This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa File: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (raw, json) Hash identifier: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM= Subject key identifier: D6:80:3D:FB:0A:F7:3E:E6:DC:B7:FA:54:E5:94:A8:67:0F:DD:33:75 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019B7BA4F511F36F518257B0FDE314ABF2ED Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa Signing time: Thu 01 Jan 2026 22:19:26 +0000 ROA not before: Thu 01 Jan 2026 22:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34136 IP address blocks: 212.110.138.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 01:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f5:11:f3:6f:51:82:57:b0:fd:e3:14:ab:f2:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6803dfb0af73ee6dcb7fa54e594a8670fdd3375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:e0:58:91:32:68:45:26:4b:c5:13:3c:2f: f9:e4:f1:2b:51:35:12:2a:c9:9d:ed:6b:4e:b9:42: 32:df:05:0e:b3:47:25:64:8f:a5:d9:f3:3d:05:3f: 94:b8:7e:a6:ff:93:ca:c7:f1:4c:29:f3:36:d8:5f: 74:c5:8b:71:26:5b:75:6c:39:65:47:89:53:35:6f: 93:67:12:6d:b2:6c:f9:80:b1:45:c5:29:e3:b2:5b: e9:6b:69:9e:b7:a2:99:3b:07:95:15:4a:7a:c0:c8: d0:b8:41:8e:7d:e4:2d:23:d2:5d:0b:fe:45:e3:ca: c4:a5:79:a5:a3:a9:23:6d:e4:df:8f:45:5c:53:79: 37:19:30:36:9f:cc:ac:21:e4:32:c9:9c:94:24:a1: 17:ef:ff:22:c3:ec:31:c6:0c:1b:8c:7f:dd:aa:44: 12:5d:42:3e:48:e8:d3:8b:15:d6:ac:0f:22:8d:e3: 7a:2e:62:96:ab:13:a9:a8:41:0d:f9:c6:d3:5e:ef: 71:a8:44:50:9c:17:dc:00:4f:c9:d6:2a:73:82:41: c4:2b:6b:5b:4c:3c:4d:86:9e:2e:29:5a:25:1a:0a: e8:10:bc:d9:f0:9b:a7:50:bc:32:f7:72:cf:7b:3f: b5:13:99:fd:be:36:f2:49:5c:25:a6:9f:30:64:f8: ba:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:80:3D:FB:0A:F7:3E:E6:DC:B7:FA:54:E5:94:A8:67:0F:DD:33:75 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.110.138.0/23 Signature Algorithm: sha256WithRSAEncryption ad:8b:a6:c0:31:72:37:75:9e:1f:c3:ff:a4:27:fc:26:70:d2: 6e:ac:36:53:f5:6d:86:56:7b:06:68:b1:c8:29:af:8d:32:3b: 56:a3:8f:5d:ff:f3:ea:f8:3c:e7:47:e4:db:00:0b:ad:08:ce: 6e:97:d0:cf:65:88:27:bf:78:c2:01:39:93:61:50:bd:0f:7d: 62:75:81:4e:56:7a:05:31:0c:be:19:cc:12:25:bb:99:93:80: 64:5a:62:22:aa:86:d1:e1:cd:c0:37:d9:b9:be:5d:8a:9f:e3: 47:42:64:4e:d5:9a:bf:83:4b:70:7f:1d:bc:07:84:de:c6:44: e7:9e:bd:b9:41:ed:a6:51:47:d3:25:fa:ca:03:56:9f:b9:e1: 32:01:90:6a:cf:e5:c6:4c:3c:ce:01:84:91:48:46:1c:30:8d: 96:95:01:e4:f4:e3:80:11:a5:5a:be:d5:1e:ff:1b:07:82:c2: 87:d1:36:43:b3:80:75:0e:80:6c:bb:5e:38:20:19:ec:64:b0: b7:e3:06:82:df:fa:34:18:d6:89:1e:e2:96:85:43:a9:ec:bc: 6d:76:08:5a:73:95:4c:1f:d0:92:d0:8c:e5:e2:fd:fb:c7:d5: 2b:fa:19:08:be:23:64:fb:db:ef:16:10:45:a9:da:ce:ad:ba: 3b:f2:a3:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPUR829Rglew/eMUq/LtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjgwM2RmYjBhZjczZWU2ZGNiN2ZhNTRlNTk0YTg2NzBmZGQzMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x7gWJEyaEUmS8UTPC/55PErUTUS Ksmd7WtOuUIy3wUOs0clZI+l2fM9BT+UuH6m/5PKx/FMKfM22F90xYtxJlt1bDll R4lTNW+TZxJtsmz5gLFFxSnjslvpa2met6KZOweVFUp6wMjQuEGOfeQtI9JdC/5F 48rEpXmlo6kjbeTfj0VcU3k3GTA2n8ysIeQyyZyUJKEX7/8iw+wxxgwbjH/dqkQS XUI+SOjTixXWrA8ijeN6LmKWqxOpqEEN+cbTXu9xqERQnBfcAE/J1ipzgkHEK2tb TDxNhp4uKVolGgroELzZ8JunULwy93LPez+1E5n9vjbySVwlpp8wZPi6uwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNaAPfsK9z7m3Lf6VOWUqGcP3TN1MB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEvMW9BOS13cjNQdWJjdF9wVTVaU29ad19kTTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1G6KMA0G CSqGSIb3DQEBCwUAA4IBAQCti6bAMXI3dZ4fw/+kJ/wmcNJurDZT9W2GVnsGaLHI Ka+NMjtWo49d//Pq+DznR+TbAAutCM5ul9DPZYgnv3jCATmTYVC9D31idYFOVnoF MQy+GcwSJbuZk4BkWmIiqobR4c3AN9m5vl2Kn+NHQmRO1Zq/g0twfx28B4TexkTn nr25Qe2mUUfTJfrKA1afueEyAZBqz+XGTDzOAYSRSEYcMI2WlQHk9OOAEaVavtUe /xsHgsKH0TZDs4B1DoBsu144IBnsZLC34waC3/o0GNaJHuKWhUOp7Lxtdghac5VM H9CS0Izl4v37x9Ur+hkIviNk+9vvFhBFqdrOrbo78qN8 -----END CERTIFICATE-----Generated at Sun Feb 8 08:10:08 2026 by rpki-client