This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x8G1Yoeg0YCKEaI62w0nGtjOEuM.roa File: x8G1Yoeg0YCKEaI62w0nGtjOEuM.roa (raw, json) Hash identifier: N+Vr1Wpn9wUw6j07nAIbueMPkuP8xWs0XtxciVf3414= Subject key identifier: C7:C1:B5:62:87:A0:D1:80:8A:11:A2:3A:DB:0D:27:1A:D8:CE:12:E3 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B79106C0361A8A0FCD6B87BD675F1F348 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x8G1Yoeg0YCKEaI62w0nGtjOEuM.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 103.136.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6c:03:61:a8:a0:fc:d6:b8:7b:d6:75:f1:f3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7c1b56287a0d1808a11a23adb0d271ad8ce12e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:73:f6:dd:68:62:0e:54:f3:be:21:52:5f:14: e0:af:90:bc:a0:c7:14:a7:7d:dd:7f:e1:26:dc:7b: 02:8f:da:b2:2a:9d:a0:c6:2d:de:f6:ea:e8:f6:98: 80:f8:b2:1a:f0:c1:e0:9c:b3:19:8a:a6:2c:0c:df: b5:df:50:11:05:cd:08:31:c3:9b:79:c2:f8:85:b8: 1f:e8:e5:2e:a2:9b:c5:90:a0:6d:9e:6c:38:96:65: 9d:58:68:7d:da:9b:77:1d:7b:f2:f2:2e:18:68:aa: 07:dc:d8:84:4a:19:33:a9:dd:23:f0:11:49:fd:76: 84:34:71:4b:36:e7:c4:20:25:d1:4b:fe:a5:68:44: fa:b7:50:ed:ea:44:d5:9f:6a:fa:e7:6b:04:c8:30: 93:95:10:1f:c2:04:a7:a8:e0:57:76:03:02:a8:84: 5f:96:e7:da:86:ac:13:03:8e:46:1f:a4:4e:5b:aa: 11:f4:ab:a2:4d:75:60:89:4a:33:b6:07:e8:3a:a6: ec:f1:1e:28:70:a4:b6:57:bd:33:b9:3e:6c:9d:28: b2:7e:6b:33:fa:b6:5f:d5:e1:d9:4a:6c:d5:0a:f3: ec:5b:39:03:1f:e6:a8:3b:e9:5a:e6:c9:d2:66:2b: c1:9d:48:4f:cf:21:d6:a9:f8:c1:b9:36:3b:36:ce: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C1:B5:62:87:A0:D1:80:8A:11:A2:3A:DB:0D:27:1A:D8:CE:12:E3 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x8G1Yoeg0YCKEaI62w0nGtjOEuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.71.0/24 Signature Algorithm: sha256WithRSAEncryption c9:38:d0:7a:2c:99:0a:8b:75:0f:21:4b:b9:86:17:06:dd:09: 46:68:f0:35:de:b7:ef:9c:aa:52:9a:bd:e2:33:89:ec:42:ae: a4:1c:d4:92:02:4e:de:35:d7:dc:0c:db:10:e5:fe:86:2f:50: be:41:6e:68:ff:fb:89:f1:3f:db:de:f5:c6:e4:d3:cf:45:12: 71:38:a4:c2:be:aa:73:70:65:83:e4:a0:a4:19:cd:25:18:17: bd:ea:6e:59:b9:07:c0:00:26:8c:48:1c:e6:3b:84:10:0d:3f: e9:35:4d:39:b0:19:4b:14:0d:31:e3:56:6a:35:ff:bb:5c:0c: 3a:e3:0b:89:be:45:65:f4:24:ca:7b:4d:fd:0b:0c:98:05:bd: b9:9f:b5:ca:21:32:81:1a:fb:fe:3d:1d:96:4d:07:97:7b:19: ee:83:46:b7:5a:80:22:20:fb:96:d0:b6:ce:8c:37:ad:80:b7: 7e:0c:a6:16:55:fd:5a:e8:1c:67:6c:a1:6e:50:c4:93:ae:95: b2:af:09:af:3e:8d:8b:b9:a7:ec:67:48:db:23:ff:66:ca:44: b9:39:b2:18:20:8f:57:89:3d:c7:f7:db:a3:a3:62:42:bb:db: 01:fe:c5:a2:66:e3:34:c6:1d:db:50:1a:e4:93:ee:4c:95:0a: 41:d6:fa:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGwDYaig/Na4e9Z18fNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2MxYjU2Mjg3YTBkMTgwOGExMWEyM2FkYjBkMjcxYWQ4Y2UxMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnP23WhiDlTzviFSXxTgr5C8oMcU p33df+Em3HsCj9qyKp2gxi3e9uro9piA+LIa8MHgnLMZiqYsDN+131ARBc0IMcOb ecL4hbgf6OUuopvFkKBtnmw4lmWdWGh92pt3HXvy8i4YaKoH3NiEShkzqd0j8BFJ /XaENHFLNufEICXRS/6laET6t1Dt6kTVn2r652sEyDCTlRAfwgSnqOBXdgMCqIRf lufahqwTA45GH6ROW6oR9KuiTXVgiUoztgfoOqbs8R4ocKS2V70zuT5snSiyfmsz +rZf1eHZSmzVCvPsWzkDH+aoO+la5snSZivBnUhPzyHWqfjBuTY7Ns4cLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfBtWKHoNGAihGiOtsNJxrYzhLjMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEveDhHMVlvZWcwWUNLRWFJNjJ3MG5HdGpPRXVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4hHMA0G CSqGSIb3DQEBCwUAA4IBAQDJONB6LJkKi3UPIUu5hhcG3QlGaPA13rfvnKpSmr3i M4nsQq6kHNSSAk7eNdfcDNsQ5f6GL1C+QW5o//uJ8T/b3vXG5NPPRRJxOKTCvqpz cGWD5KCkGc0lGBe96m5ZuQfAACaMSBzmO4QQDT/pNU05sBlLFA0x41ZqNf+7XAw6 4wuJvkVl9CTKe039CwyYBb25n7XKITKBGvv+PR2WTQeXexnug0a3WoAiIPuW0LbO jDetgLd+DKYWVf1a6BxnbKFuUMSTrpWyrwmvPo2LuafsZ0jbI/9mykS5ObIYII9X iT3H99ujo2JCu9sB/sWiZuM0xh3bUBrkk+5MlQpB1vou -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:50 2026 by rpki-client