This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Ey3LDWuy2geqxC9ykjrg83JOpEw.roa File: Ey3LDWuy2geqxC9ykjrg83JOpEw.roa (raw, json) Hash identifier: 1JEfja4fmyh0hvYV92+x+oCjq35R3vVkHZNgpGdwDu4= Subject key identifier: 13:2D:CB:0D:6B:B2:DA:07:AA:C4:2F:72:92:3A:E0:F3:72:4E:A4:4C Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB626BC45BC7E4C73A43A852EC2E3F Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Ey3LDWuy2geqxC9ykjrg83JOpEw.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 212.107.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:62:6b:c4:5b:c7:e4:c7:3a:43:a8:52:ec:2e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=132dcb0d6bb2da07aac42f72923ae0f3724ea44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:77:88:2a:78:8a:45:04:c7:1f:fb:40:4c: 66:7e:03:8a:2a:d7:f5:dc:bf:26:77:2e:dc:24:19: 82:d3:44:1e:10:61:c4:66:bf:14:a7:f4:fc:d3:c2: 81:1d:8c:5d:47:63:e3:0b:74:23:1f:98:16:d1:2a: 6f:2f:1e:61:1e:cc:cf:b1:5c:2c:20:8d:4e:b9:a6: ac:29:55:b8:11:d6:a5:bb:87:19:38:8a:fa:dd:9e: 5c:c5:6f:4c:53:c0:2c:9b:56:18:d7:c2:4d:9a:e6: 6a:09:16:35:5d:c4:78:d2:2d:7a:c0:c0:36:29:65: 48:42:93:12:06:b6:8b:82:1c:bf:e8:77:72:b3:31: 81:1f:22:59:3d:f5:78:67:d4:b7:c4:02:c8:2d:5e: ef:d3:8a:7c:f6:8e:00:b9:94:37:f2:1d:bd:ec:b8: dd:de:29:af:00:b7:c9:40:ed:f4:97:1f:f2:b6:cc: 31:b0:39:c4:5c:e6:03:a4:71:84:38:1c:e7:a6:94: 22:47:ae:4b:0f:c2:89:63:1f:f3:88:74:b2:bc:fd: e6:f7:19:15:0d:24:0f:e5:86:c3:cc:d2:c6:96:27: 45:36:6a:5a:22:a5:ff:66:78:a8:cc:44:76:96:8d: e6:c8:78:c3:0a:d3:e6:e3:57:04:dc:cc:53:c0:cc: 4d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2D:CB:0D:6B:B2:DA:07:AA:C4:2F:72:92:3A:E0:F3:72:4E:A4:4C X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Ey3LDWuy2geqxC9ykjrg83JOpEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.107.27.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:38:68:a5:96:b5:0a:74:b4:fe:00:07:ba:8f:45:18:e5:23: d6:b6:7f:c5:78:c4:09:66:2a:ad:12:e7:9d:9c:5b:6a:46:76: 1c:7d:35:5c:97:9b:e4:c0:5e:1d:91:41:7a:29:2e:bb:bd:ca: 49:05:fd:4c:11:17:db:5c:33:d7:b8:e0:de:0d:df:f4:91:9c: 53:c7:4d:b4:82:79:c6:9d:37:5f:eb:12:5b:3c:21:eb:51:9b: ae:5c:bc:e2:41:71:8d:be:46:f3:be:70:0e:dd:58:01:20:37: 05:99:21:f4:68:03:9a:70:69:0c:bd:66:25:89:3d:60:b8:46: 13:4f:16:1d:4c:20:14:d5:dd:98:a3:ba:6a:c6:1e:ad:cf:fa: fb:ae:73:29:b4:70:0e:10:c6:67:62:7e:56:14:9e:1e:ed:7e: 65:c6:79:1d:aa:64:48:b8:c7:c3:c0:68:33:1a:b7:e7:24:48: ca:78:e2:d3:52:87:b5:3e:16:91:30:76:4d:42:4f:7f:b2:43: 9e:19:eb:3a:03:d6:8b:3d:f3:d5:60:2b:96:89:77:4d:a7:8a: d1:f4:d2:f4:de:58:29:76:d0:e0:ba:e3:4b:64:bc:f8:e1:53: c6:c0:58:b0:18:89:a5:74:5b:b9:00:06:00:3d:c5:7a:97:b8: a3:c7:2d:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2JrxFvH5Mc6Q6hS7C4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzJkY2IwZDZiYjJkYTA3YWFjNDJmNzI5MjNhZTBmMzcyNGVhNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJx3iCp4ikUExx/7QExmfgOKKtf1 3L8mdy7cJBmC00QeEGHEZr8Up/T808KBHYxdR2PjC3QjH5gW0SpvLx5hHszPsVws II1OuaasKVW4Edalu4cZOIr63Z5cxW9MU8Asm1YY18JNmuZqCRY1XcR40i16wMA2 KWVIQpMSBraLghy/6HdyszGBHyJZPfV4Z9S3xALILV7v04p89o4AuZQ38h297Ljd 3imvALfJQO30lx/ytswxsDnEXOYDpHGEOBznppQiR65LD8KJYx/ziHSyvP3m9xkV DSQP5YbDzNLGlidFNmpaIqX/ZniozER2lo3myHjDCtPm41cE3MxTwMxNGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMtyw1rstoHqsQvcpI64PNyTqRMMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvRXkzTERXdXkyZ2VxeEM5eWtqcmc4M0pPcEV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GsbMA0G CSqGSIb3DQEBCwUAA4IBAQB+OGillrUKdLT+AAe6j0UY5SPWtn/FeMQJZiqtEued nFtqRnYcfTVcl5vkwF4dkUF6KS67vcpJBf1MERfbXDPXuODeDd/0kZxTx020gnnG nTdf6xJbPCHrUZuuXLziQXGNvkbzvnAO3VgBIDcFmSH0aAOacGkMvWYliT1guEYT TxYdTCAU1d2Yo7pqxh6tz/r7rnMptHAOEMZnYn5WFJ4e7X5lxnkdqmRIuMfDwGgz GrfnJEjKeOLTUoe1PhaRMHZNQk9/skOeGes6A9aLPfPVYCuWiXdNp4rR9NL03lgp dtDguuNLZLz44VPGwFiwGImldFu5AAYAPcV6l7ijxy1C -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:13 2026 by rpki-client