This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/UXdNeJ_2Ddl0fTsV4WKpWbphuQI.roa File: UXdNeJ_2Ddl0fTsV4WKpWbphuQI.roa (raw, json) Hash identifier: 7YnRWBVkQ2KwpLyECOgcBh/stkchlYEprARWfyy/l+Q= Subject key identifier: 51:77:4D:78:9F:F6:0D:D9:74:7D:3B:15:E1:62:A9:59:BA:61:B9:02 Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080 Certificate serial: 019B7758A0C8F5345A692DDD43FA61B35413 Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/UXdNeJ_2Ddl0fTsV4WKpWbphuQI.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8982 IP address blocks: 212.120.0.0/19 maxlen: 19 212.120.0.0/23 maxlen: 23 212.120.2.0/24 maxlen: 24 212.120.3.0/24 maxlen: 24 212.120.4.0/24 maxlen: 24 212.120.5.0/24 maxlen: 24 212.120.6.0/24 maxlen: 24 212.120.7.0/24 maxlen: 24 212.120.8.0/24 maxlen: 24 212.120.9.0/24 maxlen: 24 212.120.10.0/24 maxlen: 24 212.120.11.0/24 maxlen: 24 212.120.12.0/24 maxlen: 24 212.120.13.0/24 maxlen: 24 212.120.14.0/24 maxlen: 24 212.120.15.0/24 maxlen: 24 212.120.16.0/24 maxlen: 24 212.120.17.0/24 maxlen: 24 212.120.18.0/24 maxlen: 24 212.120.19.0/24 maxlen: 24 212.120.20.0/24 maxlen: 24 2a03:2560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a0:c8:f5:34:5a:69:2d:dd:43:fa:61:b3:54:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51774d789ff60dd9747d3b15e162a959ba61b902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:ee:c0:c0:98:42:27:4a:e7:df:0e:81:8d: 8d:a6:9a:19:bf:7f:5a:a8:75:71:7a:5c:9c:3c:38: 8f:ec:ab:5c:91:95:82:8c:c3:a8:84:36:ea:94:76: 38:b6:27:35:23:e8:9b:00:e2:d1:2c:ad:c6:48:d9: d9:9c:d8:62:3f:e1:47:53:dc:69:76:9e:fd:5b:3d: 23:a2:2f:68:80:bb:18:4d:fd:f2:5d:aa:95:46:f8: f9:a2:16:1d:25:92:21:e3:9d:62:c9:27:17:32:df: 5a:d8:3e:2c:5f:d8:2f:9f:b8:ee:40:67:56:d2:83: e4:6c:7e:86:e4:2d:bb:7f:4a:35:78:a8:43:c7:02: 0d:08:c0:a2:97:90:b4:39:32:04:62:87:a7:77:91: 2c:5a:56:ca:a2:65:90:83:d7:65:b8:3e:ee:83:26: 96:c4:8d:e1:26:62:20:1d:b0:c1:e6:12:e2:a7:70: ab:9b:49:fc:2d:63:2a:e5:98:b0:34:c8:a8:d0:46: 3b:63:3c:cd:68:bf:11:fa:7f:38:82:17:ea:77:82: 7e:ec:fa:a4:0a:46:0e:78:3a:e4:18:e1:ab:78:57: 8b:7b:35:e8:c6:38:df:aa:e6:84:ad:fe:5c:e9:29: bc:22:69:c5:b4:1a:1f:fd:7d:46:28:24:df:35:9f: cd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:77:4D:78:9F:F6:0D:D9:74:7D:3B:15:E1:62:A9:59:BA:61:B9:02 X509v3 Authority Key Identifier: keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/UXdNeJ_2Ddl0fTsV4WKpWbphuQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.120.0.0/19 