This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/WItnjatj115FxsGQfNXwcQu0A2s.roa File: WItnjatj115FxsGQfNXwcQu0A2s.roa (raw, json) Hash identifier: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs= Subject key identifier: 58:8B:67:8D:AB:63:D7:5E:45:C6:C1:90:7C:D5:F0:71:0B:B4:03:6B Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910F542FC81C4AB91493E67AFABCE19 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/WItnjatj115FxsGQfNXwcQu0A2s.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208787 IP address blocks: 212.103.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 16:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f5:42:fc:81:c4:ab:91:49:3e:67:af:ab:ce:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=588b678dab63d75e45c6c1907cd5f0710bb4036b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:04:a3:bb:cc:86:44:39:2c:35:f7:42:78: af:49:36:bc:98:5d:df:6f:6f:44:03:46:69:99:2b: 88:6d:67:25:ec:fd:ad:0c:2b:bb:bc:5a:e3:88:9f: 90:09:05:e5:f1:85:f6:d8:48:d8:d7:54:ba:2f:86: a9:4e:34:cf:9f:b2:05:35:6f:f5:f9:2e:be:00:a2: 8a:7d:39:bc:f3:77:c6:cd:c6:54:0d:94:e7:02:44: 54:1c:14:db:03:30:d7:d2:03:7c:9a:70:cf:a9:39: 3a:c6:5a:18:23:ed:c4:36:31:c6:d9:77:97:bc:14: b0:1a:eb:7f:fa:e6:df:06:19:25:df:c3:d8:c8:22: 9e:93:6a:eb:da:b9:7c:18:c5:ad:58:29:10:b0:65: 72:a2:3b:ca:56:de:5f:1e:80:30:79:2f:d7:2d:f3: 18:58:5e:85:ae:d4:6c:10:80:fe:02:42:4b:f1:44: 1d:e8:33:68:ed:92:64:3b:ce:01:c0:9d:fd:3d:f5: ef:63:ed:b7:d4:d2:0d:a4:6e:34:37:78:e7:e4:ec: ec:04:3e:b8:ce:68:b7:07:a2:57:de:a9:be:bf:80: 29:55:b1:3e:23:7b:0a:87:fb:a3:58:13:6f:fd:47: dc:ed:62:46:1a:29:c5:e0:70:97:00:bf:ba:3a:af: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8B:67:8D:AB:63:D7:5E:45:C6:C1:90:7C:D5:F0:71:0B:B4:03:6B X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/WItnjatj115FxsGQfNXwcQu0A2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.103.41.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:e4:ad:eb:0c:58:02:44:af:1e:b5:b2:85:cd:ff:26:f3:97: 29:69:e2:76:fe:ce:f7:9e:f0:d8:de:eb:61:53:1f:c0:da:e0: a7:a7:10:f2:0c:a9:72:5c:c6:a6:0e:e0:dc:e9:ce:1f:f1:44: 10:94:38:8f:1d:66:ad:65:b4:0d:3d:e5:23:c5:97:65:d2:fb: 6b:d9:e4:4b:e1:8b:6d:1d:92:27:50:9d:7c:ee:3e:c2:ea:ce: fd:c1:3c:53:d3:39:10:f6:03:65:29:3c:b5:c7:77:d4:9d:d5: 4c:aa:83:4e:54:9c:5a:60:6f:c3:27:51:0c:92:c9:90:68:60: 2b:34:a7:80:ea:4b:e6:52:5e:59:6c:ec:ef:48:cf:ee:a1:a7: 8c:4e:fd:76:2e:41:7b:f3:35:27:01:7f:75:c9:43:67:9f:ae: fb:0d:1f:03:56:19:81:d3:5f:b8:c0:a3:db:65:ba:f9:7a:8a: b0:f6:9e:da:e9:c5:c8:9f:1c:ac:de:72:c7:b1:1e:b9:d9:b9: 53:0a:5d:6c:b2:7f:81:d1:b6:d7:24:f4:75:1f:e5:44:2e:8a: 21:f9:0b:5b:09:3f:b4:54:73:00:4f:3a:bf:e6:96:6c:a8:b6: 2a:ef:f2:40:6f:cc:a4:9b:d0:ce:99:76:d5:5d:15:3b:f6:6d: ee:5a:48:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPVC/IHEq5FJPmevq84ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODhiNjc4ZGFiNjNkNzVlNDVjNmMxOTA3Y2Q1ZjA3MTBiYjQwMzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRcEo7vMhkQ5LDX3QnivSTa8mF3f b29EA0ZpmSuIbWcl7P2tDCu7vFrjiJ+QCQXl8YX22EjY11S6L4apTjTPn7IFNW/1 +S6+AKKKfTm883fGzcZUDZTnAkRUHBTbAzDX0gN8mnDPqTk6xloYI+3ENjHG2XeX vBSwGut/+ubfBhkl38PYyCKek2rr2rl8GMWtWCkQsGVyojvKVt5fHoAweS/XLfMY WF6FrtRsEID+AkJL8UQd6DNo7ZJkO84BwJ39PfXvY+231NINpG40N3jn5OzsBD64 zmi3B6JX3qm+v4ApVbE+I3sKh/ujWBNv/Ufc7WJGGinF4HCXAL+6Oq/gfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFiLZ42rY9deRcbBkHzV8HELtANrMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvV0l0bmphdGoxMTVGeHNHUWZOWHdjUXUwQTJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GcpMA0G CSqGSIb3DQEBCwUAA4IBAQB95K3rDFgCRK8etbKFzf8m85cpaeJ2/s73nvDY3uth Ux/A2uCnpxDyDKlyXMamDuDc6c4f8UQQlDiPHWatZbQNPeUjxZdl0vtr2eRL4Ytt HZInUJ187j7C6s79wTxT0zkQ9gNlKTy1x3fUndVMqoNOVJxaYG/DJ1EMksmQaGAr NKeA6kvmUl5ZbOzvSM/uoaeMTv12LkF78zUnAX91yUNnn677DR8DVhmB01+4wKPb Zbr5eoqw9p7a6cXInxys3nLHsR652blTCl1ssn+B0bbXJPR1H+VELooh+QtbCT+0 VHMATzq/5pZsqLYq7/JAb8ykm9DOmXbVXRU79m3uWkjX -----END CERTIFICATE-----Generated at Sun Jan 25 03:14:52 2026 by rpki-client