This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tEigU09Y1xklyo5lH2d4mnfMDy0.roa File: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (raw, json) Hash identifier: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk= Subject key identifier: B4:48:A0:53:4F:58:D7:19:25:CA:8E:65:1F:67:78:9A:77:CC:0F:2D Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38AFC340EE0EB70C474D3B14861740 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tEigU09Y1xklyo5lH2d4mnfMDy0.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212343 IP address blocks: 212.111.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:af:c3:40:ee:0e:b7:0c:47:4d:3b:14:86:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b448a0534f58d71925ca8e651f67789a77cc0f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:e4:25:b6:6e:9e:8b:56:02:69:26:41:e0: 1d:b9:4c:9a:dc:b1:1a:fc:2c:4f:2f:fe:4c:a6:c1: 22:0f:88:bd:83:94:5e:fd:08:55:1d:f3:bf:f3:ba: d5:44:0d:7b:10:b0:8c:f8:c1:b9:7c:bf:f6:b8:9a: d6:c9:02:83:f4:ea:cf:09:de:0d:5a:fa:af:19:e9: 70:95:ac:cd:ce:b6:98:d4:fa:77:4a:72:29:6c:de: e0:a1:d2:b4:78:19:ed:56:f2:3d:51:fb:d3:01:ff: 06:58:d3:58:62:0d:73:29:3f:04:2d:f6:d2:07:cd: 8d:68:ad:a8:23:13:2f:75:e0:d5:c0:c2:64:da:ff: da:03:1e:0b:87:67:b7:71:61:03:49:aa:28:29:2d: 4e:08:4d:3f:f3:11:fb:a1:cc:c9:21:81:c7:f3:b2: 08:fc:f3:ac:1f:39:a2:8b:89:d5:3f:35:5d:62:9b: 2c:35:1e:46:94:a6:6c:61:b4:c3:c2:28:98:d4:06: 01:6c:1e:78:b1:92:0a:67:24:b7:99:e9:57:13:8a: a2:50:99:fc:2b:ed:0e:77:56:cc:6c:11:26:5b:61: 42:76:6c:29:90:e0:b3:1d:48:1e:11:11:e7:2d:7b: 5e:f3:43:ee:c8:7b:2f:0a:85:e8:7c:b2:0f:db:ab: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:48:A0:53:4F:58:D7:19:25:CA:8E:65:1F:67:78:9A:77:CC:0F:2D X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tEigU09Y1xklyo5lH2d4mnfMDy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.111.204.0/24 Signature Algorithm: sha256WithRSAEncryption 56:8e:a8:42:af:16:9a:54:b6:17:98:e2:fd:6f:b3:0e:94:3e: ee:14:0d:4d:35:5f:b9:24:30:80:c9:da:92:23:70:bd:dd:63: a2:00:bb:89:38:6a:44:12:f3:fa:b6:a9:7c:2e:c7:e3:99:54: a5:00:ae:40:68:38:0c:c5:bf:f5:55:5b:3c:b0:50:02:04:07: 43:45:47:0c:26:35:d5:27:bd:a3:51:e2:12:38:25:be:c7:3a: e4:18:b8:02:6e:1d:23:db:2e:d7:9a:81:d6:88:c2:74:73:39: 62:c5:60:b9:38:d0:6c:00:31:bc:ef:81:2e:ed:15:0f:1b:58: 62:5a:60:b9:70:70:90:59:ce:0d:ea:f0:01:0a:b9:1d:d9:e1: 30:13:f2:a1:19:e5:3c:fd:c2:c4:97:a9:dc:88:b8:80:56:8c: 15:25:fa:b0:8f:23:7f:f3:90:60:76:b7:5c:17:42:d8:8d:6f: ed:bc:6d:98:86:48:cd:6e:ca:fa:a9:bb:03:9d:f3:44:dc:79: 30:67:47:32:67:34:f6:ac:66:91:50:c3:9e:a9:5e:c8:36:56: 30:7e:fb:95:15:42:10:dc:e6:d6:e4:bb:2c:bd:cc:48:d4:a5: fa:29:51:2d:5e:4e:e1:fa:cc:be:9a:d3:93:75:6e:d6:42:1f: d0:83:3b:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OK/DQO4OtwxHTTsUhhdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQ4YTA1MzRmNThkNzE5MjVjYThlNjUxZjY3Nzg5YTc3Y2MwZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOXkJbZunotWAmkmQeAduUya3LEa /CxPL/5MpsEiD4i9g5Re/QhVHfO/87rVRA17ELCM+MG5fL/2uJrWyQKD9OrPCd4N WvqvGelwlazNzraY1Pp3SnIpbN7godK0eBntVvI9UfvTAf8GWNNYYg1zKT8ELfbS B82NaK2oIxMvdeDVwMJk2v/aAx4Lh2e3cWEDSaooKS1OCE0/8xH7oczJIYHH87II /POsHzmii4nVPzVdYpssNR5GlKZsYbTDwiiY1AYBbB54sZIKZyS3melXE4qiUJn8 K+0Od1bMbBEmW2FCdmwpkOCzHUgeERHnLXte80PuyHsvCoXofLIP26v46wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRIoFNPWNcZJcqOZR9neJp3zA8tMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvdEVpZ1UwOVkxeGtseW81bEgyZDRtbmZNRHkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1G/MMA0G CSqGSIb3DQEBCwUAA4IBAQBWjqhCrxaaVLYXmOL9b7MOlD7uFA1NNV+5JDCAydqS I3C93WOiALuJOGpEEvP6tql8LsfjmVSlAK5AaDgMxb/1VVs8sFACBAdDRUcMJjXV J72jUeISOCW+xzrkGLgCbh0j2y7XmoHWiMJ0czlixWC5ONBsADG874Eu7RUPG1hi WmC5cHCQWc4N6vABCrkd2eEwE/KhGeU8/cLEl6nciLiAVowVJfqwjyN/85Bgdrdc F0LYjW/tvG2YhkjNbsr6qbsDnfNE3HkwZ0cyZzT2rGaRUMOeqV7INlYwfvuVFUIQ 3ObW5LssvcxI1KX6KVEtXk7h+sy+mtOTdW7WQh/Qgzvy -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:53 2026 by rpki-client