This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/dIQUiyCohK8UIKP3Wc_vpehQ9jQ.roa File: dIQUiyCohK8UIKP3Wc_vpehQ9jQ.roa (raw, json) Hash identifier: 4z4Cff5T7C1kMcuabXqlqC9vzDBKDpLEEFDPaDQ1Shs= Subject key identifier: 74:84:14:8B:20:A8:84:AF:14:20:A3:F7:59:CF:EF:A5:E8:50:F6:34 Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2 Certificate serial: 019B7A5B3CD9C521B754183F12D737A96C98 Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/dIQUiyCohK8UIKP3Wc_vpehQ9jQ.roa Signing time: Thu 01 Jan 2026 16:19:18 +0000 ROA not before: Thu 01 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 212.123.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3c:d9:c5:21:b7:54:18:3f:12:d7:37:a9:6c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2 Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7484148b20a884af1420a3f759cfefa5e850f634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:d3:ec:50:f5:b0:0b:42:aa:63:a9:cc:43: 8b:c1:50:fb:e0:f9:5e:8a:99:fc:71:64:74:13:f5: 80:c5:80:00:3f:9c:71:fb:d5:84:f1:ff:3e:d0:4c: ef:e6:dd:08:91:30:7e:48:83:b2:31:cd:ae:56:30: db:41:3a:ee:5d:30:4e:44:8d:f9:67:55:c9:97:51: a1:73:c9:33:da:e5:bc:a9:22:f7:3c:3d:b4:53:9d: bd:2c:84:80:ce:40:c5:80:a9:8b:f6:dc:2c:86:fd: 01:27:9a:5f:0b:a1:5f:9e:05:1b:76:1b:b5:18:92: e6:44:7a:70:d2:7d:50:cd:7c:12:ae:06:b0:5f:68: a6:c5:bd:09:79:8e:fe:9f:ef:7c:f7:f5:09:f0:1a: 72:5b:59:75:19:bf:39:db:f8:d8:d7:0d:96:aa:30: 7e:fb:c7:73:55:9d:b0:f2:be:e2:9b:80:47:94:bc: f1:1e:77:ba:89:02:82:d4:90:8d:e2:cb:e9:b4:dd: 89:b8:6e:65:99:cc:ac:f7:b7:f5:f2:dc:88:9a:fa: 88:77:d3:75:fe:02:09:c1:49:37:be:9a:60:00:50: a0:19:ef:6f:52:9c:37:ad:6e:92:92:ce:d3:f5:2f: c1:84:ba:14:ce:1e:0f:1a:6b:95:a9:68:a8:83:0f: 82:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:84:14:8B:20:A8:84:AF:14:20:A3:F7:59:CF:EF:A5:E8:50:F6:34 X509v3 Authority Key Identifier: keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/dIQUiyCohK8UIKP3Wc_vpehQ9jQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.123.46.0/23 Signature Algorithm: sha256WithRSAEncryption 34:2f:90:db:fc:36:7d:9a:21:af:16:f0:9d:f2:40:8c:b6:5b: 25:31:77:ac:8a:70:73:8f:17:fc:01:10:c4:89:eb:eb:02:83: 5b:49:91:97:c9:74:d0:ac:e9:c6:30:68:22:f3:14:34:e4:12: 01:a1:ad:69:03:a4:d7:e2:d4:ba:77:0f:04:67:49:e2:fc:66: 5d:0b:52:bf:d9:8f:b0:4b:47:55:25:57:9c:8f:92:7d:9e:65: 77:3b:76:fc:13:e8:b9:2f:f6:30:24:e1:d5:6b:a8:88:78:23: 33:c6:8e:e7:b6:f5:31:6a:07:cf:1e:fd:b1:7d:45:12:14:0d: 82:8a:de:6b:b8:87:09:cc:45:48:a4:82:d4:fd:ad:72:aa:f8: 5e:40:90:b3:12:ef:5b:8e:6d:fd:1b:c1:3e:73:a5:19:a4:23: a1:df:f2:4d:08:32:1d:ac:40:66:5f:12:a4:2b:56:94:c4:3a: 90:68:a9:da:d4:5c:88:da:2a:41:e8:7b:3b:58:8b:ed:4d:ba: 08:de:c5:37:78:dd:dd:61:22:8d:0e:27:2c:8b:8f:63:57:85: 25:36:b4:25:b8:64:1c:9e:3d:06:16:46:de:66:fe:0f:80:0e: 1c:10:b1:62:db:22:e0:87:a7:50:8b:23:74:a5:97:fb:a6:97: 55:75:75:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WzzZxSG3VBg/Etc3qWyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMjMwOTNjZTE1MDg3NDAxNmQ3OTNmNDM5ZjQzZDJlNjQ0 MGMzZjIwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDg0MTQ4YjIwYTg4NGFmMTQyMGEzZjc1OWNmZWZhNWU4NTBmNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVvT7FD1sAtCqmOpzEOLwVD74Ple ipn8cWR0E/WAxYAAP5xx+9WE8f8+0Ezv5t0IkTB+SIOyMc2uVjDbQTruXTBORI35 Z1XJl1Ghc8kz2uW8qSL3PD20U529LISAzkDFgKmL9twshv0BJ5pfC6FfngUbdhu1 GJLmRHpw0n1QzXwSrgawX2imxb0JeY7+n+989/UJ8BpyW1l1Gb852/jY1w2WqjB+ +8dzVZ2w8r7im4BHlLzxHne6iQKC1JCN4svptN2JuG5lmcys97f18tyImvqId9N1 /gIJwUk3vppgAFCgGe9vUpw3rW6Sks7T9S/BhLoUzh4PGmuVqWiogw+CkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHSEFIsgqISvFCCj91nP76XoUPY0MB8GA1UdIwQY MBaAFNIjCTzhUIdAFteT9Dn0PS5kQMPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMt NWIwYjA1MDkzZTBjLzEvZElRVWl5Q29oSzhVSUtQM1djX3ZwZWhROWpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMtNWIwYjA1MDkzZTBj LzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1HsuMA0G CSqGSIb3DQEBCwUAA4IBAQA0L5Db/DZ9miGvFvCd8kCMtlslMXesinBzjxf8ARDE ievrAoNbSZGXyXTQrOnGMGgi8xQ05BIBoa1pA6TX4tS6dw8EZ0ni/GZdC1K/2Y+w S0dVJVecj5J9nmV3O3b8E+i5L/YwJOHVa6iIeCMzxo7ntvUxagfPHv2xfUUSFA2C it5ruIcJzEVIpILU/a1yqvheQJCzEu9bjm39G8E+c6UZpCOh3/JNCDIdrEBmXxKk K1aUxDqQaKna1FyI2ipB6Hs7WIvtTboI3sU3eN3dYSKNDicsi49jV4UlNrQluGQc nj0GFkbeZv4PgA4cELFi2yLgh6dQiyN0pZf7ppdVdXXi -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:30 2026 by rpki-client