This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/TXtG8gOe4ICQThOU5GVmNxWR1wY.roa File: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (raw, json) Hash identifier: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw= Subject key identifier: 4D:7B:46:F2:03:9E:E0:80:90:4E:13:94:E4:65:66:37:15:91:D7:06 Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496 Certificate serial: 019B7C80C0C0D1D34E94647C3A8052766761 Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/TXtG8gOe4ICQThOU5GVmNxWR1wY.roa Signing time: Fri 02 Jan 2026 02:19:31 +0000 ROA not before: Fri 02 Jan 2026 02:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12693 IP address blocks: 212.110.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c0:c0:d1:d3:4e:94:64:7c:3a:80:52:76:67:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d7b46f2039ee080904e1394e46566371591d706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ce:46:cc:d6:f4:8c:3c:9f:12:73:ba:e9:d1: 53:16:da:1c:8d:ee:d2:84:a5:bd:13:05:93:0a:0b: d7:92:d0:9c:48:0c:56:bc:aa:56:e6:91:b8:25:0f: 4b:11:19:ff:62:86:80:ec:8d:54:07:af:f1:24:e0: ee:8e:04:33:2f:14:b9:83:18:55:0c:15:2a:68:6f: 80:36:9f:94:05:6a:9f:97:15:d5:fd:06:45:ca:1e: 6f:ef:35:74:43:08:4a:d9:6c:ac:1b:a3:6e:69:20: 45:aa:91:cf:3a:41:78:71:e5:97:92:94:4e:de:43: 1c:43:8d:cf:ea:71:a2:f3:64:62:dc:29:65:4e:f8: 4d:20:d4:a5:6c:5e:33:11:ef:15:f7:50:da:fb:b8: 9d:3f:01:72:82:06:de:1f:c1:ee:92:89:12:da:b5: cd:2c:f8:fe:7f:86:02:4a:e1:90:1f:45:dd:d6:86: aa:3a:14:c1:14:2e:9f:a8:3f:ea:79:f7:11:70:3a: 6e:7f:c3:5e:06:1a:db:a7:61:c5:fc:46:c0:59:2c: 8e:e2:4c:7f:c4:fe:a7:9e:36:fc:ab:b5:dc:53:b5: d3:13:1b:21:2a:17:d7:5e:2b:41:70:3c:e3:a1:f8: db:a6:bc:63:1c:56:dc:cb:28:b5:1f:6f:63:cb:26: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7B:46:F2:03:9E:E0:80:90:4E:13:94:E4:65:66:37:15:91:D7:06 X509v3 Authority Key Identifier: keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/TXtG8gOe4ICQThOU5GVmNxWR1wY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.110.224.0/19 Signature Algorithm: sha256WithRSAEncryption 7f:fb:6f:8a:d1:4d:97:a3:e0:2d:63:eb:4b:ed:d1:5c:96:b9: 8d:88:37:c3:99:25:52:70:71:4a:59:27:6b:ea:b9:0e:00:06: 95:aa:a8:2a:2d:58:0e:25:b8:a3:86:e5:e3:95:92:17:d1:12: b0:8f:02:3d:00:da:a2:f6:66:ec:dc:64:6a:e0:b6:df:15:39: 2d:e1:12:c2:0e:bb:d3:b6:60:fd:3e:e7:96:63:e9:e3:6b:c9: 78:5f:8e:af:7b:ce:0f:fd:2f:36:89:a8:5a:17:2d:6b:90:6c: 55:82:7b:de:99:a4:48:ca:96:ea:9a:6a:d1:e1:ac:84:e9:54: af:b0:81:2c:51:62:1b:d7:fd:ce:10:f6:a4:1d:b4:22:e3:ca: 74:05:1b:d7:55:e9:02:d0:9a:17:f8:65:4a:93:24:58:ee:0f: 2a:0b:6b:ed:b8:af:90:cd:9d:15:1d:82:ae:71:38:90:39:cc: 75:26:8d:9c:7b:a7:7c:f6:c3:17:27:c4:e2:f3:d0:30:4d:e0: e1:9a:3d:29:a1:f6:2d:99:c4:a4:23:2b:1e:bb:e0:49:f2:ed: 2f:1a:07:20:f4:60:5e:e6:74:49:03:69:bf:95:66:3a:f9:c3: 8d:9d:18:72:92:c7:17:5d:8f:09:6e:09:99:6d:da:77:20:7d: 2d:18:d3:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMDA0dNOlGR8OoBSdmdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOGFlNzg3MTUyNWJlMmVhNGQwZGZmZGFlNGYzYThiZmYz NzI0OTYwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDdiNDZmMjAzOWVlMDgwOTA0ZTEzOTRlNDY1NjYzNzE1OTFkNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9M5GzNb0jDyfEnO66dFTFtocje7S hKW9EwWTCgvXktCcSAxWvKpW5pG4JQ9LERn/YoaA7I1UB6/xJODujgQzLxS5gxhV DBUqaG+ANp+UBWqflxXV/QZFyh5v7zV0QwhK2WysG6NuaSBFqpHPOkF4ceWXkpRO 3kMcQ43P6nGi82Ri3CllTvhNINSlbF4zEe8V91Da+7idPwFyggbeH8HukokS2rXN LPj+f4YCSuGQH0Xd1oaqOhTBFC6fqD/qefcRcDpuf8NeBhrbp2HF/EbAWSyO4kx/ xP6nnjb8q7XcU7XTExshKhfXXitBcDzjofjbprxjHFbcyyi1H29jyyaQtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE17RvIDnuCAkE4TlORlZjcVkdcGMB8GA1UdIwQY MBaAFEqK54cVJb4upNDf/a5POov/NySWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQt OThmNzQ1NGJhNmNlLzEvVFh0RzhnT2U0SUNRVGhPVTVHVm1OeFdSMXdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQtOThmNzQ1NGJhNmNl LzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1G7gMA0G CSqGSIb3DQEBCwUAA4IBAQB/+2+K0U2Xo+AtY+tL7dFclrmNiDfDmSVScHFKWSdr 6rkOAAaVqqgqLVgOJbijhuXjlZIX0RKwjwI9ANqi9mbs3GRq4LbfFTkt4RLCDrvT tmD9PueWY+nja8l4X46ve84P/S82iahaFy1rkGxVgnvemaRIypbqmmrR4ayE6VSv sIEsUWIb1/3OEPakHbQi48p0BRvXVekC0JoX+GVKkyRY7g8qC2vtuK+QzZ0VHYKu cTiQOcx1Jo2ce6d89sMXJ8Ti89AwTeDhmj0pofYtmcSkIyseu+BJ8u0vGgcg9GBe 5nRJA2m/lWY6+cONnRhykscXXY8JbgmZbdp3IH0tGNPL -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:09 2026 by rpki-client