This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/6Ie4uWWxQDbMjTrsvoYfX5Ivf6g.roa File: 6Ie4uWWxQDbMjTrsvoYfX5Ivf6g.roa (raw, json) Hash identifier: N4lE3CPEiPTec967aSdKgCII1ByAscJs/pbmP+j9+4k= Subject key identifier: E8:87:B8:B9:65:B1:40:36:CC:8D:3A:EC:BE:86:1F:5F:92:2F:7F:A8 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019BDF58415D50DA85171A66E02414870AD7 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/6Ie4uWWxQDbMjTrsvoYfX5Ivf6g.roa Signing time: Wed 21 Jan 2026 06:57:41 +0000 ROA not before: Wed 21 Jan 2026 06:57:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 212.100.165.0/24 maxlen: 24 212.100.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:58:41:5d:50:da:85:17:1a:66:e0:24:14:87:0a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 21 06:57:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e887b8b965b14036cc8d3aecbe861f5f922f7fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ba:64:5c:15:ed:c5:db:85:43:54:46:52:2b: 2e:38:01:d5:dc:bd:cd:61:ad:b8:3f:a7:c4:f1:e0: 98:8e:fb:b3:26:63:ca:ee:bc:0c:2a:7c:8d:bb:6b: 11:83:2d:d1:e9:2e:2a:6a:71:b7:c3:69:1f:8e:ae: 91:2e:5d:6c:94:b5:7b:ea:d5:1a:79:28:33:be:49: 8e:03:b0:bd:25:62:94:47:e2:f5:17:39:19:a4:49: c5:8a:0d:4d:05:b3:6d:9d:8b:29:3f:91:5a:38:47: be:76:8f:48:9b:41:ea:36:cc:04:f2:06:e7:17:64: 6f:9e:ac:ea:1f:36:e4:42:f5:17:86:a8:fd:7f:63: ff:a5:33:41:23:49:8c:6d:9c:37:8f:30:48:96:89: 8c:9e:0b:35:9e:c4:b4:b9:2b:58:75:5b:68:61:65: 3e:19:50:c5:e2:24:48:0c:6c:12:fc:72:6f:36:d9: 58:bf:c9:86:d8:ab:ad:af:11:e1:0a:78:2a:f8:0d: 84:4d:25:8b:78:94:6b:49:7d:1e:5b:88:46:72:b2: 42:7d:de:52:f0:01:0f:f6:cf:e8:86:3c:2a:ea:2c: 53:ec:22:1e:97:01:11:0c:e9:f7:a9:14:91:e2:85: 2b:b4:04:0c:f1:48:30:fd:7a:0b:4e:b1:31:2b:0d: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:87:B8:B9:65:B1:40:36:CC:8D:3A:EC:BE:86:1F:5F:92:2F:7F:A8 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/6Ie4uWWxQDbMjTrsvoYfX5Ivf6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.165.0/24 212.100.189.0/24 Signature Algorithm: sha256WithRSAEncryption 81:91:db:3d:2c:b9:ad:f3:b3:1c:49:18:44:d1:92:47:dc:71: 32:d8:31:b3:93:5d:2e:43:02:b8:c8:6d:6b:ae:2e:7c:8d:17: 5b:b7:96:9c:cb:a4:fc:ff:e4:27:69:26:dc:86:23:c9:2c:1f: 71:07:07:88:46:b2:8a:b7:9b:c3:fa:f8:f4:96:f3:c4:df:41: 72:0b:47:fb:ea:3a:96:c7:11:bf:8d:60:f9:ff:7f:3e:c4:15: 6e:9f:32:5c:e4:47:cc:0c:a8:80:2e:61:da:80:7b:20:22:1c: 7b:0e:0e:1b:a9:93:7a:21:cd:9c:59:8f:7d:c9:60:fc:b5:e4: 0a:f7:a8:00:cf:b3:b9:44:c4:eb:c4:56:a1:19:e2:2c:22:76: d1:1f:b2:e4:f8:fa:96:40:f2:ac:2a:51:32:0f:09:45:82:d3: 92:70:dd:63:56:80:57:a4:91:20:14:36:79:27:f6:6a:28:93: ab:eb:f6:3d:46:c7:9f:d8:c0:37:a6:ca:10:a9:ea:82:01:5a: 46:b8:c7:3a:d6:a4:69:0a:26:f2:77:fe:0f:d4:f6:b2:fb:d5: 68:a0:f8:5b:64:af:2f:3c:42:5e:15:8a:13:2f:77:49:f0:49: e9:c0:54:19:40:79:73:44:99:71:0a:9c:7c:b3:07:e0:62:9c: c3:6c:f7:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvfWEFdUNqFFxpm4CQUhwrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTIxMDY1NzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODg3YjhiOTY1YjE0MDM2Y2M4ZDNhZWNiZTg2MWY1ZjkyMmY3ZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bpkXBXtxduFQ1RGUisuOAHV3L3N Ya24P6fE8eCYjvuzJmPK7rwMKnyNu2sRgy3R6S4qanG3w2kfjq6RLl1slLV76tUa eSgzvkmOA7C9JWKUR+L1FzkZpEnFig1NBbNtnYspP5FaOEe+do9Im0HqNswE8gbn F2RvnqzqHzbkQvUXhqj9f2P/pTNBI0mMbZw3jzBIlomMngs1nsS0uStYdVtoYWU+ GVDF4iRIDGwS/HJvNtlYv8mG2KutrxHhCngq+A2ETSWLeJRrSX0eW4hGcrJCfd5S 8AEP9s/ohjwq6ixT7CIelwERDOn3qRSR4oUrtAQM8Ugw/XoLTrExKw14IwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOiHuLllsUA2zI067L6GH1+SL3+oMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvNkllNHVXV3hRRGJNalRyc3ZvWWZYNUl2ZjZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1GSlAwQA 1GS9MA0GCSqGSIb3DQEBCwUAA4IBAQCBkds9LLmt87McSRhE0ZJH3HEy2DGzk10u QwK4yG1rri58jRdbt5acy6T8/+QnaSbchiPJLB9xBweIRrKKt5vD+vj0lvPE30Fy C0f76jqWxxG/jWD5/38+xBVunzJc5EfMDKiALmHagHsgIhx7Dg4bqZN6Ic2cWY99 yWD8teQK96gAz7O5RMTrxFahGeIsInbRH7Lk+PqWQPKsKlEyDwlFgtOScN1jVoBX pJEgFDZ5J/ZqKJOr6/Y9Rsef2MA3psoQqeqCAVpGuMc61qRpCibyd/4P1Pay+9Vo oPhbZK8vPEJeFYoTL3dJ8EnpwFQZQHlzRJlxCpx8swfgYpzDbPcH -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:48 2026 by rpki-client