This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/KDa5uRqK9juP4htJaSfQ6ubUcf8.roa File: KDa5uRqK9juP4htJaSfQ6ubUcf8.roa (raw, json) Hash identifier: 6/UpMHBXRv8N9WjaHNgcICPR6tBY4lUFakyS64aPIfk= Subject key identifier: 28:36:B9:B9:1A:8A:F6:3B:8F:E2:1B:49:69:27:D0:EA:E6:D4:71:FF Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019C2C813CB4447B1DCA3B7074468F501E84 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/KDa5uRqK9juP4htJaSfQ6ubUcf8.roa Signing time: Thu 05 Feb 2026 06:33:12 +0000 ROA not before: Thu 05 Feb 2026 06:33:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209630 IP address blocks: 103.216.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 23:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2c:81:3c:b4:44:7b:1d:ca:3b:70:74:46:8f:50:1e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Feb 5 06:33:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2836b9b91a8af63b8fe21b496927d0eae6d471ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e4:7c:f6:dc:bb:73:91:9c:11:db:a6:44:ef: 92:35:e7:f0:3c:75:1a:81:c4:8c:b2:da:e4:fe:e2: 80:6f:24:df:a7:89:e4:5b:de:20:1d:c6:9f:fa:92: 82:d5:6f:cc:00:57:f7:e5:03:9e:79:76:fd:cb:96: 62:7f:9c:d6:b1:9d:18:53:d1:0c:ad:c8:f3:9c:96: a0:2c:55:92:64:83:98:4b:da:52:b3:61:af:80:79: 1d:58:3a:80:08:8d:a2:f5:80:1a:bb:5c:df:8b:9d: 04:90:bb:e9:2c:cf:9a:c3:a4:79:42:ee:e7:10:f3: 6c:1f:c6:e8:ed:b8:23:49:44:4e:c5:ad:04:76:ba: f7:f0:97:ab:66:77:ff:cc:c7:3e:15:ad:b1:5d:be: 40:2c:f5:ad:85:3f:8b:44:20:86:3c:f3:36:b2:d7: 9b:c0:e3:9d:6b:4c:cb:c9:f2:37:22:b1:56:18:ee: e2:6b:aa:35:8f:cd:50:fb:1d:4b:8c:09:1c:c7:b9: 25:a9:57:ec:18:77:f3:01:17:79:64:1d:fa:5a:ed: 01:9b:de:de:8f:76:29:7d:5d:dc:0f:95:91:3b:90: e1:9c:44:05:ba:e4:45:77:b0:63:0a:d5:7e:c2:2d: e7:67:5b:58:d3:cf:39:30:f6:10:08:17:6e:7b:62: b2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:36:B9:B9:1A:8A:F6:3B:8F:E2:1B:49:69:27:D0:EA:E6:D4:71:FF X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/KDa5uRqK9juP4htJaSfQ6ubUcf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.174.0/24 Signature Algorithm: sha256WithRSAEncryption 09:48:af:f0:1b:06:6d:2b:de:7b:31:30:62:eb:2b:e1:4e:e3: a8:aa:f7:aa:5c:ec:7f:ed:2f:53:1e:d5:38:7f:d6:9b:55:6b: 8f:69:62:7f:da:9b:f7:54:c8:e4:e1:26:0a:15:4d:3e:90:d8: 68:09:49:79:8a:18:c5:a1:2e:6f:7a:58:95:6a:6c:43:af:79: a7:ee:15:ac:bc:02:4d:94:30:44:17:38:57:ab:8e:15:5c:34: 61:0b:84:b9:37:d0:55:0c:92:e2:57:87:61:69:cf:75:26:2f: 80:6c:a8:82:e6:c0:da:84:f8:40:df:c5:81:69:57:01:14:b9: 53:c4:7c:9d:11:03:49:d1:2f:4a:7f:a2:24:53:20:66:ff:e9: 47:85:8f:79:53:e5:58:be:94:33:0b:5a:5d:bd:e9:b2:02:cd: 08:ec:95:85:6f:32:c6:ab:08:1d:c9:6c:29:b4:a9:ab:e1:3d: 49:43:98:ea:47:8d:73:73:9a:76:e7:ed:87:36:26:2b:c1:aa: 85:c4:1f:cd:3f:93:e9:43:c1:c3:54:e6:34:fb:f9:5d:7c:4c: 1c:4d:c7:f2:78:31:80:48:6d:0d:42:c7:19:09:ee:42:63:ed: 1d:7f:aa:97:06:0c:cd:36:5d:26:5d:06:b3:b8:9f:bd:f0:94: 30:54:b9:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwsgTy0RHsdyjtwdEaPUB6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMjA1MDYzMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODM2YjliOTFhOGFmNjNiOGZlMjFiNDk2OTI3ZDBlYWU2ZDQ3MWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+R89ty7c5GcEdumRO+SNefwPHUa gcSMstrk/uKAbyTfp4nkW94gHcaf+pKC1W/MAFf35QOeeXb9y5Zif5zWsZ0YU9EM rcjznJagLFWSZIOYS9pSs2GvgHkdWDqACI2i9YAau1zfi50EkLvpLM+aw6R5Qu7n EPNsH8bo7bgjSUROxa0Edrr38JerZnf/zMc+Fa2xXb5ALPWthT+LRCCGPPM2steb wOOda0zLyfI3IrFWGO7ia6o1j81Q+x1LjAkcx7klqVfsGHfzARd5ZB36Wu0Bm97e j3YpfV3cD5WRO5DhnEQFuuRFd7BjCtV+wi3nZ1tY0885MPYQCBdue2Ky1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCg2ubkaivY7j+IbSWkn0Orm1HH/MB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvS0RhNXVScUs5anVQNGh0SmFTZlE2dWJVY2Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9iuMA0G CSqGSIb3DQEBCwUAA4IBAQAJSK/wGwZtK957MTBi6yvhTuOoqveqXOx/7S9THtU4 f9abVWuPaWJ/2pv3VMjk4SYKFU0+kNhoCUl5ihjFoS5veliVamxDr3mn7hWsvAJN lDBEFzhXq44VXDRhC4S5N9BVDJLiV4dhac91Ji+AbKiC5sDahPhA38WBaVcBFLlT xHydEQNJ0S9Kf6IkUyBm/+lHhY95U+VYvpQzC1pdvemyAs0I7JWFbzLGqwgdyWwp tKmr4T1JQ5jqR41zc5p25+2HNiYrwaqFxB/NP5PpQ8HDVOY0+/ldfEwcTcfyeDGA SG0NQscZCe5CY+0df6qXBgzNNl0mXQazuJ+98JQwVLml -----END CERTIFICATE-----Generated at Fri Feb 13 08:26:57 2026 by rpki-client