This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa File: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (raw, json) Hash identifier: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A= Subject key identifier: 64:98:BD:9F:20:77:2A:1C:28:1D:5C:BE:98:7F:67:29:19:A0:AD:C7 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C772D4171839F9D0A9AA332951DEC1 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12993 IP address blocks: 213.110.66.0/24 maxlen: 24 213.110.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:72:d4:17:18:39:f9:d0:a9:aa:33:29:51:de:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6498bd9f20772a1c281d5cbe987f672919a0adc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1a:ba:9a:fa:be:2b:0f:fc:f9:9b:0e:c2:77: 2a:1a:d4:fd:79:be:44:74:38:41:3a:11:8f:32:e5: 91:a5:75:d4:c4:67:c5:86:28:48:bc:c2:cb:11:5f: a4:e5:f4:f1:a8:e5:0f:ca:83:f7:47:16:f9:68:b2: 3a:a3:ad:54:3b:d0:97:9b:8a:f7:48:00:1a:3d:f7: 16:4f:03:fc:4d:18:a9:3c:4c:1f:a0:90:07:54:8c: 4a:5b:45:5b:09:24:32:d8:e3:d5:fa:5c:64:2d:63: 89:2f:34:18:a7:b4:01:16:ef:a4:11:30:fe:f3:e6: ce:f1:4e:73:05:18:09:35:9b:d1:98:00:4a:12:3e: 04:5a:ee:f0:64:a1:6d:9d:64:6b:3f:1f:7c:1d:18: e9:11:b4:a7:a3:63:10:a8:8f:56:ad:49:87:ae:2c: 2d:fd:df:52:d6:a2:e7:b4:a3:1c:17:14:cb:67:04: a5:e6:23:e9:58:39:1d:8f:c3:b5:42:bf:bd:af:01: fd:57:35:c6:a3:64:f2:15:9a:99:af:e0:39:d7:26: 4a:f6:eb:76:1a:07:2e:b2:b1:10:58:07:e2:87:37: f3:a9:ec:4a:34:4d:6b:d6:81:e3:87:32:7a:de:75: f3:b7:ab:4f:43:21:16:d1:39:ee:ac:5c:80:10:e9: 20:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:98:BD:9F:20:77:2A:1C:28:1D:5C:BE:98:7F:67:29:19:A0:AD:C7 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.110.66.0/23 Signature Algorithm: sha256WithRSAEncryption 97:88:55:a6:8d:72:16:2e:21:80:71:2c:68:b2:08:c2:65:81: a4:aa:0a:4b:3e:04:ba:f9:5f:96:67:cb:5a:07:6d:2b:67:43: ad:e1:97:a4:4c:e3:ce:7e:a8:7f:11:63:21:73:68:ae:73:74: 07:99:cc:a7:ba:ff:82:64:c8:9b:36:68:5d:cc:cb:23:d3:02: 15:e0:bf:50:c1:53:bf:79:de:13:c3:d6:aa:e2:c3:87:a7:37: c2:94:a8:66:78:9f:f1:16:0b:c1:15:c2:db:b1:19:14:b5:7b: 6b:5a:a4:94:ca:4f:12:61:0f:4d:56:82:e3:6a:73:27:60:c5: 3b:fa:8e:6c:8d:10:83:f9:8c:3d:7a:c4:9e:da:9a:e3:4b:db: 5c:67:38:32:16:c7:c6:9e:02:0b:df:aa:48:9c:8d:86:89:34: 96:a6:9e:a7:92:3f:eb:bd:ba:0b:2c:e1:82:e3:cd:40:9c:89: 3b:eb:c3:8e:90:2f:d3:e3:2c:bf:85:a0:18:ae:8c:cc:c8:87: 8d:05:92:31:a5:b1:c1:f4:ce:22:e4:b3:ef:42:35:a7:4c:70: d7:fd:d4:49:24:98:44:e3:3f:a0:59:ea:4c:8d:09:ee:01:62: 84:25:b6:e4:9c:56:e6:22:8a:c3:b0:43:81:9e:23:b3:2b:39: 5e:e9:ec:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3LUFxg5+dCpqjMpUd7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDk4YmQ5ZjIwNzcyYTFjMjgxZDVjYmU5ODdmNjcyOTE5YTBhZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hq6mvq+Kw/8+ZsOwncqGtT9eb5E dDhBOhGPMuWRpXXUxGfFhihIvMLLEV+k5fTxqOUPyoP3Rxb5aLI6o61UO9CXm4r3 SAAaPfcWTwP8TRipPEwfoJAHVIxKW0VbCSQy2OPV+lxkLWOJLzQYp7QBFu+kETD+ 8+bO8U5zBRgJNZvRmABKEj4EWu7wZKFtnWRrPx98HRjpEbSno2MQqI9WrUmHriwt /d9S1qLntKMcFxTLZwSl5iPpWDkdj8O1Qr+9rwH9VzXGo2TyFZqZr+A51yZK9ut2 GgcusrEQWAfihzfzqexKNE1r1oHjhzJ63nXzt6tPQyEW0TnurFyAEOkgRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGSYvZ8gdyocKB1cvph/ZykZoK3HMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvWkppOW55QjNLaHdvSFZ5LW1IOW5LUm1ncmNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1W5CMA0G CSqGSIb3DQEBCwUAA4IBAQCXiFWmjXIWLiGAcSxosgjCZYGkqgpLPgS6+V+WZ8ta B20rZ0Ot4ZekTOPOfqh/EWMhc2iuc3QHmcynuv+CZMibNmhdzMsj0wIV4L9QwVO/ ed4Tw9aq4sOHpzfClKhmeJ/xFgvBFcLbsRkUtXtrWqSUyk8SYQ9NVoLjanMnYMU7 +o5sjRCD+Yw9esSe2prjS9tcZzgyFsfGngIL36pInI2GiTSWpp6nkj/rvboLLOGC 481AnIk768OOkC/T4yy/haAYrozMyIeNBZIxpbHB9M4i5LPvQjWnTHDX/dRJJJhE 4z+gWepMjQnuAWKEJbbknFbmIorDsEOBniOzKzle6ext -----END CERTIFICATE-----Generated at Mon Jan 12 03:10:51 2026 by rpki-client