This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/zIrBaICnnWBGzaOVT0G3zy6v1wk.roa File: zIrBaICnnWBGzaOVT0G3zy6v1wk.roa (raw, json) Hash identifier: 8frnrhVogql36O+DGf+cKkN0Nkp/HhcJaFlxtzlW+WE= Subject key identifier: CC:8A:C1:68:80:A7:9D:60:46:CD:A3:95:4F:41:B7:CF:2E:AF:D7:09 Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Certificate serial: 019B7F6E5CB07099659FD54524048CF3B4E2 Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/zIrBaICnnWBGzaOVT0G3zy6v1wk.roa Signing time: Fri 02 Jan 2026 15:58:17 +0000 ROA not before: Fri 02 Jan 2026 15:58:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62390 IP address blocks: 103.75.68.0/24 maxlen: 24 103.75.69.0/24 maxlen: 24 103.75.70.0/24 maxlen: 24 103.75.71.0/24 maxlen: 24 103.76.128.0/24 maxlen: 24 103.76.129.0/24 maxlen: 24 103.76.131.0/24 maxlen: 24 2a12:2100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:6e:5c:b0:70:99:65:9f:d5:45:24:04:8c:f3:b4:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Validity Not Before: Jan 2 15:58:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc8ac16880a79d6046cda3954f41b7cf2eafd709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:ec:0a:59:ea:89:d0:b3:1c:ec:cf:51:47: dc:d9:ee:9d:0b:f7:2b:9e:c5:95:8e:f4:39:d6:8e: 5c:27:8e:c7:42:2a:a5:12:b8:c0:6a:1e:6e:3a:2c: e9:d4:92:3b:d9:3f:04:1e:7a:a2:0b:be:6e:12:26: fe:43:aa:16:5a:4f:da:59:2b:b5:0a:c1:71:cd:f8: 4a:5f:91:56:50:17:04:a5:71:20:cb:8a:f5:31:da: 95:0d:6a:f8:8d:41:e0:b4:e3:a9:64:b4:7e:5d:18: 46:ab:2f:42:31:72:51:1b:31:3a:11:b1:d0:b6:eb: 44:a9:7d:4c:65:ce:b9:9b:fc:36:57:3f:8b:b3:ab: 71:b9:58:b1:3e:53:9f:8d:d6:e0:04:f0:5e:16:8a: ac:f4:77:b2:92:7e:57:e5:da:e5:69:9b:9d:d5:22: e8:5e:9a:67:f1:31:cb:73:73:8a:df:c3:eb:18:16: 1d:18:e4:e4:89:6c:5a:d7:6d:a2:7d:9d:ed:ac:da: d7:7e:f4:1a:85:77:85:ef:b1:ff:8e:ac:da:de:8e: ab:5c:32:9e:a7:86:12:fc:03:cc:6a:62:5c:88:07: 0d:3f:b2:2b:b2:b2:05:64:cf:75:44:f9:e1:48:1e: 48:59:1e:77:f4:81:c0:dc:4b:2f:66:f0:e0:22:99: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8A:C1:68:80:A7:9D:60:46:CD:A3:95:4F:41:B7:CF:2E:AF:D7:09 X509v3 Authority Key Identifier: keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/zIrBaICnnWBGzaOVT0G3zy6v1wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.68.0/22 103.76.128.0/23 103.76.131.0/24 IPv6: 2a12:2100::/32 Signature Algorithm: sha256WithRSAEncryption e0:50:66:b6:11:38:58:90:8e:b8:a4:b6:99:4d:dd:c5:f7:c8: 73:68:39:30:27:a6:df:b6:3b:f5:92:9c:51:79:81:8b:f7:7a: ad:53:f7:8e:6b:75:77:cb:02:75:74:b4:1c:20:ae:d1:df:6b: 7c:3f:9e:58:5d:7a:4c:a8:c9:21:3e:61:de:95:5c:9a:7f:a7: 7a:4e:e4:75:04:58:13:da:5b:5f:30:03:81:56:22:94:59:a1: a1:df:4b:43:ad:89:68:02:af:a1:66:26:7c:a1:bd:72:d0:98: ef:10:8d:49:16:57:6d:38:9d:a2:61:de:e0:0a:ff:b9:6e:44: 49:7d:ae:f8:61:9f:c8:b5:03:f5:fe:51:02:80:22:5b:da:4d: 23:bb:2e:51:88:93:f4:48:1d:b4:e1:bb:f2:9a:53:d5:24:1a: 53:b5:a9:f8:c2:74:d4:70:0c:43:90:44:12:4c:5a:37:bf:a2: 6d:67:3c:10:1c:8b:eb:5e:e1:f7:84:ee:ae:e0:e6:c8:df:30: d6:dd:68:8f:24:ca:47:5f:11:b5:7c:0b:fa:a0:b0:90:ab:ed: d2:a4:fe:2e:99:ba:1f:8e:84:ab:dc:7a:ed:69:9a:66:55:c5: e5:fd:5e:e5:89:9c:11:e4:19:17:aa:31:d7:a5:5b:bd:4c:2a: 38:01:c5:40 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/blywcJlln9VFJASM87TiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOGRkMThiMTY5MmQ4YTNlNzcxMmQzZTZiOTI4YjA5YWEw YWU2NmMwHhcNMjYwMTAyMTU1ODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzhhYzE2ODgwYTc5ZDYwNDZjZGEzOTU0ZjQxYjdjZjJlYWZkNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ELsClnqidCzHOzPUUfc2e6dC/cr nsWVjvQ51o5cJ47HQiqlErjAah5uOizp1JI72T8EHnqiC75uEib+Q6oWWk/aWSu1 CsFxzfhKX5FWUBcEpXEgy4r1MdqVDWr4jUHgtOOpZLR+XRhGqy9CMXJRGzE6EbHQ tutEqX1MZc65m/w2Vz+Ls6txuVixPlOfjdbgBPBeFoqs9Heykn5X5drlaZud1SLo Xppn8THLc3OK38PrGBYdGOTkiWxa122ifZ3trNrXfvQahXeF77H/jqza3o6rXDKe p4YS/APMamJciAcNP7IrsrIFZM91RPnhSB5IWR539IHA3EsvZvDgIpmQrwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMyKwWiAp51gRs2jlU9Bt88ur9cJMB8GA1UdIwQY MBaAFFON0YsWktij53EtPmuSiwmqCuZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUt MmViNzBhMzYwMmU5LzEveklyQmFJQ25uV0JHemFPVlQwRzN6eTZ2MXdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUtMmViNzBhMzYwMmU5 LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCZ0tEAwQB Z0yAAwQAZ0yDMA0EAgACMAcDBQAqEiEAMA0GCSqGSIb3DQEBCwUAA4IBAQDgUGa2 EThYkI64pLaZTd3F98hzaDkwJ6bftjv1kpxReYGL93qtU/eOa3V3ywJ1dLQcIK7R 32t8P55YXXpMqMkhPmHelVyaf6d6TuR1BFgT2ltfMAOBViKUWaGh30tDrYloAq+h ZiZ8ob1y0JjvEI1JFldtOJ2iYd7gCv+5bkRJfa74YZ/ItQP1/lECgCJb2k0juy5R iJP0SB204bvymlPVJBpTtan4wnTUcAxDkEQSTFo3v6JtZzwQHIvrXuH3hO6u4ObI 3zDW3WiPJMpHXxG1fAv6oLCQq+3SpP4umbofjoSr3HrtaZpmVcXl/V7liZwR5BkX qjHXpVu9TCo4AcVA -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:00 2026 by rpki-client