This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/IuqD_YnEK40mq9P3_VxGGLfnMtY.roa File: IuqD_YnEK40mq9P3_VxGGLfnMtY.roa (raw, json) Hash identifier: bqXRCPcw1sANvy12S42YPS3VVGlJERGIKMC/ip/iYlk= Subject key identifier: 22:EA:83:FD:89:C4:2B:8D:26:AB:D3:F7:FD:5C:46:18:B7:E7:32:D6 Certificate issuer: /CN=f5232ee805f78e592eff2cca61539109e5a3467d Certificate serial: 019B7E3898E3BA2D85CCD9726AD6540AF394 Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/IuqD_YnEK40mq9P3_VxGGLfnMtY.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214649 IP address blocks: 212.102.112.0/24 maxlen: 24 2a10:5e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:98:e3:ba:2d:85:cc:d9:72:6a:d6:54:0a:f3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22ea83fd89c42b8d26abd3f7fd5c4618b7e732d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:31:ea:fc:64:59:fc:60:af:ad:99:74:bd:ad: 43:c2:8a:27:4d:1e:00:62:07:7a:66:e5:bb:31:4f: 25:35:a3:9c:ee:72:e3:e7:d1:d7:29:c1:f3:53:01: 05:85:f1:3e:8e:6c:aa:56:17:55:32:74:c5:45:43: 53:31:fd:e6:ed:37:82:51:d7:5c:2c:a3:12:23:8d: 5f:8d:73:93:be:c6:41:d5:6c:0d:fc:7d:72:a1:cc: 79:5b:2c:26:42:0e:c0:1b:15:91:cd:c1:41:f1:c4: ef:cc:df:87:65:54:42:55:ae:50:28:d2:7d:c5:c9: 1e:17:4a:c4:20:12:cc:e0:06:f4:d7:dd:1c:27:db: 1e:52:dc:19:00:56:95:a3:37:97:02:bf:61:c3:72: f8:cc:62:66:c0:18:5f:3b:02:87:7e:16:07:55:b9: 3d:db:12:7f:9f:42:53:7a:5a:18:ce:c8:b4:ff:28: bd:9b:ff:f5:71:00:00:f9:41:44:1a:ba:b7:09:2b: 9e:8a:06:f8:27:1b:61:97:c3:1f:68:ba:4f:02:49: 32:49:9c:b5:3f:34:9b:98:f3:a8:39:6a:cf:75:5a: 2d:e1:d7:d7:4c:cd:b7:d9:35:87:66:3d:43:d6:88: 57:8b:de:3c:f6:df:08:f4:6a:04:99:ab:3e:b6:08: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EA:83:FD:89:C4:2B:8D:26:AB:D3:F7:FD:5C:46:18:B7:E7:32:D6 X509v3 Authority Key Identifier: keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/IuqD_YnEK40mq9P3_VxGGLfnMtY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.112.0/24 IPv6: 2a10:5e00::/48 Signature Algorithm: sha256WithRSAEncryption a1:7e:d2:c0:31:39:2e:df:7a:e0:99:e0:39:d0:7b:3f:89:e1: 8f:d2:6a:44:6b:cb:3f:e2:86:ee:4e:32:8c:55:ff:ce:02:eb: 72:1f:b2:e0:b8:77:a2:56:99:93:71:c9:2d:bf:47:4e:fd:fa: e2:8c:56:8c:80:84:06:51:23:11:f8:c1:da:ea:f4:7d:7b:a8: de:37:f9:d5:3f:58:a5:b6:69:fb:7a:4e:52:2f:d6:13:32:dc: a7:4c:0e:24:e8:2d:6b:b5:8c:08:1a:2d:96:0d:1b:ad:9c:af: 8e:7f:5b:a7:2c:60:9f:b9:0f:eb:d4:90:de:6d:7a:86:74:08: 46:b4:3f:5c:36:09:70:82:4a:9d:00:e5:fe:c1:14:ad:ad:17: 37:f5:87:fc:d7:71:b1:6c:5d:8b:e0:03:08:b9:a8:07:f1:60: c6:54:43:ee:2b:af:e5:ac:33:b0:10:67:8a:59:e0:55:9e:31: f7:44:e7:93:fa:3c:0d:ee:e2:bd:09:51:fb:fe:ee:a9:8f:43: f9:aa:05:0f:43:80:58:56:b6:c9:4e:55:7b:a3:4b:65:ed:43: a8:b2:42:e6:a9:6e:b2:25:e0:52:93:cd:dd:e8:8d:a8:82:33: 20:21:bd:e4:2b:04:42:90:04:14:26:36:50:19:dd:6f:6c:e0: f0:c2:b8:0e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OJjjui2FzNlyatZUCvOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MjMyZWU4MDVmNzhlNTkyZWZmMmNjYTYxNTM5MTA5ZTVh MzQ2N2QwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmVhODNmZDg5YzQyYjhkMjZhYmQzZjdmZDVjNDYxOGI3ZTczMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7THq/GRZ/GCvrZl0va1DwoonTR4A Ygd6ZuW7MU8lNaOc7nLj59HXKcHzUwEFhfE+jmyqVhdVMnTFRUNTMf3m7TeCUddc LKMSI41fjXOTvsZB1WwN/H1yocx5WywmQg7AGxWRzcFB8cTvzN+HZVRCVa5QKNJ9 xckeF0rEIBLM4Ab0190cJ9seUtwZAFaVozeXAr9hw3L4zGJmwBhfOwKHfhYHVbk9 2xJ/n0JTeloYzsi0/yi9m//1cQAA+UFEGrq3CSueigb4Jxthl8MfaLpPAkkySZy1 PzSbmPOoOWrPdVot4dfXTM232TWHZj1D1ohXi9489t8I9GoEmas+tgid/wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCLqg/2JxCuNJqvT9/1cRhi35zLWMB8GA1UdIwQY MBaAFPUjLugF945ZLv8symFTkQnlo0Z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVNNdTZBWDNqbGt1X3l6S1lWT1JDZVdqUm4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mMGZkM2QtYzBmZS00YzVkLWI0ZDEt N2RiNTNjNjU3YzI5LzEvSXVxRF9ZbkVLNDBtcTlQM19WeEdHTGZuTXRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mMGZkM2QtYzBmZS00YzVkLWI0ZDEtN2RiNTNjNjU3YzI5 LzEvOVNNdTZBWDNqbGt1X3l6S1lWT1JDZVdqUm4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1GZwMA8E AgACMAkDBwAqEF4AAAAwDQYJKoZIhvcNAQELBQADggEBAKF+0sAxOS7feuCZ4DnQ ez+J4Y/SakRryz/ihu5OMoxV/84C63IfsuC4d6JWmZNxyS2/R079+uKMVoyAhAZR IxH4wdrq9H17qN43+dU/WKW2aft6TlIv1hMy3KdMDiToLWu1jAgaLZYNG62cr45/ W6csYJ+5D+vUkN5teoZ0CEa0P1w2CXCCSp0A5f7BFK2tFzf1h/zXcbFsXYvgAwi5 qAfxYMZUQ+4rr+WsM7AQZ4pZ4FWeMfdE55P6PA3u4r0JUfv+7qmPQ/mqBQ9DgFhW tslOVXujS2XtQ6iyQuapbrIl4FKTzd3ojaiCMyAhveQrBEKQBBQmNlAZ3W9s4PDC uA4= -----END CERTIFICATE-----Generated at Tue Jan 27 11:48:54 2026 by rpki-client