This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/6cbxuMM6JMarkDQr6QohwZr_bLM.roa File: 6cbxuMM6JMarkDQr6QohwZr_bLM.roa (raw, json) Hash identifier: loJQ7YmdWvDMrlwR+VxEec0IBAymiKq+SltA1Yw9ets= Subject key identifier: E9:C6:F1:B8:C3:3A:24:C6:AB:90:34:2B:E9:0A:21:C1:9A:FF:6C:B3 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E3923120F2F0DFE077F95F89189A654 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/6cbxuMM6JMarkDQr6QohwZr_bLM.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.117.52.0/24 maxlen: 24 45.117.54.0/24 maxlen: 24 45.123.144.0/24 maxlen: 24 103.4.248.0/24 maxlen: 24 103.4.249.0/24 maxlen: 24 103.4.250.0/24 maxlen: 24 103.4.251.0/24 maxlen: 24 103.49.152.0/24 maxlen: 24 103.49.153.0/24 maxlen: 24 103.49.154.0/24 maxlen: 24 103.49.155.0/24 maxlen: 24 103.196.8.0/24 maxlen: 24 103.196.9.0/24 maxlen: 24 103.216.0.0/24 maxlen: 24 103.216.1.0/24 maxlen: 24 103.216.2.0/24 maxlen: 24 103.216.3.0/24 maxlen: 24 139.5.22.0/24 maxlen: 24 139.5.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:23:12:0f:2f:0d:fe:07:7f:95:f8:91:89:a6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9c6f1b8c33a24c6ab90342be90a21c19aff6cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:df:4a:0a:4f:a4:de:10:13:94:dd:57:63:2e: 8c:eb:b1:57:2b:1f:b4:53:e2:15:09:bb:f2:dd:3c: 3c:7c:57:93:29:2b:80:49:cd:99:f2:47:c0:eb:5c: 00:41:45:f8:2e:b2:4f:ed:64:e9:c4:d3:51:f9:53: 39:40:df:d6:8c:83:e6:18:f1:a8:02:c4:4f:6e:82: 31:61:1e:d6:d2:ab:52:54:86:f6:b8:f9:f1:1e:8e: e6:b9:4b:bd:22:62:76:e3:a4:25:90:9f:4f:ee:81: 9e:82:47:a6:57:70:98:9b:e7:86:dd:4a:1f:c2:a4: f0:4b:47:f3:1e:6b:37:55:73:35:90:d7:d9:98:69: 96:41:d9:a2:cb:dd:08:2c:9f:6c:25:73:3b:d7:cc: 2e:b7:1f:e5:c6:f6:61:04:68:bd:f0:c9:07:60:f4: 39:30:ea:19:38:77:76:5e:16:96:95:37:d7:e3:78: 4a:a6:91:9d:ba:d7:3f:d3:5f:51:17:cd:10:cf:1b: b7:ac:4e:ad:40:a9:7a:5b:56:40:cc:2a:52:e7:dd: a2:a8:df:82:0c:f7:53:93:12:d4:de:4a:b6:46:e1: 51:61:56:6d:52:a9:13:ab:4b:29:10:06:ae:85:32: 05:56:f1:3c:0f:6f:c8:14:f5:b3:0c:3d:11:24:07: 1e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C6:F1:B8:C3:3A:24:C6:AB:90:34:2B:E9:0A:21:C1:9A:FF:6C:B3 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/6cbxuMM6JMarkDQr6QohwZr_bLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.52.0/24 45.117.54.0/24 45.123.144.0/24 103.4.248.0/22 103.49.152.0/22 103.196.8.0/23 103.216.0.0/22 139.5.22.0/23 Signature Algorithm: sha256WithRSAEncryption 56:52:68:ff:3f:d5:48:cb:c3:ef:ff:9f:92:e2:6f:c7:34:2a: 3d:6e:11:7b:db:ce:17:2c:be:20:b8:27:df:86:2c:7c:53:55: ef:8a:35:89:97:95:50:15:d0:af:6e:61:1d:30:16:31:05:33: ff:1c:06:91:57:c1:18:e7:ac:c4:ba:2c:b3:b5:74:f7:c5:c2: df:1b:be:6f:0e:2f:4c:fe:ef:d6:19:b8:26:18:e1:0d:4d:d6: 7b:42:2c:94:69:c1:bd:21:99:07:6a:48:d7:7f:bd:99:83:6a: 03:78:d8:54:ee:4d:f1:3a:8f:39:00:a5:7f:3d:a3:e7:db:36: 51:64:72:d4:59:e4:7d:27:60:f3:b8:2f:45:e8:38:a9:90:80: 6d:2d:15:b9:de:1f:ef:b0:da:0d:fe:51:b3:b2:fb:8a:21:2c: 91:52:7e:1c:92:ab:01:96:2e:40:5b:d1:43:cf:77:59:08:8e: 22:13:9d:6d:93:4f:fc:22:83:67:af:2a:41:eb:0d:7e:c2:99: fa:7a:2a:9f:ac:9d:ca:23:b8:48:64:56:b1:81:34:52:ae:8b: 98:d8:4c:dd:61:8a:46:fb:15:cc:75:9b:5c:56:35:9c:e2:c7: d9:13:e3:da:e9:94:cc:3b:93:1a:e6:b3:fa:91:81:98:f6:74: ef:24:34:9b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt+OSMSDy8N/gd/lfiRiaZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWM2ZjFiOGMzM2EyNGM2YWI5MDM0MmJlOTBhMjFjMTlhZmY2Y2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d9KCk+k3hATlN1XYy6M67FXKx+0 U+IVCbvy3Tw8fFeTKSuASc2Z8kfA61wAQUX4LrJP7WTpxNNR+VM5QN/WjIPmGPGo AsRPboIxYR7W0qtSVIb2uPnxHo7muUu9ImJ246QlkJ9P7oGegkemV3CYm+eG3Uof wqTwS0fzHms3VXM1kNfZmGmWQdmiy90ILJ9sJXM718wutx/lxvZhBGi98MkHYPQ5 MOoZOHd2XhaWlTfX43hKppGdutc/019RF80Qzxu3rE6tQKl6W1ZAzCpS592iqN+C DPdTkxLU3kq2RuFRYVZtUqkTq0spEAauhTIFVvE8D2/IFPWzDD0RJAceUQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFOnG8bjDOiTGq5A0K+kKIcGa/2yzMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvNmNieHVNTTZKTWFya0RRcjZRb2h3WnJfYkxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALXU0AwQA LXU2AwQALXuQAwQCZwT4AwQCZzGYAwQBZ8QIAwQCZ9gAAwQBiwUWMA0GCSqGSIb3 DQEBCwUAA4IBAQBWUmj/P9VIy8Pv/5+S4m/HNCo9bhF7284XLL4guCffhix8U1Xv ijWJl5VQFdCvbmEdMBYxBTP/HAaRV8EY56zEuiyztXT3xcLfG75vDi9M/u/WGbgm GOENTdZ7QiyUacG9IZkHakjXf72Zg2oDeNhU7k3xOo85AKV/PaPn2zZRZHLUWeR9 J2DzuC9F6DipkIBtLRW53h/vsNoN/lGzsvuKISyRUn4ckqsBli5AW9FDz3dZCI4i E51tk0/8IoNnrypB6w1+wpn6eiqfrJ3KI7hIZFaxgTRSrouY2EzdYYpG+xXMdZtc VjWc4sfZE+Pa6ZTMO5Ma5rP6kYGY9nTvJDSb -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:58 2026 by rpki-client