This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/P_yuLjWbsEnPJRri0sPdIAJwtIE.roa File: P_yuLjWbsEnPJRri0sPdIAJwtIE.roa (raw, json) Hash identifier: OWw6475ue2CyouQdZseNajAOA39IhXLc9Jah+PLT7PA= Subject key identifier: 3F:FC:AE:2E:35:9B:B0:49:CF:25:1A:E2:D2:C3:DD:20:02:70:B4:81 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38A3B1ADF0AA2BC44404CAA3D6B8A8 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/P_yuLjWbsEnPJRri0sPdIAJwtIE.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 212.111.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a3:b1:ad:f0:aa:2b:c4:44:04:ca:a3:d6:b8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ffcae2e359bb049cf251ae2d2c3dd200270b481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:56:92:aa:22:dc:39:1b:fd:1e:f2:e2:51: 20:36:85:d5:50:2f:af:78:b2:6c:6f:fb:38:cf:d3: 06:ce:7d:22:75:1e:e6:a3:98:af:f3:3f:bf:31:91: eb:c4:60:46:e4:b9:f3:65:77:da:fb:cb:a9:91:a5: cb:54:34:7c:d6:a6:c4:9f:0a:93:45:03:e7:44:11: 76:6e:f6:6b:9e:50:1a:1b:e5:93:66:2f:1a:88:c3: 8a:05:68:b7:62:b9:26:12:c9:68:ca:67:c4:5e:34: c0:f8:a6:de:66:48:9f:10:de:12:8e:9d:76:34:f6: c0:f4:25:a5:3e:b4:24:e1:6e:cc:f7:d9:c3:69:6f: 41:6e:87:94:2b:1e:4a:9f:62:27:28:ac:22:f1:f3: ee:e0:85:7c:5f:d4:65:a3:22:b1:c4:b9:fc:51:fc: 06:46:8d:c6:bd:63:67:19:b7:59:e7:2f:78:ae:79: d1:78:ee:bf:cb:31:2c:cc:2c:57:d8:37:09:f0:4e: 5e:87:8a:bd:09:55:46:c3:13:cd:41:4b:22:f7:64: 02:88:3e:f5:7d:a4:5b:05:4b:66:3e:b3:48:17:c6: 93:87:90:6a:5e:ba:b2:fc:d6:81:af:2e:2a:82:88: 32:60:f9:f6:b4:71:28:d2:e7:de:b8:be:8e:c9:b9: 17:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:AE:2E:35:9B:B0:49:CF:25:1A:E2:D2:C3:DD:20:02:70:B4:81 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/P_yuLjWbsEnPJRri0sPdIAJwtIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.111.215.0/24 Signature Algorithm: sha256WithRSAEncryption 58:df:f2:cc:de:b3:8b:79:12:6f:34:fe:c4:a9:83:10:2a:42: b7:66:b7:36:57:74:c5:06:e0:52:97:c8:26:52:ff:01:13:b2: 06:51:88:f7:39:6f:32:4b:2d:14:70:b4:03:7b:a1:b8:02:8f: 7f:4d:af:6a:d8:0d:01:d9:a6:69:19:a8:76:6b:0a:5f:f8:21: 2f:b9:91:e3:2d:cd:79:b8:e0:18:2a:27:14:b0:82:7f:51:dd: 66:c0:2e:05:54:e3:82:e4:9a:43:d4:59:49:6e:4d:4e:a5:93: f4:9e:20:30:a0:07:93:c4:9d:d9:d7:7f:30:4c:89:9b:8a:f5: e3:53:eb:74:c6:63:e8:e2:8d:ef:bb:1f:83:f3:40:f4:d3:cb: 66:5b:55:20:15:d5:7f:32:1f:f4:14:0f:fe:9c:db:fd:04:64: a9:28:b9:7b:e0:73:a8:12:b6:d6:56:44:7b:62:6a:e2:9d:00: 60:97:78:3d:6b:ec:d8:ee:53:3e:5d:07:af:13:a0:9a:75:5b: c5:14:2c:1f:d2:a5:21:93:b2:05:a2:c7:f4:27:fb:37:c5:1d: 32:f7:4c:40:eb:f0:75:c2:41:0d:34:45:d8:c4:95:f1:31:0e: 09:e3:c9:cc:e5:b9:85:11:4f:75:e3:31:23:cb:57:64:ff:19: cc:b0:3d:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKOxrfCqK8REBMqj1rioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmZjYWUyZTM1OWJiMDQ5Y2YyNTFhZTJkMmMzZGQyMDAyNzBiNDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGtWkqoi3Dkb/R7y4lEgNoXVUC+v eLJsb/s4z9MGzn0idR7mo5iv8z+/MZHrxGBG5LnzZXfa+8upkaXLVDR81qbEnwqT RQPnRBF2bvZrnlAaG+WTZi8aiMOKBWi3YrkmEsloymfEXjTA+KbeZkifEN4Sjp12 NPbA9CWlPrQk4W7M99nDaW9BboeUKx5Kn2InKKwi8fPu4IV8X9RloyKxxLn8UfwG Ro3GvWNnGbdZ5y94rnnReO6/yzEszCxX2DcJ8E5eh4q9CVVGwxPNQUsi92QCiD71 faRbBUtmPrNIF8aTh5BqXrqy/NaBry4qgogyYPn2tHEo0ufeuL6OybkXXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD/8ri41m7BJzyUa4tLD3SACcLSBMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvUF95dUxqV2JzRW5QSlJyaTBzUGRJQUp3dElFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1G/XMA0G CSqGSIb3DQEBCwUAA4IBAQBY3/LM3rOLeRJvNP7EqYMQKkK3Zrc2V3TFBuBSl8gm Uv8BE7IGUYj3OW8ySy0UcLQDe6G4Ao9/Ta9q2A0B2aZpGah2awpf+CEvuZHjLc15 uOAYKicUsIJ/Ud1mwC4FVOOC5JpD1FlJbk1OpZP0niAwoAeTxJ3Z138wTImbivXj U+t0xmPo4o3vux+D80D008tmW1UgFdV/Mh/0FA/+nNv9BGSpKLl74HOoErbWVkR7 YmrinQBgl3g9a+zY7lM+XQevE6CadVvFFCwf0qUhk7IFosf0J/s3xR0y90xA6/B1 wkENNEXYxJXxMQ4J48nM5bmFEU914zEjy1dk/xnMsD3b -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:12 2026 by rpki-client