This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/cohsG3SQlcWk1HwXz_9_V1W-DnM.roa File: cohsG3SQlcWk1HwXz_9_V1W-DnM.roa (raw, json) Hash identifier: Z0rTIgtHw2j6D7sRMbadoj6J39N2b5eJp5yHD6/XmPU= Subject key identifier: 72:88:6C:1B:74:90:95:C5:A4:D4:7C:17:CF:FF:7F:57:55:BE:0E:73 Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019B783453F0AB2C53C3864E784276D90DB4 Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/cohsG3SQlcWk1HwXz_9_V1W-DnM.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209565 IP address blocks: 46.21.251.0/24 maxlen: 24 212.126.113.0/24 maxlen: 24 212.126.114.0/24 maxlen: 24 212.126.116.0/24 maxlen: 24 212.126.120.0/24 maxlen: 24 212.126.121.0/24 maxlen: 24 212.126.122.0/23 maxlen: 23 212.126.122.0/24 maxlen: 24 212.126.123.0/24 maxlen: 24 212.126.126.0/24 maxlen: 24 2a04:2dc0:8::/48 maxlen: 48 2a04:2dc0:a::/48 maxlen: 48 2a04:2dc0:e::/48 maxlen: 48 2a04:2dc0:18::/48 maxlen: 48 2a04:2dc0:19::/48 maxlen: 48 2a04:2dc0:1b::/48 maxlen: 48 2a04:2dc0:1d::/48 maxlen: 48 2a04:2dc0:21::/48 maxlen: 48 2a04:2dc0:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:53:f0:ab:2c:53:c3:86:4e:78:42:76:d9:0d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72886c1b749095c5a4d47c17cfff7f5755be0e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5a:2b:e0:af:a0:58:b1:c4:d5:19:54:c1:8a: 2d:d5:a0:b7:21:2e:bd:36:e7:e1:11:09:e7:f8:56: 10:e8:b8:dc:0b:d2:72:89:a4:74:02:48:12:46:cc: 49:db:27:7e:21:92:07:3e:01:2b:bb:30:ed:c4:c4: c6:58:b5:3c:f3:e7:ef:dc:a3:f8:47:ef:d9:69:ac: af:fc:32:14:fb:aa:f0:f3:f9:29:cf:ef:06:6b:f4: c2:a1:46:f0:6d:60:71:45:c2:86:c8:59:b0:e7:af: 7a:2d:08:df:ec:48:6e:b8:ed:dc:1a:46:a2:ed:1b: 71:bd:33:ef:c0:ad:d4:55:3c:c2:d2:66:fe:d2:85: cf:9e:76:42:f9:fb:55:f1:0a:e2:f0:ee:78:1a:b8: ab:90:64:50:aa:a2:fb:a5:ee:1d:2e:d8:70:99:25: 66:3e:3b:d7:12:e8:32:cd:df:04:9d:07:24:47:83: 8e:0a:7f:8f:51:0c:68:41:81:25:23:10:ba:25:24: 55:f3:4d:21:b1:a5:47:46:78:af:af:35:6b:0a:5c: ae:5c:49:f1:39:6f:a2:a2:5c:70:0a:f3:9d:85:71: 71:26:4c:e0:0d:4a:5f:d9:62:91:7c:6d:5e:a4:c4: c6:6e:83:11:11:31:c3:e9:1b:a0:79:a4:f8:f2:96: cb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:88:6C:1B:74:90:95:C5:A4:D4:7C:17:CF:FF:7F:57:55:BE:0E:73 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/cohsG3SQlcWk1HwXz_9_V1W-DnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.21.251.0/24 212.126.113.0-212.126.114.255 212.126.116.0/24 212.126.120.0/22 212.126.126.0/24 IPv6: 2a04:2dc0:8::/48 2a04:2dc0:a::/48 