This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/h6wK8goVzqXqo6disZWfZSM1h-0.roa File: h6wK8goVzqXqo6disZWfZSM1h-0.roa (raw, json) Hash identifier: //0LSaRijgEKQyrnrrd5pf5seu/x01T0Rwf4/noBXTQ= Subject key identifier: 87:AC:0A:F2:0A:15:CE:A5:EA:A3:A7:62:B1:95:9F:65:23:35:87:ED Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08 Certificate serial: 019BC743AB58D63D2E5AEF1DBD363FA09185 Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/h6wK8goVzqXqo6disZWfZSM1h-0.roa Signing time: Fri 16 Jan 2026 14:44:19 +0000 ROA not before: Fri 16 Jan 2026 14:44:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202200 IP address blocks: 139.23.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:43:ab:58:d6:3d:2e:5a:ef:1d:bd:36:3f:a0:91:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08 Validity Not Before: Jan 16 14:44:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87ac0af20a15cea5eaa3a762b1959f65233587ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:bb:cf:d7:52:b7:30:1c:1c:d4:f5:4a:cf: 6d:5b:a1:10:66:d6:97:dd:34:ac:10:27:73:54:e1: 6f:d7:22:9a:0f:e0:15:51:09:9e:a3:34:26:f3:7f: 10:95:3b:68:bb:bc:22:fa:97:06:5f:60:16:9c:8d: 82:c4:88:1c:e5:07:06:f2:a2:a9:75:d0:1c:b0:9f: 55:12:35:8b:c4:32:f1:f2:03:21:7e:92:f9:d2:22: 06:26:05:38:36:81:7a:35:b9:41:64:4c:4e:79:88: fa:0b:19:0e:f9:66:de:75:b8:fd:97:dc:2a:a6:59: 40:58:44:33:43:a5:df:c1:ad:3b:47:b8:3d:e6:8b: 66:6d:7d:fd:6b:56:54:e0:d8:5e:85:c6:3f:1e:d7: 02:ba:ee:e1:4a:10:66:d4:64:49:b7:3a:f5:d0:e9: cf:66:22:27:86:a8:a7:25:62:ca:e5:70:28:e1:81: 6e:96:75:53:3c:20:72:af:00:da:78:3a:80:98:c6: a8:f8:b6:8b:6f:a6:96:df:82:71:07:0d:b5:82:6b: 94:79:45:63:74:a2:8a:71:da:3a:05:6d:b8:37:08: 43:bc:d7:07:5a:f1:05:84:02:69:60:51:15:7d:de: 86:2d:10:44:95:62:5f:95:33:2b:6a:1c:22:53:da: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AC:0A:F2:0A:15:CE:A5:EA:A3:A7:62:B1:95:9F:65:23:35:87:ED X509v3 Authority Key Identifier: keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/h6wK8goVzqXqo6disZWfZSM1h-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.23.122.0/24 Signature Algorithm: sha256WithRSAEncryption 92:6d:2e:d2:df:f8:de:3a:58:86:7b:0e:8d:83:0e:de:58:a3: 9d:11:92:76:7f:e7:84:ec:63:e8:10:a4:e9:62:84:52:5b:13: c0:5f:02:92:ba:9d:a0:6e:08:52:85:ec:6b:36:70:f7:26:e8: 59:47:71:5d:68:33:d1:14:57:81:a3:f3:81:40:76:1e:84:3b: fb:ca:89:b9:a4:67:0c:f2:33:e5:09:69:93:46:49:4a:65:e6: 33:a6:96:ec:60:01:0c:1c:16:ea:4f:02:d4:00:07:03:0a:8f: 3b:81:69:da:cf:32:8a:43:8e:3b:71:61:b1:e9:88:de:b8:0f: a4:f0:1b:23:c5:6e:01:3b:03:fb:b6:67:0f:fb:bc:53:55:f8: a1:b4:84:9a:9e:18:45:57:5c:3e:d9:4f:68:65:3d:1f:01:d4: 48:59:d6:80:e5:85:6e:08:bb:37:ef:ff:0d:69:b9:d8:38:b8: 61:50:a5:f5:88:af:03:78:01:80:46:96:8a:aa:8a:76:24:a0: 76:a7:c2:fd:cf:3c:47:7d:a5:59:d4:6a:00:9d:02:39:e0:62: 9d:a5:7d:f4:a8:b4:9f:9d:3c:0e:13:b1:fc:b4:08:71:17:68: c6:e0:f4:99:35:e9:57:88:77:52:8a:78:4c:c1:1b:35:17:11: bf:ec:98:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvHQ6tY1j0uWu8dvTY/oJGFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTIxYzNmOTIwN2EzNzM0NWUzODcwMmM4OWQxNzliZjQ0 NGFhMDgwHhcNMjYwMTE2MTQ0NDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2FjMGFmMjBhMTVjZWE1ZWFhM2E3NjJiMTk1OWY2NTIzMzU4N2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndy7z9dStzAcHNT1Ss9tW6EQZtaX 3TSsECdzVOFv1yKaD+AVUQmeozQm838QlTtou7wi+pcGX2AWnI2CxIgc5QcG8qKp ddAcsJ9VEjWLxDLx8gMhfpL50iIGJgU4NoF6NblBZExOeYj6CxkO+Wbedbj9l9wq pllAWEQzQ6Xfwa07R7g95otmbX39a1ZU4NhehcY/HtcCuu7hShBm1GRJtzr10OnP ZiInhqinJWLK5XAo4YFulnVTPCByrwDaeDqAmMao+LaLb6aW34JxBw21gmuUeUVj dKKKcdo6BW24NwhDvNcHWvEFhAJpYFEVfd6GLRBElWJflTMrahwiU9ocKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIesCvIKFc6l6qOnYrGVn2UjNYftMB8GA1UdIwQY MBaAFGUSHD+SB6NzReOHAsidF5v0RKoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYt NDhkM2NhMTYxYmIwLzEvaDZ3Szhnb1Z6cVhxbzZkaXNaV2ZaU00xaC0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYtNDhkM2NhMTYxYmIw LzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAixd6MA0G CSqGSIb3DQEBCwUAA4IBAQCSbS7S3/jeOliGew6Ngw7eWKOdEZJ2f+eE7GPoEKTp YoRSWxPAXwKSup2gbghShexrNnD3JuhZR3FdaDPRFFeBo/OBQHYehDv7yom5pGcM 8jPlCWmTRklKZeYzppbsYAEMHBbqTwLUAAcDCo87gWnazzKKQ447cWGx6YjeuA+k 8BsjxW4BOwP7tmcP+7xTVfihtISanhhFV1w+2U9oZT0fAdRIWdaA5YVuCLs37/8N abnYOLhhUKX1iK8DeAGARpaKqop2JKB2p8L9zzxHfaVZ1GoAnQI54GKdpX30qLSf nTwOE7H8tAhxF2jG4PSZNelXiHdSinhMwRs1FxG/7Jhv -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:22 2026 by rpki-client