This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa File: oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa (raw, json) Hash identifier: XUq2WuxGzyAj/pRWgnx4uOuNcbSM05FoBf026KrRFWM= Subject key identifier: A1:7E:88:97:97:D1:57:55:F9:8C:08:2A:C4:44:41:5E:F5:0F:FD:3C Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996 Certificate serial: 019B7835292D074189CB8163DBE2F66166F4 Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa Signing time: Thu 01 Jan 2026 06:18:28 +0000 ROA not before: Thu 01 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 62.122.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:29:2d:07:41:89:cb:81:63:db:e2:f6:61:66:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996 Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a17e889797d15755f98c082ac444415ef50ffd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:23:d5:49:29:88:03:ec:7f:5d:0c:06:e0: ab:7b:45:d4:67:bf:8d:1e:62:74:17:86:2f:3d:2d: f5:fe:41:db:e4:fb:c8:1e:d0:31:b1:e5:c4:f8:99: 16:eb:74:8d:67:24:d2:ea:df:d4:2f:e9:69:e9:dc: a3:02:53:11:8e:c7:8c:fa:bf:20:f8:7b:b7:73:53: fa:cb:e4:db:a6:2c:44:79:72:2f:24:c9:fe:81:4f: b1:7a:30:44:b3:83:77:d4:f0:22:cf:f0:1e:d0:94: 9c:27:65:78:c0:eb:ba:51:c8:09:89:49:28:0e:a2: 3f:60:de:d2:ed:57:2f:e7:2f:45:2f:58:70:94:19: 1f:37:56:13:2c:9d:03:a9:9e:d7:e4:a7:2c:d9:34: 5e:de:f7:e2:cd:e8:31:44:70:52:f6:e7:49:38:df: b7:b7:ec:b1:1a:10:de:db:b3:a4:66:2a:15:21:1a: c0:7d:39:f1:67:b1:6c:04:2e:3b:c2:a6:17:57:97: d2:ee:fc:0e:31:d5:63:f2:c9:ee:2d:a3:7d:74:05: a3:72:7b:c0:da:0b:46:06:68:ac:fb:5b:d0:d9:4e: d5:82:6e:c4:0c:a7:50:e9:63:2e:18:81:36:b7:7f: 18:62:c4:3e:55:68:5c:f1:87:db:d1:38:e2:a3:70: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7E:88:97:97:D1:57:55:F9:8C:08:2A:C4:44:41:5E:F5:0F:FD:3C X509v3 Authority Key Identifier: keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.160.0/21 Signature Algorithm: sha256WithRSAEncryption 42:fb:a4:78:61:25:fd:d9:2f:fe:6e:f5:ae:01:d9:51:b3:e5: da:38:2d:4e:b1:32:0e:a8:79:8d:6e:f9:2c:61:77:4d:6c:51: 2e:29:f7:cd:8c:a8:5e:c6:6a:34:b1:ce:f5:5a:87:c5:a8:a4: 6c:55:fb:0b:1f:10:79:ee:36:45:62:0d:13:9c:2c:5d:bc:9e: e5:8b:5d:92:23:6b:18:ae:6d:06:64:c3:96:6f:e1:d8:22:60: a8:d5:99:31:dc:cf:fe:f4:4d:4f:7a:57:3f:5a:53:75:ec:95: 25:53:1c:35:6c:74:6d:96:bb:9a:32:7b:cd:bc:ee:8e:37:2d: 67:29:82:78:6b:aa:1a:17:d2:e0:4f:40:37:4c:fc:6b:af:4e: e1:99:2b:fe:ae:65:76:0e:d2:84:b7:2c:e5:45:b7:d8:60:71: f5:71:cb:4f:99:35:78:db:31:8d:b6:c3:ac:12:c5:d0:8f:e8: 08:ef:d9:89:0c:44:63:17:29:26:00:ff:86:0c:0b:63:04:11: 92:b7:8f:9e:15:c6:b6:dd:4b:df:63:a0:25:47:6e:5e:d6:85: 93:b7:ce:42:56:d3:13:d4:5f:02:f5:ae:f6:2f:50:cb:1c:e1: 2d:94:ac:ba:cb:c4:e3:71:63:31:f5:c4:72:f0:d6:16:90:d1: c4:1c:71:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSktB0GJy4Fj2+L2YWb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMzZmMmU0MjUyMmU5OGQzNzZiZTM4YTg5ZTVkZDUxYWJi Zjc5OTYwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTdlODg5Nzk3ZDE1NzU1Zjk4YzA4MmFjNDQ0NDE1ZWY1MGZmZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nAj1UkpiAPsf10MBuCre0XUZ7+N HmJ0F4YvPS31/kHb5PvIHtAxseXE+JkW63SNZyTS6t/UL+lp6dyjAlMRjseM+r8g +Hu3c1P6y+TbpixEeXIvJMn+gU+xejBEs4N31PAiz/Ae0JScJ2V4wOu6UcgJiUko DqI/YN7S7Vcv5y9FL1hwlBkfN1YTLJ0DqZ7X5Kcs2TRe3vfizegxRHBS9udJON+3 t+yxGhDe27OkZioVIRrAfTnxZ7FsBC47wqYXV5fS7vwOMdVj8snuLaN9dAWjcnvA 2gtGBmis+1vQ2U7Vgm7EDKdQ6WMuGIE2t38YYsQ+VWhc8Yfb0Tjio3BrVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKF+iJeX0VdV+YwIKsREQV71D/08MB8GA1UdIwQY MBaAFLI28uQlIumNN2vjionl3VGrv3mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYt NmVhYTFjODk4MjRhLzEvb1g2SWw1ZlJWMVg1akFncXhFUkJYdlVQX1R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYtNmVhYTFjODk4MjRh LzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPnqgMA0G CSqGSIb3DQEBCwUAA4IBAQBC+6R4YSX92S/+bvWuAdlRs+XaOC1OsTIOqHmNbvks YXdNbFEuKffNjKhexmo0sc71WofFqKRsVfsLHxB57jZFYg0TnCxdvJ7li12SI2sY rm0GZMOWb+HYImCo1Zkx3M/+9E1Pelc/WlN17JUlUxw1bHRtlruaMnvNvO6ONy1n KYJ4a6oaF9LgT0A3TPxrr07hmSv+rmV2DtKEtyzlRbfYYHH1cctPmTV42zGNtsOs EsXQj+gI79mJDERjFykmAP+GDAtjBBGSt4+eFca23UvfY6AlR25e1oWTt85CVtMT 1F8C9a72L1DLHOEtlKy6y8TjcWMx9cRy8NYWkNHEHHHd -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:57 2026 by rpki-client