This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/CuVYq_7gkf_DrsINyOzhKZbktPU.roa File: CuVYq_7gkf_DrsINyOzhKZbktPU.roa (raw, json) Hash identifier: /uHacyxGA33AcgKYOrlSIWvD9MdgqSXnE0I0qc9GHm0= Subject key identifier: 0A:E5:58:AB:FE:E0:91:FF:C3:AE:C2:0D:C8:EC:E1:29:96:E4:B4:F5 Certificate issuer: /CN=68cfe1aacb278c13231b310e45ee576932fe9b4e Certificate serial: 019B79EBB9BCE88AFBF68D08431965175AA0 Authority key identifier: 68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/CuVYq_7gkf_DrsINyOzhKZbktPU.roa Signing time: Thu 01 Jan 2026 14:17:30 +0000 ROA not before: Thu 01 Jan 2026 14:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12840 IP address blocks: 212.109.96.0/20 maxlen: 20 212.109.96.0/24 maxlen: 24 212.109.98.0/24 maxlen: 24 212.109.100.0/24 maxlen: 24 212.109.102.0/24 maxlen: 24 212.109.103.0/24 maxlen: 24 212.109.107.0/24 maxlen: 24 212.109.112.0/22 maxlen: 22 212.109.112.0/24 maxlen: 24 212.109.113.0/24 maxlen: 24 212.109.114.0/24 maxlen: 24 212.109.115.0/24 maxlen: 24 212.109.120.0/23 maxlen: 23 212.109.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.crl rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.mft rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b9:bc:e8:8a:fb:f6:8d:08:43:19:65:17:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68cfe1aacb278c13231b310e45ee576932fe9b4e Validity Not Before: Jan 1 14:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ae558abfee091ffc3aec20dc8ece12996e4b4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:06:d9:0e:61:b5:0f:3a:4b:0e:b6:25:de: 8f:09:0d:5e:15:99:4a:42:a9:2c:ce:17:68:b9:f4: b1:bc:3d:8b:96:ba:ac:00:f5:19:ca:38:c1:20:9d: 3c:7a:48:4f:b1:8d:64:18:0f:ca:be:20:07:2c:1a: 5e:64:8f:bd:52:db:b4:92:11:25:5a:2e:9f:eb:26: 64:23:2d:96:92:bf:ad:8e:7f:21:8d:d6:3a:54:15: f9:bd:05:71:0e:70:d5:4a:7f:1a:a8:a6:8b:f9:bf: 7d:0b:4c:8f:c6:c8:c1:ee:cc:35:a8:84:e8:52:27: 2c:32:e9:63:f9:ed:1e:0c:3b:cb:a9:e0:1b:ca:0a: ec:35:70:79:03:08:e1:d0:cc:29:ba:81:79:26:6e: 54:29:07:9d:55:d8:b5:1d:d3:fe:ad:e6:5e:14:cb: cf:a6:a1:c0:17:b5:37:31:dc:50:a4:fa:01:f9:a9: 3f:ad:69:5d:6a:fd:31:45:5a:0a:b8:68:d3:30:d8: 89:e9:14:c7:8e:45:1b:8d:70:75:2a:97:07:2b:72: e9:f5:d7:5e:31:9c:d2:4f:9b:b1:fd:d9:3b:4c:2f: 62:42:32:27:08:d7:50:ba:c1:55:ae:e5:e9:c8:36: 19:73:93:5b:22:00:b6:b4:1b:5e:a8:de:24:70:83: 31:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E5:58:AB:FE:E0:91:FF:C3:AE:C2:0D:C8:EC:E1:29:96:E4:B4:F5 X509v3 Authority Key Identifier: keyid:68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/CuVYq_7gkf_DrsINyOzhKZbktPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.109.96.0-212.109.115.255 