This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/6CgLoHR7xnHuznCLYeF6l0bX4Sw.roa File: 6CgLoHR7xnHuznCLYeF6l0bX4Sw.roa (raw, json) Hash identifier: kP+Fh2OmGyHiqsB1Ly+38p6buBpw7sYBpOPW2d4kmR8= Subject key identifier: E8:28:0B:A0:74:7B:C6:71:EE:CE:70:8B:61:E1:7A:97:46:D7:E1:2C Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B7BA3D7CC7AC5C051F308055526013349 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/6CgLoHR7xnHuznCLYeF6l0bX4Sw.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 212.100.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d7:cc:7a:c5:c0:51:f3:08:05:55:26:01:33:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8280ba0747bc671eece708b61e17a9746d7e12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:4d:db:02:aa:19:49:5e:b8:1d:2d:9f:17: 5e:e2:71:b3:ff:af:60:cd:cd:65:81:c2:ac:9a:12: ab:e9:28:6a:b2:b9:f6:04:d8:6a:56:ff:dc:a8:67: 29:71:4c:f0:c1:5b:6c:73:6c:51:0a:36:bf:8f:d6: 6f:df:6a:48:53:fc:f9:bf:40:13:b1:90:ef:4a:2a: ba:9c:75:ca:39:c8:36:6a:d4:da:da:de:ed:dc:66: 26:54:13:27:a8:ef:1b:66:2e:da:ea:4a:f4:7d:ee: 7f:46:ee:67:82:d4:dc:f6:bc:c6:b6:2e:c9:09:8b: 61:91:21:15:de:07:5a:52:f1:5a:c7:09:cf:13:fa: 2b:23:4a:04:e3:a7:b4:a9:e4:76:af:37:e6:84:fa: 4c:34:2d:f5:2a:fb:0e:ee:50:96:1f:ce:b6:61:9b: 6c:9a:31:e5:ed:0c:de:28:b3:84:a9:aa:04:d8:b3: 44:60:37:1b:22:5e:40:a0:ba:e2:85:33:03:37:d4: 6e:03:04:e0:e1:f9:5b:41:15:bf:37:63:2b:f2:71: d4:14:e1:55:39:6f:b7:4d:a0:04:fc:62:a3:a3:17: 94:0a:c8:c1:ae:11:8c:89:e6:b2:85:59:7d:be:7b: f7:c6:b3:a3:f0:3d:4c:ca:47:7e:50:6b:5f:14:2f: bd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:28:0B:A0:74:7B:C6:71:EE:CE:70:8B:61:E1:7A:97:46:D7:E1:2C X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/6CgLoHR7xnHuznCLYeF6l0bX4Sw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.189.0/24 Signature Algorithm: sha256WithRSAEncryption 72:4b:a0:5c:77:1b:f0:d3:db:65:f3:f7:89:11:d7:a4:6a:f3: 23:9b:b0:d3:29:d5:39:f5:11:d3:a6:fa:a4:52:dd:0a:67:ba: d7:71:35:60:78:76:ad:52:e2:aa:31:f7:a8:3a:47:61:73:e0: 2f:a5:79:7e:0b:dd:7b:2e:8f:84:28:2b:0f:8e:17:81:28:2f: 0b:e3:45:41:59:a6:19:f0:3c:4e:64:27:e6:62:29:7a:5d:ef: f1:32:b5:2c:67:2b:3d:45:a8:a2:c2:33:b3:78:ba:89:96:b0: 02:51:fb:e5:d2:bb:02:f1:5c:af:11:2d:6e:33:b3:32:ab:54: ec:aa:0a:82:0a:ec:dd:83:58:e9:49:89:1a:23:de:d8:24:a5: 96:81:34:39:a5:07:c0:bd:a8:48:f1:b7:05:cf:29:f1:5e:e2: 31:fb:ee:98:8d:47:1e:4c:f5:b5:55:e2:90:3a:19:22:53:fb: 84:ac:4d:26:c3:96:ff:48:27:db:81:68:e8:3c:8b:cb:6e:92: 35:e9:b0:85:0c:3a:34:5b:ed:43:f3:c1:26:3c:ec:4f:27:1f: 74:18:5d:1c:57:c3:c2:11:e6:8c:a4:30:eb:17:48:c8:61:e1: fa:1b:23:10:44:4a:1f:96:29:6c:57:b9:0b:c6:de:8b:45:b8: 84:aa:89:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9fMesXAUfMIBVUmATNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODI4MGJhMDc0N2JjNjcxZWVjZTcwOGI2MWUxN2E5NzQ2ZDdlMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2JN2wKqGUleuB0tnxde4nGz/69g zc1lgcKsmhKr6Shqsrn2BNhqVv/cqGcpcUzwwVtsc2xRCja/j9Zv32pIU/z5v0AT sZDvSiq6nHXKOcg2atTa2t7t3GYmVBMnqO8bZi7a6kr0fe5/Ru5ngtTc9rzGti7J CYthkSEV3gdaUvFaxwnPE/orI0oE46e0qeR2rzfmhPpMNC31KvsO7lCWH862YZts mjHl7QzeKLOEqaoE2LNEYDcbIl5AoLrihTMDN9RuAwTg4flbQRW/N2Mr8nHUFOFV OW+3TaAE/GKjoxeUCsjBrhGMieayhVl9vnv3xrOj8D1Mykd+UGtfFC+9TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOgoC6B0e8Zx7s5wi2HhepdG1+EsMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvNkNnTG9IUjd4bkh1em5DTFllRjZsMGJYNFN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GS9MA0G CSqGSIb3DQEBCwUAA4IBAQByS6Bcdxvw09tl8/eJEdekavMjm7DTKdU59RHTpvqk Ut0KZ7rXcTVgeHatUuKqMfeoOkdhc+AvpXl+C917Lo+EKCsPjheBKC8L40VBWaYZ 8DxOZCfmYil6Xe/xMrUsZys9RaiiwjOzeLqJlrACUfvl0rsC8VyvES1uM7Myq1Ts qgqCCuzdg1jpSYkaI97YJKWWgTQ5pQfAvahI8bcFzynxXuIx++6YjUceTPW1VeKQ OhkiU/uErE0mw5b/SCfbgWjoPIvLbpI16bCFDDo0W+1D88EmPOxPJx90GF0cV8PC EeaMpDDrF0jIYeH6GyMQREoflilsV7kLxt6LRbiEqonf -----END CERTIFICATE-----Generated at Mon Jan 19 05:23:12 2026 by rpki-client