This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/9AQTjaHWKJCXsC30oHllY8BTYu0.roa File: 9AQTjaHWKJCXsC30oHllY8BTYu0.roa (raw, json) Hash identifier: 7fmthrhoa3IJWK083wDCI4y5oXM7TE8HLdralxn1zCQ= Subject key identifier: F4:04:13:8D:A1:D6:28:90:97:B0:2D:F4:A0:79:65:63:C0:53:62:ED Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Certificate serial: 019B797E29AEA86C1B0FD553839995588ABA Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/9AQTjaHWKJCXsC30oHllY8BTYu0.roa Signing time: Thu 01 Jan 2026 12:17:49 +0000 ROA not before: Thu 01 Jan 2026 12:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49178 IP address blocks: 213.162.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:29:ae:a8:6c:1b:0f:d5:53:83:99:95:58:8a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Validity Not Before: Jan 1 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f404138da1d6289097b02df4a0796563c05362ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:19:ca:7e:00:dc:92:51:b8:d1:48:ab:a6: d2:57:2c:f8:de:a5:a3:41:28:b5:26:bb:13:c4:cb: 22:ad:2d:c1:51:54:53:4f:45:46:a5:ff:15:de:bf: a9:85:c1:b4:a8:7c:49:6e:6f:47:d0:49:dc:eb:2a: 07:25:7f:29:fb:8b:e3:5a:fa:73:ae:d4:1e:f3:39: c4:60:69:65:1c:b8:75:c5:68:96:c5:0b:01:6c:0a: ca:92:f2:c5:cd:37:ce:aa:21:90:e4:10:fc:e4:83: 9e:40:39:1e:8d:1b:50:8f:ec:7b:5c:37:7f:e3:90: eb:bc:2c:c7:7e:14:40:e4:07:01:7b:e8:65:f6:ae: 89:4f:f9:b5:8e:a9:c0:18:53:de:1f:51:6b:e9:94: 6d:ac:e7:2e:9d:9b:56:9b:19:69:33:b2:02:ab:e0: 56:3f:03:55:74:c2:a3:cb:3a:fd:40:80:f1:4c:f7: 3c:c7:a3:54:51:e3:12:cb:0a:5a:ea:a9:05:d7:ed: b7:1e:14:ba:00:39:17:af:6f:34:ad:15:95:4b:86: de:96:9e:0b:a2:12:43:d8:17:63:57:03:69:1c:91: 82:60:12:e6:db:a5:cb:1a:81:2b:b2:71:35:b6:67: f6:35:90:a3:db:07:9e:41:8f:87:66:6f:85:2a:e2: 55:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:04:13:8D:A1:D6:28:90:97:B0:2D:F4:A0:79:65:63:C0:53:62:ED X509v3 Authority Key Identifier: keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/9AQTjaHWKJCXsC30oHllY8BTYu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.162.204.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:f1:85:c3:d6:aa:12:27:1a:02:30:d7:88:db:94:10:23:61: 9d:ab:79:a3:bc:94:f8:4e:f5:25:04:9b:e6:38:b4:97:4c:d7: 14:41:3e:9d:c7:d2:53:be:df:87:82:d2:a8:85:8d:64:d7:06: d2:8c:56:f9:bc:75:dc:96:46:e4:1b:20:9f:1d:3d:1b:91:0c: 86:47:51:57:e8:23:82:9b:de:d3:d3:dd:f0:79:5d:af:72:c0: 0f:34:28:5d:c9:17:b4:2f:b9:95:a0:d9:a3:29:5a:b3:61:6a: e7:d3:84:fc:8a:bc:4a:94:45:85:7d:e6:35:74:32:ac:9f:7d: 23:d2:c5:ed:aa:be:22:8a:03:29:5d:ae:d3:ec:6a:3d:c8:1c: 04:76:e2:75:4b:c7:ef:53:0e:ca:2a:b0:0c:3e:76:7d:1d:60: 3b:dc:0d:10:62:8d:1d:75:75:77:a2:a6:87:1c:b9:64:26:3e: 71:8e:8d:34:dc:1b:ce:b1:f5:64:1c:9e:8b:1a:1a:27:79:65: 04:a7:f5:52:8e:33:80:21:1c:26:a7:72:9e:eb:a9:e2:6c:ed: 24:48:22:a0:1d:03:52:45:c5:a0:07:f6:3d:67:d9:f3:ec:12: f1:f3:5e:1b:50:fa:c8:02:cd:78:1c:bb:98:63:8a:96:d8:b0: 82:a8:cc:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fimuqGwbD9VTg5mVWIq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl NzYxZmIwHhcNMjYwMTAxMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDA0MTM4ZGExZDYyODkwOTdiMDJkZjRhMDc5NjU2M2MwNTM2MmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1UZyn4A3JJRuNFIq6bSVyz43qWj QSi1JrsTxMsirS3BUVRTT0VGpf8V3r+phcG0qHxJbm9H0Enc6yoHJX8p+4vjWvpz rtQe8znEYGllHLh1xWiWxQsBbArKkvLFzTfOqiGQ5BD85IOeQDkejRtQj+x7XDd/ 45DrvCzHfhRA5AcBe+hl9q6JT/m1jqnAGFPeH1Fr6ZRtrOcunZtWmxlpM7ICq+BW PwNVdMKjyzr9QIDxTPc8x6NUUeMSywpa6qkF1+23HhS6ADkXr280rRWVS4belp4L ohJD2BdjVwNpHJGCYBLm26XLGoErsnE1tmf2NZCj2weeQY+HZm+FKuJVZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPQEE42h1iiQl7At9KB5ZWPAU2LtMB8GA1UdIwQY MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt NmZkOTc4OTIwNWJhLzEvOUFRVGphSFdLSkNYc0MzMG9IbGxZOEJUWXUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aLMMA0G CSqGSIb3DQEBCwUAA4IBAQCb8YXD1qoSJxoCMNeI25QQI2Gdq3mjvJT4TvUlBJvm OLSXTNcUQT6dx9JTvt+HgtKohY1k1wbSjFb5vHXclkbkGyCfHT0bkQyGR1FX6COC m97T093weV2vcsAPNChdyRe0L7mVoNmjKVqzYWrn04T8irxKlEWFfeY1dDKsn30j 0sXtqr4iigMpXa7T7Go9yBwEduJ1S8fvUw7KKrAMPnZ9HWA73A0QYo0ddXV3oqaH HLlkJj5xjo003BvOsfVkHJ6LGhoneWUEp/VSjjOAIRwmp3Ke66nibO0kSCKgHQNS RcWgB/Y9Z9nz7BLx814bUPrIAs14HLuYY4qW2LCCqMyl -----END CERTIFICATE-----Generated at Sat Jan 3 13:04:58 2026 by rpki-client