This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/xWBiJmvWmusSflJu9_V6W7XfYmc.roa File: xWBiJmvWmusSflJu9_V6W7XfYmc.roa (raw, json) Hash identifier: Skb1BGsT8j6jKgXJRquu4p4R1kYLRXUsM6g5LOMdMrs= Subject key identifier: C5:60:62:26:6B:D6:9A:EB:12:7E:52:6E:F7:F5:7A:5B:B5:DF:62:67 Certificate issuer: /CN=7373c1ff55403d4792346493f769f8d033bef02c Certificate serial: 019B77C6D56BF73F6A5A8DDEA60E03199778 Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/xWBiJmvWmusSflJu9_V6W7XfYmc.roa Signing time: Thu 01 Jan 2026 04:17:57 +0000 ROA not before: Thu 01 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 213.230.214.0/24 maxlen: 24 213.230.224.0/24 maxlen: 24 213.230.225.0/24 maxlen: 24 213.230.226.0/23 maxlen: 23 213.230.228.0/23 maxlen: 23 213.230.230.0/23 maxlen: 23 213.230.232.0/24 maxlen: 24 213.230.233.0/24 maxlen: 24 213.230.234.0/23 maxlen: 23 213.230.236.0/23 maxlen: 23 213.230.238.0/23 maxlen: 23 213.230.240.0/23 maxlen: 23 213.230.242.0/23 maxlen: 23 213.230.244.0/23 maxlen: 23 213.230.246.0/23 maxlen: 23 213.230.248.0/24 maxlen: 24 213.230.251.0/24 maxlen: 24 213.230.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d5:6b:f7:3f:6a:5a:8d:de:a6:0e:03:19:97:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c56062266bd69aeb127e526ef7f57a5bb5df6267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:3f:5f:53:02:e8:47:0f:f1:3c:b5:dd:5c: 3a:65:d4:4f:db:99:c7:de:3a:62:32:1e:3a:7e:0a: f4:c0:60:d3:62:e1:1f:e1:ff:a1:c1:5e:7c:82:bb: 8e:49:cb:0d:46:ab:9d:4b:9d:de:6b:f7:ec:5e:42: a9:0b:90:31:f9:48:bb:e9:e8:43:1e:37:3c:7f:5a: bb:ae:27:1b:b2:83:dd:af:04:5a:c7:75:d1:d0:1b: f6:3c:ad:28:9a:4c:fb:9f:f0:b1:43:42:e1:36:95: 8f:0e:f3:f9:9c:5e:87:18:93:6c:16:b1:71:32:4e: 01:4b:7e:3e:09:4b:1d:b4:55:27:66:45:de:3e:d2: b4:53:b7:a4:a8:35:68:d1:6c:2e:ae:da:ae:64:bb: ca:a6:e0:7b:63:44:25:1d:fe:a8:c5:be:27:9b:34: bf:f0:2d:17:c5:bf:66:88:ec:98:ad:a4:81:25:92: 04:fc:3a:26:00:14:67:84:87:91:c0:41:eb:32:57: 66:5d:c9:58:00:cf:db:bd:ff:a9:24:c7:a8:c8:c3: f0:4f:b2:af:6b:ad:6d:62:4e:ff:5b:91:49:51:13: b1:d4:40:00:8c:1b:1f:e8:e6:e3:c3:b8:65:dc:f2: 4b:05:37:16:bb:05:95:05:fd:18:ae:7d:35:23:5c: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:60:62:26:6B:D6:9A:EB:12:7E:52:6E:F7:F5:7A:5B:B5:DF:62:67 X509v3 Authority Key Identifier: keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/xWBiJmvWmusSflJu9_V6W7XfYmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.230.214.0/24 