This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/A1gp9ThJTs9BAY44TLsL84W7lkA.roa File: A1gp9ThJTs9BAY44TLsL84W7lkA.roa (raw, json) Hash identifier: H7t1Tw8vv7r2W9QMQ0rHi7uDdhUtFiCTDLnI2GLJ3sE= Subject key identifier: 03:58:29:F5:38:49:4E:CF:41:01:8E:38:4C:BB:0B:F3:85:BB:96:40 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B360AE9F4704E083114A7572430161B Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/A1gp9ThJTs9BAY44TLsL84W7lkA.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151804 IP address blocks: 103.100.170.0/24 maxlen: 24 185.235.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0a:e9:f4:70:4e:08:31:14:a7:57:24:30:16:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=035829f538494ecf41018e384cbb0bf385bb9640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f4:b7:f8:6e:f2:8e:4b:29:9f:37:66:13:c6: ca:fa:71:9b:7a:70:52:db:a3:a5:f1:88:77:0e:c8: f6:51:c9:54:7f:e4:7c:cf:25:9d:62:14:50:05:3c: 35:c5:a9:31:42:92:0c:82:d1:94:80:42:34:a6:9d: 93:b0:9d:a9:4c:55:67:4f:fb:0c:64:f3:53:a7:b0: 80:f1:42:07:58:11:bc:47:b0:83:00:94:08:2f:fd: a1:3a:b0:d6:76:38:7e:16:5d:df:b7:ed:ca:9d:49: 04:eb:06:af:0d:bd:7f:71:4e:5b:e0:69:87:2d:b2: b3:c3:0d:fc:72:25:19:c3:d5:e1:e0:4a:ee:eb:da: 62:dd:85:b8:4e:06:a5:72:6a:de:6a:ad:96:a7:72: 81:cb:44:3d:e4:07:f1:5b:bb:60:b0:ff:66:4f:68: d5:85:ae:66:0e:9b:51:84:b3:7a:e1:42:96:a1:f3: 76:99:d3:fc:ae:7c:eb:6a:9e:d8:63:3d:92:b9:56: d9:42:67:fe:f7:b7:b5:12:c8:d8:9c:99:8e:4b:6e: 82:f8:98:c3:c2:da:86:a2:cf:1b:d6:f2:54:1b:59: a5:5f:5c:cf:85:e9:fe:63:cd:a6:80:73:82:26:e8: 57:8a:e9:88:77:80:4a:d6:9a:ab:e9:b1:e2:1c:b5: 37:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:58:29:F5:38:49:4E:CF:41:01:8E:38:4C:BB:0B:F3:85:BB:96:40 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/A1gp9ThJTs9BAY44TLsL84W7lkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.170.0/24 185.235.167.0/24 Signature Algorithm: sha256WithRSAEncryption 72:80:7c:2b:f7:27:b1:11:13:ed:38:9f:9a:81:1d:8e:e6:68: b5:b6:1b:34:a0:8e:21:9f:0d:2a:26:6a:2f:ce:20:64:5b:c6: 43:09:64:02:74:95:56:ed:aa:6f:94:41:c7:da:24:69:98:8b: 85:f3:88:24:45:80:96:44:a7:ac:56:31:f5:ad:a3:70:47:e6: 21:37:40:b1:d1:3c:9e:43:d4:38:13:66:cb:28:c0:32:bc:2e: 6c:82:41:73:2a:3e:61:14:7e:a8:ea:0b:bb:15:18:eb:85:b1: a9:18:56:70:89:bf:a2:17:34:e9:14:76:7f:8f:d5:c7:5c:96: 49:39:f4:78:4d:7e:59:ed:93:c6:2c:ca:9d:d8:ce:cc:9b:fe: 99:bb:8c:5b:5a:af:b5:e4:59:41:fb:f8:74:8b:34:d9:00:07: 1b:e8:0d:0e:ee:dd:9a:5e:ce:b4:b0:3f:8f:c7:7f:7e:07:97: 37:21:fc:bc:77:90:e4:80:bf:95:81:44:10:2e:14:ca:5e:f0: 8e:d5:ea:00:3c:93:2f:f3:dd:5d:43:b1:8b:f6:db:f3:d2:1c: 39:7e:ab:33:dd:70:da:94:de:a1:1a:af:6a:6a:e3:16:ef:33: 8d:ff:15:19:11:0d:4b:ec:0c:6a:52:1a:6f:5f:68:93:4b:c9: 47:4c:db:66 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Ngrp9HBOCDEUp1ckMBYbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzU4MjlmNTM4NDk0ZWNmNDEwMThlMzg0Y2JiMGJmMzg1YmI5NjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fS3+G7yjkspnzdmE8bK+nGbenBS 26Ol8Yh3Dsj2UclUf+R8zyWdYhRQBTw1xakxQpIMgtGUgEI0pp2TsJ2pTFVnT/sM ZPNTp7CA8UIHWBG8R7CDAJQIL/2hOrDWdjh+Fl3ft+3KnUkE6wavDb1/cU5b4GmH LbKzww38ciUZw9Xh4Eru69pi3YW4Tgalcmreaq2Wp3KBy0Q95AfxW7tgsP9mT2jV ha5mDptRhLN64UKWofN2mdP8rnzrap7YYz2SuVbZQmf+97e1EsjYnJmOS26C+JjD wtqGos8b1vJUG1mlX1zPhen+Y82mgHOCJuhXiumId4BK1pqr6bHiHLU38QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFANYKfU4SU7PQQGOOEy7C/OFu5ZAMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvQTFncDlUaEpUczlCQVk0NFRMc0w4NFc3bGtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ2SqAwQA ueunMA0GCSqGSIb3DQEBCwUAA4IBAQBygHwr9yexERPtOJ+agR2O5mi1ths0oI4h nw0qJmovziBkW8ZDCWQCdJVW7apvlEHH2iRpmIuF84gkRYCWRKesVjH1raNwR+Yh N0Cx0TyeQ9Q4E2bLKMAyvC5sgkFzKj5hFH6o6gu7FRjrhbGpGFZwib+iFzTpFHZ/ j9XHXJZJOfR4TX5Z7ZPGLMqd2M7Mm/6Zu4xbWq+15FlB+/h0izTZAAcb6A0O7t2a Xs60sD+Px39+B5c3Ify8d5DkgL+VgUQQLhTKXvCO1eoAPJMv891dQ7GL9tvz0hw5 fqsz3XDalN6hGq9qauMW7zON/xUZEQ1L7AxqUhpvX2iTS8lHTNtm -----END CERTIFICATE-----Generated at Wed Jan 21 09:23:05 2026 by rpki-client