This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/J6A_hF4O7cxI8QJluboyBCe16v0.roa File: J6A_hF4O7cxI8QJluboyBCe16v0.roa (raw, json) Hash identifier: edsf8OO27RWYtOi702k6Qhe7cJI0t15sATzZb5sCsJ8= Subject key identifier: 27:A0:3F:84:5E:0E:ED:CC:48:F1:02:65:B9:BA:32:04:27:B5:EA:FD Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED3A95A08E0DF275E2F7200FD4638C Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/J6A_hF4O7cxI8QJluboyBCe16v0.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203098 IP address blocks: 43.230.56.0/23 maxlen: 23 43.230.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3a:95:a0:8e:0d:f2:75:e2:f7:20:0f:d4:63:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27a03f845e0eedcc48f10265b9ba320427b5eafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:f8:b5:84:f2:7e:18:5f:11:88:7b:ee:05: 15:7e:d1:81:cc:30:68:ee:c6:45:61:09:a4:09:8e: ee:f1:61:71:5f:d4:28:45:29:37:79:2e:3d:56:c3: 94:aa:ba:68:3a:33:9d:e8:ea:77:2c:7e:40:39:48: 0c:54:16:85:b4:19:03:90:ca:50:84:54:86:ae:45: bd:1c:f9:e3:da:20:cd:20:eb:2c:a5:26:1f:54:19: 09:1d:85:99:8b:13:b1:d6:2c:6a:93:4f:6e:b8:9d: e7:ac:cb:9a:c8:8f:2d:3f:a5:3c:ef:db:49:16:de: 01:30:cb:e4:2c:f8:4d:fe:88:ae:46:02:0a:70:62: 41:fc:2c:ea:86:52:af:dd:a6:5c:63:04:c0:6d:85: 7a:cc:84:40:e3:dc:57:0c:57:1d:6e:d9:9d:7a:0b: aa:0f:28:5b:ea:3e:d0:2b:70:00:36:d6:7e:f1:b4: f3:7f:ee:73:01:30:98:0a:f9:6f:cf:34:dd:39:4d: fb:11:cf:c3:02:8f:99:34:ff:fe:46:f9:86:cd:19: 0e:60:0b:be:53:0b:47:99:94:21:b0:7f:ae:e2:02: b1:96:0b:87:7e:0d:19:90:ec:58:51:66:53:bf:fc: e8:ec:d4:4b:a0:4c:e9:f6:7b:c7:4d:84:e5:fe:fa: 4e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A0:3F:84:5E:0E:ED:CC:48:F1:02:65:B9:BA:32:04:27:B5:EA:FD X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/J6A_hF4O7cxI8QJluboyBCe16v0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.56.0/22 Signature Algorithm: sha256WithRSAEncryption c6:cf:7c:e1:0a:ec:1e:e0:c1:63:f7:d3:9b:5b:90:3d:ba:5c: df:87:ea:c3:00:63:bf:8d:49:da:4f:67:1a:6a:43:fe:2b:26: a2:d5:a1:8d:c7:c0:9f:b5:c5:20:85:c5:a2:cc:90:3a:09:55: f5:b4:d9:a7:e4:fc:05:d3:d0:34:0c:c5:4d:6d:29:e0:0c:8c: 61:8e:f9:c3:f3:32:2d:e9:94:87:e2:b5:95:0a:a3:4f:50:0f: 91:c7:0d:10:51:17:4c:96:7a:8f:af:7b:cb:ab:5c:bd:5b:e7: 84:7d:f2:a4:bb:62:08:33:b3:74:93:2f:4d:9e:ae:b9:5a:e6: ac:0f:f3:13:7b:f2:63:ea:e2:45:77:e6:9b:4c:e5:ca:65:41: 93:c2:b6:bb:ae:38:a3:93:b6:de:e9:3b:ac:6f:1a:5a:3c:e8: 64:1f:09:8e:38:c5:80:7e:41:04:36:8f:b7:37:45:92:83:f6: a7:66:95:75:2f:cc:51:15:a1:c2:5e:4c:27:50:3a:2f:0b:89: 8a:e8:40:85:97:02:bf:c9:43:fd:ed:39:1a:84:7d:7f:f0:e5: 36:47:e3:12:8a:52:20:c8:62:de:84:23:93:35:08:68:91:6b: 2e:18:81:b4:c4:0f:14:51:35:6a:40:c2:ed:22:ee:0c:aa:6c: e2:12:1f:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TqVoI4N8nXi9yAP1GOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2EwM2Y4NDVlMGVlZGNjNDhmMTAyNjViOWJhMzIwNDI3YjVlYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo74tYTyfhhfEYh77gUVftGBzDBo 7sZFYQmkCY7u8WFxX9QoRSk3eS49VsOUqrpoOjOd6Op3LH5AOUgMVBaFtBkDkMpQ hFSGrkW9HPnj2iDNIOsspSYfVBkJHYWZixOx1ixqk09uuJ3nrMuayI8tP6U879tJ Ft4BMMvkLPhN/oiuRgIKcGJB/CzqhlKv3aZcYwTAbYV6zIRA49xXDFcdbtmdeguq Dyhb6j7QK3AANtZ+8bTzf+5zATCYCvlvzzTdOU37Ec/DAo+ZNP/+RvmGzRkOYAu+ UwtHmZQhsH+u4gKxlguHfg0ZkOxYUWZTv/zo7NRLoEzp9nvHTYTl/vpOiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCegP4ReDu3MSPECZbm6MgQnter9MB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvSjZBX2hGNE83Y3hJOFFKbHVib3lCQ2UxNnYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCK+Y4MA0G CSqGSIb3DQEBCwUAA4IBAQDGz3zhCuwe4MFj99ObW5A9ulzfh+rDAGO/jUnaT2ca akP+Kyai1aGNx8CftcUghcWizJA6CVX1tNmn5PwF09A0DMVNbSngDIxhjvnD8zIt 6ZSH4rWVCqNPUA+Rxw0QURdMlnqPr3vLq1y9W+eEffKku2IIM7N0ky9Nnq65Wuas D/MTe/Jj6uJFd+abTOXKZUGTwra7rjijk7be6TusbxpaPOhkHwmOOMWAfkEENo+3 N0WSg/anZpV1L8xRFaHCXkwnUDovC4mK6ECFlwK/yUP97TkahH1/8OU2R+MSilIg yGLehCOTNQhokWsuGIG0xA8UUTVqQMLtIu4MqmziEh97 -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:26 2026 by rpki-client