This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/J0MRS2e_4rzldJH7kBm0LoNHTMU.roa File: J0MRS2e_4rzldJH7kBm0LoNHTMU.roa (raw, json) Hash identifier: 7VRw4nnE4+OfHHnDkIP7YsA7G/ZEfdUGZYYUw75Pmx4= Subject key identifier: 27:43:11:4B:67:BF:E2:BC:E5:74:91:FB:90:19:B4:2E:83:47:4C:C5 Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88 Certificate serial: 019B797E4DA0E1FEECF7A8BF5EB6D955DF2A Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/J0MRS2e_4rzldJH7kBm0LoNHTMU.roa Signing time: Thu 01 Jan 2026 12:17:59 +0000 ROA not before: Thu 01 Jan 2026 12:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 212.104.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4d:a0:e1:fe:ec:f7:a8:bf:5e:b6:d9:55:df:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88 Validity Not Before: Jan 1 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2743114b67bfe2bce57491fb9019b42e83474cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:2c:25:87:13:88:0e:31:1b:07:b1:31:62: 81:9a:70:c5:54:92:3a:fe:d1:62:a9:8d:52:0f:73: 6b:d5:9d:af:af:85:23:10:5d:d9:3a:59:cd:09:e9: 61:36:12:69:4e:cc:27:06:47:ff:43:2a:e3:9c:78: 45:b0:2f:35:99:64:15:25:0e:d5:ab:5f:66:31:6c: 20:7b:aa:6e:c7:f7:f4:a2:ec:e5:3b:37:bd:53:b9: ad:dc:50:38:5d:e2:e0:d1:22:a2:39:bd:d2:78:0f: f7:93:9d:44:81:76:3a:c2:f7:5e:e4:2b:a6:5f:61: 06:6b:e2:18:fd:2e:3c:a5:48:97:54:5f:35:67:9e: 11:65:5b:27:f2:72:11:f9:d2:b1:57:57:d3:79:36: 03:23:a4:90:72:d6:d9:74:03:5b:4e:a1:c6:52:b5: 9b:c7:a0:a7:56:cf:6c:77:e6:db:22:07:ed:1c:62: 66:1a:97:6b:77:70:b1:86:9e:7e:92:8c:6c:29:ad: fc:e7:1c:04:37:a5:b5:6b:a4:45:2b:6c:15:d0:ca: ae:f6:b4:d1:74:22:ed:aa:06:e0:77:2f:bb:a0:42: e5:01:35:11:51:a4:f9:96:c7:10:9f:d8:2b:af:28: c6:3e:c3:bb:67:98:b2:16:bc:0d:d7:1f:fe:2a:64: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:43:11:4B:67:BF:E2:BC:E5:74:91:FB:90:19:B4:2E:83:47:4C:C5 X509v3 Authority Key Identifier: keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/J0MRS2e_4rzldJH7kBm0LoNHTMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.104.128.0/24 Signature Algorithm: sha256WithRSAEncryption 12:95:5f:64:35:30:71:1a:c8:a3:ca:d8:e1:1b:97:40:37:42: 8d:a3:e9:35:25:3a:a0:a8:9e:df:fa:eb:ad:5f:34:b8:1f:45: 4c:1c:f0:55:00:d2:c0:19:dc:84:4e:5e:a3:97:e3:9b:fa:dc: 6d:18:75:34:98:75:bb:78:3c:87:c9:4c:a5:76:e9:79:22:f0: 81:a9:81:0d:84:46:06:4b:72:28:99:d7:d9:55:03:9c:4e:49: b9:2b:28:e6:2a:c6:9a:b3:64:5e:40:7a:78:00:57:80:88:e6: e4:89:c5:6d:01:21:27:57:d2:0a:b0:71:ff:0a:7c:23:d9:33: 16:42:6a:21:f6:11:a8:85:00:b4:69:55:1c:68:f3:28:d0:97: ce:0b:4b:ec:58:c8:a6:2b:4b:8e:a7:49:8c:d4:59:44:5c:6e: 15:7f:d7:3e:7e:9d:48:24:d8:07:8a:72:d6:17:b3:10:98:03: 1b:a3:53:43:84:fe:3c:ba:1b:d1:78:6a:a4:05:e5:20:ab:3c: e6:0f:06:1b:af:c7:bc:dc:46:fe:09:d6:3c:f8:22:e9:04:0a: 8a:36:b1:66:ad:77:9b:88:fb:de:b5:2a:28:ae:0f:ac:e4:c9: 3e:aa:85:3f:3a:e9:c5:16:5f:aa:01:77:f2:37:54:1c:7f:06: 0a:97:77:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fk2g4f7s96i/XrbZVd8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMzMyMGUwYmI1ZGJlMmJhOTcyNjkxYjc1ZDY4ZjQ4ZjZl NTdmODgwHhcNMjYwMTAxMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQzMTE0YjY3YmZlMmJjZTU3NDkxZmI5MDE5YjQyZTgzNDc0Y2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkMsJYcTiA4xGwexMWKBmnDFVJI6 /tFiqY1SD3Nr1Z2vr4UjEF3ZOlnNCelhNhJpTswnBkf/QyrjnHhFsC81mWQVJQ7V q19mMWwge6pux/f0ouzlOze9U7mt3FA4XeLg0SKiOb3SeA/3k51EgXY6wvde5Cum X2EGa+IY/S48pUiXVF81Z54RZVsn8nIR+dKxV1fTeTYDI6SQctbZdANbTqHGUrWb x6CnVs9sd+bbIgftHGJmGpdrd3Cxhp5+koxsKa385xwEN6W1a6RFK2wV0Mqu9rTR dCLtqgbgdy+7oELlATURUaT5lscQn9grryjGPsO7Z5iyFrwN1x/+KmTl6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdDEUtnv+K85XSR+5AZtC6DR0zFMB8GA1UdIwQY MBaAFEszIOC7Xb4rqXJpG3XWj0j25X+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2Ut YTg5NzU5ZDcwNzFjLzEvSjBNUlMyZV80cnpsZEpIN2tCbTBMb05IVE1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2UtYTg5NzU5ZDcwNzFj LzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GiAMA0G CSqGSIb3DQEBCwUAA4IBAQASlV9kNTBxGsijytjhG5dAN0KNo+k1JTqgqJ7f+uut XzS4H0VMHPBVANLAGdyETl6jl+Ob+txtGHU0mHW7eDyHyUyldul5IvCBqYENhEYG S3IomdfZVQOcTkm5KyjmKsaas2ReQHp4AFeAiObkicVtASEnV9IKsHH/Cnwj2TMW Qmoh9hGohQC0aVUcaPMo0JfOC0vsWMimK0uOp0mM1FlEXG4Vf9c+fp1IJNgHinLW F7MQmAMbo1NDhP48uhvReGqkBeUgqzzmDwYbr8e83Eb+CdY8+CLpBAqKNrFmrXeb iPvetSoorg+s5Mk+qoU/OunFFl+qAXfyN1QcfwYKl3d9 -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:54 2026 by rpki-client