This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/QawDO3nriy0Ac_BTEa82vA_nGDI.roa File: QawDO3nriy0Ac_BTEa82vA_nGDI.roa (raw, json) Hash identifier: ONoC4PBmZZaC9uv6W2VVUcFA7b/wums0wl8fDhnZ7Gg= Subject key identifier: 41:AC:03:3B:79:EB:8B:2D:00:73:F0:53:11:AF:36:BC:0F:E7:18:32 Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019B77C74278E5F4377CB066BAB941F84CD0 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/QawDO3nriy0Ac_BTEa82vA_nGDI.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 103.69.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:42:78:e5:f4:37:7c:b0:66:ba:b9:41:f8:4c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41ac033b79eb8b2d0073f05311af36bc0fe71832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:4e:14:9c:ad:ca:7a:4f:7f:0d:71:ec:fa: d7:cf:8b:28:7d:7e:bd:15:b0:16:2c:32:ba:f3:51: 5a:68:52:43:85:3b:22:37:3e:56:6d:8b:f7:2e:b4: 64:f4:20:da:a7:e6:33:e0:81:35:4f:d1:db:e4:ee: 41:db:bf:63:de:1f:d5:7b:fc:d4:dd:41:4d:4a:c5: 1d:e5:b3:cd:4f:d6:b8:f7:f9:b5:48:3b:15:31:3f: a7:8a:12:31:ce:12:30:f5:14:4c:5e:e3:55:1b:fe: a4:c3:76:82:cc:11:0b:d6:05:bf:7f:dc:e5:9d:17: ec:74:e9:b0:20:45:e6:8d:21:11:37:07:1b:e7:31: 38:85:30:ea:46:00:6a:d3:92:0f:d1:c2:21:6b:91: d9:fc:63:8e:af:e5:da:d9:26:e5:e6:22:e1:f5:f5: 1a:0a:fa:fa:31:22:1e:17:19:fa:9c:0d:55:e4:43: 8b:fb:f4:cc:0d:60:7f:f2:cc:4a:3f:78:10:5d:87: ed:7d:eb:dd:8f:7e:1d:53:09:5f:18:b1:6f:5d:89: 82:cf:97:e7:f2:46:36:c0:0e:bd:ce:57:ed:86:45: 0c:d5:26:d0:97:85:aa:7d:5d:6d:d0:9f:66:97:c3: c0:35:d6:f2:9b:5c:37:6d:f4:53:1c:f0:3c:6a:73: d9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AC:03:3B:79:EB:8B:2D:00:73:F0:53:11:AF:36:BC:0F:E7:18:32 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/QawDO3nriy0Ac_BTEa82vA_nGDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.227.0/24 Signature Algorithm: sha256WithRSAEncryption 71:a6:94:8a:7f:77:d9:4d:4a:49:98:e7:d4:ac:a1:2f:ed:e1: 4a:35:03:d8:cd:38:6d:8a:a8:dc:6e:6e:b6:df:90:95:48:d3: 08:fc:c4:af:22:18:6a:74:e6:36:8e:c8:fe:23:35:34:27:61: c6:06:d3:84:d4:ca:98:4d:c7:c5:50:dd:0b:6b:c3:6c:16:ca: f9:0a:2c:0d:d6:1a:66:ba:ed:6a:da:90:86:a2:df:21:5c:64: 33:db:fc:d2:6e:40:be:a6:c2:e7:43:a1:6a:f3:76:50:34:8f: 20:bf:31:f7:d8:b9:0b:cd:35:1d:b7:f3:ad:79:ae:bc:81:7b: 9f:3b:3b:9c:fb:75:de:f5:a8:25:73:15:2d:8f:43:f8:01:cb: 07:5f:8a:71:aa:4e:28:3d:74:cf:09:95:67:6a:05:d2:88:cf: f1:ed:00:6b:c7:e6:f8:76:0e:44:27:08:cf:17:c5:ff:07:6a: ef:1b:af:80:0c:66:0d:96:27:71:aa:6c:07:cb:92:6f:b8:99: ff:14:2e:9e:d7:88:30:69:4c:6f:23:49:f3:d7:51:78:c7:7c: 3c:e7:8c:aa:29:8d:75:1e:da:63:2c:2d:4d:9e:3a:8e:94:84: 12:42:10:2c:68:5f:a7:d8:d8:ef:a5:96:00:7b:17:1d:19:0c: f0:57:9e:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0J45fQ3fLBmurlB+EzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWFjMDMzYjc5ZWI4YjJkMDA3M2YwNTMxMWFmMzZiYzBmZTcxODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWZOFJytynpPfw1x7PrXz4sofX69 FbAWLDK681FaaFJDhTsiNz5WbYv3LrRk9CDap+Yz4IE1T9Hb5O5B279j3h/Ve/zU 3UFNSsUd5bPNT9a49/m1SDsVMT+nihIxzhIw9RRMXuNVG/6kw3aCzBEL1gW/f9zl nRfsdOmwIEXmjSERNwcb5zE4hTDqRgBq05IP0cIha5HZ/GOOr+Xa2Sbl5iLh9fUa Cvr6MSIeFxn6nA1V5EOL+/TMDWB/8sxKP3gQXYftfevdj34dUwlfGLFvXYmCz5fn 8kY2wA69zlfthkUM1SbQl4WqfV1t0J9ml8PANdbym1w3bfRTHPA8anPZzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEGsAzt564stAHPwUxGvNrwP5xgyMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvUWF3RE8zbnJpeTBBY19CVEVhODJ2QV9uR0RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0XjMA0G CSqGSIb3DQEBCwUAA4IBAQBxppSKf3fZTUpJmOfUrKEv7eFKNQPYzThtiqjcbm62 35CVSNMI/MSvIhhqdOY2jsj+IzU0J2HGBtOE1MqYTcfFUN0La8NsFsr5CiwN1hpm uu1q2pCGot8hXGQz2/zSbkC+psLnQ6Fq83ZQNI8gvzH32LkLzTUdt/Otea68gXuf Ozuc+3Xe9aglcxUtj0P4AcsHX4pxqk4oPXTPCZVnagXSiM/x7QBrx+b4dg5EJwjP F8X/B2rvG6+ADGYNlidxqmwHy5JvuJn/FC6e14gwaUxvI0nz11F4x3w854yqKY11 HtpjLC1NnjqOlIQSQhAsaF+n2NjvpZYAexcdGQzwV57M -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:02 2026 by rpki-client