This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/jRBO3dP6kjdGEjvIueUWE3Kxrao.roa File: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (raw, json) Hash identifier: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk= Subject key identifier: 8D:10:4E:DD:D3:FA:92:37:46:12:3B:C8:B9:E5:16:13:72:B1:AD:AA Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019B7FF2B0ACDB41E0C60F1B866D38CDB36A Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/jRBO3dP6kjdGEjvIueUWE3Kxrao.roa Signing time: Fri 02 Jan 2026 18:22:49 +0000 ROA not before: Fri 02 Jan 2026 18:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 212.46.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:b0:ac:db:41:e0:c6:0f:1b:86:6d:38:cd:b3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Jan 2 18:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d104eddd3fa923746123bc8b9e5161372b1adaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2c:98:c6:92:06:7c:b2:02:49:a3:1c:bb:e9: 5c:c3:28:33:ab:d2:89:96:88:7c:39:ac:12:b6:3b: 85:50:e0:3e:ad:a0:1d:3d:9c:78:55:b5:f6:9e:28: bc:f7:54:01:57:c9:5a:c8:72:d1:e8:fb:ff:e8:fa: 63:cb:25:4d:be:41:98:94:15:cb:77:26:a9:52:7b: 34:64:3d:1e:b4:f8:71:3e:da:2a:5a:21:80:50:6a: 50:70:59:f1:25:da:7a:11:d7:d6:d5:02:47:55:57: 56:c8:a9:f8:af:0a:98:68:63:83:50:b2:3e:6c:ee: a3:95:f2:6e:2f:c7:d4:05:bd:d2:66:18:09:97:d7: 99:61:98:2e:7c:1e:14:b4:96:5e:08:25:8a:02:65: b2:77:88:cc:66:0d:fb:7b:91:2c:76:77:cb:b0:53: dd:f6:90:15:9a:2b:f2:7e:9f:e0:6f:b8:30:3f:6c: b0:47:27:c8:5b:14:c2:01:70:86:9a:0c:d1:48:6d: 10:73:31:15:95:d3:79:8b:f4:9c:d3:4f:0b:42:3f: 9d:59:ed:aa:47:57:00:94:fb:f2:82:94:d7:67:18: 1a:db:5c:9d:53:d5:45:60:75:b2:f5:5a:5f:11:e5: e6:7e:ab:50:ff:05:7b:64:01:0a:9b:f0:37:69:1a: 21:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:10:4E:DD:D3:FA:92:37:46:12:3B:C8:B9:E5:16:13:72:B1:AD:AA X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/jRBO3dP6kjdGEjvIueUWE3Kxrao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.42.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:b4:f3:47:e9:1d:8a:ea:f3:2a:c4:79:ae:cc:5a:7a:0c:af: 78:f8:6f:bd:58:1c:73:f1:e4:e7:cf:ee:2f:3a:5b:7b:bb:b9: 59:16:8c:c8:56:90:a8:84:7a:b0:a2:fd:f0:00:ec:5f:ca:e2: 4e:08:42:45:85:c5:0a:16:ec:27:1e:d2:b5:73:fe:a4:37:4a: 99:57:ab:32:b8:c2:43:49:e1:61:53:8f:9e:2c:6b:7f:5c:4e: 93:fe:6b:84:3b:d3:68:69:74:15:07:fb:df:f0:fb:a1:ba:a8: 72:68:e3:99:d7:7d:9a:b6:e1:2f:2c:98:5d:c6:e3:6d:5b:90: fe:19:a7:0b:64:d7:16:93:15:6f:b5:e7:74:67:fb:76:19:8b: 1c:3f:e4:17:5b:94:8c:12:d6:1d:af:82:2e:88:4a:56:e9:54: 9f:19:24:01:76:cb:b9:49:38:b1:f6:02:bf:48:d5:37:e6:e1: 40:a6:89:8a:92:6b:65:44:9d:f0:7c:c2:b0:c7:b0:37:a4:74: 42:48:1b:92:a5:90:8a:10:1f:79:1c:b2:94:f2:64:82:a7:cb: 5e:ff:c9:c3:d0:31:d5:db:b4:28:e3:2f:9f:1e:6a:ef:01:00: a9:9d:43:8e:0d:76:a4:ec:95:31:59:f1:40:c1:51:68:89:44: dd:f9:d7:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8rCs20Hgxg8bhm04zbNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjYwMTAyMTgyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDEwNGVkZGQzZmE5MjM3NDYxMjNiYzhiOWU1MTYxMzcyYjFhZGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CyYxpIGfLICSaMcu+lcwygzq9KJ loh8OawStjuFUOA+raAdPZx4VbX2nii891QBV8layHLR6Pv/6PpjyyVNvkGYlBXL dyapUns0ZD0etPhxPtoqWiGAUGpQcFnxJdp6EdfW1QJHVVdWyKn4rwqYaGODULI+ bO6jlfJuL8fUBb3SZhgJl9eZYZgufB4UtJZeCCWKAmWyd4jMZg37e5EsdnfLsFPd 9pAVmivyfp/gb7gwP2ywRyfIWxTCAXCGmgzRSG0QczEVldN5i/Sc008LQj+dWe2q R1cAlPvygpTXZxga21ydU9VFYHWy9VpfEeXmfqtQ/wV7ZAEKm/A3aRohKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI0QTt3T+pI3RhI7yLnlFhNysa2qMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvalJCTzNkUDZramRHRWp2SXVlVVdFM0t4cmFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4qMA0G CSqGSIb3DQEBCwUAA4IBAQANtPNH6R2K6vMqxHmuzFp6DK94+G+9WBxz8eTnz+4v Olt7u7lZFozIVpCohHqwov3wAOxfyuJOCEJFhcUKFuwnHtK1c/6kN0qZV6syuMJD SeFhU4+eLGt/XE6T/muEO9NoaXQVB/vf8PuhuqhyaOOZ132atuEvLJhdxuNtW5D+ GacLZNcWkxVvted0Z/t2GYscP+QXW5SMEtYdr4IuiEpW6VSfGSQBdsu5STix9gK/ SNU35uFApomKkmtlRJ3wfMKwx7A3pHRCSBuSpZCKEB95HLKU8mSCp8te/8nD0DHV 27Qo4y+fHmrvAQCpnUOODXak7JUxWfFAwVFoiUTd+deH -----END CERTIFICATE-----Generated at Mon Jan 19 20:23:57 2026 by rpki-client