This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/0hWOevIJ1N7Gns1debgtABo6NtM.roa File: 0hWOevIJ1N7Gns1debgtABo6NtM.roa (raw, json) Hash identifier: e/zIHM5zx9KDyIhPNc+UJKxD73hkQE5CcLLzy4jj/bw= Subject key identifier: D2:15:8E:7A:F2:09:D4:DE:C6:9E:CD:5D:79:B8:2D:00:1A:3A:36:D3 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019AA12125E1DF24CEFC288E542A1AFEB54F Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/0hWOevIJ1N7Gns1debgtABo6NtM.roa Signing time: Thu 20 Nov 2025 11:58:15 +0000 ROA not before: Thu 20 Nov 2025 11:58:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 213.110.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:21:25:e1:df:24:ce:fc:28:8e:54:2a:1a:fe:b5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Nov 20 11:58:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d2158e7af209d4dec69ecd5d79b82d001a3a36d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:cc:eb:58:61:fc:f9:29:17:9f:0c:d4:25: 84:92:59:00:2b:70:a8:fc:27:b9:8c:1d:98:27:c7: 6e:6c:eb:58:07:71:e4:78:0b:f4:99:fa:4d:f3:27: 42:70:5f:ed:1c:88:90:26:0e:ad:ec:4e:a5:e4:fa: e0:ec:eb:4f:89:21:8e:9c:2b:20:eb:e2:8d:8d:7e: d2:a7:89:95:1d:e8:b4:70:59:84:14:a6:ec:59:e7: 84:c2:93:92:11:21:32:12:26:8b:19:eb:17:8a:3c: 05:94:8b:05:45:e4:a5:c1:43:e1:ee:32:04:b1:31: fb:f6:c9:8f:57:c8:73:f4:b8:65:d5:3a:0f:1a:2e: 0c:4d:74:b6:bf:72:3c:33:03:0a:04:d0:67:6e:09: 65:bc:58:cc:46:b5:5b:49:f0:4b:3c:94:82:ad:74: 48:76:1a:39:80:d2:2b:c9:45:29:64:c0:6a:4d:5e: eb:af:63:66:bd:39:8e:79:85:7d:94:ac:b0:9f:a4: 9e:e5:db:3a:ea:34:61:8d:30:80:5b:2b:fc:af:64: 3c:f3:87:93:a2:b0:82:3a:71:07:6b:cc:28:76:2c: 2e:e9:5e:ec:95:27:c6:d3:ad:d6:1a:8f:72:49:c6: 8a:d8:bb:cf:72:57:52:f8:44:48:9d:c2:97:98:bc: d6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:15:8E:7A:F2:09:D4:DE:C6:9E:CD:5D:79:B8:2D:00:1A:3A:36:D3 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/0hWOevIJ1N7Gns1debgtABo6NtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.110.68.0/22 Signature Algorithm: sha256WithRSAEncryption 96:d6:0e:dc:c4:63:0c:78:50:75:fd:0f:72:b6:44:8a:66:29: b8:b0:df:0c:d3:cc:3c:bd:1c:fe:89:27:90:bf:fb:d8:c7:42: 3d:9e:14:e4:0f:e1:00:d0:38:15:9f:a2:1d:ba:f7:0a:b1:df: 93:ed:7f:ff:9b:95:2c:42:6b:ef:b3:4f:9b:bf:d6:d4:d9:e6: f1:f4:a0:10:b9:f0:2b:59:70:fc:30:0a:1b:4c:31:66:2d:e9: a8:d6:e5:ad:e8:6e:02:7d:5e:63:96:33:5a:4c:f1:86:d3:2c: 10:d2:45:c4:91:0e:1d:60:ef:51:ea:72:f8:c4:6f:dd:e8:71: 4f:ed:3d:b4:0a:35:ab:f3:cf:b4:e0:64:3e:ae:e5:28:a2:8c: 8e:46:76:44:5f:a7:a0:cb:03:a9:a1:07:ad:10:ca:e6:6d:d7: 47:6c:5e:23:ec:74:8d:c1:cd:b0:26:e7:cd:7f:7f:ec:b9:54: 62:18:53:46:71:18:d2:ed:9e:ea:af:4e:04:2c:43:0c:7a:89: 55:ef:d6:a8:5f:bf:88:cd:db:7a:12:87:bc:67:cf:f1:51:f8: 04:b4:9e:ed:fe:4f:a8:76:a4:ef:b4:52:74:f5:69:e0:85:56: 3a:b4:08:f9:43:cb:fb:b3:ff:51:89:cc:4d:d0:4f:94:73:13: 7e:67:54:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqhISXh3yTO/CiOVCoa/rVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUxMTIwMTE1ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjE1OGU3YWYyMDlkNGRlYzY5ZWNkNWQ3OWI4MmQwMDFhM2EzNmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hTM61hh/PkpF58M1CWEklkAK3Co /Ce5jB2YJ8dubOtYB3HkeAv0mfpN8ydCcF/tHIiQJg6t7E6l5Prg7OtPiSGOnCsg 6+KNjX7Sp4mVHei0cFmEFKbsWeeEwpOSESEyEiaLGesXijwFlIsFReSlwUPh7jIE sTH79smPV8hz9Lhl1ToPGi4MTXS2v3I8MwMKBNBnbgllvFjMRrVbSfBLPJSCrXRI dho5gNIryUUpZMBqTV7rr2NmvTmOeYV9lKywn6Se5ds66jRhjTCAWyv8r2Q884eT orCCOnEHa8wodiwu6V7slSfG063WGo9yScaK2LvPcldS+ERIncKXmLzWAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNIVjnryCdTexp7NXXm4LQAaOjbTMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvMGhXT2V2SUoxTjdHbnMxZGViZ3RBQm82TnRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1W5EMA0G CSqGSIb3DQEBCwUAA4IBAQCW1g7cxGMMeFB1/Q9ytkSKZim4sN8M08w8vRz+iSeQ v/vYx0I9nhTkD+EA0DgVn6IduvcKsd+T7X//m5UsQmvvs0+bv9bU2ebx9KAQufAr WXD8MAobTDFmLemo1uWt6G4CfV5jljNaTPGG0ywQ0kXEkQ4dYO9R6nL4xG/d6HFP 7T20CjWr88+04GQ+ruUoooyORnZEX6egywOpoQetEMrmbddHbF4j7HSNwc2wJufN f3/suVRiGFNGcRjS7Z7qr04ELEMMeolV79aoX7+Izdt6Eoe8Z8/xUfgEtJ7t/k+o dqTvtFJ09WnghVY6tAj5Q8v7s/9RicxN0E+UcxN+Z1Qt -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:31 2025 by rpki-client