This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa File: 5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa (raw, json) Hash identifier: JIN7iifBaNIG0jSwJOMYaoCb6Od3dAZF5qeWgFbXbiY= Subject key identifier: E7:15:AC:24:B0:75:AC:EA:EA:03:80:D2:D8:1C:00:65:8F:AE:47:08 Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Certificate serial: 019B7F136D3EB9DE40835EA815600BC6E35C Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa Signing time: Fri 02 Jan 2026 14:18:58 +0000 ROA not before: Fri 02 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 212.101.192.0/19 maxlen: 24 212.101.192.0/24 maxlen: 24 212.101.201.0/24 maxlen: 24 212.101.204.0/24 maxlen: 24 212.101.205.0/24 maxlen: 24 212.101.207.0/24 maxlen: 24 212.101.211.0/24 maxlen: 24 212.101.212.0/23 maxlen: 24 212.101.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:6d:3e:b9:de:40:83:5e:a8:15:60:0b:c6:e3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Validity Not Before: Jan 2 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e715ac24b075aceaea0380d2d81c00658fae4708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:56:fd:ef:c6:5e:82:c2:7f:d9:b2:2c:14: b3:65:32:f9:17:46:34:3f:94:11:49:d0:40:f3:85: d3:cb:4f:c1:d3:a2:55:1a:17:b4:96:75:49:05:e0: 65:bb:f4:31:26:8c:0d:4f:a6:79:42:0e:d5:10:4f: b2:0a:94:ed:81:ba:5c:02:a1:d5:9a:b7:21:bc:c6: 32:b6:60:e4:11:40:c2:cb:76:96:34:0f:52:e9:5e: a7:e6:07:2f:d3:43:ae:28:34:77:13:5b:bb:4d:1b: 44:29:e6:b8:c4:ed:7c:1e:da:10:49:7c:df:29:a7: 9d:56:ac:bc:b0:81:a1:c5:4e:28:e2:e8:6e:76:f6: 2c:17:12:2f:d8:b2:74:7e:97:66:b4:81:8e:fb:e6: 3b:28:78:69:59:8d:63:db:2c:57:29:cf:05:dd:27: a9:c7:94:3c:5a:8d:8f:f0:1a:10:35:a3:20:cf:ca: d2:25:c4:4a:87:da:08:54:d0:3a:95:c6:ce:cc:86: b3:ae:65:dc:2c:64:3a:0a:e7:16:cf:a4:0f:1b:e6: 64:0c:13:f1:33:9c:dd:00:a3:e7:00:4e:32:d1:49: 77:de:40:09:b6:bb:ed:fd:c8:d6:35:84:e8:be:5f: 2a:4b:6f:fa:3b:a3:80:be:09:6b:df:e8:8f:40:45: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:15:AC:24:B0:75:AC:EA:EA:03:80:D2:D8:1C:00:65:8F:AE:47:08 X509v3 Authority Key Identifier: keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.101.192.0/19 Signature Algorithm: sha256WithRSAEncryption 3f:79:90:7d:0f:24:40:55:ca:4e:2e:bd:0b:23:a2:ae:ec:73: 6b:84:50:ed:6c:04:7d:95:74:6f:97:12:d3:ce:ac:fe:84:70: 50:c5:1f:33:93:3d:f9:0a:d4:3b:bf:b3:f6:1e:ea:ad:ae:b8: 70:f0:6c:71:82:82:81:36:18:fd:5c:44:8a:de:a5:e4:79:17: 92:1b:f2:0e:fe:3a:b3:2d:88:cd:cb:82:ff:2a:45:ca:88:4d: 33:e6:ca:62:5a:68:93:e1:39:07:07:5c:ea:bd:00:32:2f:cc: 78:e0:c7:b0:d1:13:05:11:21:1e:4d:8b:d8:54:fe:c0:9b:55: d7:95:23:6a:b8:a4:c0:83:ea:e7:df:ea:61:ed:7f:ed:66:3c: fb:a1:c7:db:8b:fd:c3:7a:ee:87:03:c8:c6:65:03:9f:4d:41: 07:cd:c3:86:07:4e:5c:b8:69:bc:2f:25:7a:53:d2:21:f6:37: 2e:ea:da:e9:94:ae:19:2d:35:ef:ea:87:d7:bb:0a:5f:d1:b1: da:61:38:9e:eb:9a:85:7b:41:2c:55:ae:76:a9:01:21:9e:09: 16:09:72:06:ab:6b:cc:81:2f:57:3c:c6:1c:54:11:50:4a:c8: e1:58:78:5a:c3:5f:6f:e4:02:8e:04:01:0c:45:d0:27:2d:f9: 76:bc:9d:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E20+ud5Ag16oFWALxuNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YWVlNjc2MjBkOWMwYWU2M2QyOTU3ODVjOWQ5NTZmMDYz YzIxYzMwHhcNMjYwMTAyMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzE1YWMyNGIwNzVhY2VhZWEwMzgwZDJkODFjMDA2NThmYWU0NzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUxW/e/GXoLCf9myLBSzZTL5F0Y0 P5QRSdBA84XTy0/B06JVGhe0lnVJBeBlu/QxJowNT6Z5Qg7VEE+yCpTtgbpcAqHV mrchvMYytmDkEUDCy3aWNA9S6V6n5gcv00OuKDR3E1u7TRtEKea4xO18HtoQSXzf KaedVqy8sIGhxU4o4uhudvYsFxIv2LJ0fpdmtIGO++Y7KHhpWY1j2yxXKc8F3Sep x5Q8Wo2P8BoQNaMgz8rSJcRKh9oIVNA6lcbOzIazrmXcLGQ6CucWz6QPG+ZkDBPx M5zdAKPnAE4y0Ul33kAJtrvt/cjWNYTovl8qS2/6O6OAvglr3+iPQEXpMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOcVrCSwdazq6gOA0tgcAGWPrkcIMB8GA1UdIwQY MBaAFKeu5nYg2cCuY9KVeFydlW8GPCHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQt MGI3ZjE1YjUwOWNiLzEvNXhXc0pMQjFyT3JxQTREUzJCd0FaWS11UndnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQtMGI3ZjE1YjUwOWNi LzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1GXAMA0G CSqGSIb3DQEBCwUAA4IBAQA/eZB9DyRAVcpOLr0LI6Ku7HNrhFDtbAR9lXRvlxLT zqz+hHBQxR8zkz35CtQ7v7P2Huqtrrhw8GxxgoKBNhj9XESK3qXkeReSG/IO/jqz LYjNy4L/KkXKiE0z5spiWmiT4TkHB1zqvQAyL8x44Mew0RMFESEeTYvYVP7Am1XX lSNquKTAg+rn3+ph7X/tZjz7ocfbi/3Deu6HA8jGZQOfTUEHzcOGB05cuGm8LyV6 U9Ih9jcu6trplK4ZLTXv6ofXuwpf0bHaYTie65qFe0EsVa52qQEhngkWCXIGq2vM gS9XPMYcVBFQSsjhWHhaw19v5AKOBAEMRdAnLfl2vJ1f -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:26 2026 by rpki-client