This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/qffi0MxUdevXw7Nd9dw7Zq2HdFg.roa File: qffi0MxUdevXw7Nd9dw7Zq2HdFg.roa (raw, json) Hash identifier: +JFsuK7Pe3sn5/5q4f3WK5DOq4OHJjFdBWYzWhmxms8= Subject key identifier: A9:F7:E2:D0:CC:54:75:EB:D7:C3:B3:5D:F5:DC:3B:66:AD:87:74:58 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B36157D2422D628B4C41D5A827C0CBB Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/qffi0MxUdevXw7Nd9dw7Zq2HdFg.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 103.211.101.0/24 maxlen: 24 124.155.240.0/24 maxlen: 24 124.155.241.0/24 maxlen: 24 124.155.242.0/24 maxlen: 24 124.155.243.0/24 maxlen: 24 124.155.244.0/24 maxlen: 24 124.155.245.0/24 maxlen: 24 124.155.246.0/24 maxlen: 24 124.155.247.0/24 maxlen: 24 124.155.249.0/24 maxlen: 24 124.155.250.0/24 maxlen: 24 124.155.252.0/24 maxlen: 24 124.155.253.0/24 maxlen: 24 124.155.254.0/24 maxlen: 24 124.155.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:15:7d:24:22:d6:28:b4:c4:1d:5a:82:7c:0c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9f7e2d0cc5475ebd7c3b35df5dc3b66ad877458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:f2:60:df:8b:eb:e7:46:6e:6a:d3:c8:6e: 78:72:1b:c4:9c:9b:2f:c5:9f:61:47:61:92:5f:d9: b0:2f:68:23:cb:e3:0c:09:72:47:22:33:29:e6:39: 3c:e5:31:30:81:4b:71:6b:b3:f7:e1:49:bd:e8:2d: b9:ef:ee:bf:04:18:57:7d:08:33:ae:cb:82:78:58: f6:cb:f3:ed:98:fd:a3:ca:80:a2:52:ff:2c:ae:37: cc:ed:61:d6:44:8e:51:a6:8e:57:6f:61:ea:f1:be: 76:f5:cc:0e:e3:3f:a4:b6:8d:af:fa:77:ae:81:f0: 23:f3:ea:64:e2:f1:a2:13:3d:28:07:f9:a6:ec:5c: e6:05:a2:9d:54:64:a4:f7:be:76:57:63:16:a2:98: 0d:c6:09:35:3a:a5:96:fa:85:85:6f:8e:3b:39:86: a7:30:75:d6:dd:3a:e2:d5:a0:e6:2b:1e:ff:33:e1: 28:78:15:d4:71:9e:4b:23:ab:8b:87:ea:c3:41:0d: df:6c:29:a9:ba:fc:e6:1b:a7:e2:62:56:5a:37:ba: 06:c0:43:08:5e:2e:35:a1:ad:40:9c:8d:02:e5:43: 12:ca:b0:94:10:dd:3f:05:4f:a0:ff:48:d7:d0:03: c2:43:28:ee:2e:1f:b3:f4:6e:80:1c:fe:1b:16:ef: ec:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F7:E2:D0:CC:54:75:EB:D7:C3:B3:5D:F5:DC:3B:66:AD:87:74:58 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/qffi0MxUdevXw7Nd9dw7Zq2HdFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.101.0/24 124.155.240.0/21 124.155.249.0-124.155.250.255 124.155.252.0/22 Signature Algorithm: sha256WithRSAEncryption bc:06:66:7c:e9:9b:aa:b4:f6:f3:2f:f6:1a:92:a4:c7:88:09: 46:9e:70:e5:08:b4:2e:18:56:81:19:73:0f:c3:fb:79:78:64: c1:93:fa:df:d4:6b:56:8f:9a:ea:e8:d3:a8:97:b5:16:f6:be: 16:dd:10:7d:1e:57:df:6a:d1:0b:4b:83:e9:df:7d:c3:da:ed: 74:a3:58:5e:12:3c:45:12:07:04:38:20:aa:c8:b7:8d:b1:13: 9b:4c:39:b5:92:bf:f3:67:ce:14:25:4d:d9:38:fd:42:fb:70: 37:ca:2c:3b:a1:db:49:b0:aa:b4:58:15:eb:a5:66:ae:9f:c7: 4f:03:12:dd:69:1d:fc:1b:cb:86:8e:1c:9e:df:76:85:1e:18: e2:85:56:6d:88:aa:ce:10:63:c5:67:b3:00:a1:c7:07:fa:e3: cb:ba:c1:a7:f2:c7:ff:d3:8f:72:5a:93:c9:3f:73:61:98:d2: b5:10:2d:2d:62:81:2e:a8:b9:3c:ee:da:98:49:1a:2e:6b:ee: 42:63:9a:28:7c:7c:b4:f0:78:31:43:a8:62:c6:ba:5a:98:6d: fe:b7:1c:49:2c:a0:e9:a5:11:98:f0:2f:66:d9:76:ea:f8:7f: 7c:b3:b6:08:82:a4:a4:61:5a:8b:d3:ac:31:c8:b2:df:ad:4f: 24:b4:aa:17 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7NhV9JCLWKLTEHVqCfAy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWY3ZTJkMGNjNTQ3NWViZDdjM2IzNWRmNWRjM2I2NmFkODc3NDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoavyYN+L6+dGbmrTyG54chvEnJsv xZ9hR2GSX9mwL2gjy+MMCXJHIjMp5jk85TEwgUtxa7P34Um96C257+6/BBhXfQgz rsuCeFj2y/PtmP2jyoCiUv8srjfM7WHWRI5Rpo5Xb2Hq8b529cwO4z+kto2v+neu gfAj8+pk4vGiEz0oB/mm7FzmBaKdVGSk9752V2MWopgNxgk1OqWW+oWFb447OYan MHXW3Tri1aDmKx7/M+EoeBXUcZ5LI6uLh+rDQQ3fbCmpuvzmG6fiYlZaN7oGwEMI Xi41oa1AnI0C5UMSyrCUEN0/BU+g/0jX0APCQyjuLh+z9G6AHP4bFu/swQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKn34tDMVHXr18OzXfXcO2ath3RYMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvcWZmaTBNeFVkZXZYdzdOZDlkdzdacTJIZEZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAZ9NlAwQD fJvwMAwDBAB8m/kDBAB8m/oDBAJ8m/wwDQYJKoZIhvcNAQELBQADggEBALwGZnzp m6q09vMv9hqSpMeICUaecOUItC4YVoEZcw/D+3l4ZMGT+t/Ua1aPmuro06iXtRb2 vhbdEH0eV99q0QtLg+nffcPa7XSjWF4SPEUSBwQ4IKrIt42xE5tMObWSv/NnzhQl Tdk4/UL7cDfKLDuh20mwqrRYFeulZq6fx08DEt1pHfwby4aOHJ7fdoUeGOKFVm2I qs4QY8VnswChxwf648u6wafyx//Tj3Jak8k/c2GY0rUQLS1igS6ouTzu2phJGi5r 7kJjmih8fLTweDFDqGLGulqYbf63HEksoOmlEZjwL2bZdur4f3yztgiCpKRhWovT rDHIst+tTyS0qhc= -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:29 2026 by rpki-client