212.109.120.0/23 212.109.123.0/24 Signature Algorithm: sha256WithRSAEncryption 78:3d:84:ac:83:a4:aa:c3:41:46:9f:f6:80:86:d5:c3:94:49: 5b:c4:e9:f2:02:11:fb:59:1f:bb:06:52:4f:2d:be:06:46:98: 8c:78:19:32:31:cc:06:14:0c:9d:cf:56:41:14:02:94:6e:a9: 84:37:1e:70:8c:9a:ef:4e:97:e4:ec:41:3a:45:7e:1c:b0:73: 12:29:53:a2:71:23:df:d8:7b:1b:fa:db:dc:e4:73:26:bd:f9: ea:e4:dd:4d:43:76:41:63:39:f8:b1:8a:c7:38:a6:68:45:c0: d3:0d:04:2e:a9:e6:95:dd:0b:2d:ac:29:d9:2a:b8:a5:fb:48: 49:41:9a:c9:d9:4a:d8:6c:8a:fd:f6:77:d0:52:9e:6b:cb:4d: 47:f4:b9:00:91:ad:84:74:79:5e:0f:9a:96:9f:f2:1b:6d:ec: 98:d8:81:4a:77:45:dd:4e:95:c9:94:2b:6a:b2:e4:f7:0d:ee: 67:aa:0b:e5:82:c4:05:f5:66:8f:25:06:07:1e:4c:cf:0c:f2: c4:f9:a2:ad:54:d6:11:28:d1:bb:5a:be:3b:7d:83:ec:4a:f3: 0b:fa:c2:20:6d:29:3e:08:db:6f:4a:3a:5f:46:83:b3:61:f0: 1d:ab:0e:7d:f7:2f:d3:f5:5f:30:01:56:da:8f:56:3b:98:6c: 8b:66:71:ce -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt567m86Ir79o0IQxllF1qgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4Y2ZlMWFhY2IyNzhjMTMyMzFiMzEwZTQ1ZWU1NzY5MzJm ZTliNGUwHhcNMjYwMTAxMTQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWU1NThhYmZlZTA5MWZmYzNhZWMyMGRjOGVjZTEyOTk2ZTRiNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5kG2Q5htQ86Sw62Jd6PCQ1eFZlK QqkszhdoufSxvD2LlrqsAPUZyjjBIJ08ekhPsY1kGA/KviAHLBpeZI+9Utu0khEl Wi6f6yZkIy2Wkr+tjn8hjdY6VBX5vQVxDnDVSn8aqKaL+b99C0yPxsjB7sw1qITo UicsMulj+e0eDDvLqeAbygrsNXB5Awjh0MwpuoF5Jm5UKQedVdi1HdP+reZeFMvP pqHAF7U3MdxQpPoB+ak/rWldav0xRVoKuGjTMNiJ6RTHjkUbjXB1KpcHK3Lp9dde MZzST5ux/dk7TC9iQjInCNdQusFVruXpyDYZc5NbIgC2tBteqN4kcIMxbQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFArlWKv+4JH/w67CDcjs4SmW5LT1MB8GA1UdIwQY MBaAFGjP4arLJ4wTIxsxDkXuV2ky/ptOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1faHFzc25qQk1qR3pFT1JlNVhhVEwtbTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iZTllODgtNTEyZi00YjA2LWIxOTYt ODljMmY2NjZlOTA1LzEvQ3VWWXFfN2drZl9EcnNJTnlPemhLWmJrdFBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iZTllODgtNTEyZi00YjA2LWIxOTYtODljMmY2NjZlOTA1 LzEvYU1faHFzc25qQk1qR3pFT1JlNVhhVEwtbTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAXUbWAD BALUbXADBAHUbXgDBADUbXswDQYJKoZIhvcNAQELBQADggEBAHg9hKyDpKrDQUaf 9oCG1cOUSVvE6fICEftZH7sGUk8tvgZGmIx4GTIxzAYUDJ3PVkEUApRuqYQ3HnCM mu9Ol+TsQTpFfhywcxIpU6JxI9/Yexv629zkcya9+erk3U1DdkFjOfixisc4pmhF wNMNBC6p5pXdCy2sKdkquKX7SElBmsnZSthsiv32d9BSnmvLTUf0uQCRrYR0eV4P mpaf8htt7JjYgUp3Rd1OlcmUK2qy5PcN7meqC+WCxAX1Zo8lBgceTM8M8sT5oq1U 1hEo0btavjt9g+xK8wv6wiBtKT4I229KOl9Gg7Nh8B2rDn33L9P1XzABVtqPVjuY bItmcc4= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:44 2026 by rpki-client