IPv6: 2a03:2560::/32 Signature Algorithm: sha256WithRSAEncryption 47:fa:e0:28:a3:35:c6:e2:52:ec:7a:cd:b6:fd:6e:7b:65:95: 58:d4:fe:c5:cf:3e:ca:20:f8:28:23:89:b9:de:84:25:1c:54: 47:10:57:e0:6a:b3:71:db:21:97:0f:96:73:d1:b8:e0:cb:80: b5:ab:58:85:e0:67:60:2a:38:04:6c:ee:fd:02:c9:43:81:3a: 39:71:30:20:b7:61:a4:c6:e7:dd:eb:b4:18:cd:06:e7:0d:36: 4c:b4:76:7f:f9:6b:bd:03:7f:40:fc:23:bb:00:e5:d4:d5:35: b0:b5:55:db:6c:e4:82:80:e1:e3:83:26:04:f9:df:f0:6b:55: 5f:77:eb:d4:ef:ee:17:dc:34:5c:36:e3:fc:e4:f5:ea:47:e7: 5b:59:a2:03:54:7b:7c:e8:05:99:12:81:75:bc:61:e4:66:eb: 26:9d:45:c0:c8:95:0a:63:60:29:50:8a:76:44:20:54:5a:20: b6:fc:df:68:d5:81:ec:5e:f7:2a:90:ed:a6:6b:4b:3d:6e:5a: db:64:b3:03:77:d6:18:d8:89:22:15:9c:f8:2b:2a:47:aa:7c: d2:3a:bf:e0:72:06:96:8c:46:37:96:82:0b:cc:3f:15:32:89: 5a:4b:96:43:7e:8b:eb:29:c3:02:4a:85:45:eb:d4:38:ae:1c: 93:d1:26:e6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WKDI9TRaaS3dQ/phs1QTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMzA5MjFkMjhjNzhlZGU4MTg0MmY3MTJlNmNmNzJiZGU1 YTYwODAwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTc3NGQ3ODlmZjYwZGQ5NzQ3ZDNiMTVlMTYyYTk1OWJhNjFiOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47PuwMCYQidK598OgY2NppoZv39a qHVxelycPDiP7KtckZWCjMOohDbqlHY4tic1I+ibAOLRLK3GSNnZnNhiP+FHU9xp dp79Wz0joi9ogLsYTf3yXaqVRvj5ohYdJZIh451iyScXMt9a2D4sX9gvn7juQGdW 0oPkbH6G5C27f0o1eKhDxwINCMCil5C0OTIEYoend5EsWlbKomWQg9dluD7ugyaW xI3hJmIgHbDB5hLip3Crm0n8LWMq5ZiwNMio0EY7YzzNaL8R+n84ghfqd4J+7Pqk CkYOeDrkGOGreFeLezXoxjjfquaErf5c6Sm8ImnFtBof/X1GKCTfNZ/NewIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFF3TXif9g3ZdH07FeFiqVm6YbkCMB8GA1UdIwQY MBaAFKswkh0ox47egYQvcS5s9yveWmCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2Et MzU0Mzk5NzI0YjFlLzEvVVhkTmVKXzJEZGwwZlRzVjRXS3BXYnBodVFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2EtMzU0Mzk5NzI0YjFl LzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1HgAMA0E AgACMAcDBQAqAyVgMA0GCSqGSIb3DQEBCwUAA4IBAQBH+uAoozXG4lLses22/W57 ZZVY1P7Fzz7KIPgoI4m53oQlHFRHEFfgarNx2yGXD5Zz0bjgy4C1q1iF4GdgKjgE bO79AslDgTo5cTAgt2Gkxufd67QYzQbnDTZMtHZ/+Wu9A39A/CO7AOXU1TWwtVXb bOSCgOHjgyYE+d/wa1Vfd+vU7+4X3DRcNuP85PXqR+dbWaIDVHt86AWZEoF1vGHk ZusmnUXAyJUKY2ApUIp2RCBUWiC2/N9o1YHsXvcqkO2ma0s9blrbZLMDd9YY2Iki FZz4KypHqnzSOr/gcgaWjEY3loILzD8VMolaS5ZDfovrKcMCSoVF69Q4rhyT0Sbm -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:34 2026 by rpki-client