This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/lU-M6Rbwn_sYPtT01bjpJTpzM_c.roa File: lU-M6Rbwn_sYPtT01bjpJTpzM_c.roa (raw, json) Hash identifier: aE61BcYLJ+s8wneEHCKlvN2g4ojZACwiHGtJ3iEG3YI= Subject key identifier: 95:4F:8C:E9:16:F0:9F:FB:18:3E:D4:F4:D5:B8:E9:25:3A:73:33:F7 Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2 Certificate serial: 019B7A5B3C910AC38B5475827EE37A740354 Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/lU-M6Rbwn_sYPtT01bjpJTpzM_c.roa Signing time: Thu 01 Jan 2026 16:19:18 +0000 ROA not before: Thu 01 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12915 IP address blocks: 212.123.32.0/19 maxlen: 19 212.123.32.0/24 maxlen: 24 212.123.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3c:91:0a:c3:8b:54:75:82:7e:e3:7a:74:03:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2 Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=954f8ce916f09ffb183ed4f4d5b8e9253a7333f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:ce:f9:04:6d:1e:e0:18:41:29:a2:9e:48: e2:72:65:df:a8:1b:d7:e9:8c:e1:c8:59:b6:03:e5: de:40:ff:4b:ea:99:03:6b:64:84:50:f0:c3:a6:a9: 2d:06:d4:2a:e8:d4:07:4a:d5:b1:6c:e0:8c:09:52: 1b:b3:ca:79:ed:83:fb:fe:21:73:49:b7:a4:1f:2a: 51:bb:0a:4b:ff:12:53:44:08:04:b8:ac:a0:65:d7: 8a:2f:26:6a:ee:6a:3a:4d:c9:e0:19:8e:45:bd:81: ee:56:33:a0:c4:0b:d4:df:2f:3a:27:33:c7:6c:cc: 08:45:b7:d6:04:c2:1f:38:24:35:5a:f0:32:db:54: aa:a3:b1:79:10:46:a5:49:d2:e2:dc:0d:62:45:b3: 03:e9:bf:75:fc:e0:87:0e:dd:ff:0e:56:ce:03:bd: 0b:1c:99:ad:ba:06:84:7f:06:38:d2:c8:a5:06:34: 3a:36:50:9a:5a:4a:6b:78:45:52:83:6e:09:2c:ca: 4a:8b:4f:84:0a:65:d9:b2:0d:75:e8:b1:d5:ca:d4: 8d:57:ba:53:44:f2:2d:76:b3:ab:55:f4:e2:d6:c2: ed:19:22:be:78:79:db:cc:c7:1f:79:fb:0e:4c:54: e9:aa:c8:62:1d:08:d1:c9:fd:d3:4e:45:c3:a7:b0: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4F:8C:E9:16:F0:9F:FB:18:3E:D4:F4:D5:B8:E9:25:3A:73:33:F7 X509v3 Authority Key Identifier: keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/lU-M6Rbwn_sYPtT01bjpJTpzM_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.123.32.0/19 Signature Algorithm: sha256WithRSAEncryption 99:8b:3f:84:ea:29:a2:92:29:61:45:0d:b3:b7:27:2d:e3:1b: cd:95:e0:d7:93:0b:9c:36:40:d6:97:72:e7:ca:c5:c8:50:16: 86:61:26:77:16:d5:c3:6c:74:e1:24:4d:cb:78:a0:89:f6:b2: 7b:91:39:41:f4:03:41:a8:ae:9f:eb:d4:86:47:da:d8:5d:8e: 13:31:5c:ab:12:ca:63:e1:18:aa:4d:07:8f:c0:2c:8a:42:81: fd:52:d4:ed:97:87:d4:81:51:85:10:56:63:48:e5:d4:f0:c6: 2f:79:3f:4e:ec:cd:0c:f7:f0:fa:ca:3a:09:4b:7c:60:5b:1f: e4:56:10:88:f9:e5:25:6e:df:bc:c1:91:0d:38:79:46:ef:b5: 32:7c:7e:ad:92:00:c0:8f:59:da:3b:1a:e4:3c:e4:b7:7f:be: 51:86:d7:5d:30:6b:29:af:48:a8:89:2e:95:ae:60:10:5e:40: bb:db:4d:1c:18:d5:ed:87:87:58:b3:ec:b5:72:e2:4b:dd:8a: d3:57:9c:6d:a9:70:d7:37:97:d5:6a:f5:61:79:87:57:1a:e8: 82:08:2a:a4:4c:c9:74:af:87:7a:f4:d9:50:07:e6:f8:25:37: 1c:ce:75:f4:b3:da:c8:08:65:44:3f:00:d6:c5:23:fc:56:8f: a6:a4:72:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WzyRCsOLVHWCfuN6dANUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMjMwOTNjZTE1MDg3NDAxNmQ3OTNmNDM5ZjQzZDJlNjQ0 MGMzZjIwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTRmOGNlOTE2ZjA5ZmZiMTgzZWQ0ZjRkNWI4ZTkyNTNhNzMzM2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrDO+QRtHuAYQSminkjicmXfqBvX 6YzhyFm2A+XeQP9L6pkDa2SEUPDDpqktBtQq6NQHStWxbOCMCVIbs8p57YP7/iFz SbekHypRuwpL/xJTRAgEuKygZdeKLyZq7mo6TcngGY5FvYHuVjOgxAvU3y86JzPH bMwIRbfWBMIfOCQ1WvAy21Sqo7F5EEalSdLi3A1iRbMD6b91/OCHDt3/DlbOA70L HJmtugaEfwY40silBjQ6NlCaWkpreEVSg24JLMpKi0+ECmXZsg116LHVytSNV7pT RPItdrOrVfTi1sLtGSK+eHnbzMcfefsOTFTpqshiHQjRyf3TTkXDp7C+jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJVPjOkW8J/7GD7U9NW46SU6czP3MB8GA1UdIwQY MBaAFNIjCTzhUIdAFteT9Dn0PS5kQMPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMt NWIwYjA1MDkzZTBjLzEvbFUtTTZSYnduX3NZUHRUMDFianBKVHB6TV9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMtNWIwYjA1MDkzZTBj LzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1HsgMA0G CSqGSIb3DQEBCwUAA4IBAQCZiz+E6imikilhRQ2ztyct4xvNleDXkwucNkDWl3Ln ysXIUBaGYSZ3FtXDbHThJE3LeKCJ9rJ7kTlB9ANBqK6f69SGR9rYXY4TMVyrEspj 4RiqTQePwCyKQoH9UtTtl4fUgVGFEFZjSOXU8MYveT9O7M0M9/D6yjoJS3xgWx/k VhCI+eUlbt+8wZENOHlG77UyfH6tkgDAj1naOxrkPOS3f75RhtddMGspr0ioiS6V rmAQXkC7200cGNXth4dYs+y1cuJL3YrTV5xtqXDXN5fVavVheYdXGuiCCCqkTMl0 r4d69NlQB+b4JTccznX0s9rICGVEPwDWxSP8Vo+mpHIl -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:43 2026 by rpki-client