This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/cb6RT1EIH2UE1qS6xuvmhoSY90w.roa File: cb6RT1EIH2UE1qS6xuvmhoSY90w.roa (raw, json) Hash identifier: w0eimh8eUGbfM3xNdHnghVn9Aj2SOX0pDoX2BzEu2Mg= Subject key identifier: 71:BE:91:4F:51:08:1F:65:04:D6:A4:BA:C6:EB:E6:86:84:98:F7:4C Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664 Certificate serial: 019B7D5C6381AC3ADD17B3028AE833ECF1A8 Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/cb6RT1EIH2UE1qS6xuvmhoSY90w.roa Signing time: Fri 02 Jan 2026 06:19:25 +0000 ROA not before: Fri 02 Jan 2026 06:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49065 IP address blocks: 5.252.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:63:81:ac:3a:dd:17:b3:02:8a:e8:33:ec:f1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664 Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71be914f51081f6504d6a4bac6ebe6868498f74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:be:be:0c:83:77:10:e0:f2:6e:01:9e:e9:b2: 3b:46:be:ad:f3:3a:ac:0d:3c:8c:2b:65:65:e6:e6: e5:7f:cb:86:06:54:f9:2c:f1:65:a6:e0:6c:e2:e5: cd:8e:97:f0:df:f3:3d:49:b8:1a:43:37:25:1a:39: 93:e7:c6:f8:bc:53:99:bf:b3:f3:b5:b9:9b:52:43: 05:61:b0:df:90:17:b1:1b:99:07:5b:03:c2:f5:10: 47:2a:09:af:cb:17:5a:f1:08:c0:83:73:b6:b3:b2: 4f:f3:2a:56:3f:71:9e:9a:99:2c:02:5a:39:0e:ab: f9:9f:e7:b9:5f:43:6e:8d:6e:2a:b0:85:2e:69:fe: 98:5b:f7:ec:ce:66:dd:40:25:ef:af:82:6c:cf:a8: fb:3a:c5:c5:e0:6d:a6:63:50:ac:ff:81:8d:30:6f: 83:c9:0a:52:d4:88:1c:21:8b:d5:87:ae:de:5b:fe: ea:91:e2:2c:4c:fd:2f:27:cc:39:6e:c4:a9:7a:34: 90:1d:da:c1:2c:1b:a0:4b:40:ba:f4:0a:fb:07:ae: f8:39:1b:66:55:fd:c0:d4:20:16:54:35:e1:e4:66: f5:c9:fb:eb:0a:e3:6b:11:98:58:31:68:33:35:f1: 91:80:e2:4a:87:12:e1:ba:bb:e3:46:da:32:11:60: 77:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BE:91:4F:51:08:1F:65:04:D6:A4:BA:C6:EB:E6:86:84:98:F7:4C X509v3 Authority Key Identifier: keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/cb6RT1EIH2UE1qS6xuvmhoSY90w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.129.0/24 Signature Algorithm: sha256WithRSAEncryption a9:f7:89:37:3a:eb:c3:7b:8c:fd:06:46:d7:2b:24:35:2a:a8: f5:2c:5f:cd:0e:7a:42:1e:33:b0:a3:c6:ad:bb:04:10:f2:dc: 4a:30:97:11:7b:a1:75:d8:8b:ba:48:27:22:bc:b6:87:e9:48: 65:ac:c6:e6:28:b6:79:c6:e3:09:19:53:65:3d:9f:26:6b:04: 29:33:95:22:69:26:d3:13:d7:95:6d:04:5b:56:22:cc:45:ff: be:2a:c5:49:48:e6:04:63:4f:d3:75:c8:d8:5d:97:75:4d:3f: d0:e4:18:20:81:97:d4:de:20:9e:04:d0:0a:4d:ad:f7:cf:1d: 17:9c:d8:73:c9:5d:af:40:f4:8e:67:13:52:1e:03:4c:2c:de: 09:e7:41:09:5f:62:c6:ac:9d:88:98:c2:be:37:e9:18:92:c9: ac:f8:d2:9e:c4:93:d6:b4:51:9a:b1:45:19:c1:05:0c:80:09: ee:39:02:28:b7:cc:01:4f:64:b9:f6:86:1b:9b:fc:bb:d5:d7: 4e:38:b7:93:ba:3b:d4:c3:4a:da:17:79:0d:89:89:b9:86:c1: 9e:f1:0b:d5:33:82:1f:ba:96:46:9d:a6:6d:62:0d:5d:5a:fa: 05:8e:7a:0d:46:0b:8f:45:81:dd:d0:7e:2f:0b:56:22:d5:91: 4b:2f:e8:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XGOBrDrdF7MCiugz7PGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNmRjNDE5MjY0NWM4NDJhNGZhMmY4ODIzNGYyZTVhMTg0 Yzc2NjQwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWJlOTE0ZjUxMDgxZjY1MDRkNmE0YmFjNmViZTY4Njg0OThmNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b6+DIN3EODybgGe6bI7Rr6t8zqs DTyMK2Vl5ublf8uGBlT5LPFlpuBs4uXNjpfw3/M9SbgaQzclGjmT58b4vFOZv7Pz tbmbUkMFYbDfkBexG5kHWwPC9RBHKgmvyxda8QjAg3O2s7JP8ypWP3GempksAlo5 Dqv5n+e5X0NujW4qsIUuaf6YW/fszmbdQCXvr4Jsz6j7OsXF4G2mY1Cs/4GNMG+D yQpS1IgcIYvVh67eW/7qkeIsTP0vJ8w5bsSpejSQHdrBLBugS0C69Ar7B674ORtm Vf3A1CAWVDXh5Gb1yfvrCuNrEZhYMWgzNfGRgOJKhxLhurvjRtoyEWB3pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHG+kU9RCB9lBNakusbr5oaEmPdMMB8GA1UdIwQY MBaAFNptxBkmRchCpPoviCNPLloYTHZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUt ZWVmNzBhYWIwMzVlLzEvY2I2UlQxRUlIMlVFMXFTNnh1dm1ob1NZOTB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUtZWVmNzBhYWIwMzVl LzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABfyBMA0G CSqGSIb3DQEBCwUAA4IBAQCp94k3OuvDe4z9BkbXKyQ1Kqj1LF/NDnpCHjOwo8at uwQQ8txKMJcRe6F12Iu6SCcivLaH6UhlrMbmKLZ5xuMJGVNlPZ8mawQpM5UiaSbT E9eVbQRbViLMRf++KsVJSOYEY0/TdcjYXZd1TT/Q5BgggZfU3iCeBNAKTa33zx0X nNhzyV2vQPSOZxNSHgNMLN4J50EJX2LGrJ2ImMK+N+kYksms+NKexJPWtFGasUUZ wQUMgAnuOQIot8wBT2S59oYbm/y71ddOOLeTujvUw0raF3kNiYm5hsGe8QvVM4If upZGnaZtYg1dWvoFjnoNRguPRYHd0H4vC1Yi1ZFLL+g4 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:36 2026 by rpki-client