This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Jl2v4hbyk6RxlNqbfC8efWq9f78.roa File: Jl2v4hbyk6RxlNqbfC8efWq9f78.roa (raw, json) Hash identifier: dKbVMOVU7EI6IJz0JYkQs3f+jfB/wRq1bGD6rwmJt5s= Subject key identifier: 26:5D:AF:E2:16:F2:93:A4:71:94:DA:9B:7C:2F:1E:7D:6A:BD:7F:BF Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C80524BEAA994A472B8EAC3304A632E Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Jl2v4hbyk6RxlNqbfC8efWq9f78.roa Signing time: Fri 02 Jan 2026 02:19:02 +0000 ROA not before: Fri 02 Jan 2026 02:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41957 IP address blocks: 213.109.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:52:4b:ea:a9:94:a4:72:b8:ea:c3:30:4a:63:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=265dafe216f293a47194da9b7c2f1e7d6abd7fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:17:e1:56:46:f4:81:9c:e9:56:c5:81:a7: 2f:8f:a2:dd:dc:f4:2a:de:b5:3a:64:ae:4c:44:dd: 9f:2e:3b:47:bb:92:2f:be:3b:80:85:0c:da:a9:43: 50:3e:92:30:8e:2c:0d:f6:a0:c9:71:66:a8:9c:46: a0:72:fa:8d:a5:fd:49:d8:16:ef:a0:5b:b5:c5:51: 82:7e:61:7e:a0:e1:37:8f:40:60:72:29:f9:ad:16: 2b:5f:44:93:48:9c:f6:18:69:12:a3:80:33:3f:8c: 6b:a3:15:c3:87:93:44:f7:16:d6:6e:6e:57:8f:95: 54:06:0d:75:cd:ea:a3:e6:6c:fe:8d:1e:9a:c5:25: e1:eb:20:87:1d:cc:31:d8:83:9e:ca:fe:b6:b9:a4: cf:35:e2:19:35:2b:bf:68:5e:f0:a2:36:6a:44:96: 5c:a9:b6:ec:38:39:2d:9b:fb:a2:b8:96:25:e7:8a: 0a:17:a3:63:3d:a0:fe:68:6a:89:56:cb:e4:ac:14: 11:07:68:22:6b:62:e5:b1:5e:b4:e8:a3:94:9b:c1: 73:2a:cc:45:99:2a:60:c7:ea:23:4e:1b:1a:1c:48: 3e:c4:80:49:d9:ff:03:45:b7:b3:a6:a3:bd:60:75: 43:53:2e:2b:4c:2b:a6:61:b5:c6:e5:ce:2e:90:2d: e0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5D:AF:E2:16:F2:93:A4:71:94:DA:9B:7C:2F:1E:7D:6A:BD:7F:BF X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Jl2v4hbyk6RxlNqbfC8efWq9f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.108.0/24 Signature Algorithm: sha256WithRSAEncryption 59:d9:7e:a6:1c:19:2f:53:04:d5:bb:50:ca:f5:95:66:5b:ec: 6c:f0:2c:21:f9:7c:da:dc:84:9c:11:60:2a:72:80:45:29:8f: 2d:e4:db:da:16:4d:80:cd:86:a7:e3:4c:a8:bd:f8:41:17:e4: bf:09:7e:9c:a3:0c:22:b7:dc:4f:43:dd:c5:be:b8:70:eb:7b: dc:a5:3b:23:65:f0:27:f2:63:6a:62:e0:31:ed:4d:39:77:3b: 1c:59:40:82:91:2a:22:2c:4e:d6:c8:c4:33:1c:64:ba:e7:27: 9d:4b:e1:66:eb:db:99:b3:d0:8a:74:ad:8f:3d:72:45:31:09: 62:cf:dd:53:ab:88:78:7b:18:ce:ba:fb:69:55:43:86:52:33: c1:f7:40:73:c1:ad:56:62:6a:a5:c5:c0:97:97:89:44:3a:26: f3:d1:e5:8f:09:5f:b1:97:98:cb:63:2d:b8:63:aa:97:93:6f: 3c:a4:da:ad:43:b6:f7:2f:0b:20:dc:9a:b0:8a:55:ec:5f:64: d6:f0:64:4f:36:40:d3:91:3b:8e:1d:51:65:6e:41:83:b5:6b: bb:b8:af:d7:09:63:35:8a:4b:44:eb:7b:5f:51:4a:88:8d:82: 71:e9:ee:ce:67:6c:57:e7:df:49:a6:47:e0:a4:1f:f0:7d:57: 5a:a6:e8:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFJL6qmUpHK46sMwSmMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjVkYWZlMjE2ZjI5M2E0NzE5NGRhOWI3YzJmMWU3ZDZhYmQ3ZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEEX4VZG9IGc6VbFgacvj6Ld3PQq 3rU6ZK5MRN2fLjtHu5IvvjuAhQzaqUNQPpIwjiwN9qDJcWaonEagcvqNpf1J2Bbv oFu1xVGCfmF+oOE3j0Bgcin5rRYrX0STSJz2GGkSo4AzP4xroxXDh5NE9xbWbm5X j5VUBg11zeqj5mz+jR6axSXh6yCHHcwx2IOeyv62uaTPNeIZNSu/aF7wojZqRJZc qbbsODktm/uiuJYl54oKF6NjPaD+aGqJVsvkrBQRB2gia2LlsV606KOUm8FzKsxF mSpgx+ojThsaHEg+xIBJ2f8DRbezpqO9YHVDUy4rTCumYbXG5c4ukC3gCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCZdr+IW8pOkcZTam3wvHn1qvX+/MB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvSmwydjRoYnlrNlJ4bE5xYmZDOGVmV3E5Zjc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W1sMA0G CSqGSIb3DQEBCwUAA4IBAQBZ2X6mHBkvUwTVu1DK9ZVmW+xs8Cwh+Xza3IScEWAq coBFKY8t5NvaFk2AzYan40yovfhBF+S/CX6cowwit9xPQ93Fvrhw63vcpTsjZfAn 8mNqYuAx7U05dzscWUCCkSoiLE7WyMQzHGS65yedS+Fm69uZs9CKdK2PPXJFMQli z91Tq4h4exjOuvtpVUOGUjPB90Bzwa1WYmqlxcCXl4lEOibz0eWPCV+xl5jLYy24 Y6qXk288pNqtQ7b3Lwsg3JqwilXsX2TW8GRPNkDTkTuOHVFlbkGDtWu7uK/XCWM1 iktE63tfUUqIjYJx6e7OZ2xX599JpkfgpB/wfVdapujJ -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:13 2026 by rpki-client