This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/z0iMiahNYPvm3B9HmPHysRJCV48.roa File: z0iMiahNYPvm3B9HmPHysRJCV48.roa (raw, json) Hash identifier: F4Z38q8YPNyxnacTXsEOotlLHJljs0HRvUHujQlPHKs= Subject key identifier: CF:48:8C:89:A8:4D:60:FB:E6:DC:1F:47:98:F1:F2:B1:12:42:57:8F Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B36057A493E9F4463015D7AF0546810 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/z0iMiahNYPvm3B9HmPHysRJCV48.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134492 IP address blocks: 103.146.101.0/24 maxlen: 24 103.148.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:05:7a:49:3e:9f:44:63:01:5d:7a:f0:54:68:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf488c89a84d60fbe6dc1f4798f1f2b11242578f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c7:d5:53:5c:0a:1d:ad:89:45:ca:ec:b0:84: 92:90:39:b7:cc:93:3c:52:ab:34:ba:4a:a2:aa:be: 3e:c6:6a:9d:60:04:f0:b6:4a:05:3b:65:7a:c9:3c: a1:66:0e:13:7b:a9:a5:c1:9c:01:91:2a:0b:e8:f2: 09:e6:17:a9:89:62:0f:23:a9:08:7a:76:1b:75:55: 9a:4c:e8:d1:47:00:f7:8e:96:71:c6:45:4d:49:2c: 9e:74:0c:8f:9c:16:23:be:be:ad:f1:8a:e3:f6:a1: e6:c8:47:73:f6:98:22:03:6e:1b:49:85:e2:99:41: 78:ea:c0:a0:c3:43:29:b1:77:15:9a:7a:db:de:66: 9d:c4:0d:53:86:fa:48:da:b9:47:e9:07:bf:f0:79: 24:01:33:a8:e2:a6:c2:a3:4a:e2:ae:4d:7e:bf:8c: f0:3f:66:9d:15:2b:f7:17:78:55:5e:0e:18:b6:43: 32:7f:7f:1d:77:dd:f0:e9:f5:43:69:2a:bc:65:ce: bb:50:8b:ee:3c:89:be:7f:2f:e0:2b:47:51:ff:16: ae:3d:1d:18:77:53:5a:fd:be:c5:dd:ec:ce:51:3f: e3:c7:ad:86:2f:ed:0f:78:4b:72:c1:4a:9b:c1:68: f7:dd:bf:b2:f3:33:10:a1:b7:f4:f9:43:70:36:a1: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:48:8C:89:A8:4D:60:FB:E6:DC:1F:47:98:F1:F2:B1:12:42:57:8F X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/z0iMiahNYPvm3B9HmPHysRJCV48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.101.0/24 103.148.117.0/24 Signature Algorithm: sha256WithRSAEncryption ba:59:41:a8:ca:9f:71:9b:31:9c:ee:6d:7c:db:3e:47:61:31: 4f:c6:72:50:42:d2:19:7d:f2:c3:ce:90:c3:f6:47:ed:88:3f: 16:3b:ac:b7:f4:30:24:b2:4d:76:ba:cd:c0:f2:37:be:f3:9f: 3f:cd:c6:54:23:77:4d:24:bb:8b:9d:fc:88:36:c6:9f:eb:d5: e7:96:07:8b:bf:ef:f3:6f:66:86:3d:11:b4:19:70:3d:f2:5c: d2:40:9a:ef:c2:a2:25:e9:fe:34:72:b6:4e:23:9b:79:64:27: 55:cc:b9:50:ee:c2:69:c9:67:57:36:2e:98:84:1f:5d:bc:f9: 00:be:74:46:81:77:d5:dd:ce:c5:54:1f:ae:38:d7:c6:b0:c1: 32:6a:6a:65:67:00:c0:2b:ed:e1:02:00:37:9d:df:c5:97:f1: dc:c4:c2:a8:03:d1:bb:fc:c8:75:34:e5:19:a8:36:56:48:38: 90:87:8e:bb:00:b7:ce:43:af:47:0a:32:6d:1a:84:02:ec:27: bc:76:24:f7:13:50:3e:76:0d:64:49:12:99:6d:ad:89:90:ed: 9d:59:67:26:b1:a2:92:f5:f0:98:d6:3e:c7:5c:2c:7e:dc:7e: fd:a2:fd:7e:7f:47:a4:5e:87:03:11:1d:dc:9a:f3:9d:a0:a6: eb:a0:e7:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NgV6ST6fRGMBXXrwVGgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjQ4OGM4OWE4NGQ2MGZiZTZkYzFmNDc5OGYxZjJiMTEyNDI1NzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcfVU1wKHa2JRcrssISSkDm3zJM8 Uqs0ukqiqr4+xmqdYATwtkoFO2V6yTyhZg4Te6mlwZwBkSoL6PIJ5hepiWIPI6kI enYbdVWaTOjRRwD3jpZxxkVNSSyedAyPnBYjvr6t8Yrj9qHmyEdz9pgiA24bSYXi mUF46sCgw0MpsXcVmnrb3madxA1ThvpI2rlH6Qe/8HkkATOo4qbCo0rirk1+v4zw P2adFSv3F3hVXg4YtkMyf38dd93w6fVDaSq8Zc67UIvuPIm+fy/gK0dR/xauPR0Y d1Na/b7F3ezOUT/jx62GL+0PeEtywUqbwWj33b+y8zMQobf0+UNwNqF6xwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM9IjImoTWD75twfR5jx8rESQlePMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvejBpTWlhaE5ZUHZtM0I5SG1QSHlzUkpDVjQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ5JlAwQA Z5R1MA0GCSqGSIb3DQEBCwUAA4IBAQC6WUGoyp9xmzGc7m182z5HYTFPxnJQQtIZ ffLDzpDD9kftiD8WO6y39DAksk12us3A8je+858/zcZUI3dNJLuLnfyINsaf69Xn lgeLv+/zb2aGPRG0GXA98lzSQJrvwqIl6f40crZOI5t5ZCdVzLlQ7sJpyWdXNi6Y hB9dvPkAvnRGgXfV3c7FVB+uONfGsMEyamplZwDAK+3hAgA3nd/Fl/HcxMKoA9G7 /Mh1NOUZqDZWSDiQh467ALfOQ69HCjJtGoQC7Ce8diT3E1A+dg1kSRKZba2JkO2d WWcmsaKS9fCY1j7HXCx+3H79ov1+f0ekXocDER3cmvOdoKbroOcx -----END CERTIFICATE-----Generated at Wed Jan 21 09:22:12 2026 by rpki-client