213.230.224.0-213.230.248.255 213.230.251.0-213.230.253.255 Signature Algorithm: sha256WithRSAEncryption 0f:08:2d:f0:1e:35:ff:67:27:a4:d6:43:ef:cf:75:57:5f:54: 81:b5:5e:db:43:35:3f:2d:49:85:f8:41:f5:05:3f:d7:5c:d6: cf:a1:03:d3:cf:37:2d:26:f9:58:b7:1a:0a:25:54:25:52:d9: 25:d8:49:76:f0:f8:b7:9d:ca:46:d6:42:8f:93:df:a7:44:89: 33:d2:51:a5:02:63:ff:d5:bf:89:31:c6:83:98:7a:07:67:47: dd:36:81:7a:8a:5d:bc:fd:35:b8:cd:9e:71:4f:9b:ce:0a:ed: 66:9a:8a:43:e9:36:c1:73:80:88:b6:63:39:f2:68:ce:40:60: 80:26:f4:aa:af:de:b1:d0:59:bb:46:2b:71:f6:08:16:60:67: 80:02:c6:1a:e5:f0:dd:48:97:75:9a:c3:0b:86:ea:40:c8:d2: a4:ea:51:d2:05:f3:14:70:cb:53:f2:32:a5:5a:c3:ac:83:b4: 9c:e2:5f:a5:e9:e9:95:34:b8:d9:4f:3d:82:f2:c7:30:69:b7: e4:f6:b1:e3:dd:c5:f0:d4:1e:40:aa:4d:a4:9c:52:ba:20:b6: eb:ab:6b:a7:3d:c7:5c:88:fc:f7:49:3c:b3:11:05:13:88:de: d3:3d:89:de:0d:ff:6a:3a:c1:52:36:47:37:57:5d:c5:ff:4d: 03:bd:59:ed -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt3xtVr9z9qWo3epg4DGZd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNzNjMWZmNTU0MDNkNDc5MjM0NjQ5M2Y3NjlmOGQwMzNi ZWYwMmMwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTYwNjIyNjZiZDY5YWViMTI3ZTUyNmVmN2Y1N2E1YmI1ZGY2MjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSk/X1MC6EcP8Ty13Vw6ZdRP25nH 3jpiMh46fgr0wGDTYuEf4f+hwV58gruOScsNRqudS53ea/fsXkKpC5Ax+Ui76ehD Hjc8f1q7ricbsoPdrwRax3XR0Bv2PK0omkz7n/CxQ0LhNpWPDvP5nF6HGJNsFrFx Mk4BS34+CUsdtFUnZkXePtK0U7ekqDVo0WwurtquZLvKpuB7Y0QlHf6oxb4nmzS/ 8C0Xxb9miOyYraSBJZIE/DomABRnhIeRwEHrMldmXclYAM/bvf+pJMeoyMPwT7Kv a61tYk7/W5FJUROx1EAAjBsf6Objw7hl3PJLBTcWuwWVBf0Yrn01I1z+3QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMVgYiZr1prrEn5Sbvf1elu132JnMB8GA1UdIwQY MBaAFHNzwf9VQD1HkjRkk/dp+NAzvvAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMt YmM5YTVmNjYwNWZjLzEveFdCaUptdldtdXNTZmxKdTlfVjZXN1hmWW1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMtYmM5YTVmNjYwNWZj LzEvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQA1ebWMAwD BAXV5uADBADV5vgwDAMEANXm+wMEAdXm/DANBgkqhkiG9w0BAQsFAAOCAQEADwgt 8B41/2cnpNZD7891V19UgbVe20M1Py1JhfhB9QU/11zWz6ED0883LSb5WLcaCiVU JVLZJdhJdvD4t53KRtZCj5Pfp0SJM9JRpQJj/9W/iTHGg5h6B2dH3TaBeopdvP01 uM2ecU+bzgrtZpqKQ+k2wXOAiLZjOfJozkBggCb0qq/esdBZu0YrcfYIFmBngALG GuXw3UiXdZrDC4bqQMjSpOpR0gXzFHDLU/IypVrDrIO0nOJfpenplTS42U89gvLH MGm35Pax493F8NQeQKpNpJxSuiC266trpz3HXIj890k8sxEFE4je0z2J3g3/ajrB UjZHN1ddxf9NA71Z7Q== -----END CERTIFICATE-----Generated at Thu Jan 8 17:32:22 2026 by rpki-client