This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/JCEfEwFeDMnpJBbh4Xg93tQ2SUs.roa File: JCEfEwFeDMnpJBbh4Xg93tQ2SUs.roa (raw, json) Hash identifier: OfJY0mKSpnQMaIuDEEWGJbOL1WkCkjIjd0x1rnnuJPA= Subject key identifier: 24:21:1F:13:01:5E:0C:C9:E9:24:16:E1:E1:78:3D:DE:D4:36:49:4B Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75F188E656BFA1B2A1431EA94F982 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/JCEfEwFeDMnpJBbh4Xg93tQ2SUs.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15759 IP address blocks: 213.210.64.0/19 maxlen: 19 213.210.112.0/20 maxlen: 20 217.18.128.0/20 maxlen: 20 217.18.144.0/20 maxlen: 20 217.18.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5f:18:8e:65:6b:fa:1b:2a:14:31:ea:94:f9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24211f13015e0cc9e92416e1e1783dded436494b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3c:34:c1:97:85:78:2a:b3:fd:33:ef:cd:98: 04:e9:4a:37:4c:a8:dd:c6:84:97:5b:0f:ba:c8:cf: e9:da:41:03:50:78:0d:8e:09:7f:1f:b7:36:71:28: c1:86:d5:f3:0e:c0:8e:b0:77:6c:71:88:51:27:af: 01:b5:18:03:7f:8c:9f:d0:cd:68:ff:64:fc:8f:d5: c7:c4:bc:d5:b0:3f:fd:7a:64:b2:e9:f9:53:d3:6c: 1d:82:97:f6:d7:db:51:ed:6e:e2:05:59:f3:ff:b4: b3:fb:ca:5c:85:75:ca:6f:92:e8:5d:ad:ad:44:7d: e2:43:1f:df:35:61:b7:64:e2:1f:bb:75:df:90:07: f2:24:11:d6:d8:ef:9c:17:f7:31:82:f0:e3:35:86: d9:8c:00:fc:3e:ab:cc:c8:8d:e2:b8:2f:b9:5d:9d: 8f:16:5d:b1:4f:c2:61:50:9c:d4:1f:e3:31:f2:91: e8:17:da:a6:6d:f3:0c:2a:4a:3e:12:e4:99:35:89: 85:b9:29:b6:67:21:90:23:e2:5d:74:81:52:09:8b: d2:bb:66:ae:30:3a:9e:2f:b5:ff:b6:9a:7c:3d:e2: 78:4c:56:0d:3f:c1:03:9e:f1:e1:20:2d:09:ee:04: 01:6c:bc:fd:a0:16:ad:a2:eb:89:e8:8f:59:de:99: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:21:1F:13:01:5E:0C:C9:E9:24:16:E1:E1:78:3D:DE:D4:36:49:4B X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/JCEfEwFeDMnpJBbh4Xg93tQ2SUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.210.64.0/19 213.210.112.0/20 217.18.128.0/19 Signature Algorithm: sha256WithRSAEncryption 9e:5b:07:d7:28:9f:99:6f:71:73:96:80:4b:87:3e:76:a1:19: df:fc:e7:06:85:d4:8e:fb:10:10:55:54:06:67:40:09:cf:0a: 3d:cc:1e:e5:a8:e3:96:3e:b5:85:0a:8a:1d:64:bd:d1:44:e8: 82:33:08:74:03:16:fa:17:80:67:54:a9:c7:d9:dd:ea:5e:3c: 1e:87:fd:48:07:16:b6:d8:d7:53:62:17:0a:da:96:ca:41:c1: 04:a6:51:94:2d:bd:70:c5:30:c7:c8:97:a8:1f:ad:42:4d:76: 51:ee:d3:c5:e4:fc:50:f6:7e:d6:9f:53:2e:75:52:ed:67:9e: 9c:3a:07:b6:61:53:e3:81:ea:6d:71:b1:0b:35:fc:40:2e:57: 59:8e:a4:04:a7:9e:90:c9:0d:a7:71:7e:3a:af:dc:cd:a4:d0: 97:9f:ca:0e:c6:b6:bc:e1:ab:ad:e1:25:6c:5c:15:9e:3f:ea: 2b:d5:af:96:05:06:fc:51:0c:d7:05:53:e2:b7:ce:f6:07:a9: c3:8f:b3:42:18:39:f8:c2:ca:67:81:5b:89:fa:89:8d:5c:9b: 20:91:99:00:bd:15:dd:d7:9c:60:a0:f6:45:a8:38:36:0f:e2: ef:ce:92:e5:f6:7f:a8:8b:0d:f4:f9:41:91:16:2b:04:4f:95: 37:71:a6:22 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p18YjmVr+hsqFDHqlPmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDIxMWYxMzAxNWUwY2M5ZTkyNDE2ZTFlMTc4M2RkZWQ0MzY0OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zw0wZeFeCqz/TPvzZgE6Uo3TKjd xoSXWw+6yM/p2kEDUHgNjgl/H7c2cSjBhtXzDsCOsHdscYhRJ68BtRgDf4yf0M1o /2T8j9XHxLzVsD/9emSy6flT02wdgpf219tR7W7iBVnz/7Sz+8pchXXKb5LoXa2t RH3iQx/fNWG3ZOIfu3XfkAfyJBHW2O+cF/cxgvDjNYbZjAD8PqvMyI3iuC+5XZ2P Fl2xT8JhUJzUH+Mx8pHoF9qmbfMMKko+EuSZNYmFuSm2ZyGQI+JddIFSCYvSu2au MDqeL7X/tpp8PeJ4TFYNP8EDnvHhIC0J7gQBbLz9oBatouuJ6I9Z3pnGzQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCQhHxMBXgzJ6SQW4eF4Pd7UNklLMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvSkNFZkV3RmVETW5wSkJiaDRYZzkzdFEyU1VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQF1dJAAwQE 1dJwAwQF2RKAMA0GCSqGSIb3DQEBCwUAA4IBAQCeWwfXKJ+Zb3FzloBLhz52oRnf /OcGhdSO+xAQVVQGZ0AJzwo9zB7lqOOWPrWFCoodZL3RROiCMwh0Axb6F4BnVKnH 2d3qXjweh/1IBxa22NdTYhcK2pbKQcEEplGULb1wxTDHyJeoH61CTXZR7tPF5PxQ 9n7Wn1MudVLtZ56cOge2YVPjgeptcbELNfxALldZjqQEp56QyQ2ncX46r9zNpNCX n8oOxra84aut4SVsXBWeP+or1a+WBQb8UQzXBVPit872B6nDj7NCGDn4wspngVuJ +omNXJsgkZkAvRXd15xgoPZFqDg2D+LvzpLl9n+oiw30+UGRFisET5U3caYi -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:38 2026 by rpki-client