This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/6x8_lobLoVhuOkMPbJ37tyo730k.roa File: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (raw, json) Hash identifier: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ= Subject key identifier: EB:1F:3F:96:86:CB:A1:58:6E:3A:43:0F:6C:9D:FB:B7:2A:3B:DF:49 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019B797EC76621567743D7DAE7D0A72DABCF Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/6x8_lobLoVhuOkMPbJ37tyo730k.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 14.102.9.0/24 maxlen: 24 14.102.11.0/24 maxlen: 24 91.200.254.0/24 maxlen: 24 110.172.191.0/24 maxlen: 24 114.69.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c7:66:21:56:77:43:d7:da:e7:d0:a7:2d:ab:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb1f3f9686cba1586e3a430f6c9dfbb72a3bdf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:cc:dc:b8:5a:d5:f3:59:22:45:1f:3f:52: d7:b1:57:91:98:0c:54:8e:c6:bd:00:f5:46:a4:b0: ad:11:00:73:8b:a0:87:56:c5:64:da:ef:cf:a6:f3: 63:7b:6b:42:e7:f9:cf:11:d4:79:01:37:7d:70:8e: 03:3f:2f:cc:6a:1f:8b:f3:a3:c5:1d:83:16:9f:ad: 55:32:a1:ee:e8:45:a6:ad:91:0c:a0:33:4e:2a:ee: 5f:7a:73:78:25:69:c0:17:91:bd:f2:cc:84:25:c7: c5:87:2b:a9:a9:17:4a:74:e9:76:35:51:24:aa:52: 8f:fd:ef:6b:51:8c:20:a4:4a:20:e1:13:fb:c8:af: 6c:31:7d:12:67:aa:ed:36:f7:eb:44:a8:f0:cf:7b: e8:1b:0c:3b:7e:9d:e7:3d:f7:6f:7a:d4:73:90:5c: 9d:5b:e5:80:58:72:22:46:15:4d:8f:c9:32:56:7c: fc:98:d6:be:d0:57:a4:6a:8c:c3:86:da:f2:da:52: f9:45:6a:28:2e:10:88:2d:23:32:ba:af:d6:dd:76: f7:85:f3:7b:00:de:6d:9c:be:41:fa:6d:59:3c:4a: 5e:86:18:75:da:3a:90:28:1a:f9:d0:ec:94:8e:84: 97:fd:1c:b3:3f:ba:6c:69:71:b4:56:c6:90:2a:20: 14:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1F:3F:96:86:CB:A1:58:6E:3A:43:0F:6C:9D:FB:B7:2A:3B:DF:49 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/6x8_lobLoVhuOkMPbJ37tyo730k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.9.0/24 14.102.11.0/24 91.200.254.0/24 110.172.191.0/24 114.69.245.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:03:51:d9:5c:da:af:ff:ea:16:1e:0f:f9:c7:0e:6f:85:f4: 44:61:1d:8e:ea:e0:d5:c2:38:2b:e9:16:b1:b1:60:d0:84:64: 79:40:2a:d4:01:3d:76:bd:b3:c1:86:6b:df:3b:a1:05:18:25: 13:08:89:92:a6:47:de:64:d2:1c:cd:d8:b4:9f:7f:7c:c0:cd: 31:46:c1:d3:cb:be:1b:4c:f6:d0:93:99:da:c5:6a:3b:3d:bb: 43:d4:bf:b5:22:dc:29:32:ce:5a:5e:92:61:fc:9d:4b:0b:ac: b9:20:b1:2c:4f:3a:b2:88:f2:84:05:38:b3:74:79:49:28:a6: 47:1b:6b:bf:6a:93:30:d8:2c:60:8a:ef:65:5b:f3:b8:99:d4: 09:29:de:22:de:5c:44:31:dd:39:bd:c7:9b:3e:43:b0:94:e8: 12:89:6e:1b:33:80:55:6e:01:9e:a5:75:71:20:f1:93:37:53: 38:7e:fd:1a:c8:de:ec:68:db:97:1b:b7:8d:9f:d0:7c:7c:a7: 5a:7f:e4:bc:bf:45:1a:bb:d6:a7:bf:aa:f2:74:42:5c:29:8b: 93:88:44:3e:ca:ca:ac:9b:37:8a:64:89:30:92:ea:da:6c:32: 73:10:7f:3e:7a:79:53:1d:fc:34:13:d2:57:8b:db:64:10:c6: 2e:5b:2b:18 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5fsdmIVZ3Q9fa59CnLavPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjFmM2Y5Njg2Y2JhMTU4NmUzYTQzMGY2YzlkZmJiNzJhM2JkZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBzM3Lha1fNZIkUfP1LXsVeRmAxU jsa9APVGpLCtEQBzi6CHVsVk2u/PpvNje2tC5/nPEdR5ATd9cI4DPy/Mah+L86PF HYMWn61VMqHu6EWmrZEMoDNOKu5fenN4JWnAF5G98syEJcfFhyupqRdKdOl2NVEk qlKP/e9rUYwgpEog4RP7yK9sMX0SZ6rtNvfrRKjwz3voGww7fp3nPfdvetRzkFyd W+WAWHIiRhVNj8kyVnz8mNa+0FekaozDhtry2lL5RWooLhCILSMyuq/W3Xb3hfN7 AN5tnL5B+m1ZPEpehhh12jqQKBr50OyUjoSX/RyzP7psaXG0VsaQKiAULQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOsfP5aGy6FYbjpDD2yd+7cqO99JMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvNng4X2xvYkxvVmh1T2tNUGJKMzd0eW83MzBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQADmYJAwQA DmYLAwQAW8j+AwQAbqy/AwQAckX1MA0GCSqGSIb3DQEBCwUAA4IBAQCOA1HZXNqv /+oWHg/5xw5vhfREYR2O6uDVwjgr6RaxsWDQhGR5QCrUAT12vbPBhmvfO6EFGCUT CImSpkfeZNIczdi0n398wM0xRsHTy74bTPbQk5naxWo7PbtD1L+1ItwpMs5aXpJh /J1LC6y5ILEsTzqyiPKEBTizdHlJKKZHG2u/apMw2Cxgiu9lW/O4mdQJKd4i3lxE Md05vcebPkOwlOgSiW4bM4BVbgGepXVxIPGTN1M4fv0ayN7saNuXG7eNn9B8fKda f+S8v0Uau9anv6rydEJcKYuTiEQ+ysqsmzeKZIkwkurabDJzEH8+enlTHfw0E9JX i9tkEMYuWysY -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:58 2026 by rpki-client