This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/sjKCh1UvwSo9gh78pswXrzhmgjY.roa File: sjKCh1UvwSo9gh78pswXrzhmgjY.roa (raw, json) Hash identifier: Epfh/sLFIRezmkfoL01G62gt9D+LHrhjRtivmeX3aV0= Subject key identifier: B2:32:82:87:55:2F:C1:2A:3D:82:1E:FC:A6:CC:17:AF:38:66:82:36 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E3921B90FB0384B152F3CB2150A5939 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/sjKCh1UvwSo9gh78pswXrzhmgjY.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 103.108.88.0/23 maxlen: 23 103.137.162.0/23 maxlen: 23 195.64.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:21:b9:0f:b0:38:4b:15:2f:3c:b2:15:0a:59:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2328287552fc12a3d821efca6cc17af38668236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:17:7d:06:a7:10:d0:2c:93:96:43:0e:f7: 8f:91:1b:22:43:d8:b8:f4:12:44:77:76:81:ea:e7: e5:5d:3f:f4:bb:79:d0:41:d4:31:a7:bb:aa:e5:54: 0d:67:18:26:20:25:93:1c:c9:cf:7b:0a:aa:1b:19: 20:23:6e:63:f1:81:a2:6a:7f:c7:76:e8:cc:3b:1d: 82:ff:c6:2c:0b:2c:ce:93:5b:46:e7:17:bc:51:d1: 33:6a:7c:4e:54:0c:39:0a:96:97:c2:de:b6:ce:d8: 3a:b3:56:c8:d8:42:7e:49:f7:24:16:f5:19:d4:41: 3c:88:2b:be:61:a1:28:b6:37:62:1b:3d:2c:fc:de: 8b:93:ff:a6:73:19:9b:37:b5:85:dd:be:e1:c3:c3: 4b:a9:67:f7:d4:93:ad:3c:5a:96:86:ac:25:df:e3: aa:d3:4c:0a:fb:68:de:38:56:28:bc:3a:cd:a4:23: 97:ee:a5:6e:f4:3d:7b:76:c2:37:0a:0a:32:83:39: 5c:f7:39:2b:32:30:2b:87:18:fb:11:21:9d:16:be: 64:2f:b9:55:d7:64:78:ea:e4:58:06:9f:85:9c:bd: 2c:c5:aa:8a:e1:31:dc:bb:f0:29:07:fd:e2:ef:8e: 35:c4:1c:43:aa:eb:ae:cf:c5:fe:5e:84:be:c5:af: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:32:82:87:55:2F:C1:2A:3D:82:1E:FC:A6:CC:17:AF:38:66:82:36 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/sjKCh1UvwSo9gh78pswXrzhmgjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.88.0/23 103.137.162.0/23 195.64.97.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:75:8e:03:44:43:d8:13:d6:7b:cf:1b:86:46:a1:63:5f:b9: 15:21:13:ab:74:f7:f7:f0:b5:01:3b:54:5d:1b:ce:df:5b:26: d2:81:16:09:0d:84:90:e6:3e:1c:22:21:95:86:f0:3d:d9:38: 16:eb:5a:23:31:2b:61:bb:45:cc:ea:b6:df:6d:90:e2:9f:cc: ee:f2:15:77:6f:7f:d8:c7:de:c8:10:57:92:d2:55:6d:1b:7b: e9:c7:af:da:80:a6:0c:b3:17:3c:41:b5:4f:96:2a:16:fb:f4: e1:06:96:04:2d:66:f6:52:60:8d:3a:be:fd:bf:22:0c:72:c7: 2b:d4:fd:2c:ec:bc:e3:c6:1d:05:d0:9c:44:e7:ad:2b:78:a6: f7:cb:a6:c7:20:81:ca:e7:68:c3:96:9d:1b:38:f6:36:39:bf: cd:ce:7f:e7:7e:a2:06:d3:6a:ab:84:3f:ea:2c:ad:19:bb:0e: 80:b1:f3:b2:77:37:90:57:dc:08:19:bc:e5:29:c6:9b:e5:a0: cf:13:bf:7d:1b:4f:b9:87:93:ff:66:89:e4:37:cf:2f:d9:f2: 98:f7:0f:8e:37:9e:d1:26:a8:f7:d2:11:c2:5f:24:21:9f:5d: 9e:26:9a:88:b3:96:c0:5f:1c:e9:93:ac:f2:64:34:65:dc:d8: e6:4a:eb:76 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OSG5D7A4SxUvPLIVClk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjMyODI4NzU1MmZjMTJhM2Q4MjFlZmNhNmNjMTdhZjM4NjY4MjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoosXfQanENAsk5ZDDvePkRsiQ9i4 9BJEd3aB6uflXT/0u3nQQdQxp7uq5VQNZxgmICWTHMnPewqqGxkgI25j8YGian/H dujMOx2C/8YsCyzOk1tG5xe8UdEzanxOVAw5CpaXwt62ztg6s1bI2EJ+SfckFvUZ 1EE8iCu+YaEotjdiGz0s/N6Lk/+mcxmbN7WF3b7hw8NLqWf31JOtPFqWhqwl3+Oq 00wK+2jeOFYovDrNpCOX7qVu9D17dsI3Cgoygzlc9zkrMjArhxj7ESGdFr5kL7lV 12R46uRYBp+FnL0sxaqK4THcu/ApB/3i7441xBxDquuuz8X+XoS+xa8bnwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLIygodVL8EqPYIe/KbMF684ZoI2MB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvc2pLQ2gxVXZ3U285Z2g3OHBzd1hyemhtZ2pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBZ2xYAwQB Z4miAwQAw0BhMA0GCSqGSIb3DQEBCwUAA4IBAQAsdY4DREPYE9Z7zxuGRqFjX7kV IROrdPf38LUBO1RdG87fWybSgRYJDYSQ5j4cIiGVhvA92TgW61ojMSthu0XM6rbf bZDin8zu8hV3b3/Yx97IEFeS0lVtG3vpx6/agKYMsxc8QbVPlioW+/ThBpYELWb2 UmCNOr79vyIMcscr1P0s7Lzjxh0F0JxE560reKb3y6bHIIHK52jDlp0bOPY2Ob/N zn/nfqIG02qrhD/qLK0Zuw6AsfOydzeQV9wIGbzlKcab5aDPE799G0+5h5P/Zonk N88v2fKY9w+ON57RJqj30hHCXyQhn12eJpqIs5bAXxzpk6zyZDRl3NjmSut2 -----END CERTIFICATE-----Generated at Fri Jan 23 16:05:00 2026 by rpki-client