This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/RlG57nnNxGB2HezUW2iS9nc3Ags.roa File: RlG57nnNxGB2HezUW2iS9nc3Ags.roa (raw, json) Hash identifier: 3PbLinbQVfE8cbPE3bd3pNL44DfI1Jhqjnzqheow9+4= Subject key identifier: 46:51:B9:EE:79:CD:C4:60:76:1D:EC:D4:5B:68:92:F6:77:37:02:0B Certificate issuer: /CN=40273c15ea45df37193e345b69edd83f8c6f2202 Certificate serial: 019B7CEE128AC97E75E9EBC792C22E96DE4B Authority key identifier: 40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/RlG57nnNxGB2HezUW2iS9nc3Ags.roa Signing time: Fri 02 Jan 2026 04:18:55 +0000 ROA not before: Fri 02 Jan 2026 04:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5419 IP address blocks: 212.125.128.0/22 maxlen: 22 212.125.128.0/23 maxlen: 23 212.125.128.0/24 maxlen: 24 212.125.129.0/24 maxlen: 24 212.125.130.0/23 maxlen: 23 212.125.130.0/24 maxlen: 24 212.125.131.0/24 maxlen: 24 212.125.135.0/24 maxlen: 24 212.125.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:12:8a:c9:7e:75:e9:eb:c7:92:c2:2e:96:de:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40273c15ea45df37193e345b69edd83f8c6f2202 Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4651b9ee79cdc460761decd45b6892f67737020b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:39:4e:26:6b:a9:1a:4d:92:ea:d7:16:34: c6:db:4c:83:f4:64:87:3c:3f:8f:5c:39:08:ca:3d: 67:c0:d1:16:77:50:a4:43:00:99:95:48:99:f2:1b: cd:3a:5d:78:00:55:45:f6:fe:e8:97:5a:75:79:12: 94:1f:cc:a2:6c:0a:ff:63:67:96:14:dc:5c:3e:98: e6:29:9d:15:38:29:b9:2a:64:95:b0:21:6e:03:9a: 24:53:a1:7e:fa:0a:04:b2:db:67:f8:29:1e:76:d6: 38:97:d2:c9:64:85:0d:11:bd:58:fe:11:dc:17:82: 4d:b2:bc:1e:31:a4:a5:96:db:18:6b:ec:9d:b6:e0: 44:75:a7:02:77:85:79:ed:33:fe:2a:41:bd:e9:78: 0c:15:3f:48:21:a4:04:a2:ee:ca:b8:9e:a1:b7:0e: 7a:33:1b:e6:56:69:88:22:15:c9:25:c8:b0:cb:fe: bb:30:74:78:ea:8e:ef:70:c3:b5:b7:d2:f6:cc:b1: 16:68:7f:8f:9d:64:ed:61:2b:a1:56:9d:c7:0e:34: 9a:0d:b5:4a:52:6c:72:3e:4a:95:55:67:91:1b:b7: 55:3f:24:ab:21:89:bc:18:5f:69:2d:79:07:26:9e: 27:a5:42:40:ab:3b:df:6f:71:39:b3:c8:2a:f5:8b: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:51:B9:EE:79:CD:C4:60:76:1D:EC:D4:5B:68:92:F6:77:37:02:0B X509v3 Authority Key Identifier: keyid:40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/RlG57nnNxGB2HezUW2iS9nc3Ags.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.125.128.0/22 212.125.135.0/24 212.125.143.