This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/VQDy1YicmBsXO9_lcwtWu0sGslU.roa File: VQDy1YicmBsXO9_lcwtWu0sGslU.roa (raw, json) Hash identifier: G5K9cpdzUCQ1XRONTvemEadoLGLHCC1DLidbEf7COy4= Subject key identifier: 55:00:F2:D5:88:9C:98:1B:17:3B:DF:E5:73:0B:56:BB:4B:06:B2:55 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019B8617FE1695B86A3BA22B9CCD54CD21D1 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/VQDy1YicmBsXO9_lcwtWu0sGslU.roa Signing time: Sat 03 Jan 2026 23:01:17 +0000 ROA not before: Sat 03 Jan 2026 23:01:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214432 IP address blocks: 103.17.96.0/24 maxlen: 24 103.17.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:86:17:fe:16:95:b8:6a:3b:a2:2b:9c:cd:54:cd:21:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Jan 3 23:01:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5500f2d5889c981b173bdfe5730b56bb4b06b255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:ff:ea:da:49:28:0f:45:02:81:69:e1:03: 68:58:15:e7:6e:43:1f:13:3f:25:96:08:e5:ed:7b: d2:29:87:18:12:fd:d1:ef:2f:5a:ba:3c:76:f5:89: eb:2b:18:88:1d:10:dd:f3:da:5e:3b:ff:84:e8:12: 78:81:b5:c5:ff:e6:ea:06:6b:02:69:9d:87:b8:27: f4:11:2e:c3:5d:1f:72:f5:02:c3:ad:a6:ec:fc:d7: f1:73:23:30:06:ac:25:9d:28:dd:fb:a7:87:dc:df: e5:c7:19:ac:94:0c:d7:61:66:94:c1:91:60:6c:13: 1c:80:22:cf:45:3a:29:92:82:fb:5d:d8:5c:d1:42: 9e:50:73:fe:d4:50:0b:64:75:fb:96:0d:87:90:cb: 1a:cf:fe:4a:95:f5:ea:ff:f5:6b:86:da:09:df:e2: 1a:63:9d:9b:d4:8d:6e:93:90:53:ae:5b:94:14:84: af:da:30:25:50:ad:3d:58:9d:c8:94:31:91:b8:51: 11:ab:04:b9:b4:39:77:0e:e7:34:c7:b7:f8:ab:2b: 2a:e0:05:10:10:f7:26:2a:64:63:84:fc:38:23:6e: b1:b6:22:dd:63:8d:e5:ee:10:47:17:5e:83:fa:bb: 43:87:f8:ff:0d:c6:63:bd:a7:ac:fd:4e:96:87:da: ec:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:00:F2:D5:88:9C:98:1B:17:3B:DF:E5:73:0B:56:BB:4B:06:B2:55 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/VQDy1YicmBsXO9_lcwtWu0sGslU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.96.0/23 Signature Algorithm: sha256WithRSAEncryption 40:91:ed:8d:1c:c1:b6:18:c4:12:95:2b:8c:bb:50:ec:49:49: 11:0f:3f:8a:0f:11:3a:64:bc:f8:c6:62:06:e7:88:83:19:23: f3:df:98:dc:1e:4e:c4:28:ca:ff:a9:ee:a6:3b:6b:f3:e7:96: b9:ae:c8:48:f8:f7:15:6b:be:88:69:c6:29:22:8e:2b:d8:a7: ab:91:5f:bd:01:62:0b:ca:35:c8:03:ab:0d:f9:87:e6:66:71: 35:ea:59:6b:f7:d2:4d:99:f7:f4:2e:90:f1:f2:5b:71:fc:4c: a3:8b:65:66:29:1e:fe:93:dd:95:5d:4c:de:f3:25:6d:f8:21: 39:00:de:4d:c6:5f:ad:1f:62:b4:44:8d:c9:52:1f:0c:8e:96: 39:2b:5e:27:ff:67:0c:fd:cc:f6:b7:ec:df:0d:b4:5a:08:9b: 10:f9:b2:36:89:a3:36:84:1a:d1:47:22:60:fe:69:88:a0:10: 98:51:77:b4:5b:3c:f0:ea:6d:90:02:75:0a:37:8b:f3:dc:9e: c9:62:12:30:cd:6d:61:65:1e:55:25:b9:3e:1e:27:57:4e:46: 49:1b:3f:bd:1e:6b:17:6a:a2:84:7d:e9:cd:94:01:86:a6:31: 38:93:4d:ad:ba:9a:4e:c8:91:ce:5b:24:79:47:2e:0c:1f:81: 22:83:e4:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuGF/4WlbhqO6IrnM1UzSHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwMTAzMjMwMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTAwZjJkNTg4OWM5ODFiMTczYmRmZTU3MzBiNTZiYjRiMDZiMjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWz/6tpJKA9FAoFp4QNoWBXnbkMf Ez8llgjl7XvSKYcYEv3R7y9aujx29YnrKxiIHRDd89peO/+E6BJ4gbXF/+bqBmsC aZ2HuCf0ES7DXR9y9QLDrabs/NfxcyMwBqwlnSjd+6eH3N/lxxmslAzXYWaUwZFg bBMcgCLPRTopkoL7Xdhc0UKeUHP+1FALZHX7lg2HkMsaz/5KlfXq//VrhtoJ3+Ia Y52b1I1uk5BTrluUFISv2jAlUK09WJ3IlDGRuFERqwS5tDl3Duc0x7f4qysq4AUQ EPcmKmRjhPw4I26xtiLdY43l7hBHF16D+rtDh/j/DcZjvaes/U6Wh9rskQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFUA8tWInJgbFzvf5XMLVrtLBrJVMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvVlFEeTFZaWNtQnNYTzlfbGN3dFd1MHNHc2xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxFgMA0G CSqGSIb3DQEBCwUAA4IBAQBAke2NHMG2GMQSlSuMu1DsSUkRDz+KDxE6ZLz4xmIG 54iDGSPz35jcHk7EKMr/qe6mO2vz55a5rshI+PcVa76IacYpIo4r2KerkV+9AWIL yjXIA6sN+YfmZnE16llr99JNmff0LpDx8ltx/Eyji2VmKR7+k92VXUze8yVt+CE5 AN5Nxl+tH2K0RI3JUh8MjpY5K14n/2cM/cz2t+zfDbRaCJsQ+bI2iaM2hBrRRyJg /mmIoBCYUXe0Wzzw6m2QAnUKN4vz3J7JYhIwzW1hZR5VJbk+HidXTkZJGz+9HmsX aqKEfenNlAGGpjE4k02tuppOyJHOWyR5Ry4MH4Eig+Rs -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:33 2026 by rpki-client