This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/G6j6G54eI6PykBhSQs9rNNcS6hw.roa File: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (raw, json) Hash identifier: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4= Subject key identifier: 1B:A8:FA:1B:9E:1E:23:A3:F2:90:18:52:42:CF:6B:34:D7:12:EA:1C Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019B797EC826170E4CD1CD0F2A18C4CFAD57 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/G6j6G54eI6PykBhSQs9rNNcS6hw.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 110.172.188.0/24 maxlen: 24 114.69.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c8:26:17:0e:4c:d1:cd:0f:2a:18:c4:cf:ad:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ba8fa1b9e1e23a3f290185242cf6b34d712ea1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:ee:e0:4e:7c:e6:db:1a:58:d8:08:52:c8: db:30:b6:28:1f:99:c9:1d:cd:c3:db:0d:38:8c:57: 41:e3:2e:3a:10:21:89:a7:96:2c:f7:d3:cf:ad:71: 04:e2:6a:54:5c:50:d8:79:91:13:17:de:cf:ac:cf: e4:ab:48:c8:54:80:42:f8:83:3e:e5:02:51:6f:20: a4:dd:05:17:74:7f:42:19:5d:5a:7d:73:b5:e2:18: 7d:d0:11:9f:98:ce:21:38:48:d2:c8:ec:0f:3c:18: 72:0e:4c:5b:76:a5:11:05:9f:29:de:af:b6:f5:b9: 05:c6:2b:24:73:8f:55:86:37:9d:8e:7d:8a:ac:13: 81:ee:75:8c:63:e7:a6:dc:6b:83:bf:17:5b:cd:80: 46:a8:06:7a:2f:07:51:95:a1:81:52:19:7b:e3:d0: 47:a0:db:9e:18:25:64:49:de:fc:00:c1:d1:4e:99: 5b:de:80:59:95:20:1e:6e:71:03:18:c4:6a:fc:96: be:0a:fd:ef:c8:a3:19:99:4e:f9:f2:3a:98:1e:a3: 22:6a:0a:35:18:4a:2a:0c:43:05:0b:b1:f2:8f:06: 6c:31:0f:5c:d9:f4:b7:ed:c9:a6:c8:7c:cb:78:2e: ad:12:e6:b5:a0:b0:85:f6:f3:2e:6f:6e:f0:97:4c: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A8:FA:1B:9E:1E:23:A3:F2:90:18:52:42:CF:6B:34:D7:12:EA:1C X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/G6j6G54eI6PykBhSQs9rNNcS6hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.172.188.0/24 114.69.246.0/24 Signature Algorithm: sha256WithRSAEncryption 46:71:f3:a6:87:55:13:b8:61:c5:c7:57:28:27:2b:cc:fc:63: d4:59:1d:bd:26:89:a0:bb:ff:4d:78:51:f8:f1:a0:94:92:63: 72:83:07:eb:2e:04:7d:0e:eb:20:8b:6f:57:96:c3:f3:64:bc: 10:5b:62:88:ea:9d:70:c7:85:07:ae:20:9f:12:05:32:97:f5: b2:db:74:24:90:ff:a0:65:dc:2c:01:42:62:19:59:d1:71:76: fe:62:01:8a:37:eb:ea:4b:85:e2:cc:23:55:c5:07:53:b9:c9: 96:81:fd:7f:66:12:29:20:1c:20:1a:8c:f7:62:4a:a0:eb:ca: 0a:21:41:fd:16:d6:6a:7f:4e:a5:3e:17:c8:6b:bb:76:c8:2e: 5b:d3:74:14:f9:cc:44:68:39:12:6e:63:55:31:0e:86:89:83: 19:bd:fe:8d:c0:4d:94:14:76:07:8f:19:29:87:38:34:78:4f: ff:19:c5:ee:4b:f4:45:5c:41:63:52:8a:63:e4:35:a7:b9:ab: df:da:3d:a7:40:93:1f:66:1f:08:d9:bc:f8:ad:b5:05:6f:73: e7:d3:f7:4d:1c:e0:d7:18:93:b8:e3:2f:84:e4:70:64:78:7d: 41:d7:0d:9e:6e:2e:5b:68:dd:17:9e:25:e1:ea:3a:e8:83:d4: 96:31:49:cc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fsgmFw5M0c0PKhjEz61XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmE4ZmExYjllMWUyM2EzZjI5MDE4NTI0MmNmNmIzNGQ3MTJlYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwzu4E585tsaWNgIUsjbMLYoH5nJ Hc3D2w04jFdB4y46ECGJp5Ys99PPrXEE4mpUXFDYeZETF97PrM/kq0jIVIBC+IM+ 5QJRbyCk3QUXdH9CGV1afXO14hh90BGfmM4hOEjSyOwPPBhyDkxbdqURBZ8p3q+2 9bkFxiskc49Vhjedjn2KrBOB7nWMY+em3GuDvxdbzYBGqAZ6LwdRlaGBUhl749BH oNueGCVkSd78AMHRTplb3oBZlSAebnEDGMRq/Ja+Cv3vyKMZmU758jqYHqMiago1 GEoqDEMFC7HyjwZsMQ9c2fS37cmmyHzLeC6tEua1oLCF9vMub27wl0xp4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBuo+hueHiOj8pAYUkLPazTXEuocMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvRzZqNkc1NGVJNlB5a0JoU1FzOXJOTmNTNmh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbqy8AwQA ckX2MA0GCSqGSIb3DQEBCwUAA4IBAQBGcfOmh1UTuGHFx1coJyvM/GPUWR29Jomg u/9NeFH48aCUkmNygwfrLgR9Dusgi29XlsPzZLwQW2KI6p1wx4UHriCfEgUyl/Wy 23QkkP+gZdwsAUJiGVnRcXb+YgGKN+vqS4XizCNVxQdTucmWgf1/ZhIpIBwgGoz3 Ykqg68oKIUH9FtZqf06lPhfIa7t2yC5b03QU+cxEaDkSbmNVMQ6GiYMZvf6NwE2U FHYHjxkphzg0eE//GcXuS/RFXEFjUopj5DWnuavf2j2nQJMfZh8I2bz4rbUFb3Pn 0/dNHODXGJO44y+E5HBkeH1B1w2ebi5baN0XniXh6jrog9SWMUnM -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:09 2026 by rpki-client