This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VVtTstTN4L17i5mCI5qP-a5-wes.roa File: VVtTstTN4L17i5mCI5qP-a5-wes.roa (raw, json) Hash identifier: ZjuU+N/LKCmee8MQhz24MLht129W9qLFn+OWhEoVN8Q= Subject key identifier: 55:5B:53:B2:D4:CD:E0:BD:7B:8B:99:82:23:9A:8F:F9:AE:7E:C1:EB Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B35FD1F47A333F43370A5D8B8C93F9E Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VVtTstTN4L17i5mCI5qP-a5-wes.roa Signing time: Thu 01 Jan 2026 20:18:14 +0000 ROA not before: Thu 01 Jan 2026 20:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 103.211.101.0/24 maxlen: 24 124.155.240.0/24 maxlen: 24 124.155.241.0/24 maxlen: 24 124.155.242.0/24 maxlen: 24 124.155.243.0/24 maxlen: 24 124.155.244.0/24 maxlen: 24 124.155.245.0/24 maxlen: 24 124.155.246.0/24 maxlen: 24 124.155.247.0/24 maxlen: 24 124.155.249.0/24 maxlen: 24 124.155.250.0/24 maxlen: 24 124.155.252.0/24 maxlen: 24 124.155.253.0/24 maxlen: 24 124.155.254.0/24 maxlen: 24 124.155.255.0/24 maxlen: 24 202.71.6.0/24 maxlen: 24 202.71.7.0/24 maxlen: 24 207.45.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fd:1f:47:a3:33:f4:33:70:a5:d8:b8:c9:3f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=555b53b2d4cde0bd7b8b9982239a8ff9ae7ec1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:48:e0:3b:2c:20:4f:b7:29:7a:f5:ad:58: 16:04:12:c6:32:a7:1c:72:13:15:f1:84:8d:84:0a: c2:d5:6e:65:21:a3:84:34:5a:c6:a0:d3:5b:ce:b8: 8a:ec:90:3e:17:8a:30:45:bb:9f:42:31:a7:8d:d5: 9a:34:7d:74:ce:cf:0d:e5:3e:58:37:32:85:89:c6: bc:ef:81:be:64:2b:c9:3d:d4:a9:9c:b6:d1:a3:7d: 10:07:b2:55:a2:1e:e1:b9:0f:3f:fe:f6:f1:00:75: 27:55:6e:52:5f:b1:13:77:99:f1:30:3a:87:b1:93: 85:58:a0:77:f6:c1:79:28:66:33:7e:46:30:ca:d9: 90:a7:24:32:cc:e0:db:53:60:5c:e1:5b:51:49:3f: 22:2e:ed:77:d7:d6:3a:95:56:04:f1:5f:d1:14:a6: b1:9e:5f:23:16:bd:aa:90:b2:b6:84:2c:dc:7e:43: 15:38:59:74:35:39:f1:2e:ae:f9:36:1c:fb:32:d4: 67:31:66:d4:9e:78:f4:ab:ed:f3:f3:5b:42:2a:ca: fe:5a:5e:2e:4e:c4:2e:17:0e:b4:c8:34:2f:42:ba: a0:43:5e:38:07:71:d8:9f:ec:b7:51:c5:24:8d:94: 55:2d:a6:e4:47:d2:6a:9f:d8:e6:9f:f0:e1:8d:bb: 29:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5B:53:B2:D4:CD:E0:BD:7B:8B:99:82:23:9A:8F:F9:AE:7E:C1:EB X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VVtTstTN4L17i5mCI5qP-a5-wes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.101.0/24 124.155.240.0/21 124.155.249.0-124.155.250.255 124.155.252.0/22 202.71.6.0/23 207.45.8.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:8e:33:3c:ff:ec:db:fd:41:45:28:a0:70:1b:de:e2:b5:da: 7d:b9:3e:af:12:c3:9f:5d:89:1f:48:59:94:f2:a3:7a:db:2b: 7a:36:88:14:4b:79:67:60:71:f8:7a:b2:e4:43:18:cc:61:90: d8:a2:29:40:b6:63:51:ff:f3:9c:92:c8:d7:69:d2:71:75:44: 1c:ef:ae:1a:37:24:39:24:1c:d9:22:d0:c2:6d:c4:f9:09:db: 4b:06:35:6c:1e:e9:0f:7f:f4:29:5b:59:6e:0a:4d:d9:6d:69: 0a:b8:2a:d7:83:3b:2b:c0:ae:6e:bb:49:dc:22:af:d5:ff:02: 3a:56:e8:1b:8b:36:2b:21:1f:15:74:27:83:59:ae:ee:55:79: f9:7d:03:dd:7b:33:9b:11:2a:19:30:03:76:be:42:c9:ef:60: 4c:fb:b7:cc:08:a7:0e:5c:dd:2e:56:32:b4:68:89:ca:d9:dd: 0a:d6:63:fe:3d:b7:d3:2b:b0:00:36:ee:6c:72:7f:dd:de:3e: cd:10:6a:47:a3:f9:43:3f:bb:c7:bf:82:d0:35:3f:ca:86:f3: 4f:bf:a3:9f:10:39:af:27:9e:d4:88:4f:a2:78:d2:da:1b:b9: 8f:73:5c:a0:74:31:87:63:e8:57:cf:f4:f9:ab:4e:bc:1a:12: 62:c5:c6:12 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt7Nf0fR6Mz9DNwpdi4yT+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTViNTNiMmQ0Y2RlMGJkN2I4Yjk5ODIyMzlhOGZmOWFlN2VjMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppZI4DssIE+3KXr1rVgWBBLGMqcc chMV8YSNhArC1W5lIaOENFrGoNNbzriK7JA+F4owRbufQjGnjdWaNH10zs8N5T5Y NzKFica874G+ZCvJPdSpnLbRo30QB7JVoh7huQ8//vbxAHUnVW5SX7ETd5nxMDqH sZOFWKB39sF5KGYzfkYwytmQpyQyzODbU2Bc4VtRST8iLu1319Y6lVYE8V/RFKax nl8jFr2qkLK2hCzcfkMVOFl0NTnxLq75Nhz7MtRnMWbUnnj0q+3z81tCKsr+Wl4u TsQuFw60yDQvQrqgQ144B3HYn+y3UcUkjZRVLabkR9Jqn9jmn/DhjbspWQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFFVbU7LUzeC9e4uZgiOaj/mufsHrMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvVlZ0VHN0VE40TDE3aTVtQ0k1cVAtYTUtd2VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAZ9NlAwQD fJvwMAwDBAB8m/kDBAB8m/oDBAJ8m/wDBAHKRwYDBAPPLQgwDQYJKoZIhvcNAQEL BQADggEBAH2OMzz/7Nv9QUUooHAb3uK12n25Pq8Sw59diR9IWZTyo3rbK3o2iBRL eWdgcfh6suRDGMxhkNiiKUC2Y1H/85ySyNdp0nF1RBzvrho3JDkkHNki0MJtxPkJ 20sGNWwe6Q9/9ClbWW4KTdltaQq4KteDOyvArm67Sdwir9X/AjpW6BuLNishHxV0 J4NZru5Vefl9A917M5sRKhkwA3a+QsnvYEz7t8wIpw5c3S5WMrRoicrZ3QrWY/49 t9MrsAA27mxyf93ePs0Qakej+UM/u8e/gtA1P8qG80+/o58QOa8nntSIT6J40tob uY9zXKB0MYdj6FfP9PmrTrwaEmLFxhI= -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:58 2026 by rpki-client