This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mD-B2PFkJ66QbB8WQgXrhFaQyuc.roa File: mD-B2PFkJ66QbB8WQgXrhFaQyuc.roa (raw, json) Hash identifier: SnDOc4gApElsEPC/170XqHGRtizLKXQbh6cH8aNaDMw= Subject key identifier: 98:3F:81:D8:F1:64:27:AE:90:6C:1F:16:42:05:EB:84:56:90:CA:E7 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37B1B53A5DA67665A7564781808788 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mD-B2PFkJ66QbB8WQgXrhFaQyuc.roa Signing time: Fri 02 Jan 2026 10:18:57 +0000 ROA not before: Fri 02 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19318 IP address blocks: 124.198.131.0/24 maxlen: 24 124.198.132.0/24 maxlen: 24 155.2.192.0/24 maxlen: 24 203.188.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b1:b5:3a:5d:a6:76:65:a7:56:47:81:80:87:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=983f81d8f16427ae906c1f164205eb845690cae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:5d:47:39:0f:cc:03:d6:b8:a5:47:19:de: b2:5b:7c:59:bc:87:87:2e:c8:4d:f7:06:60:f6:6b: 76:ba:90:ca:1d:d5:a1:b1:a2:19:66:4c:21:d5:e7: e0:7f:45:cc:ce:23:79:a1:0f:1a:35:15:86:ec:53: 09:83:b8:a2:6b:24:8a:e4:92:12:6c:eb:c9:1d:c2: fc:2e:21:4b:a3:be:f6:ee:14:9e:84:50:ea:3e:79: 37:87:6d:0d:dd:8b:4b:88:94:c5:ae:d3:53:25:1b: 87:17:a4:50:54:d1:1f:96:dd:ef:c6:e3:88:27:c4: 9a:62:b8:b2:b6:78:31:28:93:11:03:84:f5:3b:f9: 06:bf:af:5d:02:e6:9b:05:d1:ef:80:9a:75:bf:b1: 87:67:34:64:11:b1:67:c3:24:d3:5a:d6:8f:db:43: 2c:b0:e6:99:ae:d1:30:ca:6b:ce:e4:d8:c7:cd:b0: 3e:9b:38:f7:1d:0a:35:14:71:22:0f:dd:fd:26:d7: 7d:fd:0a:b7:fe:ef:a9:64:5d:47:3e:11:e9:8f:d2: cf:11:b7:74:cc:f5:ea:7d:fd:a3:ac:ce:4d:05:80: ec:fb:66:78:5c:00:56:df:d3:6e:f2:d4:09:3a:3d: 5c:e8:24:63:69:ea:ae:95:9c:a1:7c:e6:94:ff:e3: 09:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3F:81:D8:F1:64:27:AE:90:6C:1F:16:42:05:EB:84:56:90:CA:E7 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mD-B2PFkJ66QbB8WQgXrhFaQyuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.198.131.0-124.198.132.255 155.2.192.0/24 203.188.171.0/24 Signature Algorithm: sha256WithRSAEncryption 23:3b:11:54:c1:5c:a3:03:31:fe:7d:29:36:75:a3:f7:7b:53: f1:b4:5a:8d:5e:d3:da:ea:8e:38:8c:66:ec:51:ed:92:94:44: f3:cb:6a:1e:90:b9:f1:43:6f:75:f1:d8:92:a5:8f:ca:7c:2f: 2e:c7:f3:e2:dd:16:c4:c4:c1:dd:c3:36:dc:1e:58:9b:b2:7c: ba:3d:1c:b5:62:a9:33:98:e8:6a:6a:41:62:c1:88:ae:a1:af: d6:3b:78:49:15:c8:ba:20:fe:24:0c:e6:68:8f:62:1d:34:23: 99:d5:21:8c:d7:d0:f1:99:cd:ee:10:64:df:65:c8:c7:8a:42: 10:64:57:99:7e:99:7c:eb:15:e0:d1:0b:4a:aa:08:e7:bb:53: 53:90:34:0c:09:05:d2:5d:ab:f6:f7:b9:c7:3d:3e:d4:0e:be: c1:55:17:0c:5f:6f:a5:08:5b:80:0c:62:4d:05:c7:fd:47:3f: ae:ee:d9:54:0c:df:e9:6c:af:17:e1:3a:bf:7f:5a:86:71:a3: e1:2f:3b:94:b5:b3:cf:e8:0a:e8:54:17:5e:0d:4f:f2:c2:f3: 9d:36:5f:e0:ee:4a:8c:61:67:40:d1:b7:91:36:de:94:e1:c7: 13:fe:a3:a9:3a:97:ef:f0:d8:2d:64:07:fd:34:af:3f:8d:86: a5:40:ad:f1 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+N7G1Ol2mdmWnVkeBgIeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODNmODFkOGYxNjQyN2FlOTA2YzFmMTY0MjA1ZWI4NDU2OTBjYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSJdRzkPzAPWuKVHGd6yW3xZvIeH LshN9wZg9mt2upDKHdWhsaIZZkwh1efgf0XMziN5oQ8aNRWG7FMJg7iiaySK5JIS bOvJHcL8LiFLo7727hSehFDqPnk3h20N3YtLiJTFrtNTJRuHF6RQVNEflt3vxuOI J8SaYriytngxKJMRA4T1O/kGv69dAuabBdHvgJp1v7GHZzRkEbFnwyTTWtaP20Ms sOaZrtEwymvO5NjHzbA+mzj3HQo1FHEiD939Jtd9/Qq3/u+pZF1HPhHpj9LPEbd0 zPXqff2jrM5NBYDs+2Z4XABW39Nu8tQJOj1c6CRjaequlZyhfOaU/+MJrwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJg/gdjxZCeukGwfFkIF64RWkMrnMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvbUQtQjJQRmtKNjZRYkI4V1FnWHJoRmFReXVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAB8xoMD BAB8xoQDBACbAsADBADLvKswDQYJKoZIhvcNAQELBQADggEBACM7EVTBXKMDMf59 KTZ1o/d7U/G0Wo1e09rqjjiMZuxR7ZKURPPLah6QufFDb3Xx2JKlj8p8Ly7H8+Ld FsTEwd3DNtweWJuyfLo9HLViqTOY6GpqQWLBiK6hr9Y7eEkVyLog/iQM5miPYh00 I5nVIYzX0PGZze4QZN9lyMeKQhBkV5l+mXzrFeDRC0qqCOe7U1OQNAwJBdJdq/b3 ucc9PtQOvsFVFwxfb6UIW4AMYk0Fx/1HP67u2VQM3+lsrxfhOr9/WoZxo+EvO5S1 s8/oCuhUF14NT/LC8502X+DuSoxhZ0DRt5E23pThxxP+o6k6l+/w2C1kB/00rz+N hqVArfE= -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:01 2026 by rpki-client