This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/wggGh2w-6sQB6ovzilMkq6DwW4c.roa File: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (raw, json) Hash identifier: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U= Subject key identifier: C2:08:06:87:6C:3E:EA:C4:01:EA:8B:F3:8A:53:24:AB:A0:F0:5B:87 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A3125E74495BEC1A9730B56B68D37B Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/wggGh2w-6sQB6ovzilMkq6DwW4c.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 212.113.117.0/24 maxlen: 24 212.113.118.0/24 maxlen: 24 212.113.120.0/24 maxlen: 24 212.113.121.0/24 maxlen: 24 212.113.122.0/24 maxlen: 24 212.113.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:12:5e:74:49:5b:ec:1a:97:30:b5:6b:68:d3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c20806876c3eeac401ea8bf38a5324aba0f05b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:ef:d1:f5:91:f4:97:5f:f8:5e:c9:02:34: 96:19:73:fd:4e:43:e6:3e:7d:6a:cb:8f:dd:f5:8f: c9:cb:d6:01:0d:cc:8e:02:a0:32:72:34:9e:e7:de: 91:6a:a1:bf:67:7e:c6:b2:ff:1e:bc:ee:46:90:a5: 9a:33:40:12:6c:91:ff:40:f4:20:4d:11:53:f1:78: 53:61:92:db:99:70:cc:0d:04:16:8b:ce:b7:4e:83: c0:cc:39:d5:24:d7:59:7f:1f:6c:71:4c:32:37:42: 4d:ce:66:70:62:96:26:d9:fc:d2:57:f4:8b:98:55: d2:1b:4e:0d:47:ce:3e:f5:2b:1a:bd:c5:2e:b4:2b: 28:34:4b:fa:be:b0:29:7a:f8:a2:db:41:bf:5b:09: 76:42:14:59:30:e4:8b:69:d7:1d:1c:26:0b:28:c0: 27:0d:db:1e:86:4e:32:d1:7b:b4:be:05:0c:06:d5: 24:7a:0e:b0:8f:a2:8a:62:9c:d2:5b:88:cf:4c:90: b1:04:55:44:d8:67:c8:75:57:4b:ef:82:4a:49:48: b5:00:1d:26:f1:57:19:87:35:1c:66:68:76:8c:69: 5e:7c:5c:20:9b:3b:76:b7:59:c2:9d:75:fb:5d:4f: 5e:a8:08:be:9d:b7:32:8d:a4:b0:3d:9b:8b:63:38: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:08:06:87:6C:3E:EA:C4:01:EA:8B:F3:8A:53:24:AB:A0:F0:5B:87 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/wggGh2w-6sQB6ovzilMkq6DwW4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.113.117.0-212.113.118.255 212.113.120.0/22 Signature Algorithm: sha256WithRSAEncryption 42:ee:f3:96:94:8a:fb:00:7e:a2:ba:4e:91:90:8d:3d:55:04: 4a:71:8d:4a:fa:70:2a:1d:a3:66:bd:ea:7f:9a:c8:0d:bd:d2: 93:f7:bc:be:93:9a:10:36:51:d8:02:9a:87:ed:60:ad:76:cc: c8:a2:48:82:06:7e:23:e2:91:39:e0:97:05:61:9b:f3:27:ff: 31:f7:0f:df:38:de:c1:a0:72:d8:66:fa:56:5f:51:70:00:ed: d9:5b:6a:51:a4:46:db:34:36:db:ef:fe:c6:1e:29:8f:b2:fe: c6:75:5d:60:1e:4c:13:6e:01:44:96:ca:75:eb:e8:44:52:82: e2:c6:88:02:4e:cd:7a:5e:0e:ee:85:14:cf:3d:e9:63:da:90: 26:8e:0d:f3:ca:cc:8b:e7:f8:39:6d:02:af:7e:d3:cd:25:cb: 0d:4b:2c:07:a3:47:59:4e:1c:36:bc:db:e2:74:4b:f9:99:34: 76:cc:7a:97:9f:b5:b9:95:a8:5a:a4:ac:ff:78:e7:d9:ba:15: 48:b8:c4:e9:d7:71:6b:43:0a:32:eb:52:4f:ca:7c:65:8e:f8: 30:0e:85:c8:21:1c:99:b3:3c:81:69:4c:df:b8:66:c5:d1:39: d5:b8:75:d7:83:55:8e:c9:92:ae:91:82:c1:50:b8:ed:69:c8: eb:13:e9:15 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4oxJedElb7BqXMLVraNN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjA4MDY4NzZjM2VlYWM0MDFlYThiZjM4YTUzMjRhYmEwZjA1Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsErv0fWR9Jdf+F7JAjSWGXP9TkPm Pn1qy4/d9Y/Jy9YBDcyOAqAycjSe596RaqG/Z37Gsv8evO5GkKWaM0ASbJH/QPQg TRFT8XhTYZLbmXDMDQQWi863ToPAzDnVJNdZfx9scUwyN0JNzmZwYpYm2fzSV/SL mFXSG04NR84+9SsavcUutCsoNEv6vrApevii20G/Wwl2QhRZMOSLadcdHCYLKMAn Ddsehk4y0Xu0vgUMBtUkeg6wj6KKYpzSW4jPTJCxBFVE2GfIdVdL74JKSUi1AB0m 8VcZhzUcZmh2jGlefFwgmzt2t1nCnXX7XU9eqAi+nbcyjaSwPZuLYziEQwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMIIBodsPurEAeqL84pTJKug8FuHMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvd2dnR2gydy02c1FCNm92emlsTWtxNkR3VzRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADUcXUD BADUcXYDBALUcXgwDQYJKoZIhvcNAQELBQADggEBAELu85aUivsAfqK6TpGQjT1V BEpxjUr6cCodo2a96n+ayA290pP3vL6TmhA2UdgCmoftYK12zMiiSIIGfiPikTng lwVhm/Mn/zH3D9843sGgcthm+lZfUXAA7dlbalGkRts0Ntvv/sYeKY+y/sZ1XWAe TBNuAUSWynXr6ERSguLGiAJOzXpeDu6FFM896WPakCaODfPKzIvn+DltAq9+080l yw1LLAejR1lOHDa82+J0S/mZNHbMepeftbmVqFqkrP9459m6FUi4xOnXcWtDCjLr Uk/KfGWO+DAOhcghHJmzPIFpTN+4ZsXROdW4ddeDVY7Jkq6RgsFQuO1pyOsT6RU= -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:52 2026 by rpki-client