This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/6PKIKUxySdUwZYjBpQdap24rMCA.roa File: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (raw, json) Hash identifier: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM= Subject key identifier: E8:F2:88:29:4C:72:49:D5:30:65:88:C1:A5:07:5A:A7:6E:2B:30:20 Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019B77C742D35FC9825DB94B217DC0F0BB84 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/6PKIKUxySdUwZYjBpQdap24rMCA.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199218 IP address blocks: 103.69.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:42:d3:5f:c9:82:5d:b9:4b:21:7d:c0:f0:bb:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8f288294c7249d5306588c1a5075aa76e2b3020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:4d:23:f9:45:9f:22:b9:79:b4:c0:94:a2: ce:0d:84:e9:09:ae:f9:29:ab:93:46:a4:0d:da:21: 62:c1:9c:96:f1:11:ed:e6:ea:41:53:72:4d:56:45: df:38:42:98:a8:1c:48:23:39:de:3c:b8:3a:7e:0b: 21:ab:a5:d8:7e:6e:3d:08:65:1b:13:54:a1:1a:08: c5:ea:ff:f2:1b:56:3e:df:31:9d:95:52:4c:2f:9f: 6f:d3:36:e1:f8:b9:4e:bb:c8:1a:05:e9:87:fd:46: 32:db:66:03:5b:4a:5b:e8:1e:61:95:b4:c1:e2:22: 3d:46:4a:71:ac:67:c1:db:8b:97:9d:87:0f:06:4c: 77:61:85:82:3f:80:d2:49:4a:7b:f6:ba:b4:1e:b2: 83:9b:2d:39:84:e7:b9:d9:06:f0:e3:ec:be:5b:15: 6a:fa:f5:51:69:24:56:61:15:76:d0:b1:80:18:66: e0:87:bd:09:a7:e3:6a:95:64:ae:5e:51:a6:2d:96: 9f:65:da:d8:c5:aa:93:11:2c:b7:c7:93:ab:ca:3d: df:45:ff:f9:e5:8c:87:5f:5e:4d:cc:f4:4a:85:b5: b4:8f:48:2b:49:c5:f6:84:5e:a4:23:e8:9b:b5:79: 15:cf:78:30:36:b0:b9:1f:a8:8f:66:3e:37:1d:ab: 05:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F2:88:29:4C:72:49:D5:30:65:88:C1:A5:07:5A:A7:6E:2B:30:20 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/6PKIKUxySdUwZYjBpQdap24rMCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.224.0/24 Signature Algorithm: sha256WithRSAEncryption b5:b7:36:5e:4c:64:25:5b:4c:7b:4c:9a:df:a1:6e:93:5f:56: 33:f5:c1:a6:5c:1f:99:03:bf:1e:f9:ad:d4:bd:67:98:3c:29: ca:15:48:61:d1:03:91:71:dd:8e:6b:bf:9b:3c:2b:c5:fa:cb: 6d:9e:79:e8:d7:f8:45:b3:d6:b7:7e:49:ca:44:49:0e:1e:e0: db:18:c6:78:5b:98:13:02:bd:1e:3b:ad:ee:ee:6c:ba:3d:42: 83:06:f9:dc:d2:27:58:55:6d:76:53:b3:5d:a8:00:61:35:f9: 56:ba:9a:6d:54:9e:ff:41:5a:27:59:91:af:25:b0:be:6f:a4: a5:13:27:3a:30:03:5a:af:90:91:d4:cd:30:87:c5:5c:b8:75: f6:a9:0a:a6:e6:89:30:9b:13:59:2b:02:0c:c2:b4:1e:4a:f1: 0f:dd:37:29:45:9c:04:ac:7b:c9:e6:ad:cc:1f:26:ed:cc:ec: fb:00:98:a6:d6:fb:e0:4a:0b:9b:6f:2a:69:04:ac:dc:be:10: 04:fa:3a:07:a9:ab:45:16:39:77:5d:a9:90:64:a6:d7:8a:b8: a9:f5:59:b0:cc:6f:09:b3:7c:c8:76:c5:f0:56:1b:ca:a8:20: c2:82:26:9a:ea:b2:6b:d9:3c:2e:0d:a2:fa:88:d3:8b:8c:d8: 9e:62:2f:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0LTX8mCXblLIX3A8LuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGYyODgyOTRjNzI0OWQ1MzA2NTg4YzFhNTA3NWFhNzZlMmIzMDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M5NI/lFnyK5ebTAlKLODYTpCa75 KauTRqQN2iFiwZyW8RHt5upBU3JNVkXfOEKYqBxIIznePLg6fgshq6XYfm49CGUb E1ShGgjF6v/yG1Y+3zGdlVJML59v0zbh+LlOu8gaBemH/UYy22YDW0pb6B5hlbTB 4iI9RkpxrGfB24uXnYcPBkx3YYWCP4DSSUp79rq0HrKDmy05hOe52Qbw4+y+WxVq +vVRaSRWYRV20LGAGGbgh70Jp+NqlWSuXlGmLZafZdrYxaqTESy3x5Oryj3fRf/5 5YyHX15NzPRKhbW0j0grScX2hF6kI+ibtXkVz3gwNrC5H6iPZj43HasFhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOjyiClMcknVMGWIwaUHWqduKzAgMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvNlBLSUtVeHlTZFV3WllqQnBRZGFwMjRyTUNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0XgMA0G CSqGSIb3DQEBCwUAA4IBAQC1tzZeTGQlW0x7TJrfoW6TX1Yz9cGmXB+ZA78e+a3U vWeYPCnKFUhh0QORcd2Oa7+bPCvF+sttnnno1/hFs9a3fknKREkOHuDbGMZ4W5gT Ar0eO63u7my6PUKDBvnc0idYVW12U7NdqABhNflWupptVJ7/QVonWZGvJbC+b6Sl Eyc6MANar5CR1M0wh8VcuHX2qQqm5okwmxNZKwIMwrQeSvEP3TcpRZwErHvJ5q3M HybtzOz7AJim1vvgSgubbyppBKzcvhAE+joHqatFFjl3XamQZKbXirip9VmwzG8J s3zIdsXwVhvKqCDCgiaa6rJr2TwuDaL6iNOLjNieYi/b -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:27 2026 by rpki-client