This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XsSX_TV7JH3gEV9ISK2zwhmc_RE.roa File: XsSX_TV7JH3gEV9ISK2zwhmc_RE.roa (raw, json) Hash identifier: R6nCOHayBi7AIHmit6r9DAejzFy6Zg1mQwy7I45LzU0= Subject key identifier: 5E:C4:97:FD:35:7B:24:7D:E0:11:5F:48:48:AD:B3:C2:19:9C:FD:11 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AC76E2CBF33D8C1E1C6567400D47C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XsSX_TV7JH3gEV9ISK2zwhmc_RE.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211484 IP address blocks: 213.210.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c7:6e:2c:bf:33:d8:c1:e1:c6:56:74:00:d4:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ec497fd357b247de0115f4848adb3c2199cfd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7b:1e:69:47:1c:c1:eb:08:e1:34:1c:b4:9f: 0a:2c:2a:c1:1a:19:71:7b:9e:f3:48:05:0e:03:bf: 09:2d:df:5f:25:cd:66:a4:f4:b7:a5:4f:93:55:4c: c7:71:e2:e1:df:bf:78:aa:dc:b4:13:9c:37:a6:43: 07:79:bc:21:18:e5:6c:d3:f0:14:17:d2:f4:ea:63: b2:8c:cc:28:46:57:b5:5c:8e:f3:e2:2b:5c:a1:8b: 0a:17:c5:b6:1c:47:8d:8c:f3:3b:37:d4:8f:7c:ad: 8d:a3:a6:de:23:29:dc:be:96:dc:04:15:6b:93:17: 00:1f:9f:8d:9d:b8:8d:8a:d4:da:38:63:78:9f:30: 6c:94:c3:3b:9e:f5:2d:1c:c2:70:04:a6:53:c5:43: 54:18:17:7c:ea:63:f5:fc:3a:88:c5:c6:08:66:cb: d0:f5:22:81:16:23:8f:16:6b:d3:6c:51:c4:de:58: b6:5c:ce:fd:b6:db:81:3a:4e:4c:1f:94:c9:67:d3: 1d:48:53:ff:b6:e8:61:0e:54:33:17:52:60:7d:7b: f2:a7:b7:9f:43:91:f7:8e:c4:b2:91:0e:8d:1d:d9: 87:74:bf:af:f9:4b:f6:05:f2:44:5d:e1:e9:dc:fe: 23:6a:16:29:ca:da:27:22:f4:02:fe:02:a2:1f:1f: 86:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C4:97:FD:35:7B:24:7D:E0:11:5F:48:48:AD:B3:C2:19:9C:FD:11 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XsSX_TV7JH3gEV9ISK2zwhmc_RE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.210.40.0/24 Signature Algorithm: sha256WithRSAEncryption 28:28:d5:98:cc:02:5a:9a:a3:52:a8:14:83:4b:ae:0f:a1:cb: 94:c6:87:8b:67:98:78:f6:dd:50:09:62:cb:90:ad:78:f5:26: 66:97:b6:f6:66:62:c0:97:eb:15:bc:b9:20:81:af:a5:e2:2f: cb:3b:35:e2:a9:06:22:9e:23:f5:bc:d9:11:20:36:84:b9:26: d7:83:74:49:96:74:b5:8d:e1:1e:4b:7d:54:75:e1:6e:17:bc: 96:0f:62:f9:7f:12:b1:9b:0b:6f:ea:c8:66:96:b9:8f:13:6f: bc:cb:a2:2f:b8:ba:c0:a0:e9:f8:a3:60:2c:3b:fa:42:0a:b8: 71:80:22:9e:7f:bc:cb:8e:2a:6f:2b:c3:3d:28:18:0e:97:8f: 16:fd:93:86:a9:de:4e:2f:85:2f:4b:1d:2a:f6:77:0b:61:74: 1b:f1:8e:27:65:5b:bb:3d:9d:ba:86:3f:53:e6:55:79:b9:79: 41:e0:94:64:d8:1d:65:0f:53:b5:a0:2a:97:5a:cc:6a:96:cc: 09:94:3c:43:df:66:88:32:d3:1a:d6:a9:ec:cf:f5:3d:15:e4: 77:e5:85:3c:6e:b1:bb:c6:e2:49:f6:da:89:ed:3d:fb:78:77: 46:9e:7b:98:98:d7:34:2c:04:4c:5d:9f:2a:03:96:1e:fe:de: b7:71:7c:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsduLL8z2MHhxlZ0ANR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWM0OTdmZDM1N2IyNDdkZTAxMTVmNDg0OGFkYjNjMjE5OWNmZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23seaUccwesI4TQctJ8KLCrBGhlx e57zSAUOA78JLd9fJc1mpPS3pU+TVUzHceLh3794qty0E5w3pkMHebwhGOVs0/AU F9L06mOyjMwoRle1XI7z4itcoYsKF8W2HEeNjPM7N9SPfK2No6beIyncvpbcBBVr kxcAH5+NnbiNitTaOGN4nzBslMM7nvUtHMJwBKZTxUNUGBd86mP1/DqIxcYIZsvQ 9SKBFiOPFmvTbFHE3li2XM79ttuBOk5MH5TJZ9MdSFP/tuhhDlQzF1JgfXvyp7ef Q5H3jsSykQ6NHdmHdL+v+Uv2BfJEXeHp3P4jahYpytonIvQC/gKiHx+G9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF7El/01eyR94BFfSEits8IZnP0RMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWHNTWF9UVjdKSDNnRVY5SVNLMnp3aG1jX1JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dIoMA0G CSqGSIb3DQEBCwUAA4IBAQAoKNWYzAJamqNSqBSDS64PocuUxoeLZ5h49t1QCWLL kK149SZml7b2ZmLAl+sVvLkgga+l4i/LOzXiqQYiniP1vNkRIDaEuSbXg3RJlnS1 jeEeS31UdeFuF7yWD2L5fxKxmwtv6shmlrmPE2+8y6IvuLrAoOn4o2AsO/pCCrhx gCKef7zLjipvK8M9KBgOl48W/ZOGqd5OL4UvSx0q9ncLYXQb8Y4nZVu7PZ26hj9T 5lV5uXlB4JRk2B1lD1O1oCqXWsxqlswJlDxD32aIMtMa1qnsz/U9FeR35YU8brG7 xuJJ9tqJ7T37eHdGnnuYmNc0LARMXZ8qA5Ye/t63cXwH -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:51 2026 by rpki-client