This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/h765C8oPu3uQQfF9d-lEYiM6BZA.roa File: h765C8oPu3uQQfF9d-lEYiM6BZA.roa (raw, json) Hash identifier: 3+TXFFMhMkY1zqmNmDMvgUFuTZKtTiyHLTg2tyZLpqE= Subject key identifier: 87:BE:B9:0B:CA:0F:BB:7B:90:41:F1:7D:77:E9:44:62:23:3A:05:90 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15B52BB4C5FB93D8CF2D480441A616 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/h765C8oPu3uQQfF9d-lEYiM6BZA.roa Signing time: Fri 02 Jan 2026 14:21:27 +0000 ROA not before: Fri 02 Jan 2026 14:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12956 IP address blocks: 213.99.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b5:2b:b4:c5:fb:93:d8:cf:2d:48:04:41:a6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87beb90bca0fbb7b9041f17d77e94462233a0590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:10:b3:dd:7b:1b:d3:f9:f5:83:07:4d:0a:02: 7d:ee:11:60:be:69:6d:85:99:49:a8:0e:9a:6a:a9: 53:0c:ce:51:d5:14:75:39:a9:4f:9d:87:09:92:e6: 20:82:6d:b8:98:60:25:46:f0:0b:66:4f:e8:16:1e: d9:b6:a2:f5:fe:df:90:3e:c6:61:ec:2d:3b:06:fb: b1:d5:25:3c:d4:b2:a3:35:11:13:3e:db:ce:ff:dd: 1f:de:26:a3:67:74:87:05:8e:b5:9d:ca:bc:99:35: 38:c1:82:07:2f:03:1c:4a:a4:09:2d:84:49:22:d9: bb:e3:b2:05:34:68:da:1d:71:e1:24:a9:47:fa:16: 43:77:87:5a:65:24:a3:c7:fa:93:61:e8:60:f2:68: 18:73:56:e6:27:ff:ed:0c:81:b1:8d:6e:7a:a2:58: 80:9c:55:62:b2:21:ee:eb:08:16:cb:93:4c:95:d3: a4:9a:a3:66:4d:01:9d:a4:d2:c0:31:61:cb:33:9c: d6:b7:9e:c4:e6:0e:16:ef:6f:c4:a2:d0:f4:1e:6a: a8:d6:74:dc:45:54:57:c4:64:36:2e:d8:61:c2:20: 14:31:1c:af:0e:f5:6c:11:fc:6f:e2:27:18:b3:2a: a0:78:ef:f2:60:c8:6b:82:66:73:24:a0:8a:d2:22: a3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BE:B9:0B:CA:0F:BB:7B:90:41:F1:7D:77:E9:44:62:23:3A:05:90 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/h765C8oPu3uQQfF9d-lEYiM6BZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.99.16.0/22 Signature Algorithm: sha256WithRSAEncryption b1:75:84:18:44:2d:44:4f:a9:15:c1:60:68:37:dd:03:5f:18: ed:5f:75:2d:18:fe:26:af:5c:40:71:e5:5a:36:5b:b6:6b:5e: 9c:65:6a:15:5f:fa:81:8f:72:cf:d3:e2:4e:e1:2f:ab:b4:c8: 8d:1b:f3:f6:7a:62:c4:4d:f8:48:c4:ec:81:c9:a1:a0:8a:82: 58:40:57:9d:22:70:3b:35:c6:e7:e4:ff:2a:46:3e:8a:e9:53: 4a:01:9e:9a:f5:a0:a7:ee:6b:01:28:76:85:1b:7f:aa:29:d6: dd:03:50:27:e7:62:83:35:ff:34:cc:17:64:0d:60:ab:0d:44: 2b:cf:56:fe:27:af:ae:ba:02:ad:2f:b1:89:72:9e:d8:b9:24: a8:dc:9e:ba:28:16:0a:1d:ec:66:39:0f:26:c6:78:49:b3:26: 6b:e6:43:45:1d:d8:84:e8:88:bd:ff:a6:c2:28:24:80:22:8a: fd:94:93:7f:64:e7:23:b4:7e:cd:94:3e:3b:85:75:ba:29:81: 46:1e:8a:32:d1:fa:3c:fc:62:27:73:73:d8:55:96:a9:43:47: 5f:f6:2b:34:97:e6:0b:34:ac:24:97:7b:13:9e:6a:c1:26:8e: 98:44:94:97:3d:15:90:76:71:0f:1b:c6:b3:01:4b:4b:d3:13: 1f:40:ac:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FbUrtMX7k9jPLUgEQaYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2JlYjkwYmNhMGZiYjdiOTA0MWYxN2Q3N2U5NDQ2MjIzM2EwNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRCz3Xsb0/n1gwdNCgJ97hFgvmlt hZlJqA6aaqlTDM5R1RR1OalPnYcJkuYggm24mGAlRvALZk/oFh7ZtqL1/t+QPsZh 7C07Bvux1SU81LKjNRETPtvO/90f3iajZ3SHBY61ncq8mTU4wYIHLwMcSqQJLYRJ Itm747IFNGjaHXHhJKlH+hZDd4daZSSjx/qTYehg8mgYc1bmJ//tDIGxjW56oliA nFVisiHu6wgWy5NMldOkmqNmTQGdpNLAMWHLM5zWt57E5g4W72/EotD0Hmqo1nTc RVRXxGQ2LthhwiAUMRyvDvVsEfxv4icYsyqgeO/yYMhrgmZzJKCK0iKj4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIe+uQvKD7t7kEHxfXfpRGIjOgWQMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvaDc2NUM4b1B1M3VRUWZGOWQtbEVZaU02QlpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1WMQMA0G CSqGSIb3DQEBCwUAA4IBAQCxdYQYRC1ET6kVwWBoN90DXxjtX3UtGP4mr1xAceVa Nlu2a16cZWoVX/qBj3LP0+JO4S+rtMiNG/P2emLETfhIxOyByaGgioJYQFedInA7 Ncbn5P8qRj6K6VNKAZ6a9aCn7msBKHaFG3+qKdbdA1An52KDNf80zBdkDWCrDUQr z1b+J6+uugKtL7GJcp7YuSSo3J66KBYKHexmOQ8mxnhJsyZr5kNFHdiE6Ii9/6bC KCSAIor9lJN/ZOcjtH7NlD47hXW6KYFGHooy0fo8/GInc3PYVZapQ0df9is0l+YL NKwkl3sTnmrBJo6YRJSXPRWQdnEPG8azAUtL0xMfQKwj -----END CERTIFICATE-----Generated at Fri Jan 23 13:57:17 2026 by rpki-client