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:96:e8:7c:ae:63:18:55:d9:0a:de:f9:11:8b:34:8c:2c:70: ad:9a:53:58:9a:14:13:9a:96:dd:f6:8c:32:19:60:2e:12:f5: 94:d5:f9:16:ad:1f:24:49:de:a2:a7:22:e4:42:6f:4a:26:a7: d7:52:b3:6b:a8:48:4d:9c:4e:e2:58:76:09:38:32:5e:26:5b: 32:71:ae:79:85:a9:73:12:a4:fa:f3:10:ea:e3:4b:d5:a4:2d: cb:16:86:fb:cf:d2:bc:6e:48:e9:27:0e:ea:1a:2b:c6:ed:6c: 33:f5:53:44:59:44:45:7a:6e:5b:6e:bf:ad:2a:1f:9d:02:1f: e4:cb:dd:38:74:39:04:9f:31:2d:41:e1:44:89:bf:58:48:cb: da:62:d6:88:89:20:ef:db:4f:35:99:76:8c:80:59:8e:72:76: 79:ff:ef:8c:09:14:8c:fb:e2:54:4a:08:dd:7a:2b:72:d7:90: 47:00:1e:7b:47:ad:4a:5b:97:ca:0d:78:66:2e:42:0f:ac:b7: a9:fe:55:af:cf:7b:ab:d8:b9:81:10:79:f5:0e:f1:5b:d0:97: ad:7a:fa:c2:ea:1b:7a:5b:eb:b8:ea:cf:6b:ef:9c:d3:3f:d3: ee:a0:45:c5:af:06:f0:12:e8:c1:5d:1e:e2:93:84:3c:f6:a6: 54:77:28:6d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87hKKyX516evHksIult5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjczYzE1ZWE0NWRmMzcxOTNlMzQ1YjY5ZWRkODNmOGM2 ZjIyMDIwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjUxYjllZTc5Y2RjNDYwNzYxZGVjZDQ1YjY4OTJmNjc3MzcwMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiI5TiZrqRpNkurXFjTG20yD9GSH PD+PXDkIyj1nwNEWd1CkQwCZlUiZ8hvNOl14AFVF9v7ol1p1eRKUH8yibAr/Y2eW FNxcPpjmKZ0VOCm5KmSVsCFuA5okU6F++goEsttn+CkedtY4l9LJZIUNEb1Y/hHc F4JNsrweMaSlltsYa+ydtuBEdacCd4V57TP+KkG96XgMFT9IIaQEou7KuJ6htw56 MxvmVmmIIhXJJciwy/67MHR46o7vcMO1t9L2zLEWaH+PnWTtYSuhVp3HDjSaDbVK UmxyPkqVVWeRG7dVPySrIYm8GF9pLXkHJp4npUJAqzvfb3E5s8gq9YshAwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEZRue55zcRgdh3s1FtokvZ3NwILMB8GA1UdIwQY MBaAFEAnPBXqRd83GT40W2nt2D+MbyICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNjOEZlcEYzemNaUGpSYmFlM1lQNHh2SWdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YTExNTMtYzNiYi00M2RkLTk3YmUt MzAzYzlhMTE4ODZiLzEvUmxHNTdubk54R0IySGV6VVcyaVM5bmMzQWdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82YTExNTMtYzNiYi00M2RkLTk3YmUtMzAzYzlhMTE4ODZi LzEvUUNjOEZlcEYzemNaUGpSYmFlM1lQNHh2SWdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQC1H2AAwQA 1H2HAwQA1H2PMA0GCSqGSIb3DQEBCwUAA4IBAQCLluh8rmMYVdkK3vkRizSMLHCt mlNYmhQTmpbd9owyGWAuEvWU1fkWrR8kSd6ipyLkQm9KJqfXUrNrqEhNnE7iWHYJ ODJeJlsyca55halzEqT68xDq40vVpC3LFob7z9K8bkjpJw7qGivG7Wwz9VNEWURF em5bbr+tKh+dAh/ky904dDkEnzEtQeFEib9YSMvaYtaIiSDv2081mXaMgFmOcnZ5 /++MCRSM++JUSgjdeity15BHAB57R61KW5fKDXhmLkIPrLep/lWvz3ur2LmBEHn1 DvFb0JetevrC6ht6W+u46s9r75zTP9PuoEXFrwbwEujBXR7ik4Q89qZUdyht -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:30 2026 by rpki-client