This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/HM2quk6nzYQNHR3dG1BVLB1Lmzg.roa File: HM2quk6nzYQNHR3dG1BVLB1Lmzg.roa (raw, json) Hash identifier: B6TreewQUWQSrf59HsKrTDNlOv1j4RnP4/ZZFt0V5A8= Subject key identifier: 1C:CD:AA:BA:4E:A7:CD:84:0D:1D:1D:DD:1B:50:55:2C:1D:4B:9B:38 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41E60C5605D8FF53F7322BE79B28C Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/HM2quk6nzYQNHR3dG1BVLB1Lmzg.roa Signing time: Thu 01 Jan 2026 22:18:31 +0000 ROA not before: Thu 01 Jan 2026 22:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 213.108.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1e:60:c5:60:5d:8f:f5:3f:73:22:be:79:b2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ccdaaba4ea7cd840d1d1ddd1b50552c1d4b9b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:3a:b5:1f:55:55:a4:fa:ca:04:62:41:e9: 9b:de:a1:d9:ba:0e:0c:58:10:9f:89:eb:61:e0:ba: df:7c:da:c6:e2:b4:52:e2:3b:58:11:03:c7:55:ac: 2d:bd:60:05:78:ae:3a:74:52:7e:35:a2:6d:fc:06: 04:92:67:3a:00:61:8a:f2:9c:1d:69:9b:c3:4d:31: 41:11:0d:17:25:72:38:ae:44:ec:df:98:c0:17:5f: d3:e8:27:d4:3e:11:53:45:42:02:b8:62:95:7b:a5: 3a:8e:45:dc:15:ef:5f:93:42:c5:1d:d0:8f:7b:6e: 83:f9:2c:e6:7a:11:dc:c8:00:9e:ef:a8:e7:fb:8f: ec:13:4e:f5:25:d5:40:bc:9c:d8:a8:1f:85:9e:b1: f1:6f:21:15:4b:45:4d:9a:f3:97:ab:bd:d8:77:f8: bd:3c:ed:9b:0c:4a:4a:e2:fc:90:ce:34:8e:e2:be: a3:93:2e:56:a5:cb:dc:3c:81:3e:a9:88:70:f9:0e: de:85:89:07:47:fa:88:81:11:8f:41:01:64:89:9c: c6:bd:53:24:e3:d7:46:82:e2:38:9b:b6:86:91:78: b4:25:3c:97:d7:3f:de:ff:dd:1c:ce:be:77:fc:15: 45:8b:ad:b6:3e:ca:bf:c1:16:8f:ac:f0:18:15:f1: 5f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CD:AA:BA:4E:A7:CD:84:0D:1D:1D:DD:1B:50:55:2C:1D:4B:9B:38 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/HM2quk6nzYQNHR3dG1BVLB1Lmzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.108.196.0/24 Signature Algorithm: sha256WithRSAEncryption af:a5:5b:7b:d2:21:71:24:47:ac:6e:78:8d:13:53:62:84:cb: 82:78:52:23:8a:e0:e4:06:4f:a3:af:55:22:fe:b7:fb:cd:38: 98:cd:a9:fa:77:5a:d2:e1:5d:57:c0:d9:c0:c0:4e:62:5c:57: 6a:b3:c4:36:3f:f3:94:fb:f7:f2:14:fe:43:95:5b:23:1f:db: d8:2d:e4:0f:93:de:b4:6d:78:83:3c:e6:28:90:d6:60:69:4f: 45:1a:bb:20:f0:ba:44:f1:a6:67:e5:a6:a0:d8:20:04:42:a6: 72:2d:82:9b:5a:ab:d5:d0:f5:d3:05:04:45:63:52:55:9e:39: 70:94:dd:15:86:38:9b:1f:22:c7:2e:2f:ad:ce:e7:8f:20:a7: d6:94:f0:a9:67:ee:95:27:f1:e7:cf:60:0f:25:c5:3c:e5:a5: 20:c7:8e:ef:50:29:33:30:c6:b5:fd:93:59:6a:5c:06:c8:92: 91:65:dc:b8:2f:74:14:c4:30:ad:30:59:d0:de:2c:51:a4:9d: 59:6b:fd:55:2b:05:69:65:53:35:c0:ab:16:74:92:09:de:4a: 61:44:c5:fe:2a:ef:59:ac:d9:54:52:92:ff:46:74:77:37:82: 24:33:59:b8:af:c2:3d:89:83:d5:7f:80:24:49:64:2b:16:c2: 86:e6:74:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pB5gxWBdj/U/cyK+ebKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2NkYWFiYTRlYTdjZDg0MGQxZDFkZGQxYjUwNTUyYzFkNGI5YjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7k6tR9VVaT6ygRiQemb3qHZug4M WBCfieth4LrffNrG4rRS4jtYEQPHVawtvWAFeK46dFJ+NaJt/AYEkmc6AGGK8pwd aZvDTTFBEQ0XJXI4rkTs35jAF1/T6CfUPhFTRUICuGKVe6U6jkXcFe9fk0LFHdCP e26D+SzmehHcyACe76jn+4/sE071JdVAvJzYqB+FnrHxbyEVS0VNmvOXq73Yd/i9 PO2bDEpK4vyQzjSO4r6jky5WpcvcPIE+qYhw+Q7ehYkHR/qIgRGPQQFkiZzGvVMk 49dGguI4m7aGkXi0JTyX1z/e/90czr53/BVFi622Psq/wRaPrPAYFfFfHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBzNqrpOp82EDR0d3RtQVSwdS5s4MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvSE0ycXVrNm56WVFOSFIzZEcxQlZMQjFMbXpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1WzEMA0G CSqGSIb3DQEBCwUAA4IBAQCvpVt70iFxJEesbniNE1NihMuCeFIjiuDkBk+jr1Ui /rf7zTiYzan6d1rS4V1XwNnAwE5iXFdqs8Q2P/OU+/fyFP5DlVsjH9vYLeQPk960 bXiDPOYokNZgaU9FGrsg8LpE8aZn5aag2CAEQqZyLYKbWqvV0PXTBQRFY1JVnjlw lN0VhjibHyLHLi+tzuePIKfWlPCpZ+6VJ/Hnz2APJcU85aUgx47vUCkzMMa1/ZNZ alwGyJKRZdy4L3QUxDCtMFnQ3ixRpJ1Za/1VKwVpZVM1wKsWdJIJ3kphRMX+Ku9Z rNlUUpL/RnR3N4IkM1m4r8I9iYPVf4AkSWQrFsKG5nRe -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:19 2026 by rpki-client