This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/us8vS6jTclCEmBfDUU3o3m6Yn-k.roa File: us8vS6jTclCEmBfDUU3o3m6Yn-k.roa (raw, json) Hash identifier: mAUclWVBVl5pM/tgk/IIx+fX18hAwqFUbm2hLAhaOL0= Subject key identifier: BA:CF:2F:4B:A8:D3:72:50:84:98:17:C3:51:4D:E8:DE:6E:98:9F:E9 Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Certificate serial: 019AC5D78992C4C68790ED8A4931B58C04E3 Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/us8vS6jTclCEmBfDUU3o3m6Yn-k.roa Signing time: Thu 27 Nov 2025 15:03:48 +0000 ROA not before: Thu 27 Nov 2025 15:03:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62390 IP address blocks: 103.75.68.0/24 maxlen: 24 103.75.69.0/24 maxlen: 24 103.75.70.0/24 maxlen: 24 103.75.71.0/24 maxlen: 24 103.76.128.0/24 maxlen: 24 103.76.129.0/24 maxlen: 24 103.76.130.0/24 maxlen: 24 103.76.131.0/24 maxlen: 24 2a12:2100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:d7:89:92:c4:c6:87:90:ed:8a:49:31:b5:8c:04:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Validity Not Before: Nov 27 15:03:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bacf2f4ba8d37250849817c3514de8de6e989fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:22:93:90:a2:dd:7b:78:b8:2b:15:78:41:04: 15:b4:3a:2e:0b:1b:61:19:62:4c:29:41:dd:c0:0a: 32:3d:fd:f1:7c:bd:37:71:7c:c3:9d:0b:a6:09:68: 17:17:a4:4c:83:38:e7:65:0f:23:1b:4f:42:d8:38: 97:31:b8:39:3c:ec:8a:b5:c4:c9:1b:4d:f9:d5:07: a6:41:d7:55:22:29:0e:b0:d5:59:9b:23:68:82:5b: e6:02:92:ba:76:47:f0:21:e3:b4:9a:c1:4f:76:0f: e6:1d:ee:ee:2a:ed:37:ff:77:8c:bd:6d:8a:91:cb: 88:76:dd:81:2a:d1:10:70:93:b1:9d:6a:e3:0c:bf: f4:ec:16:b4:99:53:ce:2a:fc:09:59:7d:6b:70:e5: f4:36:0b:44:e2:2e:3a:90:bd:e2:eb:a8:c2:94:a1: ab:83:24:87:02:bd:fd:b8:ec:2c:de:c0:fd:f3:4a: f9:8b:00:e5:e1:d1:3a:1e:0c:5a:ae:0f:88:35:e8: 53:e0:7a:09:2d:90:96:c2:27:08:4f:84:54:e8:32: fe:c0:7b:dc:8e:dc:43:f6:95:f2:c3:85:7a:19:94: 92:87:17:2c:17:2c:06:de:b6:fe:cd:d6:c1:d5:85: f8:84:93:11:fd:9f:6d:3a:06:34:7e:93:71:2f:b9: 48:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CF:2F:4B:A8:D3:72:50:84:98:17:C3:51:4D:E8:DE:6E:98:9F:E9 X509v3 Authority Key Identifier: keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/us8vS6jTclCEmBfDUU3o3m6Yn-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.68.0/22 103.76.128.0/22 IPv6: 2a12:2100::/32 Signature Algorithm: sha256WithRSAEncryption b1:ba:93:4a:42:bf:5e:00:51:df:e9:96:f7:33:b0:e4:32:37: c8:0d:48:5a:35:84:7e:10:41:99:e3:a0:30:be:fd:26:7b:a9: 35:e1:18:da:e2:d1:e1:04:0f:35:64:c2:68:43:c9:3c:3e:de: 17:ab:f3:87:fe:e9:e1:e3:02:11:80:11:a9:da:72:1a:85:8c: e5:59:7c:52:c0:d7:4c:01:4e:f8:98:aa:ea:f1:8c:5a:17:49: b0:14:81:53:5b:6f:a8:1f:51:a7:3e:67:c3:b3:3d:eb:25:a8: df:a9:8e:04:64:b9:c8:62:1c:5e:d1:a3:0e:19:fa:ea:39:90: 2e:27:f7:de:4e:8d:8e:0a:e2:5d:3a:d8:27:4e:78:6d:44:43: b9:db:dc:52:f4:aa:7f:a6:51:db:0b:d9:32:bd:ea:90:49:ef: 0e:4b:2f:3c:69:8e:f7:ee:83:8f:e2:f8:67:ae:6f:97:bb:4d: 61:ed:67:b2:72:8c:57:2c:ca:81:7b:77:ba:f5:23:b7:d9:96: e0:be:e8:aa:dd:2e:52:12:b9:9c:d0:25:0c:ec:7c:11:c2:11: 1f:f9:53:87:31:96:5d:35:58:2e:9b:2d:1a:2d:ed:3f:c4:d9: af:c0:d8:ce:c5:29:73:f4:d7:3b:49:d8:b7:03:17:ae:46:43: 58:e6:e1:3c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZrF14mSxMaHkO2KSTG1jATjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOGRkMThiMTY5MmQ4YTNlNzcxMmQzZTZiOTI4YjA5YWEw YWU2NmMwHhcNMjUxMTI3MTUwMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWNmMmY0YmE4ZDM3MjUwODQ5ODE3YzM1MTRkZThkZTZlOTg5ZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSKTkKLde3i4KxV4QQQVtDouCxth GWJMKUHdwAoyPf3xfL03cXzDnQumCWgXF6RMgzjnZQ8jG09C2DiXMbg5POyKtcTJ G0351QemQddVIikOsNVZmyNoglvmApK6dkfwIeO0msFPdg/mHe7uKu03/3eMvW2K kcuIdt2BKtEQcJOxnWrjDL/07Ba0mVPOKvwJWX1rcOX0NgtE4i46kL3i66jClKGr gySHAr39uOws3sD980r5iwDl4dE6Hgxarg+INehT4HoJLZCWwicIT4RU6DL+wHvc jtxD9pXyw4V6GZSShxcsFywG3rb+zdbB1YX4hJMR/Z9tOgY0fpNxL7lIWQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLrPL0uo03JQhJgXw1FN6N5umJ/pMB8GA1UdIwQY MBaAFFON0YsWktij53EtPmuSiwmqCuZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUt MmViNzBhMzYwMmU5LzEvdXM4dlM2alRjbENFbUJmRFVVM28zbTZZbi1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUtMmViNzBhMzYwMmU5 LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ0tEAwQC Z0yAMA0EAgACMAcDBQAqEiEAMA0GCSqGSIb3DQEBCwUAA4IBAQCxupNKQr9eAFHf 6Zb3M7DkMjfIDUhaNYR+EEGZ46Awvv0me6k14Rja4tHhBA81ZMJoQ8k8Pt4Xq/OH /unh4wIRgBGp2nIahYzlWXxSwNdMAU74mKrq8YxaF0mwFIFTW2+oH1GnPmfDsz3r JajfqY4EZLnIYhxe0aMOGfrqOZAuJ/feTo2OCuJdOtgnTnhtREO529xS9Kp/plHb C9kyveqQSe8OSy88aY737oOP4vhnrm+Xu01h7WeycoxXLMqBe3e69SO32Zbgvuiq 3S5SErmc0CUM7HwRwhEf+VOHMZZdNVgumy0aLe0/xNmvwNjOxSlz9Nc7Sdi3Axeu RkNY5uE8 -----END CERTIFICATE-----Generated at Fri Dec 5 18:46:36 2025 by rpki-client