This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/dIH6BysLhLi3YbgR32hD9CEC-Rc.roa File: dIH6BysLhLi3YbgR32hD9CEC-Rc.roa (raw, json) Hash identifier: EKTQSkYkTx/FLfYfj9JDL2Xp6XAMkpHk8crmyAFs8gY= Subject key identifier: 74:81:FA:07:2B:0B:84:B8:B7:61:B8:11:DF:68:43:F4:21:02:F9:17 Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019B7834514360D0E474976A7DA1210B96FE Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/dIH6BysLhLi3YbgR32hD9CEC-Rc.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 46.21.251.0/24 maxlen: 24 212.126.97.0/24 maxlen: 24 212.126.98.0/24 maxlen: 24 212.126.100.0/24 maxlen: 24 212.126.101.0/24 maxlen: 24 212.126.102.0/24 maxlen: 24 212.126.104.0/22 maxlen: 22 212.126.104.0/23 maxlen: 23 212.126.104.0/24 maxlen: 24 212.126.105.0/24 maxlen: 24 212.126.106.0/23 maxlen: 24 212.126.107.0/24 maxlen: 24 212.126.108.0/24 maxlen: 24 212.126.109.0/24 maxlen: 24 212.126.110.0/24 maxlen: 24 212.126.111.0/24 maxlen: 24 212.126.113.0/24 maxlen: 24 212.126.116.0/24 maxlen: 24 212.126.117.0/24 maxlen: 24 212.126.118.0/24 maxlen: 24 212.126.119.0/24 maxlen: 24 212.126.120.0/24 maxlen: 24 212.126.121.0/24 maxlen: 24 212.126.122.0/24 maxlen: 24 212.126.123.0/24 maxlen: 24 212.126.124.0/23 maxlen: 23 212.126.124.0/24 maxlen: 24 212.126.125.0/24 maxlen: 24 212.126.126.0/24 maxlen: 24 212.126.127.0/24 maxlen: 24 2a04:2dc0:1::/48 maxlen: 48 2a04:2dc0:2::/48 maxlen: 48 2a04:2dc0:3::/48 maxlen: 48 2a04:2dc0:4::/48 maxlen: 48 2a04:2dc0:6::/48 maxlen: 48 2a04:2dc0:7::/48 maxlen: 48 2a04:2dc0:8::/48 maxlen: 48 2a04:2dc0:a::/48 maxlen: 48 2a04:2dc0:d::/48 maxlen: 48 2a04:2dc0:e::/48 maxlen: 48 2a04:2dc0:f::/48 maxlen: 48 2a04:2dc0:17::/48 maxlen: 48 2a04:2dc0:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:51:43:60:d0:e4:74:97:6a:7d:a1:21:0b:96:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7481fa072b0b84b8b761b811df6843f42102f917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:c0:73:f1:aa:8d:10:37:e9:51:ac:c8:31: 57:a0:8b:ad:80:05:50:85:ba:69:21:3d:27:e7:84: 0c:ff:2e:a8:39:d8:f5:3e:dc:1b:2f:bb:84:3d:54: 96:e3:d8:67:76:1f:2a:22:fc:76:6a:7c:85:5b:74: a4:88:0d:c1:5c:4d:ea:01:c3:65:f9:72:02:e1:4d: 05:fa:7a:37:8f:2f:4c:f9:01:99:6e:92:ad:28:19: da:02:80:cc:33:58:36:73:3a:41:d1:23:7c:30:31: b8:ba:4e:19:a5:81:79:fc:dc:22:ec:4b:64:fa:ed: d4:40:67:f7:a3:a2:6d:95:39:b9:28:d4:b2:8a:7a: 11:f6:c5:1d:65:b7:2c:c6:b2:3f:d9:36:f1:3b:2e: 36:78:31:5b:a3:a0:bb:8a:21:f3:2c:82:aa:8a:96: b5:15:7c:54:0c:39:b3:99:3b:7f:82:42:03:6e:25: 82:f2:43:10:11:98:4f:e1:36:97:f5:6d:b8:2c:b9: f4:3e:c0:38:9a:a2:68:ad:87:03:bd:3e:cc:5a:3c: b1:ab:fa:68:98:e5:84:43:55:33:b7:26:4e:b5:2b: 65:cb:e1:ca:14:76:f0:cf:01:2b:e6:4c:7d:1e:31: 90:3c:01:d7:9c:02:54:73:40:1e:77:86:b7:50:b8: 74:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:81:FA:07:2B:0B:84:B8:B7:61:B8:11:DF:68:43:F4:21:02:F9:17 