This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/r4gojXpCfVfMsKXfq3IcqeiE878.roa File: r4gojXpCfVfMsKXfq3IcqeiE878.roa (raw, json) Hash identifier: T3XdnQciJ8C4NOqpLw2BOhgbQDlMQMjf7FhYEgWICW0= Subject key identifier: AF:88:28:8D:7A:42:7D:57:CC:B0:A5:DF:AB:72:1C:A9:E8:84:F3:BF Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4 Certificate serial: 019B7F8253C12ED12A7F4A7CEDE1B26D2E2A Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/r4gojXpCfVfMsKXfq3IcqeiE878.roa Signing time: Fri 02 Jan 2026 16:20:06 +0000 ROA not before: Fri 02 Jan 2026 16:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214313 IP address blocks: 103.107.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:53:c1:2e:d1:2a:7f:4a:7c:ed:e1:b2:6d:2e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4 Validity Not Before: Jan 2 16:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af88288d7a427d57ccb0a5dfab721ca9e884f3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:a4:0c:c4:99:9b:ba:fb:50:c4:af:5e:df: d0:c3:82:ff:34:75:0d:61:ee:b2:e1:91:c2:c3:31: be:9e:5f:be:ef:06:4b:26:41:86:df:66:82:02:d7: 59:e3:ce:65:20:c9:5b:3b:cc:a9:cf:82:ea:22:1d: f6:b4:d7:d7:8e:73:49:2e:f2:85:90:db:71:9e:e1: 79:3b:4e:cb:26:9b:66:71:42:15:93:4d:d9:12:3e: 96:1a:d7:81:50:53:8f:67:c1:b7:89:af:3c:40:59: 4a:df:78:10:9d:99:c0:c9:51:02:4a:05:f4:d7:a7: 96:ed:94:e8:d2:4d:73:ee:84:1c:8b:05:0f:8c:60: 27:85:9f:c4:ae:f8:f1:6d:0c:ad:98:52:f3:dd:05: 43:fa:86:ec:db:4f:84:c3:e0:82:05:85:71:0d:34: ed:ac:41:07:ec:b7:7a:95:ce:ea:a5:b8:b7:ee:c9: a2:75:6e:f6:10:fe:bc:f6:09:84:67:e7:8c:56:47: 3c:64:f8:df:d4:7d:3c:36:9d:92:4a:4b:3f:d2:8a: f8:06:c0:b9:57:d7:25:09:1a:51:36:e6:c8:9d:ec: 86:39:79:ab:88:cc:77:f4:4a:20:01:df:9a:6a:df: f1:1d:80:a1:cb:80:61:e8:d5:0d:b3:e0:d9:5d:9c: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:88:28:8D:7A:42:7D:57:CC:B0:A5:DF:AB:72:1C:A9:E8:84:F3:BF X509v3 Authority Key Identifier: keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/r4gojXpCfVfMsKXfq3IcqeiE878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.17.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:03:7c:1f:60:86:a6:f3:1d:98:ea:38:59:d2:16:2c:ba:5a: 63:7b:5a:3a:bb:00:79:21:9c:ef:8e:0d:f4:c4:43:d5:5e:45: f8:b7:92:db:8a:c9:6f:b8:4d:40:89:3d:0a:de:f0:3e:2a:4a: 7b:e6:94:57:5d:ff:1f:eb:01:dd:4a:75:d3:eb:14:35:5c:81: bd:b6:ec:30:4a:82:56:ce:46:2e:42:97:bb:96:70:9b:78:fe: 50:93:08:9a:b2:92:0c:c2:69:48:c2:35:6d:b8:a4:d3:6b:d7: 9c:15:5f:74:6f:f3:63:79:4d:60:d2:e9:11:b7:e3:35:99:93: ed:e2:1d:55:62:1a:53:fe:7a:85:ab:42:67:cf:73:08:e1:39: 05:bc:8c:97:fd:b4:99:ae:b5:f3:7b:91:d9:57:52:58:70:b6: 02:cf:fd:64:aa:5f:e0:19:91:77:ee:5f:fd:75:f6:4a:bb:da: 33:9e:b3:be:ff:50:77:c5:80:67:35:64:f8:31:7c:08:51:15: b4:f9:2d:35:03:8b:29:98:48:4f:10:c4:1d:47:b6:ef:18:e4: 0a:ec:75:05:5e:bb:16:61:10:5c:dd:f3:6f:f0:d6:8b:64:65: 08:25:a4:45:f1:cb:87:eb:fd:71:12:79:0b:82:13:5f:18:39: 14:bb:d3:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/glPBLtEqf0p87eGybS4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1 NjJmYTQwHhcNMjYwMTAyMTYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjg4Mjg4ZDdhNDI3ZDU3Y2NiMGE1ZGZhYjcyMWNhOWU4ODRmM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0qkDMSZm7r7UMSvXt/Qw4L/NHUN Ye6y4ZHCwzG+nl++7wZLJkGG32aCAtdZ485lIMlbO8ypz4LqIh32tNfXjnNJLvKF kNtxnuF5O07LJptmcUIVk03ZEj6WGteBUFOPZ8G3ia88QFlK33gQnZnAyVECSgX0 16eW7ZTo0k1z7oQciwUPjGAnhZ/ErvjxbQytmFLz3QVD+obs20+Ew+CCBYVxDTTt rEEH7Ld6lc7qpbi37smidW72EP689gmEZ+eMVkc8ZPjf1H08Np2SSks/0or4BsC5 V9clCRpRNubIneyGOXmriMx39EogAd+aat/xHYChy4Bh6NUNs+DZXZyX1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK+IKI16Qn1XzLCl36tyHKnohPO/MB8GA1UdIwQY MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt MTAzMGNkYmU2YmQ0LzEvcjRnb2pYcENmVmZNc0tYZnEzSWNxZWlFODc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0 LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2sRMA0G CSqGSIb3DQEBCwUAA4IBAQAcA3wfYIam8x2Y6jhZ0hYsulpje1o6uwB5IZzvjg30 xEPVXkX4t5LbislvuE1AiT0K3vA+Kkp75pRXXf8f6wHdSnXT6xQ1XIG9tuwwSoJW zkYuQpe7lnCbeP5QkwiaspIMwmlIwjVtuKTTa9ecFV90b/NjeU1g0ukRt+M1mZPt 4h1VYhpT/nqFq0Jnz3MI4TkFvIyX/bSZrrXze5HZV1JYcLYCz/1kql/gGZF37l/9 dfZKu9oznrO+/1B3xYBnNWT4MXwIURW0+S01A4spmEhPEMQdR7bvGOQK7HUFXrsW YRBc3fNv8NaLZGUIJaRF8cuH6/1xEnkLghNfGDkUu9Mp -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:49 2026 by rpki-client