This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/bIQoTOlurbUsiShL-n0rzj92kYI.roa File: bIQoTOlurbUsiShL-n0rzj92kYI.roa (raw, json) Hash identifier: hwBosCck0h1kkN+1Rgmm9YtpuXI3vjPn8xwHOLDkdH4= Subject key identifier: 6C:84:28:4C:E9:6E:AD:B5:2C:89:28:4B:FA:7D:2B:CE:3F:76:91:82 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F2D922A80F62C5086B78CF9CA7EEF Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/bIQoTOlurbUsiShL-n0rzj92kYI.roa Signing time: Thu 01 Jan 2026 12:18:56 +0000 ROA not before: Thu 01 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59253 IP address blocks: 103.148.140.0/24 maxlen: 24 103.149.84.0/24 maxlen: 24 103.151.102.0/24 maxlen: 24 103.152.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2d:92:2a:80:f6:2c:50:86:b7:8c:f9:ca:7e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c84284ce96eadb52c89284bfa7d2bce3f769182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:f2:44:02:9b:e2:85:9d:5e:18:a8:f2:8b: 3c:71:88:89:f5:04:00:4a:97:28:18:c5:e8:f9:d7: 99:93:ed:b9:be:53:e0:3f:77:ae:b0:f8:71:86:d0: 9b:51:70:03:ed:1b:77:52:c3:62:69:c7:8a:7c:95: 1d:64:eb:8b:6f:c5:82:34:1d:f2:10:4f:ff:fb:eb: 75:e9:ed:80:39:ee:b2:bd:83:d5:2a:f1:01:27:5d: bd:59:cc:e3:3c:e9:cf:5e:9b:9f:55:dc:b4:d9:73: 59:9f:4e:4b:12:5c:cc:4f:ed:0b:1d:3a:d2:b8:16: 6c:62:17:0e:be:f2:68:35:f4:f1:08:f3:b3:dc:eb: 45:ce:7d:58:c8:cf:c5:a5:e3:3d:bf:3a:0f:78:c4: e3:33:1e:9f:ad:87:58:05:6a:ac:5b:0c:6c:16:52: 74:95:6c:cf:0e:fd:a6:cf:c9:ea:f9:53:3b:92:43: 77:59:6f:91:51:b3:5d:21:79:ff:81:e9:df:d1:43: 14:e9:b3:0b:de:c4:57:ba:85:a1:be:b2:10:15:45: 52:4a:fb:9d:97:28:dd:b5:9f:c1:0a:53:fd:c0:21: 53:42:23:1c:a3:c8:c8:37:ce:3a:56:e5:5f:0f:2b: f0:1c:fe:6b:00:e1:ee:f7:26:19:06:86:ac:8a:42: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:84:28:4C:E9:6E:AD:B5:2C:89:28:4B:FA:7D:2B:CE:3F:76:91:82 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/bIQoTOlurbUsiShL-n0rzj92kYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.140.0/24 103.149.84.0/24 103.151.102.0/24 103.152.16.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:30:41:fc:07:03:08:20:67:8e:8b:da:5b:bf:b1:97:36:5b: cc:89:03:cf:c2:00:85:39:90:8e:a4:fb:7f:2c:23:93:cd:4b: d5:71:a8:8c:62:d8:ad:f7:cf:f5:3d:aa:5e:cc:6b:b5:d7:30: 12:64:e7:2b:6c:7c:66:c4:49:fc:69:67:5b:9b:09:6b:4c:9e: 2a:64:52:c7:aa:e6:f8:57:0d:31:27:40:25:fa:39:e6:54:ac: 8d:0b:31:13:57:28:34:64:eb:9f:e7:2f:b8:17:2d:d2:85:02: 1b:a0:12:d7:0a:8d:13:7f:b5:8e:2b:33:81:26:26:26:21:1d: 1e:39:eb:a2:1c:fa:7d:22:dd:6d:91:24:51:a3:73:47:15:2a: d5:37:08:56:c7:4d:ad:dc:c5:ad:0d:12:f6:90:50:4f:6d:b4: a8:21:37:14:12:3a:df:a6:3c:6b:92:3e:e8:70:de:4d:da:ae: ce:e2:72:f9:77:bf:3d:4e:db:67:74:37:69:82:a2:39:7f:a5: 64:d1:4b:9b:81:8b:a2:24:78:4e:42:8b:e1:7a:38:ac:c5:29: 70:6f:88:8d:2f:3f:10:db:48:43:99:4b:76:2d:17:4a:0c:6d: 5c:8b:9b:f7:20:90:78:a0:bb:c7:2d:38:b1:14:c5:47:84:02: ce:06:c3:42 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5fy2SKoD2LFCGt4z5yn7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Yzg0Mjg0Y2U5NmVhZGI1MmM4OTI4NGJmYTdkMmJjZTNmNzY5MTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktbyRAKb4oWdXhio8os8cYiJ9QQA SpcoGMXo+deZk+25vlPgP3eusPhxhtCbUXAD7Rt3UsNiaceKfJUdZOuLb8WCNB3y EE//++t16e2AOe6yvYPVKvEBJ129WczjPOnPXpufVdy02XNZn05LElzMT+0LHTrS uBZsYhcOvvJoNfTxCPOz3OtFzn1YyM/FpeM9vzoPeMTjMx6frYdYBWqsWwxsFlJ0 lWzPDv2mz8nq+VM7kkN3WW+RUbNdIXn/genf0UMU6bML3sRXuoWhvrIQFUVSSvud lyjdtZ/BClP9wCFTQiMco8jIN846VuVfDyvwHP5rAOHu9yYZBoasikLXGwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGyEKEzpbq21LIkoS/p9K84/dpGCMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvYklRb1RPbHVyYlVzaVNoTC1uMHJ6ajkya1lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAZ5SMAwQA Z5VUAwQAZ5dmAwQAZ5gQMA0GCSqGSIb3DQEBCwUAA4IBAQA+MEH8BwMIIGeOi9pb v7GXNlvMiQPPwgCFOZCOpPt/LCOTzUvVcaiMYtit98/1PapezGu11zASZOcrbHxm xEn8aWdbmwlrTJ4qZFLHqub4Vw0xJ0Al+jnmVKyNCzETVyg0ZOuf5y+4Fy3ShQIb oBLXCo0Tf7WOKzOBJiYmIR0eOeuiHPp9It1tkSRRo3NHFSrVNwhWx02t3MWtDRL2 kFBPbbSoITcUEjrfpjxrkj7ocN5N2q7O4nL5d789TttndDdpgqI5f6Vk0UubgYui JHhOQovhejisxSlwb4iNLz8Q20hDmUt2LRdKDG1ci5v3IJB4oLvHLTixFMVHhALO BsNC -----END CERTIFICATE-----Generated at Wed Jan 21 07:34:07 2026 by rpki-client