This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4giyJRj6gLC-1PltBKeRnUsBH8I.roa File: 4giyJRj6gLC-1PltBKeRnUsBH8I.roa (raw, json) Hash identifier: b+jgLUkyNpo+sO2KGmpEoE55bFXRRczD4M9rvyfyM4Q= Subject key identifier: E2:08:B2:25:18:FA:80:B0:BE:D4:F9:6D:04:A7:91:9D:4B:01:1F:C2 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37A9300A3F9BDF3EF15451E8E17EB9 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4giyJRj6gLC-1PltBKeRnUsBH8I.roa Signing time: Fri 02 Jan 2026 10:18:55 +0000 ROA not before: Fri 02 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4648 IP address blocks: 103.198.28.0/22 maxlen: 24 170.62.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a9:30:0a:3f:9b:df:3e:f1:54:51:e8:e1:7e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e208b22518fa80b0bed4f96d04a7919d4b011fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:5e:6f:e5:50:14:1b:87:48:8c:20:f8:28: d3:67:33:fd:58:77:31:10:62:d2:42:a6:f9:e4:5b: 47:27:f7:51:45:63:e1:06:d8:6a:2a:d7:aa:07:0a: 89:1b:46:7d:92:b3:d9:b3:14:8a:12:12:03:2c:04: 24:97:12:3d:c5:28:72:b0:ab:0d:eb:f1:c3:a4:9c: db:c6:7d:5b:82:7e:9d:63:f2:dd:b9:f1:07:00:64: 8c:62:10:aa:9b:67:05:fe:a5:fd:43:b6:2c:b5:78: be:04:bb:e1:77:eb:61:96:1b:42:83:af:c4:6b:58: e1:2c:8e:3f:b2:10:97:e1:ca:eb:a4:af:91:f2:8a: 17:01:a7:8a:f1:b2:ae:f8:54:5f:a6:58:57:9c:98: 95:f1:95:11:bb:8f:b3:aa:81:b6:41:89:0e:93:5f: 63:d2:90:2b:a0:c5:7a:26:86:28:51:91:c2:7d:42: 3f:1b:f8:dd:d3:3a:05:2d:92:19:c4:5f:ea:78:20: 9b:92:a4:2b:33:6b:4f:4f:74:86:2d:f1:ba:ab:3b: 7b:1f:e1:6c:50:80:2b:51:f1:a2:4c:d8:a0:b0:6d: f4:67:3b:ec:70:3f:d0:8f:84:fe:b2:2a:ca:3f:ca: 6a:c2:0f:81:df:13:c7:c3:67:4b:12:d1:a0:01:9b: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:08:B2:25:18:FA:80:B0:BE:D4:F9:6D:04:A7:91:9D:4B:01:1F:C2 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4giyJRj6gLC-1PltBKeRnUsBH8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.28.0/22 170.62.184.0/22 Signature Algorithm: sha256WithRSAEncryption cd:8d:53:92:d8:3a:f9:5c:28:de:c0:b6:b6:28:68:a1:ea:4e: 20:56:75:b2:bf:03:5e:9a:23:37:3e:9b:ae:50:7b:e5:13:be: 19:27:ed:8b:00:cd:fc:1f:6d:24:38:6e:3b:c6:c8:6b:74:7f: 04:a3:ca:18:6c:ee:13:c3:f9:7f:db:f3:6b:ba:cc:d3:4e:25: 22:c9:cc:78:6e:fb:a7:6f:a8:15:19:ca:4b:0a:9a:08:54:a3: 45:06:5b:46:98:ed:da:d2:df:2c:5a:b9:f9:7e:92:d6:cf:13: 7c:26:c1:63:7c:92:d6:78:d5:57:79:52:b3:22:6e:7a:5f:fa: 16:3d:be:d2:19:e8:22:ac:cf:80:22:7d:b0:28:69:14:15:d0: 39:ee:a9:a0:36:bf:db:d0:e4:46:0a:4b:84:39:cf:3a:5c:4a: 6c:62:ec:34:ea:7c:d4:13:19:7d:66:2c:61:ff:99:f4:f4:4a: bc:0e:c6:c1:6c:44:3d:d6:ed:ba:04:97:88:40:cb:87:1d:0b: 79:e4:e6:eb:07:ee:34:62:5a:8a:7e:ae:9d:6e:a7:ac:8c:dc: 40:0c:02:e1:24:26:f7:de:85:82:2c:eb:94:2b:e0:00:68:e5: c0:c7:b4:a4:bf:9e:29:97:8c:ba:63:58:67:48:cb:08:8c:58: 8b:4c:7d:7d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N6kwCj+b3z7xVFHo4X65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjA4YjIyNTE4ZmE4MGIwYmVkNGY5NmQwNGE3OTE5ZDRiMDExZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gFeb+VQFBuHSIwg+CjTZzP9WHcx EGLSQqb55FtHJ/dRRWPhBthqKteqBwqJG0Z9krPZsxSKEhIDLAQklxI9xShysKsN 6/HDpJzbxn1bgn6dY/LdufEHAGSMYhCqm2cF/qX9Q7YstXi+BLvhd+thlhtCg6/E a1jhLI4/shCX4crrpK+R8ooXAaeK8bKu+FRfplhXnJiV8ZURu4+zqoG2QYkOk19j 0pAroMV6JoYoUZHCfUI/G/jd0zoFLZIZxF/qeCCbkqQrM2tPT3SGLfG6qzt7H+Fs UIArUfGiTNigsG30ZzvscD/Qj4T+sirKP8pqwg+B3xPHw2dLEtGgAZtu+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOIIsiUY+oCwvtT5bQSnkZ1LAR/CMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvNGdpeUpSajZnTEMtMVBsdEJLZVJuVXNCSDhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ8YcAwQC qj64MA0GCSqGSIb3DQEBCwUAA4IBAQDNjVOS2Dr5XCjewLa2KGih6k4gVnWyvwNe miM3PpuuUHvlE74ZJ+2LAM38H20kOG47xshrdH8Eo8oYbO4Tw/l/2/NruszTTiUi ycx4bvunb6gVGcpLCpoIVKNFBltGmO3a0t8sWrn5fpLWzxN8JsFjfJLWeNVXeVKz Im56X/oWPb7SGegirM+AIn2wKGkUFdA57qmgNr/b0ORGCkuEOc86XEpsYuw06nzU Exl9Zixh/5n09Eq8DsbBbEQ91u26BJeIQMuHHQt55ObrB+40YlqKfq6dbqesjNxA DALhJCb33oWCLOuUK+AAaOXAx7Skv54pl4y6Y1hnSMsIjFiLTH19 -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:26 2026 by rpki-client