2a04:2dc0:e::/48 2a04:2dc0:18::/47 2a04:2dc0:1b::/48 2a04:2dc0:1d::/48 2a04:2dc0:21::-2a04:2dc0:22:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b8:8e:2f:7e:24:d7:4e:57:a1:30:49:2c:0a:1b:5f:60:23:d3: fd:5c:fd:f8:8c:24:92:39:ae:9f:28:58:42:f2:2b:bc:18:fe: bf:67:ed:e6:cd:9d:22:af:3a:21:dc:c0:4d:9a:70:b2:f2:f4: bf:da:ed:15:3f:32:9a:dc:70:2e:da:47:35:c9:7d:e3:1e:8c: 7d:81:65:fb:0a:3d:1f:f0:0e:74:da:d8:ed:19:6a:6d:cf:2a: fd:3b:5c:cc:6c:2a:1c:28:ac:3f:2e:92:98:49:02:f8:c0:a0: 40:52:fb:39:d7:9d:f5:23:93:67:f9:e3:ec:f7:fc:8f:88:ce: 4c:ac:bf:86:b5:f9:8a:f5:dd:3d:09:68:6a:11:98:a0:13:96: 2d:a0:4e:84:bc:7a:19:77:af:4f:db:3b:2f:46:af:50:0c:fc: 10:1c:a8:3e:92:24:1a:a1:1d:42:79:0f:d7:ab:2a:80:e2:93: 57:51:b0:68:d7:50:13:3d:36:31:bd:34:1e:49:4a:4a:ac:62: f6:cf:a4:f3:75:7d:6e:bc:48:cd:5d:18:85:ba:c7:f6:5f:33: dc:1f:85:e2:16:f1:ef:90:6b:8d:6e:4d:fe:ac:13:a9:dd:4c: 15:67:ec:d9:63:4d:17:0b:b7:36:3b:6d:28:fa:ee:c9:8e:95: d6:3a:9c:b0 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZt4NFPwqyxTw4ZOeEJ22Q20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjg4NmMxYjc0OTA5NWM1YTRkNDdjMTdjZmZmN2Y1NzU1YmUwZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61or4K+gWLHE1RlUwYot1aC3IS69 NufhEQnn+FYQ6LjcC9JyiaR0AkgSRsxJ2yd+IZIHPgEruzDtxMTGWLU88+fv3KP4 R+/Zaayv/DIU+6rw8/kpz+8Ga/TCoUbwbWBxRcKGyFmw5696LQjf7EhuuO3cGkai 7RtxvTPvwK3UVTzC0mb+0oXPnnZC+ftV8Qri8O54GrirkGRQqqL7pe4dLthwmSVm PjvXEugyzd8EnQckR4OOCn+PUQxoQYElIxC6JSRV800hsaVHRnivrzVrClyuXEnx OW+iolxwCvOdhXFxJkzgDUpf2WKRfG1epMTGboMRETHD6RugeaT48pbL0wIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFHKIbBt0kJXFpNR8F8//f1dVvg5zMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xL2NvaHNHM1NRbGNXazFId1h6XzlfVjFXLURuTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNi ZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgZMGCCsGAQUFBwEHAQH/BIGDMIGAMCwEAgABMCYDBAAu FfswDAMEANR+cQMEANR+cgMEANR+dAMEAtR+eAMEANR+fjBQBAIAAjBKAwcAKgQt wAAIAwcAKgQtwAAKAwcAKgQtwAAOAwcBKgQtwAAYAwcAKgQtwAAbAwcAKgQtwAAd MBIDBwAqBC3AACEDBwAqBC3AACIwDQYJKoZIhvcNAQELBQADggEBALiOL34k105X oTBJLAobX2Aj0/1c/fiMJJI5rp8oWELyK7wY/r9n7ebNnSKvOiHcwE2acLLy9L/a 7RU/MprccC7aRzXJfeMejH2BZfsKPR/wDnTa2O0Zam3PKv07XMxsKhworD8ukphJ AvjAoEBS+znXnfUjk2f54+z3/I+Izkysv4a1+Yr13T0JaGoRmKATli2gToS8ehl3 r0/bOy9Gr1AM/BAcqD6SJBqhHUJ5D9erKoDik1dRsGjXUBM9NjG9NB5JSkqsYvbP pPN1fW68SM1dGIW6x/ZfM9wfheIW8e+Qa41uTf6sE6ndTBVn7NljTRcLtzY7bSj6 7smOldY6nLA= -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:19 2026 by rpki-client