This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/app4TlaP1XNeCSjCz5vMlFhxSIs.roa File: app4TlaP1XNeCSjCz5vMlFhxSIs.roa (raw, json) Hash identifier: UdnqVBstayMTqHJ2ey5cbeIoLOfS7jCHrxesETCRKj0= Subject key identifier: 6A:9A:78:4E:56:8F:D5:73:5E:09:28:C2:CF:9B:CC:94:58:71:48:8B Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019BDF74A4D60F2F4AF9C77B9266386444DF Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/app4TlaP1XNeCSjCz5vMlFhxSIs.roa Signing time: Wed 21 Jan 2026 07:28:42 +0000 ROA not before: Wed 21 Jan 2026 07:28:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 212.135.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:74:a4:d6:0f:2f:4a:f9:c7:7b:92:66:38:64:44:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 21 07:28:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a9a784e568fd5735e0928c2cf9bcc945871488b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:a1:76:ea:26:0a:17:12:2c:4b:7f:fe:ee: 6f:75:3c:4c:fc:5f:0f:2c:f2:5e:08:d1:ca:65:68: 26:79:28:cf:b5:db:ee:08:4b:98:d4:c0:d9:3e:a5: 32:e6:0e:0e:59:9e:c8:8f:79:da:1f:be:a3:52:73: 3c:ee:42:29:d7:7b:31:59:d3:31:2a:0d:31:51:f4: af:3e:e7:77:19:ae:e5:5c:d2:89:0e:0b:c4:53:d8: 1e:a8:28:91:18:3e:26:f9:0c:76:ba:f8:cd:b4:41: 5d:7c:00:7a:ec:22:96:06:1e:3c:bb:51:24:dd:0b: 81:c1:08:fc:50:f8:9d:65:8d:cb:4a:db:e8:55:b0: 94:4b:12:48:6c:4a:de:46:94:7a:7c:8b:ab:31:ed: ee:1a:5a:ac:92:d9:a5:be:80:6d:4a:b1:54:44:83: fa:5e:20:4b:a7:7f:b4:d1:0f:34:a0:cd:46:bb:31: 1e:5a:e3:75:bd:fc:9d:94:c6:6f:0e:d7:18:25:d1: c4:a7:05:0c:74:40:b3:6b:71:fb:71:01:74:b8:71: a8:b7:50:38:bf:59:9c:fa:53:ed:32:21:b9:a0:20: fa:b1:bd:4e:4c:80:be:65:ee:80:a0:2d:38:dc:0b: 97:d6:bd:72:50:29:a9:9f:a6:bf:de:89:2d:20:95: 98:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9A:78:4E:56:8F:D5:73:5E:09:28:C2:CF:9B:CC:94:58:71:48:8B X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/app4TlaP1XNeCSjCz5vMlFhxSIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.252.0/24 Signature Algorithm: sha256WithRSAEncryption 08:e5:ed:e0:79:07:fe:0d:34:12:01:d0:96:aa:8d:1b:85:a2: ba:51:b8:d1:57:8a:f1:a7:a9:a4:d6:e6:25:f4:4f:b8:00:2d: be:0b:31:11:20:02:d5:cc:77:de:c5:7b:90:17:32:f3:d9:a0: 78:c4:8e:b8:a1:e3:96:1b:55:56:8e:11:48:9c:f7:f9:9b:00: 2c:ae:21:9c:3c:e5:e7:78:cd:b6:12:4c:44:4b:51:fa:67:e6: ed:2d:29:b7:26:65:f5:f6:bf:32:a4:b5:b2:f8:b3:6a:6e:23: 61:5b:4f:0a:ae:65:6e:ea:e5:4c:9d:ab:a5:96:8e:68:91:89: 8b:27:93:bb:86:51:cb:43:38:56:86:b5:c8:2c:75:9f:ca:ac: ce:98:d5:49:2f:96:2b:1c:ff:e6:11:8c:d2:9d:ef:33:25:07: 5f:c2:1b:62:34:f6:69:74:e4:7c:af:b8:87:d2:e0:05:ae:24: d5:6d:ea:df:0f:a8:3b:32:f5:d2:a3:a5:d7:32:85:84:f4:a2: b2:99:3f:e1:f6:c9:6e:b1:02:4e:04:e4:4e:c5:fb:75:23:81: 32:36:db:23:f3:1c:63:5e:f0:72:bc:85:97:b6:d4:0d:0c:5d: 63:17:99:dd:0a:0f:37:55:60:a4:7c:80:d1:f3:14:c2:be:db: 5d:d8:55:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvfdKTWDy9K+cd7kmY4ZETfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTIxMDcyODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTlhNzg0ZTU2OGZkNTczNWUwOTI4YzJjZjliY2M5NDU4NzE0ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTehduomChcSLEt//u5vdTxM/F8P LPJeCNHKZWgmeSjPtdvuCEuY1MDZPqUy5g4OWZ7Ij3naH76jUnM87kIp13sxWdMx Kg0xUfSvPud3Ga7lXNKJDgvEU9geqCiRGD4m+Qx2uvjNtEFdfAB67CKWBh48u1Ek 3QuBwQj8UPidZY3LStvoVbCUSxJIbEreRpR6fIurMe3uGlqsktmlvoBtSrFURIP6 XiBLp3+00Q80oM1GuzEeWuN1vfydlMZvDtcYJdHEpwUMdECza3H7cQF0uHGot1A4 v1mc+lPtMiG5oCD6sb1OTIC+Ze6AoC043AuX1r1yUCmpn6a/3oktIJWYMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqaeE5Wj9VzXgkows+bzJRYcUiLMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvYXBwNFRsYVAxWE5lQ1NqQ3o1dk1sRmh4U0lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1If8MA0G CSqGSIb3DQEBCwUAA4IBAQAI5e3geQf+DTQSAdCWqo0bhaK6UbjRV4rxp6mk1uYl 9E+4AC2+CzERIALVzHfexXuQFzLz2aB4xI64oeOWG1VWjhFInPf5mwAsriGcPOXn eM22EkxES1H6Z+btLSm3JmX19r8ypLWy+LNqbiNhW08KrmVu6uVMnaullo5okYmL J5O7hlHLQzhWhrXILHWfyqzOmNVJL5YrHP/mEYzSne8zJQdfwhtiNPZpdOR8r7iH 0uAFriTVberfD6g7MvXSo6XXMoWE9KKymT/h9slusQJOBOROxft1I4EyNtsj8xxj XvByvIWXttQNDF1jF5ndCg83VWCkfIDR8xTCvttd2FUw -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:33 2026 by rpki-client