This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/dAl6voqmuQF9M_95tcMEvnpT_iA.roa File: dAl6voqmuQF9M_95tcMEvnpT_iA.roa (raw, json) Hash identifier: jkoiV+aam8+Sjwe1TkqnKIrP6UN47uoRYEXg9ro6xYM= Subject key identifier: 74:09:7A:BE:8A:A6:B9:01:7D:33:FF:79:B5:C3:04:BE:7A:53:FE:20 Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237 Certificate serial: 019B7C1167DED4248808D4E0D61073C3E629 Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/dAl6voqmuQF9M_95tcMEvnpT_iA.roa Signing time: Fri 02 Jan 2026 00:17:53 +0000 ROA not before: Fri 02 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213981 IP address blocks: 212.104.142.0/24 maxlen: 24 2001:3a40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:67:de:d4:24:88:08:d4:e0:d6:10:73:c3:e6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237 Validity Not Before: Jan 2 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74097abe8aa6b9017d33ff79b5c304be7a53fe20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:61:43:ae:f6:01:f9:f6:d1:e5:c9:19:63: a5:8b:60:d9:f6:d9:97:55:10:ec:ad:ad:c5:a1:5e: 38:6c:fe:1d:21:5d:15:58:f1:ba:6f:0c:a0:82:a1: ab:82:eb:9e:f8:e3:55:38:f0:7c:91:62:2c:ca:3c: fd:d3:af:16:68:3a:5d:24:27:0d:fe:e6:88:84:87: ce:10:86:2c:16:75:29:a2:2c:80:ba:5c:89:8e:c4: 76:9a:16:c2:b1:74:0b:de:0a:17:4d:e0:9f:3e:b9: 29:4c:92:22:f1:5a:bf:8d:24:f7:5a:88:2f:d7:c0: 6a:23:24:01:05:1e:8d:70:a6:ca:83:b0:95:3b:98: b6:58:be:66:f1:01:69:e3:b2:4f:97:b7:f1:74:e6: d6:ca:73:f8:2f:36:db:5f:37:99:70:25:ad:97:b7: e0:04:08:5d:8a:c8:86:2c:f3:ba:bd:63:11:eb:f1: 6a:04:9c:34:e8:57:b4:81:07:7e:fb:fc:60:12:5f: e0:1e:73:61:4f:82:6f:00:22:fb:ea:8a:41:ef:46: 50:a1:17:6d:28:09:77:80:e5:3d:c4:b6:b4:1e:1a: fa:57:63:50:18:a7:33:73:d1:a7:0e:b3:f3:ab:5f: b2:fb:2b:66:93:fb:21:33:ab:c4:a2:83:df:23:b4: 6e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:09:7A:BE:8A:A6:B9:01:7D:33:FF:79:B5:C3:04:BE:7A:53:FE:20 X509v3 Authority Key Identifier: keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/dAl6voqmuQF9M_95tcMEvnpT_iA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.104.142.0/24 IPv6: 2001:3a40::/29 Signature Algorithm: sha256WithRSAEncryption 6a:d7:d7:80:3c:f0:ce:db:9c:84:e1:2d:c1:32:5c:9a:be:18: 3f:39:ec:28:42:1c:c0:d7:dd:b2:8d:9b:af:20:35:7e:3d:9b: 65:fe:e2:9e:ab:60:47:61:76:6a:32:97:1d:95:7e:1b:c0:d0: 94:18:72:26:e5:5b:ec:3a:bf:a0:de:9d:8f:b5:1f:97:d9:04: bf:4d:0a:d4:64:e8:6e:e4:47:91:0b:1e:0f:9e:80:b2:ef:35: bb:ef:5c:c0:7d:ba:ea:c4:d8:cd:d3:54:d9:af:1f:3f:3e:d9: 83:c5:4d:c3:6a:2c:ec:fc:01:7c:3f:5b:5a:f0:35:2d:4b:05: 05:fe:e3:4d:ed:fa:3c:fc:1c:f1:ae:c6:63:89:82:b3:a3:65: 44:d1:75:fd:1b:a3:b9:09:73:cf:6d:d4:79:e2:87:d3:49:58: 1f:74:ff:0d:25:87:63:a7:ef:8d:d9:be:aa:b7:e3:8c:4e:83: 8f:26:14:22:0c:1b:fe:7f:a1:c5:f7:65:ea:eb:c4:00:6f:07: 16:65:25:67:53:f7:d5:83:e2:a8:4c:cc:bd:ce:32:8c:3b:30: 30:ad:09:25:0f:7e:5d:75:55:7e:74:a7:53:6a:22:9f:ea:80: 31:52:8c:c1:60:25:e6:7d:61:26:48:91:68:ec:32:79:58:20: 44:b5:8c:61 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EWfe1CSICNTg1hBzw+YpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMGNjM2YzNGJmZDQzYWM1Y2RmNjEwMzdiM2QxNmM5Njdk NzMyMzcwHhcNMjYwMTAyMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDA5N2FiZThhYTZiOTAxN2QzM2ZmNzliNWMzMDRiZTdhNTNmZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlZhQ672Afn20eXJGWOli2DZ9tmX VRDsra3FoV44bP4dIV0VWPG6bwyggqGrguue+ONVOPB8kWIsyjz9068WaDpdJCcN /uaIhIfOEIYsFnUpoiyAulyJjsR2mhbCsXQL3goXTeCfPrkpTJIi8Vq/jST3Wogv 18BqIyQBBR6NcKbKg7CVO5i2WL5m8QFp47JPl7fxdObWynP4LzbbXzeZcCWtl7fg BAhdisiGLPO6vWMR6/FqBJw06Fe0gQd++/xgEl/gHnNhT4JvACL76opB70ZQoRdt KAl3gOU9xLa0Hhr6V2NQGKczc9GnDrPzq1+y+ytmk/shM6vEooPfI7RuUQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHQJer6KprkBfTP/ebXDBL56U/4gMB8GA1UdIwQY MBaAFEIMw/NL/UOsXN9hA3s9Fsln1zI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYt NTkzZDBiYjc4YmU2LzEvZEFsNnZvcW11UUY5TV85NXRjTUV2bnBUX2lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYtNTkzZDBiYjc4YmU2 LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1GiOMA0E AgACMAcDBQMgATpAMA0GCSqGSIb3DQEBCwUAA4IBAQBq19eAPPDO25yE4S3BMlya vhg/OewoQhzA192yjZuvIDV+PZtl/uKeq2BHYXZqMpcdlX4bwNCUGHIm5VvsOr+g 3p2PtR+X2QS/TQrUZOhu5EeRCx4PnoCy7zW771zAfbrqxNjN01TZrx8/PtmDxU3D aizs/AF8P1ta8DUtSwUF/uNN7fo8/BzxrsZjiYKzo2VE0XX9G6O5CXPPbdR54ofT SVgfdP8NJYdjp++N2b6qt+OMToOPJhQiDBv+f6HF92Xq68QAbwcWZSVnU/fVg+Ko TMy9zjKMOzAwrQklD35ddVV+dKdTaiKf6oAxUozBYCXmfWEmSJFo7DJ5WCBEtYxh -----END CERTIFICATE-----Generated at Fri Jan 9 00:14:58 2026 by rpki-client