This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aMQBT9e06Ks9-wrdA7P1F11QnKU.roa File: aMQBT9e06Ks9-wrdA7P1F11QnKU.roa (raw, json) Hash identifier: PThqdleq9TSPF6iHwBRxug4L9SBfN0em8Eio5aghMAg= Subject key identifier: 68:C4:01:4F:D7:B4:E8:AB:3D:FB:0A:DD:03:B3:F5:17:5D:50:9C:A5 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AE48282FE908834921B2433C6D1F8A587 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aMQBT9e06Ks9-wrdA7P1F11QnKU.roa Signing time: Wed 03 Dec 2025 13:59:09 +0000 ROA not before: Wed 03 Dec 2025 13:59:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214654 IP address blocks: 213.210.52.0/24 maxlen: 24 213.210.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:82:82:fe:90:88:34:92:1b:24:33:c6:d1:f8:a5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 3 13:59:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68c4014fd7b4e8ab3dfb0add03b3f5175d509ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5b:5c:4b:49:9f:37:20:64:30:43:12:d8:2c: 46:de:ac:23:ba:c1:19:4b:3d:ab:b0:4d:b0:ca:7f: 67:c3:46:8d:3c:8c:20:fd:3c:fe:39:36:01:b6:64: c4:d9:e8:31:f2:ef:31:66:79:40:25:51:53:bd:e0: 06:c3:7a:0a:0a:b3:d4:d9:0e:53:16:87:8f:bb:76: b6:46:f9:c5:54:4a:39:95:e3:a4:1f:6e:d5:89:d9: 9c:70:11:07:e1:04:91:c3:ca:b8:61:1a:f8:e8:2c: 4c:82:3a:d2:9a:28:74:e9:cb:cc:fd:8a:17:23:01: f2:7e:91:9f:c6:d0:e0:fb:73:be:d7:00:e9:da:e6: 04:f9:ba:2d:ec:07:82:95:f5:df:86:55:ac:b4:3b: 41:66:4c:27:1a:69:64:8b:bb:3e:4e:df:63:61:7d: 41:81:3f:73:4f:bc:85:33:c5:c1:99:a3:60:30:a2: 4f:8f:52:9a:b8:6a:03:39:f4:22:3a:29:c7:3b:3b: 2c:45:15:dc:9e:97:2d:8c:e2:53:f3:fb:6e:76:c2: 8e:30:66:8e:43:b1:b1:a9:90:0b:9d:3f:aa:38:fb: 1f:54:5d:da:81:e5:fd:3a:47:5c:ac:88:e3:02:6e: 97:9f:3f:83:d8:9f:f1:7c:b9:f8:a5:38:86:fa:c4: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C4:01:4F:D7:B4:E8:AB:3D:FB:0A:DD:03:B3:F5:17:5D:50:9C:A5 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aMQBT9e06Ks9-wrdA7P1F11QnKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.210.52.0/23 Signature Algorithm: sha256WithRSAEncryption 24:9a:8e:8a:fc:ec:39:40:86:8c:ca:bb:47:1f:73:3c:af:8c: 67:4e:15:68:db:35:49:4b:c9:86:9b:01:c5:92:2b:ca:0e:65: 64:c6:32:3e:0b:7d:9d:96:ef:33:41:ea:3f:49:6c:1f:94:31: 70:28:14:59:91:19:9c:f3:30:79:ad:ae:28:b9:e9:7a:d8:66: 80:1a:ac:7a:b4:83:1b:7b:8f:eb:25:46:d0:65:c3:ef:4b:23: 6a:f0:51:aa:d4:f5:31:28:00:e8:25:79:3e:4b:61:c1:10:e8: 45:e5:53:48:5b:7e:33:63:11:cf:9d:48:fe:87:2c:99:15:14: f9:e7:c3:41:96:80:5e:a7:96:d1:59:f2:ed:0d:f0:e2:ad:40: 43:31:e3:b8:3b:65:a0:8a:1e:2e:4f:e2:d4:05:89:a4:09:ee: bf:38:fe:ef:6f:58:c7:11:53:64:1c:8c:ea:d0:5e:37:75:81: 47:75:a2:9d:5b:6c:39:9a:f7:10:48:87:d9:a7:64:73:11:e6: 7a:60:d6:c0:58:31:16:e2:dd:35:9a:1b:88:56:36:be:8a:a6: ae:ba:09:28:59:ff:98:27:6c:bc:78:56:ec:cb:f8:ff:34:b4: e5:eb:47:07:54:8e:e8:a9:ba:d6:ef:ed:4e:c6:58:b1:c7:df: 0c:de:14:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrkgoL+kIg0khskM8bR+KWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAzMTM1OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGM0MDE0ZmQ3YjRlOGFiM2RmYjBhZGQwM2IzZjUxNzVkNTA5Y2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91tcS0mfNyBkMEMS2CxG3qwjusEZ Sz2rsE2wyn9nw0aNPIwg/Tz+OTYBtmTE2egx8u8xZnlAJVFTveAGw3oKCrPU2Q5T FoePu3a2RvnFVEo5leOkH27VidmccBEH4QSRw8q4YRr46CxMgjrSmih06cvM/YoX IwHyfpGfxtDg+3O+1wDp2uYE+bot7AeClfXfhlWstDtBZkwnGmlki7s+Tt9jYX1B gT9zT7yFM8XBmaNgMKJPj1KauGoDOfQiOinHOzssRRXcnpctjOJT8/tudsKOMGaO Q7GxqZALnT+qOPsfVF3ageX9OkdcrIjjAm6Xnz+D2J/xfLn4pTiG+sT51QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjEAU/XtOirPfsK3QOz9RddUJylMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvYU1RQlQ5ZTA2S3M5LXdyZEE3UDFGMTFRbktVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1dI0MA0G CSqGSIb3DQEBCwUAA4IBAQAkmo6K/Ow5QIaMyrtHH3M8r4xnThVo2zVJS8mGmwHF kivKDmVkxjI+C32dlu8zQeo/SWwflDFwKBRZkRmc8zB5ra4ouel62GaAGqx6tIMb e4/rJUbQZcPvSyNq8FGq1PUxKADoJXk+S2HBEOhF5VNIW34zYxHPnUj+hyyZFRT5 58NBloBep5bRWfLtDfDirUBDMeO4O2Wgih4uT+LUBYmkCe6/OP7vb1jHEVNkHIzq 0F43dYFHdaKdW2w5mvcQSIfZp2RzEeZ6YNbAWDEW4t01mhuIVja+iqauugkoWf+Y J2y8eFbsy/j/NLTl60cHVI7oqbrW7+1Oxlixx98M3hSx -----END CERTIFICATE-----Generated at Fri Dec 5 18:50:16 2025 by rpki-client