This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/B1ztFUqJj0TJYJvOExVRSQmIl5A.roa File: B1ztFUqJj0TJYJvOExVRSQmIl5A.roa (raw, json) Hash identifier: v/mWzHGtLLbQQyMt4t++cIwVty9wjpt9ae5rJyBn1gU= Subject key identifier: 07:5C:ED:15:4A:89:8F:44:C9:60:9B:CE:13:15:51:49:09:88:97:90 Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Certificate serial: 019B7D5CA2553BD09049869DFE53A9109757 Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/B1ztFUqJj0TJYJvOExVRSQmIl5A.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 212.102.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a2:55:3b:d0:90:49:86:9d:fe:53:a9:10:97:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=075ced154a898f44c9609bce1315514909889790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:56:2b:8c:0c:58:1b:24:57:3b:ab:f3:07: 1b:90:41:36:94:19:9f:69:ed:db:9b:1f:47:0a:c4: 6a:a4:2c:14:16:bc:c1:05:2b:87:d2:47:78:79:c8: 4c:24:9b:97:27:0e:a4:e4:ca:f2:20:3d:20:89:31: 09:49:8c:8a:1e:28:5b:10:21:64:d2:68:ed:d9:6b: c9:d9:6c:ae:fc:b2:99:db:cd:20:fd:a6:16:6d:7e: c8:e0:24:36:c0:5e:c1:15:af:9d:4c:d3:f6:87:80: 1a:8c:4d:b6:b6:e3:a3:e9:d7:90:98:50:66:7f:f5: 4a:84:e2:6c:11:38:e9:30:b9:83:1e:4b:f9:1f:e4: a6:c3:56:de:4d:fc:bd:87:54:7c:fc:a7:18:67:54: 62:6c:8f:cd:22:42:33:e1:3a:01:63:26:36:7f:9c: 2a:c0:ed:2e:97:ab:56:7b:28:2f:52:89:e9:df:ea: d9:f8:e6:5c:94:f4:19:cb:74:3e:5a:89:78:f5:09: a6:58:27:82:89:c8:bf:91:e5:2f:dd:96:37:e9:b0: f8:d1:33:de:5f:5f:e4:72:c5:90:99:41:bb:3f:e3: 5f:8d:07:2c:b5:8b:c2:88:e1:ff:36:f6:08:75:54: b6:83:22:25:c6:00:82:70:e6:78:6b:fd:07:1b:da: fd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5C:ED:15:4A:89:8F:44:C9:60:9B:CE:13:15:51:49:09:88:97:90 X509v3 Authority Key Identifier: keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/B1ztFUqJj0TJYJvOExVRSQmIl5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.144.0/20 Signature Algorithm: sha256WithRSAEncryption 1c:9f:c9:2c:16:bd:70:67:1d:a0:88:b4:83:f3:d1:28:16:3a: 54:3b:b3:58:86:0d:8d:7f:0a:00:27:dd:d4:6b:a1:56:69:82: cb:ec:a0:9d:60:24:71:bb:fa:fb:d5:bb:38:1b:a6:ef:e2:a7: b5:f5:6b:13:09:27:52:b3:0f:b3:73:d7:29:7f:b2:a2:f0:d0: 21:50:b4:3b:ee:3d:0a:a0:c3:a2:89:3a:b4:4c:d0:d6:54:15: b1:81:f7:97:da:9b:cd:d4:10:4b:89:73:76:d5:9a:e7:a6:f5: d8:49:d3:a3:c6:70:17:b5:0c:7c:2d:02:5d:dd:5e:f7:d1:9c: 84:09:71:f4:1c:c7:0e:7f:a3:1a:72:45:fc:c8:b5:d8:ef:44: f4:df:7b:86:49:10:3d:94:c7:ee:3d:d0:d2:76:df:90:7d:d7: fe:cb:e9:a4:98:4f:27:49:82:ab:0b:67:b8:7f:c4:6e:62:b8: e0:6e:ea:46:52:cb:25:7f:98:05:78:34:bc:9d:7e:0d:a2:c6: 43:ac:77:95:c1:44:db:c8:5d:a6:ee:93:be:0a:3c:f2:53:59: e4:08:84:fc:a5:32:7a:be:e7:57:5a:33:24:6a:94:c6:c5:9e: ec:38:03:b1:11:ab:f2:1d:0e:c6:cd:ff:87:a3:53:b6:97:68: 8f:d1:12:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKJVO9CQSYad/lOpEJdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjI2NDNiYTZhMGVhZWY1NzMyOWJmNWJkYzkwYjMxYzM4 NmY4YTcwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzVjZWQxNTRhODk4ZjQ0Yzk2MDliY2UxMzE1NTE0OTA5ODg5NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcVWK4wMWBskVzur8wcbkEE2lBmf ae3bmx9HCsRqpCwUFrzBBSuH0kd4echMJJuXJw6k5MryID0giTEJSYyKHihbECFk 0mjt2WvJ2Wyu/LKZ280g/aYWbX7I4CQ2wF7BFa+dTNP2h4AajE22tuOj6deQmFBm f/VKhOJsETjpMLmDHkv5H+Smw1beTfy9h1R8/KcYZ1RibI/NIkIz4ToBYyY2f5wq wO0ul6tWeygvUonp3+rZ+OZclPQZy3Q+Wol49QmmWCeCici/keUv3ZY36bD40TPe X1/kcsWQmUG7P+NfjQcstYvCiOH/NvYIdVS2gyIlxgCCcOZ4a/0HG9r9mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAdc7RVKiY9EyWCbzhMVUUkJiJeQMB8GA1UdIwQY MBaAFDwiZDumoOrvVzKb9b3JCzHDhvinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUt ZmExNDg2ZWE3OThjLzEvQjF6dEZVcUpqMFRKWUp2T0V4VlJTUW1JbDVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUtZmExNDg2ZWE3OThj LzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1GaQMA0G CSqGSIb3DQEBCwUAA4IBAQAcn8ksFr1wZx2giLSD89EoFjpUO7NYhg2NfwoAJ93U a6FWaYLL7KCdYCRxu/r71bs4G6bv4qe19WsTCSdSsw+zc9cpf7Ki8NAhULQ77j0K oMOiiTq0TNDWVBWxgfeX2pvN1BBLiXN21ZrnpvXYSdOjxnAXtQx8LQJd3V730ZyE CXH0HMcOf6MackX8yLXY70T033uGSRA9lMfuPdDSdt+Qfdf+y+mkmE8nSYKrC2e4 f8RuYrjgbupGUsslf5gFeDS8nX4NosZDrHeVwUTbyF2m7pO+CjzyU1nkCIT8pTJ6 vudXWjMkapTGxZ7sOAOxEavyHQ7Gzf+Ho1O2l2iP0RI9 -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:56 2026 by rpki-client