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/dIH6BysLhLi3YbgR32hD9CEC-Rc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.21.251.0/24 212.126.97.0-212.126.98.255 212.126.100.0-212.126.102.255 212.126.104.0/21 212.126.113.0/24 212.126.116.0-212.126.127.255 IPv6: 2a04:2dc0:1::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff 2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff 2a04:2dc0:a::/48 2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff 2a04:2dc0:17::/48 2a04:2dc0:19::/48 Signature Algorithm: sha256WithRSAEncryption 37:76:c9:f0:40:cf:67:b7:d4:09:c1:42:b6:b8:64:7d:00:e1: 9e:9c:17:4a:3d:e7:df:27:87:79:e8:fc:45:77:ec:b8:4a:33: aa:fc:6e:59:52:a3:5d:2f:f9:fa:8b:37:f2:dd:bc:f2:e5:14: 4d:89:6c:bd:11:4a:eb:af:5a:7b:7e:9f:93:cd:ac:1e:58:b9: 91:0f:08:68:86:4c:7b:b1:c2:49:69:66:51:89:1e:41:4d:19: 52:10:c7:e7:9f:bc:ab:40:62:50:d4:a3:be:28:d5:56:d0:3c: 25:14:fb:c6:ee:8b:ce:59:fb:74:54:bb:1d:90:43:23:55:7a: 79:a3:4a:63:b4:3d:87:ae:3f:be:c5:58:39:a2:f0:a9:e3:be: 79:ed:43:89:37:bd:71:be:06:57:41:12:14:47:a3:ab:70:c9: f2:fe:aa:9a:ad:be:6a:26:10:53:59:8c:91:0f:0f:b6:b1:4a: ee:03:b9:b6:11:8e:ed:56:5b:03:b5:a7:32:64:6f:2a:d5:0b: 99:cd:2e:22:bf:47:51:bb:b9:cd:8d:40:de:27:ab:c5:51:6f: 5c:9a:97:92:b2:38:f5:9f:cb:ed:f5:9f:a6:bf:11:44:ad:4f: ae:a1:bb:c6:59:7a:b0:78:df:b8:70:be:6f:72:a0:2c:49:2d: ca:7e:26:81 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4NFFDYNDkdJdqfaEhC5b+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDgxZmEwNzJiMGI4NGI4Yjc2MWI4MTFkZjY4NDNmNDIxMDJmOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGHAc/GqjRA36VGsyDFXoIutgAVQ hbppIT0n54QM/y6oOdj1PtwbL7uEPVSW49hndh8qIvx2anyFW3SkiA3BXE3qAcNl +XIC4U0F+no3jy9M+QGZbpKtKBnaAoDMM1g2czpB0SN8MDG4uk4ZpYF5/Nwi7Etk +u3UQGf3o6JtlTm5KNSyinoR9sUdZbcsxrI/2TbxOy42eDFbo6C7iiHzLIKqipa1 FXxUDDmzmTt/gkIDbiWC8kMQEZhP4TaX9W24LLn0PsA4mqJorYcDvT7MWjyxq/po mOWEQ1UztyZOtStly+HKFHbwzwEr5kx9HjGQPAHXnAJUc0Aed4a3ULh0DQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFHSB+gcrC4S4t2G4Ed9oQ/QhAvkXMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xL2RJSDZCeXNMaExpM1liZ1IzMmhEOUNFQy1SYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNi ZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgbYGCCsGAQUFBwEHAQH/BIGmMIGjMEIEAgABMDwDBAAu FfswDAMEANR+YQMEANR+YjAMAwQC1H5kAwQA1H5mAwQD1H5oAwQA1H5xMAwDBALU fnQDBAfUfgAwXQQCAAIwVzASAwcAKgQtwAABAwcAKgQtwAAEMBIDBwEqBC3AAAYD BwAqBC3AAAgDBwAqBC3AAAowEgMHACoELcAADQMHBCoELcAAAAMHACoELcAAFwMH ACoELcAAGTANBgkqhkiG9w0BAQsFAAOCAQEAN3bJ8EDPZ7fUCcFCtrhkfQDhnpwX Sj3n3yeHeej8RXfsuEozqvxuWVKjXS/5+os38t288uUUTYlsvRFK669ae36fk82s Hli5kQ8IaIZMe7HCSWlmUYkeQU0ZUhDH55+8q0BiUNSjvijVVtA8JRT7xu6Lzln7 dFS7HZBDI1V6eaNKY7Q9h64/vsVYOaLwqeO+ee1DiTe9cb4GV0ESFEejq3DJ8v6q mq2+aiYQU1mMkQ8PtrFK7gO5thGO7VZbA7WnMmRvKtULmc0uIr9HUbu5zY1A3ier xVFvXJqXkrI49Z/L7fWfpr8RRK1PrqG7xll6sHjfuHC+b3KgLEktyn4mgQ== -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:53 2026 by rpki-client