This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa File: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (raw, json) Hash identifier: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk= Subject key identifier: 5B:D9:46:B8:B9:72:2B:7A:02:4D:95:EF:99:0B:AA:4E:8E:02:DB:28 Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 019B7F8356C2453A827DC2A5AB2F39FD790D Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa Signing time: Fri 02 Jan 2026 16:21:12 +0000 ROA not before: Fri 02 Jan 2026 16:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56798 IP address blocks: 212.102.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:56:c2:45:3a:82:7d:c2:a5:ab:2f:39:fd:79:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Jan 2 16:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bd946b8b9722b7a024d95ef990baa4e8e02db28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:69:dd:82:ca:1a:20:22:3f:56:b8:dd:c5:aa: e4:61:56:08:c2:39:87:aa:72:74:86:91:fc:73:56: 1e:10:3f:59:45:3d:f7:e6:2e:58:cd:07:54:2c:ad: 1e:84:06:da:7b:e1:01:a9:9f:60:55:4b:27:cf:f2: 16:58:63:58:76:71:19:e5:be:2a:5f:27:03:93:44: 9a:e9:e6:50:36:e6:a5:85:4c:73:95:81:d1:f7:8a: 6f:ee:8c:14:ea:ee:97:4f:03:5d:e3:b7:17:21:1f: 16:3b:55:5f:63:eb:31:f0:e3:3d:00:74:35:eb:40: d6:86:28:4f:ec:18:c5:23:42:5d:30:60:7c:c0:b9: 84:e2:ed:79:fe:4b:36:6b:2b:83:4f:45:7d:05:08: 1f:45:91:62:bb:41:f0:cd:de:01:01:bd:33:bc:f1: e1:5b:01:2c:8e:1e:b3:3f:27:bc:7e:ec:8b:48:9b: 6e:68:ab:d1:c1:27:34:2a:e6:4f:7b:92:3f:e0:8c: 37:b3:eb:9e:f2:4b:8d:85:d3:41:18:8c:19:8a:cf: e5:a8:77:42:16:1a:28:9e:a9:5c:1c:9a:fe:02:f2: e5:65:2a:7b:42:90:9d:06:22:59:d7:f7:bd:a2:bf: 32:d6:13:82:11:83:fb:41:33:c6:03:3a:f4:24:62: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D9:46:B8:B9:72:2B:7A:02:4D:95:EF:99:0B:AA:4E:8E:02:DB:28 X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.126.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:9a:5e:2c:63:ab:28:11:77:c9:e9:0a:3e:e9:9c:ee:58:de: f1:40:90:9a:b5:e8:19:16:c3:a3:c5:ce:5a:46:60:8f:bc:fd: a6:35:f5:9e:eb:d0:f3:b6:06:a7:9d:97:fb:50:1c:d0:2b:01: 0b:d1:db:43:15:11:e8:ea:ef:97:ee:81:af:a5:9f:54:ba:8a: 1a:75:5c:ef:51:27:f1:59:c2:6b:ac:e8:0b:39:69:29:6a:d4: 1f:11:38:f5:68:a2:5d:a5:5c:46:9c:77:a9:28:b5:e0:4b:aa: 6a:68:35:19:77:14:23:f1:de:d8:b8:ec:0c:87:3c:66:28:20: 13:72:a7:17:c8:51:91:2d:7a:e7:1f:5b:d5:6f:66:65:c0:e1: 9a:cf:41:38:be:68:95:4d:72:2c:6e:5e:2b:7f:75:68:3f:51: 7b:0c:16:b6:8b:4b:bd:39:0c:63:f6:6e:b0:bf:ca:08:b4:80: 66:0b:1c:12:38:73:5b:a8:c6:0b:f4:02:a5:dc:dc:0d:d3:db: 1a:5b:97:bf:00:10:cd:69:fa:fa:93:7c:a0:f8:bc:91:26:16: 81:30:62:5c:e5:33:b6:9b:c8:7f:cb:a3:9a:20:11:b7:ee:84: ec:8c:3c:2d:f1:b9:19:06:d0:8d:29:e9:b4:51:77:e9:cc:6a: 1c:94:2d:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g1bCRTqCfcKlqy85/XkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjYwMTAyMTYyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmQ5NDZiOGI5NzIyYjdhMDI0ZDk1ZWY5OTBiYWE0ZThlMDJkYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WndgsoaICI/VrjdxarkYVYIwjmH qnJ0hpH8c1YeED9ZRT335i5YzQdULK0ehAbae+EBqZ9gVUsnz/IWWGNYdnEZ5b4q XycDk0Sa6eZQNualhUxzlYHR94pv7owU6u6XTwNd47cXIR8WO1VfY+sx8OM9AHQ1 60DWhihP7BjFI0JdMGB8wLmE4u15/ks2ayuDT0V9BQgfRZFiu0Hwzd4BAb0zvPHh WwEsjh6zPye8fuyLSJtuaKvRwSc0KuZPe5I/4Iw3s+ue8kuNhdNBGIwZis/lqHdC FhoonqlcHJr+AvLlZSp7QpCdBiJZ1/e9or8y1hOCEYP7QTPGAzr0JGLRUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvZRri5cit6Ak2V75kLqk6OAtsoMB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEvVzlsR3VMbHlLM29DVFpYdm1RdXFUbzRDMnlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GZ+MA0G CSqGSIb3DQEBCwUAA4IBAQA+ml4sY6soEXfJ6Qo+6ZzuWN7xQJCategZFsOjxc5a RmCPvP2mNfWe69DztgannZf7UBzQKwEL0dtDFRHo6u+X7oGvpZ9UuooadVzvUSfx WcJrrOgLOWkpatQfETj1aKJdpVxGnHepKLXgS6pqaDUZdxQj8d7YuOwMhzxmKCAT cqcXyFGRLXrnH1vVb2ZlwOGaz0E4vmiVTXIsbl4rf3VoP1F7DBa2i0u9OQxj9m6w v8oItIBmCxwSOHNbqMYL9AKl3NwN09saW5e/ABDNafr6k3yg+LyRJhaBMGJc5TO2 m8h/y6OaIBG37oTsjDwt8bkZBtCNKem0UXfpzGoclC2u -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:38 2026 by rpki-client