:09:cb:c5:33:68:78:d2:5e:8e:bd:b1:d3: d2:d8:84:e4:9e:ce:d3:81:14:bb:46:83:5d:fe:91:a8:53:c1: c9:be:82:c7:49:f4:3d:cb:81:47:70:94:93:95:b9:43:27:76: 36:4b:3c:e1:8f:3c:51:ec:da:60:24:64:8e:3b:95:9d:26:41: 00:aa:7a:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxlwqE7Co2GtR3NnbUmdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGVhZTMxZTk4N2IyYzIxNWYwMDYzNjk5ZTA0Mzc5YTE2YTJmMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQZv+7ynWK2B77/VwAq7vh4enp5y i6BDf4gVOB1+MRJClUZDWo6pUhCd1mpdNzTYgCqwlzzs1tJeZIcprXOAVNvom02A VZhQO5IHyMFvnDBuc4ki3IaExDUJDdgdrHercAOQhjHpzLsvejqPpqapLu3/YkUD RVG1HOlDDs4gW5njuUhgR6ITpqb3jmspIyibXkkBrcUsbImjaqlbCbffnZwyVg3Q hvvWLNZQbaKx1yW59G5NkiOkTbl/ziX7I3CE9voTOwNwXKnwp8K5+/QIuC0sR5qR pE8I9HeUmHi03fr2fxfzvUp6MDNYlBEq5DGa7ZBWrHQ3Joi9AHmy0GNIRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKDq4x6YeywhXwBjaZ4EN5oWovMQMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvb09yakhwaDdMQ0ZmQUdOcG5nUTNtaGFpOHhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HF3MA0G CSqGSIb3DQEBCwUAA4IBAQBoPgb+S/R/pqg+bOoITwzr8gDjZJU6cHxHGJHwgZGK ugMDu51WdC+hbTv9YDLDyXbCoaWb37UnZtddLjxUZvp3buJjUwn8KhFr6ILX++/c HccvMO60f8UZcXxJEIqQlA6tY/tY728OFBkKBaTADxnPj0g7aZJvRNO2ijo+fP6p 4p6W4eA/Z3rYmZ59UAw6yYRFwX7NJXwQfKiAWBhYL7zd5nqed9vn9JrotM208YM+ WZ/0yX3KcyOS8CoJy8UzaHjSXo69sdPS2ITkns7TgRS7RoNd/pGoU8HJvoLHSfQ9 y4FHcJSTlblDJ3Y2SzzhjzxR7NpgJGSOO5WdJkEAqnqs -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:15 2026 by rpki-client