This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/pTv7PXs_5ykkgZ_tEXsvJcIycU0.roa File: pTv7PXs_5ykkgZ_tEXsvJcIycU0.roa (raw, json) Hash identifier: H/T7NBjQGdOIzAjwHMrrCkvyt/WYe0e9YcUKSlHTyJw= Subject key identifier: A5:3B:FB:3D:7B:3F:E7:29:24:81:9F:ED:11:7B:2F:25:C2:32:71:4D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019B783527580FEA9CE76645D32111D1B6A3 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/pTv7PXs_5ykkgZ_tEXsvJcIycU0.roa Signing time: Thu 01 Jan 2026 06:18:27 +0000 ROA not before: Thu 01 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51847 IP address blocks: 103.76.85.0/24 maxlen: 24 116.206.92.0/24 maxlen: 24 116.206.93.0/24 maxlen: 24 195.78.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:27:58:0f:ea:9c:e7:66:45:d3:21:11:d1:b6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a53bfb3d7b3fe72924819fed117b2f25c232714d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:5f:68:04:2a:4a:63:f3:11:4e:8a:0d:4c: ec:c0:a4:f5:58:b0:79:56:ce:56:fb:32:20:23:f1: c3:68:86:36:cc:86:8a:55:77:ee:5b:88:e9:1a:1d: 1a:bf:b7:5b:36:e1:b2:8b:0f:ed:80:82:cd:9f:5f: 37:da:54:28:b7:09:1f:28:b0:8b:f3:56:c9:27:40: e5:d3:dc:20:04:f9:94:cc:fe:63:54:84:63:46:42: aa:8c:1a:a4:82:68:89:dd:f8:26:fb:d0:a1:70:21: 22:7b:c2:6b:6c:b4:52:a0:7a:30:a0:44:cc:59:54: e5:5d:10:66:c3:9f:c5:55:e5:3a:9d:e7:15:e6:86: 05:6f:5c:cc:1b:e4:28:63:91:3a:11:94:9e:85:2f: 3a:6e:c0:88:7f:92:6d:40:4b:f1:b8:f2:80:f6:43: 02:d2:2d:22:5e:da:92:c2:18:83:75:65:e5:75:de: 0b:c0:9b:0a:57:7d:72:65:fb:02:6a:65:f2:2b:9d: 62:a5:8b:64:a3:fe:1b:32:2c:8e:ae:3a:30:fe:6e: ed:83:e6:03:1a:93:16:36:3d:25:d1:a9:95:ea:6a: dc:fb:14:c0:cc:ff:0c:ac:53:35:25:f2:5c:08:22: 10:d7:cc:e3:4a:1c:cb:ef:5e:0a:b7:72:f5:76:be: 03:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3B:FB:3D:7B:3F:E7:29:24:81:9F:ED:11:7B:2F:25:C2:32:71:4D X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/pTv7PXs_5ykkgZ_tEXsvJcIycU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.85.0/24 116.206.92.0/23 195.78.48.0/24 Signature Algorithm: sha256WithRSAEncryption b6:5b:74:8f:d7:48:4a:4e:02:bc:af:85:46:29:39:0b:b0:11: 76:5b:af:a0:93:79:a4:cc:e2:35:cb:37:a6:0d:04:76:0c:f1: d1:6b:b1:6e:f9:00:01:f5:10:1a:a4:66:db:c5:52:c5:80:f1: 2b:d9:7e:88:dd:6f:2e:93:17:8c:f2:17:40:f1:76:ed:ea:95: 98:af:c1:41:b3:45:4b:b8:73:60:c8:cb:9c:a3:4d:b7:c2:f2: 43:c6:25:65:99:fe:4f:65:9d:9b:ba:df:cf:d0:94:ca:88:76: 92:94:6a:ca:0e:8a:1f:59:0c:44:17:f9:89:18:07:a3:46:28: ba:ef:e9:90:1e:9e:c8:8f:d4:56:59:55:42:5e:05:c5:75:d0: 9e:8a:53:11:f3:bc:90:1f:65:09:5e:ff:60:69:a7:c5:5c:3f: 8f:5e:73:96:c4:1f:15:77:72:ba:04:30:98:0a:f0:4e:7e:54: 51:e7:56:d0:e9:56:30:9a:f2:9c:35:1b:93:19:08:df:17:6f: ff:ae:46:4e:3c:c5:c7:1d:c0:b7:80:69:0c:fc:67:0a:94:8a: 07:a6:22:39:65:5f:bb:db:fe:fc:00:36:7d:6c:f0:88:e1:47: e6:44:53:de:c3:5f:54:3c:22:77:c2:aa:0b:12:d8:8e:ea:d7: c1:00:d8:bf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NSdYD+qc52ZF0yER0bajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTNiZmIzZDdiM2ZlNzI5MjQ4MTlmZWQxMTdiMmYyNWMyMzI3MTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvehfaAQqSmPzEU6KDUzswKT1WLB5 Vs5W+zIgI/HDaIY2zIaKVXfuW4jpGh0av7dbNuGyiw/tgILNn1832lQotwkfKLCL 81bJJ0Dl09wgBPmUzP5jVIRjRkKqjBqkgmiJ3fgm+9ChcCEie8JrbLRSoHowoETM WVTlXRBmw5/FVeU6necV5oYFb1zMG+QoY5E6EZSehS86bsCIf5JtQEvxuPKA9kMC 0i0iXtqSwhiDdWXldd4LwJsKV31yZfsCamXyK51ipYtko/4bMiyOrjow/m7tg+YD GpMWNj0l0amV6mrc+xTAzP8MrFM1JfJcCCIQ18zjShzL714Kt3L1dr4DLwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKU7+z17P+cpJIGf7RF7LyXCMnFNMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvcFR2N1BYc181eWtrZ1pfdEVYc3ZKY0l5Y1UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAZ0xVAwQB dM5cAwQAw04wMA0GCSqGSIb3DQEBCwUAA4IBAQC2W3SP10hKTgK8r4VGKTkLsBF2 W6+gk3mkzOI1yzemDQR2DPHRa7Fu+QAB9RAapGbbxVLFgPEr2X6I3W8ukxeM8hdA 8Xbt6pWYr8FBs0VLuHNgyMuco023wvJDxiVlmf5PZZ2but/P0JTKiHaSlGrKDoof WQxEF/mJGAejRii67+mQHp7Ij9RWWVVCXgXFddCeilMR87yQH2UJXv9gaafFXD+P XnOWxB8Vd3K6BDCYCvBOflRR51bQ6VYwmvKcNRuTGQjfF2//rkZOPMXHHcC3gGkM /GcKlIoHpiI5ZV+72/78ADZ9bPCI4UfmRFPew19UPCJ3wqoLEtiO6tfBANi/ -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:43 2026 by rpki-client