This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/C8MyI7AJRN2eh3_PYCmA1U9RrHE.roa File: C8MyI7AJRN2eh3_PYCmA1U9RrHE.roa (raw, json) Hash identifier: PX9DajXCu8Ddkxu2WaGZd0SXk8bNkCCDK136eBgGamk= Subject key identifier: 0B:C3:32:23:B0:09:44:DD:9E:87:7F:CF:60:29:80:D5:4F:51:AC:71 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019BB86746651F1D97781DA0F003199D1176 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/C8MyI7AJRN2eh3_PYCmA1U9RrHE.roa Signing time: Tue 13 Jan 2026 17:28:54 +0000 ROA not before: Tue 13 Jan 2026 17:28:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209133 IP address blocks: 212.60.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b8:67:46:65:1f:1d:97:78:1d:a0:f0:03:19:9d:11:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 13 17:28:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bc33223b00944dd9e877fcf602980d54f51ac71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:57:64:76:1b:45:49:92:f7:5e:a7:96:d7:a8: f6:4d:9a:fb:d8:b3:c5:35:4b:7b:68:cd:f6:18:c1: ce:b4:70:0a:1f:82:e1:67:85:86:58:55:69:dd:89: 37:0d:05:16:eb:cd:f0:ba:c0:93:99:9b:5a:88:b4: 4d:1a:3f:34:9d:6d:a1:2a:36:f7:ad:1e:75:f9:80: 8b:e5:b4:a8:7c:a1:9b:71:50:cd:e4:ad:ca:67:5b: 1d:76:57:90:4f:4f:22:46:68:5b:67:80:e5:f1:d4: c6:3a:80:86:c3:59:75:f6:6a:9c:ff:e6:7b:9e:ac: b8:7e:9d:eb:25:58:fe:c7:4a:73:8c:47:bf:28:c1: b9:d6:58:2b:93:14:34:8b:6a:f9:ad:35:17:b0:bb: a5:db:39:51:61:dd:af:c5:26:0c:57:fa:cf:12:e7: f0:f5:0f:99:45:75:07:1e:73:a0:86:36:1a:4b:4b: a8:b2:02:9b:7c:ed:e7:14:b7:c4:8f:61:e4:bf:4c: d3:da:16:1b:ea:79:09:e8:ce:2c:98:35:22:ff:8a: 7e:31:cf:b5:5a:37:83:09:fa:f9:92:04:e8:0c:bf: 5e:69:53:20:53:4d:37:6e:2c:c5:d6:41:d4:37:74: ea:ea:21:ad:0b:2b:23:8e:c2:5c:b0:0d:0a:22:ec: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C3:32:23:B0:09:44:DD:9E:87:7F:CF:60:29:80:D5:4F:51:AC:71 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/C8MyI7AJRN2eh3_PYCmA1U9RrHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.60.4.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:f8:9f:43:75:fa:8d:dd:d7:a5:86:d2:7d:cc:02:a4:ef:ce: fc:be:e1:fc:25:f6:8b:09:f0:e8:4e:29:63:9b:b4:45:cc:69: 7f:93:2c:a9:df:51:81:3d:4b:9b:db:37:02:e0:77:f7:61:71: 46:8b:d5:3a:bc:9b:62:07:4b:f2:14:64:da:e3:c1:f8:1a:1b: 13:d2:c5:58:1d:b4:05:ca:db:b6:99:b2:5a:2c:5e:be:83:c7: bd:ed:c4:40:81:b2:3f:67:ca:10:9d:ba:9a:8f:cf:f1:fa:75: d0:a6:52:bc:25:6d:fc:4b:08:5e:1d:52:a8:36:c8:75:06:84: 39:34:07:e4:38:78:9d:25:ab:b0:41:13:b1:88:c7:98:ce:3a: 15:57:e0:bc:6d:87:c2:ae:d3:7c:08:fb:ea:ea:99:79:82:42: 16:c7:91:5c:cd:e3:98:b4:2c:05:4e:c7:0e:1b:27:36:35:cc: c2:29:62:30:76:6a:e7:a4:bd:76:39:7f:ba:56:68:ab:ea:2b: cc:74:59:6c:87:26:0c:5e:89:10:13:c9:f7:f2:b8:d7:99:b2: 18:3b:de:8d:b1:a3:bc:22:90:ec:11:db:93:27:73:d0:fb:52: 5a:2a:32:f5:9f:ed:70:d5:49:c8:76:0e:ca:a3:e7:c1:18:de: 73:3b:c8:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu4Z0ZlHx2XeB2g8AMZnRF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTEzMTcyODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmMzMzIyM2IwMDk0NGRkOWU4NzdmY2Y2MDI5ODBkNTRmNTFhYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1dkdhtFSZL3XqeW16j2TZr72LPF NUt7aM32GMHOtHAKH4LhZ4WGWFVp3Yk3DQUW683wusCTmZtaiLRNGj80nW2hKjb3 rR51+YCL5bSofKGbcVDN5K3KZ1sddleQT08iRmhbZ4Dl8dTGOoCGw1l19mqc/+Z7 nqy4fp3rJVj+x0pzjEe/KMG51lgrkxQ0i2r5rTUXsLul2zlRYd2vxSYMV/rPEufw 9Q+ZRXUHHnOghjYaS0uosgKbfO3nFLfEj2Hkv0zT2hYb6nkJ6M4smDUi/4p+Mc+1 WjeDCfr5kgToDL9eaVMgU003bizF1kHUN3Tq6iGtCysjjsJcsA0KIuwfwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAvDMiOwCUTdnod/z2ApgNVPUaxxMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvQzhNeUk3QUpSTjJlaDNfUFlDbUExVTlSckhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DwEMA0G CSqGSIb3DQEBCwUAA4IBAQAO+J9DdfqN3delhtJ9zAKk7878vuH8JfaLCfDoTilj m7RFzGl/kyyp31GBPUub2zcC4Hf3YXFGi9U6vJtiB0vyFGTa48H4GhsT0sVYHbQF ytu2mbJaLF6+g8e97cRAgbI/Z8oQnbqaj8/x+nXQplK8JW38SwheHVKoNsh1BoQ5 NAfkOHidJauwQROxiMeYzjoVV+C8bYfCrtN8CPvq6pl5gkIWx5FczeOYtCwFTscO Gyc2NczCKWIwdmrnpL12OX+6Vmir6ivMdFlshyYMXokQE8n38rjXmbIYO96NsaO8 IpDsEduTJ3PQ+1JaKjL1n+1w1UnIdg7Ko+fBGN5zO8jP -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:22 2026 by rpki-client