This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/kI9pxt3M-JoDXw0ZBEqbhsNvt8I.roa File: kI9pxt3M-JoDXw0ZBEqbhsNvt8I.roa (raw, json) Hash identifier: buGjgNhOqDsMaLsH/rarsDEx2IN32IE/7HoDnejTwKg= Subject key identifier: 90:8F:69:C6:DD:CC:F8:9A:03:5F:0D:19:04:4A:9B:86:C3:6F:B7:C2 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019B7AC7E5CF352B8690D8426D88CAD42C3E Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/kI9pxt3M-JoDXw0ZBEqbhsNvt8I.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 103.85.32.0/24 maxlen: 24 103.85.33.0/24 maxlen: 24 103.85.34.0/24 maxlen: 24 103.228.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e5:cf:35:2b:86:90:d8:42:6d:88:ca:d4:2c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=908f69c6ddccf89a035f0d19044a9b86c36fb7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:cc:19:6b:b7:53:39:fa:8c:2d:c8:f2:c9: 6d:3d:01:66:f9:a1:c3:ef:82:bb:42:8c:1c:49:2e: 02:b7:f7:0e:78:a7:38:03:df:f6:5d:9a:ba:4b:8b: 53:43:89:ac:c1:27:ea:a4:a3:65:48:84:e3:e2:0d: 11:75:32:73:f8:d4:25:84:e2:c9:5d:6c:b5:0a:1a: 55:cf:26:df:84:c0:86:72:76:d5:c6:98:4c:a4:fe: 51:f5:e6:fc:66:64:64:11:38:5f:15:38:0b:87:ca: b7:2f:98:fc:0a:37:87:2e:c3:a3:65:3e:b2:8c:ab: f7:29:7e:51:0a:9c:80:16:36:10:86:e4:5c:d0:81: ae:75:76:0c:c8:ca:ed:f9:bc:f8:3e:bd:b6:74:d3: 46:ca:2e:8b:8e:af:6e:32:e4:f4:8b:13:58:f1:b9: 26:8c:f4:6d:a7:32:6d:6a:11:5f:7e:9e:48:d0:b9: 3c:d7:73:05:de:ee:10:7a:7f:93:14:65:8f:63:6f: cb:17:b1:85:5c:1a:92:8e:3f:df:d7:2f:8c:6f:70: 61:67:00:12:64:4e:d8:58:4e:d8:40:78:53:f3:65: cb:4f:11:91:4f:97:38:c9:a2:84:c0:6d:1b:dd:d5: bb:fe:3f:a7:8c:6a:17:a2:3c:d7:c2:a2:da:37:03: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8F:69:C6:DD:CC:F8:9A:03:5F:0D:19:04:4A:9B:86:C3:6F:B7:C2 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/kI9pxt3M-JoDXw0ZBEqbhsNvt8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.85.32.0-103.85.34.255 103.228.128.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:3d:2e:b1:1b:a6:12:42:17:8d:14:da:61:33:d6:dd:b4:5e: cd:4e:31:7e:ce:9e:29:a0:94:32:43:9c:38:f5:a4:35:a3:40: b4:94:5f:95:24:e5:7b:7e:ea:66:0e:4f:2d:c1:66:c9:6f:ce: db:85:63:5e:60:3e:7a:47:e0:0c:8f:df:fd:2d:27:c2:21:9c: 06:f0:32:66:a5:f9:d6:61:62:bb:29:dd:54:6e:43:44:61:39: 30:cc:11:b0:5d:f3:3b:5a:95:ef:71:95:66:96:b3:67:97:15: 2a:c3:a6:9e:ad:31:47:14:74:61:df:07:e7:ea:b5:8c:bc:ee: 45:f5:d9:b3:e1:ce:21:ac:1f:44:f5:48:74:8e:b7:00:57:3b: ea:5f:12:ab:ce:cd:37:bf:7f:53:58:fe:93:8a:8d:2e:dc:9d: fd:eb:8c:39:f0:f4:f6:1d:b7:8f:17:15:0b:eb:8d:13:2b:b0: f3:c0:59:07:c9:a1:68:e1:53:3a:75:91:27:82:56:58:71:29: 5d:e8:da:81:2a:6d:82:ff:13:7d:95:f7:02:05:96:0e:a0:20: 11:2e:e9:78:61:5f:c4:00:fa:b3:20:84:b5:26:fc:48:65:d0: 6f:10:13:b7:d3:1b:5f:cb:2f:86:a1:18:27:f9:0a:00:69:63: 19:50:27:63 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6x+XPNSuGkNhCbYjK1Cw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDhmNjljNmRkY2NmODlhMDM1ZjBkMTkwNDRhOWI4NmMzNmZiN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMzMGWu3Uzn6jC3I8sltPQFm+aHD 74K7QowcSS4Ct/cOeKc4A9/2XZq6S4tTQ4mswSfqpKNlSITj4g0RdTJz+NQlhOLJ XWy1ChpVzybfhMCGcnbVxphMpP5R9eb8ZmRkEThfFTgLh8q3L5j8CjeHLsOjZT6y jKv3KX5RCpyAFjYQhuRc0IGudXYMyMrt+bz4Pr22dNNGyi6Ljq9uMuT0ixNY8bkm jPRtpzJtahFffp5I0Lk813MF3u4Qen+TFGWPY2/LF7GFXBqSjj/f1y+Mb3BhZwAS ZE7YWE7YQHhT82XLTxGRT5c4yaKEwG0b3dW7/j+njGoXojzXwqLaNwOSSwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJCPacbdzPiaA18NGQRKm4bDb7fCMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEva0k5cHh0M00tSm9EWHcwWkJFcWJoc052dDhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAVnVSAD BABnVSIDBAJn5IAwDQYJKoZIhvcNAQELBQADggEBAA09LrEbphJCF40U2mEz1t20 Xs1OMX7OnimglDJDnDj1pDWjQLSUX5Uk5Xt+6mYOTy3BZslvztuFY15gPnpH4AyP 3/0tJ8IhnAbwMmal+dZhYrsp3VRuQ0RhOTDMEbBd8ztale9xlWaWs2eXFSrDpp6t MUcUdGHfB+fqtYy87kX12bPhziGsH0T1SHSOtwBXO+pfEqvOzTe/f1NY/pOKjS7c nf3rjDnw9PYdt48XFQvrjRMrsPPAWQfJoWjhUzp1kSeCVlhxKV3o2oEqbYL/E32V 9wIFlg6gIBEu6XhhX8QA+rMghLUm/Ehl0G8QE7fTG1/LL4ahGCf5CgBpYxlQJ2M= -----END CERTIFICATE-----Generated at Wed Jan 21 04:58:51 2026 by rpki-client