This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/i_CapsG6EXIlo7hs2M2bjbUXRbE.roa File: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (raw, json) Hash identifier: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU= Subject key identifier: 8B:F0:9A:A6:C1:BA:11:72:25:A3:B8:6C:D8:CD:9B:8D:B5:17:45:B1 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E39274D8C062B76D3203D4CBF2D7001 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/i_CapsG6EXIlo7hs2M2bjbUXRbE.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202015 IP address blocks: 103.124.84.0/22 maxlen: 22 103.144.160.0/23 maxlen: 23 103.149.130.0/23 maxlen: 23 103.228.84.0/22 maxlen: 22 139.5.20.0/23 maxlen: 23 209.40.216.0/21 maxlen: 21 209.92.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:27:4d:8c:06:2b:76:d3:20:3d:4c:bf:2d:70:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bf09aa6c1ba117225a3b86cd8cd9b8db51745b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:d4:7d:5c:31:e5:91:15:98:f3:c2:07:33: c9:a4:f9:19:4a:71:e9:a9:cc:af:ed:1c:8d:be:98: 4d:a9:54:00:39:d9:61:fe:2b:8a:ad:99:bc:91:74: 3f:b0:b2:c9:cc:e8:6f:a7:a3:a7:82:ed:bf:aa:da: 2d:c6:63:b4:63:f2:eb:ab:bd:0f:6d:af:83:79:73: bd:8c:e4:1f:ce:c6:02:34:5c:04:99:39:2e:fe:c0: e5:02:e2:0e:4d:8f:e2:68:bb:f8:8b:3b:de:43:02: 92:31:62:35:ed:2f:97:48:99:29:12:38:36:38:9f: 20:7a:64:92:aa:d3:01:e6:4c:02:18:93:a8:74:07: 71:f8:a7:a3:15:39:b4:90:01:fe:22:b4:72:88:af: 9f:8b:c5:37:9b:a2:81:4f:0e:92:a3:9c:a1:97:88: 2c:c2:28:54:91:2e:48:13:cb:cb:66:8b:6a:07:ab: 70:25:1e:18:1e:b9:04:04:c3:86:5a:e1:cb:53:38: 76:0c:dd:31:0c:89:e3:ad:61:15:a4:9b:69:b1:c2: 03:2b:98:58:4a:29:46:51:52:bf:7a:6f:b1:1a:49: f7:69:30:a0:87:4b:b6:9a:4f:bf:37:30:ca:a0:37: 8a:94:70:1a:fb:93:dd:af:ee:96:43:17:4f:94:c5: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F0:9A:A6:C1:BA:11:72:25:A3:B8:6C:D8:CD:9B:8D:B5:17:45:B1 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/i_CapsG6EXIlo7hs2M2bjbUXRbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.84.0/22 103.144.160.0/23 103.149.130.0/23 103.228.84.0/22 139.5.20.0/23 209.40.216.0/21 209.92.8.0/21 Signature Algorithm: sha256WithRSAEncryption 77:5f:63:e1:39:49:7f:3f:36:aa:22:6f:00:38:6f:42:65:34: 00:25:d3:db:b0:a9:d3:92:b0:2d:31:93:d1:1e:4b:ad:58:0a: 8c:d5:6e:1f:fa:e4:dd:e3:d4:e1:16:b6:49:e7:63:c4:33:fd: 6b:6f:3f:50:88:81:3e:9b:14:fe:67:38:e6:00:21:2c:c1:8d: 46:01:f9:6d:ef:bc:90:fd:e9:75:27:1d:68:6f:9b:a0:49:f2: 48:6d:da:6c:45:5f:fa:7f:cd:06:e5:16:77:e6:b4:1a:2e:df: ac:3c:9a:08:3c:a5:74:6f:db:3f:b7:40:5e:40:0e:f4:70:cf: 97:22:dd:bb:0d:1d:ab:15:95:c5:94:53:d2:df:0e:5f:e8:14: 2d:bb:d7:75:1c:57:08:2b:14:d2:07:9c:85:ad:c0:97:1e:a8: c0:88:b9:06:3b:92:fd:dc:9e:49:d1:f5:8c:d9:5c:a2:b3:25: d4:8e:6e:6b:bc:11:60:d2:87:96:b4:4f:75:04:57:40:35:e5: 10:4c:de:a3:2c:18:00:f0:a8:63:94:6c:e9:84:1f:fc:0d:cb: 3a:57:97:6c:f2:24:4a:98:00:a9:6c:b8:14:60:4f:ac:2f:af: 2a:2f:de:ea:d1:2f:b5:11:d8:b8:74:d7:69:fe:1b:97:a4:28: 71:24:b2:53 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt+OSdNjAYrdtMgPUy/LXABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmYwOWFhNmMxYmExMTcyMjVhM2I4NmNkOGNkOWI4ZGI1MTc0NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11PUfVwx5ZEVmPPCBzPJpPkZSnHp qcyv7RyNvphNqVQAOdlh/iuKrZm8kXQ/sLLJzOhvp6Ongu2/qtotxmO0Y/Lrq70P ba+DeXO9jOQfzsYCNFwEmTku/sDlAuIOTY/iaLv4izveQwKSMWI17S+XSJkpEjg2 OJ8gemSSqtMB5kwCGJOodAdx+KejFTm0kAH+IrRyiK+fi8U3m6KBTw6So5yhl4gs wihUkS5IE8vLZotqB6twJR4YHrkEBMOGWuHLUzh2DN0xDInjrWEVpJtpscIDK5hY SilGUVK/em+xGkn3aTCgh0u2mk+/NzDKoDeKlHAa+5Pdr+6WQxdPlMXdHwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFIvwmqbBuhFyJaO4bNjNm421F0WxMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvaV9DYXBzRzZFWElsbzdoczJNMmJqYlVYUmJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCZ3xUAwQB Z5CgAwQBZ5WCAwQCZ+RUAwQBiwUUAwQD0SjYAwQD0VwIMA0GCSqGSIb3DQEBCwUA A4IBAQB3X2PhOUl/PzaqIm8AOG9CZTQAJdPbsKnTkrAtMZPRHkutWAqM1W4f+uTd 49ThFrZJ52PEM/1rbz9QiIE+mxT+ZzjmACEswY1GAflt77yQ/el1Jx1ob5ugSfJI bdpsRV/6f80G5RZ35rQaLt+sPJoIPKV0b9s/t0BeQA70cM+XIt27DR2rFZXFlFPS 3w5f6BQtu9d1HFcIKxTSB5yFrcCXHqjAiLkGO5L93J5J0fWM2VyisyXUjm5rvBFg 0oeWtE91BFdANeUQTN6jLBgA8KhjlGzphB/8Dcs6V5ds8iRKmACpbLgUYE+sL68q L97q0S+1Edi4dNdp/huXpChxJLJT -----END CERTIFICATE-----Generated at Sun Jan 25 03:14:26 2026 by rpki-client