This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1-4ETQMM5pEH_llFKiofqnLFTmM8.roa File: 1-4ETQMM5pEH_llFKiofqnLFTmM8.roa (raw, json) Hash identifier: 4jCXqywlbyrF1ML6h0x9izYjK6vco/Q6KGBqCgAM8nI= Subject key identifier: FB:81:13:40:C3:39:A4:41:FF:96:51:4A:8A:87:EA:9C:B1:53:98:CF Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF193620B2EB18A87BD89F259506505 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1-4ETQMM5pEH_llFKiofqnLFTmM8.roa Signing time: Fri 02 Jan 2026 18:21:36 +0000 ROA not before: Fri 02 Jan 2026 18:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 212.80.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:93:62:0b:2e:b1:8a:87:bd:89:f2:59:50:65:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb811340c339a441ff96514a8a87ea9cb15398cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:09:d1:e2:a9:52:25:ec:eb:88:3c:25:64:78: d4:e7:45:52:a5:1f:b4:b9:2b:51:a7:ff:30:f4:9b: 88:12:0b:09:a7:99:ac:1e:72:f2:7c:fb:6f:ad:95: 9d:a2:bf:68:1a:65:59:bc:85:4f:fd:84:82:8a:52: 0a:8e:68:42:e3:c0:e8:db:78:93:ba:cc:51:51:a3: b3:a3:21:b5:0a:1d:c2:e0:ed:10:a7:75:5f:21:20: 89:3b:58:95:c9:91:4b:17:e7:a7:8b:fd:62:c1:08: 3f:19:9a:d1:c1:15:2b:e4:dd:a4:35:47:05:ef:ef: cb:1f:79:12:8f:2b:3e:b6:6c:9b:3f:fb:9b:71:6a: 75:9d:8f:91:81:5c:d5:5d:2b:ea:88:af:fb:3f:79: f0:b2:38:99:fd:8c:0b:1c:92:d3:06:6b:ba:a2:bb: 60:e7:e3:7c:56:80:f4:63:79:88:34:3f:c4:10:77: 68:d6:e2:9a:51:e0:8e:3b:e9:5b:71:44:37:bb:df: a7:12:72:46:1f:30:b4:db:54:eb:68:61:04:11:6a: 1e:c7:ac:af:0e:81:15:f9:ee:a4:2d:1c:90:e3:00: eb:91:fb:fe:91:05:fb:4a:82:b3:d1:ec:3b:cf:2c: 42:9a:97:25:10:19:16:1d:11:a4:fe:17:d7:93:3a: 46:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:81:13:40:C3:39:A4:41:FF:96:51:4A:8A:87:EA:9C:B1:53:98:CF X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1-4ETQMM5pEH_llFKiofqnLFTmM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.80.0.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:22:a5:f4:56:29:3d:3c:59:8c:18:f9:04:86:5f:ae:b9:d9: ec:78:d6:18:54:fb:5d:24:82:09:25:7c:e1:b9:98:3c:63:ba: 1f:e3:07:e8:38:00:f5:32:1d:56:8d:22:81:d9:8d:95:e9:ef: 43:df:3f:a7:87:6b:96:20:fd:e7:b5:05:ae:8b:8e:ad:55:a8: 60:de:1c:4d:76:a9:92:50:cb:7f:70:f3:2f:2d:ef:28:f2:2a: ac:ee:59:57:cf:88:27:32:17:e3:55:41:e6:7c:4d:96:2d:80: c2:de:d7:cf:c6:ae:b8:47:04:4f:e9:e1:14:5c:f2:1c:36:f7: 1f:57:30:77:1d:34:cb:ba:6f:90:be:b1:e8:3b:49:75:53:46: b9:30:60:97:e1:41:06:f8:23:a9:76:e3:10:da:93:de:49:85: 40:fd:e6:a4:f5:16:38:2d:43:65:6c:6e:a5:c2:ad:4f:4e:af: 27:d5:32:d1:3e:c7:fc:c8:d6:f9:24:36:d9:80:be:20:e0:c6: d1:d2:fa:56:66:ae:f0:6d:bf:e3:31:8e:e5:86:d1:98:84:79: 42:5f:a6:23:cb:94:01:e4:94:28:05:cc:43:af:cc:43:b0:83: df:47:f7:24:a4:4b:4c:bd:0f:cf:86:bc:41:95:9f:b3:92:e4: f6:8c:91:71 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8ZNiCy6xioe9ifJZUGUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjgxMTM0MGMzMzlhNDQxZmY5NjUxNGE4YTg3ZWE5Y2IxNTM5OGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwnR4qlSJezriDwlZHjU50VSpR+0 uStRp/8w9JuIEgsJp5msHnLyfPtvrZWdor9oGmVZvIVP/YSCilIKjmhC48Do23iT usxRUaOzoyG1Ch3C4O0Qp3VfISCJO1iVyZFLF+eni/1iwQg/GZrRwRUr5N2kNUcF 7+/LH3kSjys+tmybP/ubcWp1nY+RgVzVXSvqiK/7P3nwsjiZ/YwLHJLTBmu6ortg 5+N8VoD0Y3mIND/EEHdo1uKaUeCOO+lbcUQ3u9+nEnJGHzC021TraGEEEWoex6yv DoEV+e6kLRyQ4wDrkfv+kQX7SoKz0ew7zyxCmpclEBkWHRGk/hfXkzpG5QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPuBE0DDOaRB/5ZRSoqH6pyxU5jPMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvMS00RVRRTU01cEVIX2xsRktpb2ZxbkxGVG1NOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjEvNWY2OTA2LTNmYjAtNGRmZi04ZDAxLTJhMDljYzUzYTgw NS8xL3R5bEY5WEVERlRvSGhVNTA0aWZ5cnNIRjlEQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRQADAN BgkqhkiG9w0BAQsFAAOCAQEAjyKl9FYpPTxZjBj5BIZfrrnZ7HjWGFT7XSSCCSV8 4bmYPGO6H+MH6DgA9TIdVo0igdmNlenvQ98/p4drliD957UFrouOrVWoYN4cTXap klDLf3DzLy3vKPIqrO5ZV8+IJzIX41VB5nxNli2Awt7Xz8auuEcET+nhFFzyHDb3 H1cwdx00y7pvkL6x6DtJdVNGuTBgl+FBBvgjqXbjENqT3kmFQP3mpPUWOC1DZWxu pcKtT06vJ9Uy0T7H/MjW+SQ22YC+IODG0dL6Vmau8G2/4zGO5YbRmIR5Ql+mI8uU AeSUKAXMQ6/MQ7CD30f3JKRLTL0Pz4a8QZWfs5Lk9oyRcQ== -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:56 2026 by rpki-client