This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/uQF7IyytbS3yrbTg44uQRPpFYao.roa File: uQF7IyytbS3yrbTg44uQRPpFYao.roa (raw, json) Hash identifier: k+4BWSV4vpxlK8x4wwgoZ+fmKkoDTHmAUh9+Y4xZiic= Subject key identifier: B9:01:7B:23:2C:AD:6D:2D:F2:AD:B4:E0:E3:8B:90:44:FA:45:61:AA Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 019B7F1368A310FBC6FC81035CD71C72E860 Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/uQF7IyytbS3yrbTg44uQRPpFYao.roa Signing time: Fri 02 Jan 2026 14:18:56 +0000 ROA not before: Fri 02 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 212.102.227.0/24 maxlen: 24 212.102.228.0/24 maxlen: 24 212.102.230.0/24 maxlen: 24 212.102.252.0/24 maxlen: 24 212.102.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:68:a3:10:fb:c6:fc:81:03:5c:d7:1c:72:e8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Jan 2 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9017b232cad6d2df2adb4e0e38b9044fa4561aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:ed:d6:bc:20:2b:ff:83:be:d8:96:25:0d: ed:70:2c:83:3a:c6:2d:f7:f4:66:bc:b0:f8:de:c4: 5a:89:19:91:0a:e7:b8:3c:35:57:65:13:01:21:db: 05:ad:39:b0:f0:03:e6:e1:db:2b:57:40:d9:10:a5: f5:fe:23:41:ae:0e:24:30:6c:2b:ed:53:df:e6:31: db:ac:28:af:55:3a:eb:84:21:83:a8:e4:9d:47:d1: 1e:07:29:72:b7:40:61:0c:65:c7:dd:2f:ba:5b:73: 75:71:28:2a:ad:a4:ff:c8:52:4e:c0:71:86:62:02: f8:a2:b3:9a:dd:60:20:a9:60:e7:39:e6:73:5c:86: 71:3c:c4:a4:76:0d:d2:18:45:fe:aa:27:2a:35:76: 73:a4:af:f5:cb:4e:b9:7f:25:e0:24:4d:45:24:cb: d6:a2:78:58:3f:5b:d5:2c:68:44:90:11:e8:7f:17: 3f:9a:b9:27:ab:e5:7a:37:a1:68:e5:bf:8d:74:89: ac:3d:9b:e3:2b:d5:ff:cf:f5:46:7c:4f:00:d6:61: ee:24:d3:a7:6b:7c:e1:6a:6c:6a:bc:3e:63:b1:4e: 72:4a:3f:26:00:e3:55:6a:c2:9c:3f:fb:db:22:00: 09:de:77:db:1a:25:7a:f2:ac:34:95:4c:d2:82:1f: 7c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:01:7B:23:2C:AD:6D:2D:F2:AD:B4:E0:E3:8B:90:44:FA:45:61:AA X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/uQF7IyytbS3yrbTg44uQRPpFYao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.227.0-212.102.228.255 212.102.230.0/24 212.102.252.0/23 Signature Algorithm: sha256WithRSAEncryption a6:b1:70:2d:80:79:50:9b:aa:5c:78:f1:69:06:f1:48:77:22: e1:4c:00:67:3c:bb:21:3f:bb:54:fd:4c:25:73:8a:6f:30:67: 0a:65:88:de:56:06:61:cf:4b:3e:4b:66:9f:7c:12:79:99:b3: 71:f5:c0:4a:83:06:55:8e:ce:9c:00:6d:c8:e6:9c:34:d7:07: e9:9b:c4:ab:fc:76:ea:3b:4a:51:90:4d:37:91:9e:87:2f:21: 2b:20:00:09:7e:57:2c:9c:38:35:c6:63:d0:5a:0e:37:78:40: bb:27:cb:d7:90:c3:b0:7d:dd:4d:68:d8:4e:a0:21:77:30:0b: b5:81:10:fa:e3:9b:c6:de:0f:07:86:32:29:c4:46:ae:1e:4c: d0:03:73:8b:08:c2:37:d6:4f:76:53:6c:4d:25:38:85:3c:ed: e3:65:e7:53:e0:b1:77:be:3e:26:c9:cf:57:92:88:0b:4e:ee: f4:84:9e:be:2b:3a:00:d9:fe:08:db:09:82:bb:c0:65:d0:fb: 2b:01:43:55:99:9f:71:17:8f:8e:b6:4f:11:b5:25:2a:30:13: bd:ff:08:58:11:ae:eb:78:0a:6d:e8:b8:61:55:a8:65:dd:12: 7e:df:8f:50:ef:e2:9e:56:e9:f0:16:04:2e:15:50:7b:b4:45: 78:fd:03:c1 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/E2ijEPvG/IEDXNcccuhgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjYwMTAyMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTAxN2IyMzJjYWQ2ZDJkZjJhZGI0ZTBlMzhiOTA0NGZhNDU2MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh7t1rwgK/+DvtiWJQ3tcCyDOsYt 9/RmvLD43sRaiRmRCue4PDVXZRMBIdsFrTmw8APm4dsrV0DZEKX1/iNBrg4kMGwr 7VPf5jHbrCivVTrrhCGDqOSdR9EeBylyt0BhDGXH3S+6W3N1cSgqraT/yFJOwHGG YgL4orOa3WAgqWDnOeZzXIZxPMSkdg3SGEX+qicqNXZzpK/1y065fyXgJE1FJMvW onhYP1vVLGhEkBHofxc/mrknq+V6N6Fo5b+NdImsPZvjK9X/z/VGfE8A1mHuJNOn a3zhamxqvD5jsU5ySj8mAONVasKcP/vbIgAJ3nfbGiV68qw0lUzSgh98PwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLkBeyMsrW0t8q204OOLkET6RWGqMB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEvdVFGN0l5eXRiUzN5cmJUZzQ0dVFSUHBGWWFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADUZuMD BADUZuQDBADUZuYDBAHUZvwwDQYJKoZIhvcNAQELBQADggEBAKaxcC2AeVCbqlx4 8WkG8Uh3IuFMAGc8uyE/u1T9TCVzim8wZwpliN5WBmHPSz5LZp98EnmZs3H1wEqD BlWOzpwAbcjmnDTXB+mbxKv8duo7SlGQTTeRnocvISsgAAl+VyycODXGY9BaDjd4 QLsny9eQw7B93U1o2E6gIXcwC7WBEPrjm8beDweGMinERq4eTNADc4sIwjfWT3ZT bE0lOIU87eNl51PgsXe+PibJz1eSiAtO7vSEnr4rOgDZ/gjbCYK7wGXQ+ysBQ1WZ n3EXj462TxG1JSowE73/CFgRrut4Cm3ouGFVqGXdEn7fj1Dv4p5W6fAWBC4VUHu0 RXj9A8E= -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:28 2026 by rpki-client