This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/XCvwouQb8EHjnYaba0fCxCrBwa0.roa File: XCvwouQb8EHjnYaba0fCxCrBwa0.roa (raw, json) Hash identifier: 7OCxz9+g4uYWDzH37RsGVsHV2ZDZWkC8HmqPtc1bvkQ= Subject key identifier: 5C:2B:F0:A2:E4:1B:F0:41:E3:9D:86:9B:6B:47:C2:C4:2A:C1:C1:AD Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249 Certificate serial: 019B78347D69F97D3641C90F47176565A094 Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/XCvwouQb8EHjnYaba0fCxCrBwa0.roa Signing time: Thu 01 Jan 2026 06:17:44 +0000 ROA not before: Thu 01 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211905 IP address blocks: 212.108.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7d:69:f9:7d:36:41:c9:0f:47:17:65:65:a0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249 Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c2bf0a2e41bf041e39d869b6b47c2c42ac1c1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f6:e2:a1:da:7f:0c:53:47:a8:3b:2a:0d:74: bd:33:0d:db:38:7f:15:67:18:3f:2d:bc:81:eb:af: d6:4f:b3:a9:38:2b:c5:73:3b:6d:25:fd:3b:fc:0c: ad:cc:2d:90:01:bf:22:f1:48:f3:f8:c7:20:97:08: a3:58:92:14:4e:b6:da:3a:73:64:3c:92:32:94:ac: 4b:11:5f:81:96:21:82:c5:a0:95:5f:71:c1:de:d5: 8d:50:30:61:09:26:71:da:a8:22:8b:8d:9d:7f:aa: 86:16:fb:4e:7d:a0:90:86:85:60:b5:45:3c:c1:91: f1:38:c1:8a:53:6b:b6:39:e7:c7:0b:c9:56:89:2f: be:e6:b6:9a:c0:38:70:4b:bc:72:6a:a0:f4:dd:ce: 43:e6:94:b4:15:db:b1:a7:b9:c5:f8:a9:12:d3:7c: b9:e8:08:5e:ae:16:f1:e0:30:0b:0d:f8:17:4f:f6: 94:61:66:bc:9b:4e:8e:ca:58:88:26:bc:d2:16:8f: 4b:33:9c:8f:3f:0e:29:d3:7b:d1:7d:13:29:84:0c: 6c:52:69:35:ba:41:58:a6:6b:c2:b7:34:d9:27:46: 45:ff:22:d1:bd:da:7b:41:c8:3c:85:d3:d9:b2:4f: a8:3c:2c:6f:56:95:fb:af:2d:4c:47:44:a7:a5:82: 3d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2B:F0:A2:E4:1B:F0:41:E3:9D:86:9B:6B:47:C2:C4:2A:C1:C1:AD X509v3 Authority Key Identifier: keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/XCvwouQb8EHjnYaba0fCxCrBwa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.120.0/24 Signature Algorithm: sha256WithRSAEncryption 62:f7:52:07:e8:72:18:8d:ef:6b:e4:03:f1:4f:db:f8:d6:cf: 9b:ac:c9:06:0a:97:6c:92:a4:51:f4:0a:53:fd:70:dd:82:f0: 38:e2:9a:3c:f3:35:f0:79:54:52:7c:a3:60:03:12:35:b0:91: fc:6a:d4:b4:4c:bd:45:75:c8:f8:eb:f7:59:2b:84:fb:41:02: c4:46:67:b4:d9:79:e1:18:73:27:01:3a:5b:f0:6a:0b:70:7b: 43:0f:05:c6:cd:0e:cd:c1:d5:9d:00:fe:19:5a:7b:5c:6c:7f: d3:49:d3:60:4c:39:e6:54:8e:5b:cf:2c:fd:1d:82:db:f4:1e: d7:6b:9d:37:68:12:f2:27:b1:cb:e5:d2:c0:e2:6c:9f:3f:33: 00:4b:44:6e:08:5a:df:9e:6e:44:a5:9f:b8:59:7a:43:38:f3: e6:e7:cc:54:63:65:c6:5b:77:15:84:11:cd:d6:42:31:be:2f: 3e:cc:6f:38:5c:87:62:d7:93:5f:f3:6e:e1:55:35:38:3a:e7: ee:af:c8:81:00:5c:d7:08:1b:83:c2:7a:d5:70:3a:01:13:e8: e7:ce:07:b7:f1:4e:55:f9:e3:10:02:4f:3e:b0:15:48:63:57: d2:66:84:4f:b9:51:d9:fd:eb:d5:63:93:5c:51:f4:99:ec:4a: ee:17:24:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NH1p+X02QckPRxdlZaCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MGFlMTc1ZmJlNjNiMGU5MzA0NjkwOTdjOTQ5MmQ0MmVk NzkyNDkwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzJiZjBhMmU0MWJmMDQxZTM5ZDg2OWI2YjQ3YzJjNDJhYzFjMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/biodp/DFNHqDsqDXS9Mw3bOH8V Zxg/LbyB66/WT7OpOCvFczttJf07/AytzC2QAb8i8Ujz+McglwijWJIUTrbaOnNk PJIylKxLEV+BliGCxaCVX3HB3tWNUDBhCSZx2qgii42df6qGFvtOfaCQhoVgtUU8 wZHxOMGKU2u2OefHC8lWiS++5raawDhwS7xyaqD03c5D5pS0Fduxp7nF+KkS03y5 6Aherhbx4DALDfgXT/aUYWa8m06OyliIJrzSFo9LM5yPPw4p03vRfRMphAxsUmk1 ukFYpmvCtzTZJ0ZF/yLRvdp7Qcg8hdPZsk+oPCxvVpX7ry1MR0SnpYI9gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFwr8KLkG/BB452Gm2tHwsQqwcGtMB8GA1UdIwQY MBaAFGkK4XX75jsOkwRpCXyUktQu15JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iODg0YzAtNGQwNS00NDAxLTk4NTgt OGEwODZlYTk0YmU1LzEvWEN2d291UWI4RUhqbllhYmEwZkN4Q3JCd2EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9iODg0YzAtNGQwNS00NDAxLTk4NTgtOGEwODZlYTk0YmU1 LzEvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Gx4MA0G CSqGSIb3DQEBCwUAA4IBAQBi91IH6HIYje9r5APxT9v41s+brMkGCpdskqRR9ApT /XDdgvA44po88zXweVRSfKNgAxI1sJH8atS0TL1Fdcj46/dZK4T7QQLERme02Xnh GHMnATpb8GoLcHtDDwXGzQ7NwdWdAP4ZWntcbH/TSdNgTDnmVI5bzyz9HYLb9B7X a503aBLyJ7HL5dLA4myfPzMAS0RuCFrfnm5EpZ+4WXpDOPPm58xUY2XGW3cVhBHN 1kIxvi8+zG84XIdi15Nf827hVTU4Oufur8iBAFzXCBuDwnrVcDoBE+jnzge38U5V +eMQAk8+sBVIY1fSZoRPuVHZ/evVY5NcUfSZ7EruFyRL -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:38 2026 by rpki-client