This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kiLT9Vczqv8xV9ONX9odOLSa97U.roa File: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (raw, json) Hash identifier: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY= Subject key identifier: 92:22:D3:F5:57:33:AA:FF:31:57:D3:8D:5F:DA:1D:38:B4:9A:F7:B5 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38A2B48A4AF89623E08406259C27A7 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kiLT9Vczqv8xV9ONX9odOLSa97U.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 212.111.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a2:b4:8a:4a:f8:96:23:e0:84:06:25:9c:27:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9222d3f55733aaff3157d38d5fda1d38b49af7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:e4:89:89:4c:47:be:ca:95:bf:e5:f9:29: bb:0c:72:f4:2c:cc:1e:ef:b5:f2:be:1c:d2:02:bf: c3:26:bd:05:af:55:ca:e9:c7:d9:02:a7:2c:d8:6b: bd:e8:8f:12:cb:ed:02:31:9b:54:b8:5a:44:ff:52: a1:97:b2:b4:ae:9f:41:9b:62:31:05:47:6c:07:6c: 48:9e:61:ed:a2:f9:55:1f:fc:57:00:3d:3d:1f:47: 56:b0:2b:4d:e3:79:2c:4b:28:5f:f8:46:17:15:e9: 30:0e:64:2e:24:38:e8:97:8a:96:b7:cb:cf:53:51: ee:db:77:dd:37:f8:35:b9:8d:3e:0f:ad:c5:ec:46: 0f:af:ed:26:f9:cd:45:ab:52:98:08:8a:fd:fa:40: fd:22:92:4f:52:d9:70:91:e3:df:63:b6:10:e8:7b: 63:00:00:de:98:e8:77:ea:99:dd:5f:64:2b:ac:d4: 25:d9:b3:b8:4a:1a:1e:be:39:7f:2a:cc:ad:ae:60: ac:45:7f:01:21:d2:0c:2f:1e:72:14:46:6d:65:2a: c1:28:c8:5c:1f:d2:76:74:07:ac:25:8e:ee:3a:16: 79:c2:77:3c:f2:84:5d:c9:91:df:a3:64:78:6b:60: 0f:78:e1:59:54:84:bd:a6:d0:ce:20:ce:0f:60:3b: 21:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:22:D3:F5:57:33:AA:FF:31:57:D3:8D:5F:DA:1D:38:B4:9A:F7:B5 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kiLT9Vczqv8xV9ONX9odOLSa97U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.111.220.0/22 Signature Algorithm: sha256WithRSAEncryption a4:19:dc:2b:18:96:2e:ec:81:6a:71:f4:70:01:6a:c3:db:c9: 41:3d:c7:44:b4:94:f2:d2:a0:26:15:0b:dc:d0:da:bd:0d:76: 5d:26:e6:98:45:8d:e8:d2:62:1e:01:ae:81:14:2f:ed:b2:1a: 57:62:4d:5c:25:3f:92:72:3f:01:1f:0b:1e:7b:19:2a:07:90: f2:92:b9:46:8a:8c:3a:18:1a:15:df:45:1a:f6:b8:7b:0c:a5: b7:10:75:20:97:a5:f6:05:48:34:23:9a:4c:dc:9c:17:3c:3c: ef:6b:ea:ee:a0:02:ca:b9:2c:4a:d8:23:f8:54:a2:d6:d7:b6: 83:0a:37:63:ad:54:e9:23:00:40:13:69:b6:70:ff:ca:df:72: d3:c0:d6:a7:03:d6:ed:46:c6:fd:72:e5:9c:95:28:59:5e:93: 8c:77:fc:6f:79:06:4c:53:36:d4:6e:7d:8a:80:82:70:a5:69: 08:df:1f:14:ba:f7:1e:3c:d5:f7:54:1f:36:1d:bb:5e:a9:d0: 25:be:30:44:f9:38:20:c6:bd:dc:f0:bf:4e:ec:fa:12:9c:1a: 7e:f5:88:6f:7a:12:3e:61:c4:94:ae:9a:8c:38:f0:84:47:a4: 49:d6:e2:12:6b:ab:47:d7:9b:db:f7:62:72:bf:ed:e6:58:65: 49:ae:df:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKK0ikr4liPghAYlnCenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjIyZDNmNTU3MzNhYWZmMzE1N2QzOGQ1ZmRhMWQzOGI0OWFmN2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcvkiYlMR77Klb/l+Sm7DHL0LMwe 77XyvhzSAr/DJr0Fr1XK6cfZAqcs2Gu96I8Sy+0CMZtUuFpE/1Khl7K0rp9Bm2Ix BUdsB2xInmHtovlVH/xXAD09H0dWsCtN43ksSyhf+EYXFekwDmQuJDjol4qWt8vP U1Hu23fdN/g1uY0+D63F7EYPr+0m+c1Fq1KYCIr9+kD9IpJPUtlwkePfY7YQ6Htj AADemOh36pndX2QrrNQl2bO4Shoevjl/KsytrmCsRX8BIdIMLx5yFEZtZSrBKMhc H9J2dAesJY7uOhZ5wnc88oRdyZHfo2R4a2APeOFZVIS9ptDOIM4PYDshxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJIi0/VXM6r/MVfTjV/aHTi0mve1MB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEva2lMVDlWY3pxdjh4VjlPTlg5b2RPTFNhOTdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1G/cMA0G CSqGSIb3DQEBCwUAA4IBAQCkGdwrGJYu7IFqcfRwAWrD28lBPcdEtJTy0qAmFQvc 0Nq9DXZdJuaYRY3o0mIeAa6BFC/tshpXYk1cJT+Scj8BHwseexkqB5DykrlGiow6 GBoV30Ua9rh7DKW3EHUgl6X2BUg0I5pM3JwXPDzva+ruoALKuSxK2CP4VKLW17aD CjdjrVTpIwBAE2m2cP/K33LTwNanA9btRsb9cuWclShZXpOMd/xveQZMUzbUbn2K gIJwpWkI3x8UuvcePNX3VB82HbteqdAlvjBE+Tggxr3c8L9O7PoSnBp+9YhvehI+ YcSUrpqMOPCER6RJ1uISa6tH15vb92Jyv+3mWGVJrt8u -----END CERTIFICATE-----Generated at Sat Jan 10 04:59:36 2026 by rpki-client