This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Fr6d1C56bmnS14mlKDROSOXNDIQ.roa File: Fr6d1C56bmnS14mlKDROSOXNDIQ.roa (raw, json) Hash identifier: KI6xTkxDAbJak25p+kDu9xgMkeJ3OK3TfnEkq8VWrJ4= Subject key identifier: 16:BE:9D:D4:2E:7A:6E:69:D2:D7:89:A5:28:34:4E:48:E5:CD:0C:84 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F30754C7990588F0786858D8F8967 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Fr6d1C56bmnS14mlKDROSOXNDIQ.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 103.151.103.0/24 maxlen: 24 103.152.17.0/24 maxlen: 24 103.155.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:30:75:4c:79:90:58:8f:07:86:85:8d:8f:89:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16be9dd42e7a6e69d2d789a528344e48e5cd0c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:93:c3:e7:f6:ac:7b:1f:a4:8c:0c:03:fb:61: 26:e7:b3:22:86:6f:75:ec:a4:9d:25:86:9c:4e:c0: fd:5e:af:37:b9:49:38:4b:ca:e3:bb:ad:93:35:e2: 53:87:61:ac:73:4a:cc:cc:10:15:e1:c3:ea:98:ff: f7:20:6f:f0:dd:7a:0c:c8:78:26:35:c7:22:73:e0: 27:ef:bc:42:69:0e:c4:c0:f8:c0:64:38:0b:7b:77: 39:a5:a8:14:59:42:b6:97:e2:32:50:7c:ec:1c:a2: 32:bd:b5:15:a0:32:3a:da:26:d9:77:8f:91:cb:63: 19:26:78:f8:39:d0:c3:67:0e:46:1a:bb:f2:92:61: eb:59:eb:3e:ca:46:3e:d7:29:63:99:5e:b1:da:f0: b2:e4:13:f6:78:4f:ab:5d:19:21:71:96:3e:4d:1b: 1a:a8:72:ac:fe:44:df:c8:46:77:ab:0e:6a:13:5e: e8:09:f8:8a:42:ab:44:b9:0b:31:45:a1:f2:e1:4f: 45:62:47:cb:09:0d:a6:53:56:99:92:99:9b:03:41: e6:16:35:e2:f8:a8:1b:03:c5:0e:cd:56:e6:05:ad: 92:f2:33:26:4c:ab:37:0d:b4:b2:fd:e0:b4:60:2f: 3f:96:31:1f:51:d1:53:06:8b:b2:3c:61:11:ac:24: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BE:9D:D4:2E:7A:6E:69:D2:D7:89:A5:28:34:4E:48:E5:CD:0C:84 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Fr6d1C56bmnS14mlKDROSOXNDIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.103.0/24 103.152.17.0/24 103.155.127.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:70:dd:6c:9b:ab:b4:b3:ca:19:01:ed:15:4c:2b:ba:66:17: 6b:1a:c4:71:5b:22:27:2c:ef:8c:2a:d2:9d:04:48:1d:b7:29: d4:a1:c4:ed:59:54:d3:ab:23:d1:93:19:93:af:e0:8f:15:83: 6e:4c:4f:08:50:45:2e:aa:72:7b:6e:bc:9e:4d:8d:4e:e1:ee: 33:19:6b:8b:b4:69:a8:97:c0:f0:73:bf:4f:9b:d6:6f:39:9b: ba:63:83:9e:09:66:81:c3:7c:a3:f7:84:d9:f0:d6:9e:89:53: 48:72:fd:de:4f:0f:c3:32:72:e4:2c:11:8e:37:58:b1:77:83: cd:09:cd:b7:6b:f3:3b:cb:61:3a:40:58:ec:00:0e:25:85:91: 1f:12:28:58:21:17:3c:36:df:df:37:bc:15:c5:09:42:11:2a: 67:27:8b:ae:b3:7b:ea:c1:d3:06:39:05:35:22:7a:7a:91:54: d4:ae:d9:59:bd:63:d9:7e:18:9e:33:32:c7:b9:57:49:96:4f: 85:3c:d0:bb:b2:dc:0c:76:be:d9:90:8d:1e:31:6e:74:f2:fc: bd:6a:d2:17:ba:42:e2:87:53:19:3a:fb:e4:c9:b4:24:50:eb: fc:ec:bb:43:87:06:81:42:db:f6:14:d5:97:ab:92:d4:34:b7: 5f:a2:8b:1c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fzB1THmQWI8HhoWNj4lnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmJlOWRkNDJlN2E2ZTY5ZDJkNzg5YTUyODM0NGU0OGU1Y2QwYzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5PD5/asex+kjAwD+2Em57Mihm91 7KSdJYacTsD9Xq83uUk4S8rju62TNeJTh2Gsc0rMzBAV4cPqmP/3IG/w3XoMyHgm Nccic+An77xCaQ7EwPjAZDgLe3c5pagUWUK2l+IyUHzsHKIyvbUVoDI62ibZd4+R y2MZJnj4OdDDZw5GGrvykmHrWes+ykY+1yljmV6x2vCy5BP2eE+rXRkhcZY+TRsa qHKs/kTfyEZ3qw5qE17oCfiKQqtEuQsxRaHy4U9FYkfLCQ2mU1aZkpmbA0HmFjXi +KgbA8UOzVbmBa2S8jMmTKs3DbSy/eC0YC8/ljEfUdFTBouyPGERrCSiSwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBa+ndQuem5p0teJpSg0TkjlzQyEMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvRnI2ZDFDNTZibW5TMTRtbEtEUk9TT1hORElRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAZ5dnAwQA Z5gRAwQAZ5t/MA0GCSqGSIb3DQEBCwUAA4IBAQAecN1sm6u0s8oZAe0VTCu6Zhdr GsRxWyInLO+MKtKdBEgdtynUocTtWVTTqyPRkxmTr+CPFYNuTE8IUEUuqnJ7brye TY1O4e4zGWuLtGmol8Dwc79Pm9ZvOZu6Y4OeCWaBw3yj94TZ8NaeiVNIcv3eTw/D MnLkLBGON1ixd4PNCc23a/M7y2E6QFjsAA4lhZEfEihYIRc8Nt/fN7wVxQlCESpn J4uus3vqwdMGOQU1Inp6kVTUrtlZvWPZfhieMzLHuVdJlk+FPNC7stwMdr7ZkI0e MW508vy9atIXukLih1MZOvvkybQkUOv87LtDhwaBQtv2FNWXq5LUNLdfoosc -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:11 2026 by rpki-client