This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/RFjAhcJEe6eWD1luSBJsmYuiQb0.roa File: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (raw, json) Hash identifier: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs= Subject key identifier: 44:58:C0:85:C2:44:7B:A7:96:0F:59:6E:48:12:6C:99:8B:A2:41:BD Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019B7BA4F3E9EA22B48062F9C8A7150955B5 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/RFjAhcJEe6eWD1luSBJsmYuiQb0.roa Signing time: Thu 01 Jan 2026 22:19:26 +0000 ROA not before: Thu 01 Jan 2026 22:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5593 IP address blocks: 212.110.128.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 01:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f3:e9:ea:22:b4:80:62:f9:c8:a7:15:09:55:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4458c085c2447ba7960f596e48126c998ba241bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:c7:8a:84:f8:c3:06:4e:a7:f6:3c:15:59: a4:ea:19:b9:79:2c:aa:8e:c0:f4:7a:52:b3:cd:be: fa:0f:3f:25:32:e0:4b:7b:cd:03:4c:7e:46:01:f0: 46:11:b3:91:8d:a0:83:2c:b3:d4:41:08:a7:d3:a3: 78:42:c3:ed:08:ed:22:52:26:38:9c:d8:ee:c8:84: ed:20:da:8c:be:31:c1:ad:f9:d3:7c:15:32:32:78: 21:d8:e0:96:62:c3:f1:4c:c1:6c:92:3f:11:58:cd: 88:05:0c:66:b0:31:26:d8:a0:e3:4e:9a:d6:97:3e: 97:0d:71:f7:99:da:8d:20:d4:e2:fe:7a:74:8d:55: 72:f5:56:58:ec:81:91:cf:f7:7c:0f:ce:29:eb:1f: 7d:d5:96:87:f1:1b:c6:38:d6:f7:31:84:3f:87:d5: 0e:fb:bb:12:74:0e:72:ef:85:c9:ee:6e:d1:a6:be: e4:0e:60:d0:b5:c1:53:62:20:a1:53:af:15:ca:ca: d0:6a:b7:41:b9:4b:88:b7:60:77:b5:ad:58:5f:65: 1c:f2:03:9b:d4:cd:36:47:b0:3d:c0:80:f0:32:ee: 7f:cc:2c:4d:18:22:ae:9a:ea:c0:08:86:d3:40:42: 3d:06:70:7b:da:cb:87:87:21:82:37:4d:fd:14:db: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:58:C0:85:C2:44:7B:A7:96:0F:59:6E:48:12:6C:99:8B:A2:41:BD X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/RFjAhcJEe6eWD1luSBJsmYuiQb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.110.128.0/24 Signature Algorithm: sha256WithRSAEncryption 74:96:dc:94:17:09:7d:2d:ef:81:1f:3e:e3:b4:41:c9:31:fc: 79:19:e1:06:a9:e1:d1:ea:cc:ba:16:8e:ce:96:a8:4e:15:62: f8:0e:89:51:7e:d8:eb:e9:5a:a9:ec:bf:dd:84:cd:26:0f:63: 68:21:46:49:d0:bd:29:db:5c:7a:97:cd:34:1d:5e:aa:ed:dd: 07:14:5a:3e:5b:cd:d0:b1:fe:6c:5b:11:20:be:76:1f:8d:b0: 05:a5:95:81:a4:e7:a1:bd:47:69:85:91:bb:7b:ef:b4:c3:ad: 57:d9:e8:d0:a8:50:cd:56:93:78:ac:f2:c1:ec:69:e0:be:a8: 20:23:f5:85:3d:04:fa:85:fe:f8:c3:34:fa:d1:8f:11:5d:45: f1:af:9e:3a:50:87:59:57:4d:1d:a2:d6:6d:9b:3e:6c:33:70: 40:e9:4f:55:87:62:34:6c:c1:84:0e:df:46:1a:d6:b6:21:34: 43:20:0f:8d:9d:60:8e:46:92:f4:1a:60:fa:36:2f:24:20:2d: a7:23:1e:69:5d:ab:97:62:bb:b1:1f:27:25:a8:13:ec:8a:35: 54:ba:01:a5:db:30:9c:7f:2d:be:92:b9:17:96:70:0e:67:54: f3:ab:f0:29:62:8c:53:44:11:85:8a:d2:06:3a:f1:19:70:c2: 1d:e9:16:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPPp6iK0gGL5yKcVCVW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDU4YzA4NWMyNDQ3YmE3OTYwZjU5NmU0ODEyNmM5OThiYTI0MWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tDHioT4wwZOp/Y8FVmk6hm5eSyq jsD0elKzzb76Dz8lMuBLe80DTH5GAfBGEbORjaCDLLPUQQin06N4QsPtCO0iUiY4 nNjuyITtINqMvjHBrfnTfBUyMngh2OCWYsPxTMFskj8RWM2IBQxmsDEm2KDjTprW lz6XDXH3mdqNINTi/np0jVVy9VZY7IGRz/d8D84p6x991ZaH8RvGONb3MYQ/h9UO +7sSdA5y74XJ7m7Rpr7kDmDQtcFTYiChU68VysrQardBuUuIt2B3ta1YX2Uc8gOb 1M02R7A9wIDwMu5/zCxNGCKumurACIbTQEI9BnB72suHhyGCN039FNv9kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFERYwIXCRHunlg9ZbkgSbJmLokG9MB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEvUkZqQWhjSkVlNmVXRDFsdVNCSnNtWXVpUWIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1G6AMA0G CSqGSIb3DQEBCwUAA4IBAQB0ltyUFwl9Le+BHz7jtEHJMfx5GeEGqeHR6sy6Fo7O lqhOFWL4DolRftjr6Vqp7L/dhM0mD2NoIUZJ0L0p21x6l800HV6q7d0HFFo+W83Q sf5sWxEgvnYfjbAFpZWBpOehvUdphZG7e++0w61X2ejQqFDNVpN4rPLB7Gngvqgg I/WFPQT6hf74wzT60Y8RXUXxr546UIdZV00dotZtmz5sM3BA6U9Vh2I0bMGEDt9G Gta2ITRDIA+NnWCORpL0GmD6Ni8kIC2nIx5pXauXYruxHyclqBPsijVUugGl2zCc fy2+krkXlnAOZ1Tzq/ApYoxTRBGFitIGOvEZcMId6Rbx -----END CERTIFICATE-----Generated at Sun Feb 8 08:10:09 2026 by rpki-client