This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7Jdi8D5-g_sjENzbzaruqYS6JPk.roa File: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (raw, json) Hash identifier: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM= Subject key identifier: EC:97:62:F0:3E:7E:83:FB:23:10:DC:DB:CD:AA:EE:A9:84:BA:24:F9 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38A5B869CB178CCB987AD21BD11FD0 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7Jdi8D5-g_sjENzbzaruqYS6JPk.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7843 IP address blocks: 212.111.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a5:b8:69:cb:17:8c:cb:98:7a:d2:1b:d1:1f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec9762f03e7e83fb2310dcdbcdaaeea984ba24f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:a5:ea:0e:81:80:51:82:b7:74:d2:a4:42: 44:b2:93:1b:c7:fd:1b:db:f8:f7:22:01:81:c9:65: 4c:ee:48:33:f6:f0:83:02:9a:cf:4b:76:14:8d:00: 1f:7e:55:9a:6a:71:93:c4:56:8b:54:74:5b:c8:8c: 67:b8:37:ba:be:51:74:47:12:48:16:8b:85:12:64: fc:b8:25:ec:71:69:c2:db:17:03:52:17:35:98:c8: ce:59:de:20:bc:35:98:e2:d2:65:40:b0:e8:0f:9d: 4a:e7:ca:e9:81:cb:b8:cd:4f:2b:68:bf:5e:fd:2b: 57:c9:c9:d0:22:37:12:db:db:07:ee:32:54:7b:ba: 58:8b:bf:49:c3:39:94:0f:a4:74:10:56:de:f6:04: 54:c4:7b:5d:23:0e:4d:58:e8:4a:c1:d8:6a:91:13: 1f:67:97:12:a8:38:f8:ba:10:97:33:72:b3:85:14: 80:13:4b:90:4e:6c:81:23:2c:c5:60:88:d1:85:24: 47:a0:eb:aa:d0:b4:55:25:a5:1a:74:6a:74:cf:00: df:50:21:1d:46:18:5c:54:14:fa:75:c9:3f:31:2b: 82:82:c0:7c:c7:5d:a8:6b:45:e4:a1:c9:4e:c3:05: e5:71:28:88:26:33:68:88:ac:72:49:14:a1:c1:79: 7a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:97:62:F0:3E:7E:83:FB:23:10:DC:DB:CD:AA:EE:A9:84:BA:24:F9 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7Jdi8D5-g_sjENzbzaruqYS6JPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.111.220.0/22 Signature Algorithm: sha256WithRSAEncryption 58:7b:b1:16:78:e7:97:36:cc:6d:bd:46:09:bd:d1:9f:e6:e9: bb:45:18:c6:fb:ba:14:c2:e4:13:e9:e7:07:1f:c1:1b:91:75: fd:3a:d8:33:ae:df:a7:e2:4d:4b:11:0e:aa:4c:50:90:d1:b1: 75:b0:09:70:d5:95:b2:0a:ed:32:ce:ff:98:99:f4:35:79:b1: 9a:da:2f:10:0c:25:32:f8:73:a1:8d:fc:6f:83:30:0e:e3:e6: 79:aa:e2:20:e1:e1:f5:74:db:fe:a9:29:34:cf:41:c8:06:76: ee:13:6c:17:5d:b2:e5:75:fb:1e:cd:9b:c8:bd:f3:3a:5a:53: a0:17:b7:3b:47:47:8c:4a:c9:55:10:ec:a8:1f:2d:01:f9:0c: fa:31:45:22:a6:7f:2f:50:d2:89:cc:5b:18:b5:5c:66:f9:34: 14:66:46:4e:70:da:da:4f:1b:64:97:7c:2b:7e:4f:de:ae:c0: f7:74:86:c5:03:e1:30:dd:db:5d:32:0a:dc:65:ff:5a:76:22: cc:d6:fb:26:f5:74:d1:8f:5c:72:a6:fc:2d:8a:ed:52:4f:d4: 76:4a:7a:4c:2c:a7:65:86:d3:bd:7c:a7:61:c6:c5:8c:0d:0d: 2d:20:d3:6d:47:cc:f0:13:b0:7d:6d:07:e8:46:22:00:b2:41: 0b:39:40:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKW4acsXjMuYetIb0R/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzk3NjJmMDNlN2U4M2ZiMjMxMGRjZGJjZGFhZWVhOTg0YmEyNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIOl6g6BgFGCt3TSpEJEspMbx/0b 2/j3IgGByWVM7kgz9vCDAprPS3YUjQAfflWaanGTxFaLVHRbyIxnuDe6vlF0RxJI FouFEmT8uCXscWnC2xcDUhc1mMjOWd4gvDWY4tJlQLDoD51K58rpgcu4zU8raL9e /StXycnQIjcS29sH7jJUe7pYi79JwzmUD6R0EFbe9gRUxHtdIw5NWOhKwdhqkRMf Z5cSqDj4uhCXM3KzhRSAE0uQTmyBIyzFYIjRhSRHoOuq0LRVJaUadGp0zwDfUCEd RhhcVBT6dck/MSuCgsB8x12oa0XkoclOwwXlcSiIJjNoiKxySRShwXl65wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOyXYvA+foP7IxDc282q7qmEuiT5MB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvN0pkaThENS1nX3NqRU56YnphcnVxWVM2SlBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1G/cMA0G CSqGSIb3DQEBCwUAA4IBAQBYe7EWeOeXNsxtvUYJvdGf5um7RRjG+7oUwuQT6ecH H8EbkXX9Otgzrt+n4k1LEQ6qTFCQ0bF1sAlw1ZWyCu0yzv+YmfQ1ebGa2i8QDCUy +HOhjfxvgzAO4+Z5quIg4eH1dNv+qSk0z0HIBnbuE2wXXbLldfsezZvIvfM6WlOg F7c7R0eMSslVEOyoHy0B+Qz6MUUipn8vUNKJzFsYtVxm+TQUZkZOcNraTxtkl3wr fk/ersD3dIbFA+Ew3dtdMgrcZf9adiLM1vsm9XTRj1xypvwtiu1ST9R2SnpMLKdl htO9fKdhxsWMDQ0tINNtR8zwE7B9bQfoRiIAskELOUB8 -----END CERTIFICATE-----Generated at Sat Jan 10 05:02:58 2026 by rpki-client