This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/V7zz5RYIeaD1rKbwrR61Qzmy0cE.roa File: V7zz5RYIeaD1rKbwrR61Qzmy0cE.roa (raw, json) Hash identifier: Bp1wY3wHba5l7UrAhDBjOEjjo7+NQ6Cmh+UiV252fLs= Subject key identifier: 57:BC:F3:E5:16:08:79:A0:F5:AC:A6:F0:AD:1E:B5:43:39:B2:D1:C1 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B8FA2F23CAAB2655AE9F36B383D6F7811 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/V7zz5RYIeaD1rKbwrR61Qzmy0cE.roa Signing time: Mon 05 Jan 2026 19:29:39 +0000 ROA not before: Mon 05 Jan 2026 19:29:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 103.216.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:a2:f2:3c:aa:b2:65:5a:e9:f3:6b:38:3d:6f:78:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 5 19:29:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57bcf3e5160879a0f5aca6f0ad1eb54339b2d1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ca:32:6b:a7:c6:87:2a:ef:2a:99:2d:d6:e0: e4:57:b4:3a:8b:4f:d4:77:58:67:01:f5:9c:53:bc: bb:92:cc:53:a1:f9:ea:4c:e3:71:8a:ad:96:1a:10: a9:be:ff:07:76:dc:e4:3e:9e:3d:9c:94:d1:59:da: 58:6b:b4:6f:de:49:bc:1f:7d:4f:ad:4c:b8:55:53: ed:23:ef:98:72:06:59:23:54:0f:e9:f7:a3:0a:c0: c2:5a:51:0f:ff:89:23:e0:e5:8f:ec:f3:35:20:ad: e0:29:a5:db:7b:b3:1b:ee:08:bd:5c:90:a8:36:15: 29:bb:3c:ca:09:35:ba:21:4b:76:37:b2:77:9f:64: 63:df:2a:6d:5f:f1:b5:1a:66:05:98:64:b1:53:09: ac:13:7e:0a:84:ed:6a:e1:48:f4:0e:32:d9:c6:16: 44:ff:7d:b4:ba:58:04:54:06:e8:a6:26:7e:17:70: 2f:5f:64:08:1d:a2:c5:96:d9:e9:ee:14:e0:4b:e0: 80:2f:59:71:cb:d4:8d:84:93:6a:37:b2:67:97:47: 32:40:d6:cb:1d:78:17:60:10:54:fd:f4:75:dc:59: 2e:46:11:27:68:50:38:0e:ad:bc:bf:e7:38:6b:c2: 9d:3a:c3:1a:3b:31:07:29:4b:c1:c5:b8:5a:d0:68: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BC:F3:E5:16:08:79:A0:F5:AC:A6:F0:AD:1E:B5:43:39:B2:D1:C1 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/V7zz5RYIeaD1rKbwrR61Qzmy0cE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.173.0/24 Signature Algorithm: sha256WithRSAEncryption 19:14:54:95:eb:6c:85:11:58:4d:c5:f6:50:3c:9e:66:bd:6b: 62:5f:a8:8d:4e:22:7c:0f:85:d7:5d:9a:3c:7f:be:ab:69:be: 4f:02:a4:7b:cd:7d:a7:4e:c9:14:28:3d:e4:ca:7d:c5:86:6d: f2:cc:c7:6a:2d:85:4a:99:ea:4d:8c:22:fe:6d:ed:89:6d:6f: 38:3a:39:90:89:0c:80:04:99:6f:e0:4d:75:29:66:c9:89:01: 98:f2:c1:4e:86:50:34:9f:86:0f:cd:ad:37:a4:13:58:48:9f: c7:0c:77:5a:ec:2d:47:8a:aa:c4:05:e9:90:e9:31:a7:31:63: 0e:ea:09:c5:13:13:f3:60:ce:11:23:49:1d:8d:65:67:ef:a2: 66:7d:1c:08:4f:5a:2a:61:83:34:1c:2c:4c:22:bd:ac:02:3c: de:02:70:4a:c4:bc:04:63:87:f6:34:79:49:38:d1:b0:f1:7b: 80:5a:c8:8f:b3:07:2c:16:a6:67:72:d0:c4:0b:7e:12:c1:75: 24:f2:a8:be:30:43:f4:b0:43:9f:b1:77:fd:f8:ad:94:9e:f8: be:9d:9b:49:82:25:38:82:4a:0d:8a:d7:c5:2e:99:dd:f8:15: a1:2a:47:32:32:f3:18:41:c2:e4:52:5d:d2:7a:08:a4:2b:7c: 98:e8:df:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuPovI8qrJlWunzazg9b3gRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTA1MTkyOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2JjZjNlNTE2MDg3OWEwZjVhY2E2ZjBhZDFlYjU0MzM5YjJkMWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Moya6fGhyrvKpkt1uDkV7Q6i0/U d1hnAfWcU7y7ksxTofnqTONxiq2WGhCpvv8HdtzkPp49nJTRWdpYa7Rv3km8H31P rUy4VVPtI++YcgZZI1QP6fejCsDCWlEP/4kj4OWP7PM1IK3gKaXbe7Mb7gi9XJCo NhUpuzzKCTW6IUt2N7J3n2Rj3yptX/G1GmYFmGSxUwmsE34KhO1q4Uj0DjLZxhZE /320ulgEVAbopiZ+F3AvX2QIHaLFltnp7hTgS+CAL1lxy9SNhJNqN7Jnl0cyQNbL HXgXYBBU/fR13FkuRhEnaFA4Dq28v+c4a8KdOsMaOzEHKUvBxbha0GgrZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFe88+UWCHmg9aym8K0etUM5stHBMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvVjd6ejVSWUllYUQxcktid3JSNjFRem15MGNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9itMA0G CSqGSIb3DQEBCwUAA4IBAQAZFFSV62yFEVhNxfZQPJ5mvWtiX6iNTiJ8D4XXXZo8 f76rab5PAqR7zX2nTskUKD3kyn3Fhm3yzMdqLYVKmepNjCL+be2JbW84OjmQiQyA BJlv4E11KWbJiQGY8sFOhlA0n4YPza03pBNYSJ/HDHda7C1HiqrEBemQ6TGnMWMO 6gnFExPzYM4RI0kdjWVn76JmfRwIT1oqYYM0HCxMIr2sAjzeAnBKxLwEY4f2NHlJ ONGw8XuAWsiPswcsFqZnctDEC34SwXUk8qi+MEP0sEOfsXf9+K2Unvi+nZtJgiU4 gkoNitfFLpnd+BWhKkcyMvMYQcLkUl3SegikK3yY6N89 -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:50 2026 by rpki-client