This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/lsMaKp3sC1c5czFXsxQDmNP9xmk.roa File: lsMaKp3sC1c5czFXsxQDmNP9xmk.roa (raw, json) Hash identifier: Dsgi94SjJOM3Yr7EX5Jzgm7yi1UrHtc8raZxtMY1V+E= Subject key identifier: 96:C3:1A:2A:9D:EC:0B:57:39:73:31:57:B3:14:03:98:D3:FD:C6:69 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E39294297E4B5608314D0D3581F7BFA Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/lsMaKp3sC1c5czFXsxQDmNP9xmk.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 264617 IP address blocks: 103.196.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:29:42:97:e4:b5:60:83:14:d0:d3:58:1f:7b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96c31a2a9dec0b5739733157b3140398d3fdc669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:79:eb:11:58:bb:f9:ab:09:a6:bf:e6:ce: 15:35:17:9d:d7:47:3e:dd:9c:a1:59:7a:f7:4c:67: 96:2a:8a:bd:ad:f6:ea:75:94:d2:5c:78:7d:15:90: 11:c1:6b:f7:a4:9e:7b:dc:df:8d:41:05:be:7f:d4: 73:c9:e0:d6:27:8a:19:6a:cf:ac:ef:38:df:e2:ed: 37:88:29:1b:0f:31:a8:7e:f8:e7:8a:ca:4f:85:49: d4:43:69:5d:16:90:ce:e7:27:09:1e:d7:a4:68:4c: 9d:91:eb:84:d3:2f:d5:7c:3a:69:f9:b7:69:44:32: 94:d6:e1:de:03:d8:c6:57:61:d2:dc:0d:45:fc:d1: 03:65:04:8b:8a:ef:73:68:85:d4:82:1f:dc:53:76: 93:a9:41:a9:9c:15:87:07:a7:21:4e:60:a3:90:5f: f8:4c:c0:28:88:45:84:82:83:4e:b9:8d:af:69:a5: e0:91:c9:d4:3b:59:40:7f:c3:1e:d1:6c:42:61:68: 65:4a:d3:98:e6:57:9a:10:50:cb:30:c6:7f:9e:9a: aa:a0:0e:5e:29:7a:5c:7e:15:84:fc:c8:8c:59:47: 5c:97:0a:68:cb:5a:f0:a8:71:8f:52:59:d7:92:a1: 45:05:8b:8b:04:e8:85:5c:72:9f:dc:7a:a5:72:36: 46:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C3:1A:2A:9D:EC:0B:57:39:73:31:57:B3:14:03:98:D3:FD:C6:69 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/lsMaKp3sC1c5czFXsxQDmNP9xmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.196.10.0/23 Signature Algorithm: sha256WithRSAEncryption 90:35:ff:d0:bb:f3:39:8d:99:43:df:5d:f0:8b:74:46:64:fe: d8:bb:4b:fe:9f:8e:ac:31:f9:a9:d0:a6:d7:38:55:8b:3d:8d: 2c:36:3e:93:a8:c5:2c:d1:ea:50:c8:ce:5d:42:52:f5:98:6e: 56:37:e6:ec:f7:09:6a:dc:0b:84:25:f2:db:b8:9e:6d:38:e9: 29:7d:37:68:17:9f:fa:92:f6:22:dd:fa:01:3f:c1:c2:50:13: f8:ab:7a:4c:d5:d4:27:a7:1e:8c:de:dd:62:85:35:c4:18:a2: c0:56:d4:cd:70:7f:dc:d5:8d:b6:02:79:ca:3f:9b:39:99:6a: fe:7f:55:56:0e:81:bb:c0:c3:e0:95:31:d8:79:ce:c2:fd:af: 5d:d5:b6:c5:61:da:d2:04:e7:d7:8b:f1:7d:65:47:00:fe:eb: f9:88:7f:3f:8f:94:b0:65:65:fe:f2:23:ed:fa:ac:cd:3a:03: 1a:f8:9e:77:ac:42:2a:66:0a:53:7d:3e:72:d4:c3:0a:3b:f6: d7:4b:a8:15:42:4b:52:bf:87:bd:15:bb:12:ba:23:d5:ba:db: 24:50:66:aa:97:f6:12:5d:92:96:f9:0c:e8:d7:9b:41:38:32: 95:bd:55:05:99:e6:e0:b5:67:85:e6:52:8a:5f:39:00:52:9d: fd:a2:30:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSlCl+S1YIMU0NNYH3v6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmMzMWEyYTlkZWMwYjU3Mzk3MzMxNTdiMzE0MDM5OGQzZmRjNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse156xFYu/mrCaa/5s4VNRed10c+ 3ZyhWXr3TGeWKoq9rfbqdZTSXHh9FZARwWv3pJ573N+NQQW+f9RzyeDWJ4oZas+s 7zjf4u03iCkbDzGofvjnispPhUnUQ2ldFpDO5ycJHtekaEydkeuE0y/VfDpp+bdp RDKU1uHeA9jGV2HS3A1F/NEDZQSLiu9zaIXUgh/cU3aTqUGpnBWHB6chTmCjkF/4 TMAoiEWEgoNOuY2vaaXgkcnUO1lAf8Me0WxCYWhlStOY5leaEFDLMMZ/npqqoA5e KXpcfhWE/MiMWUdclwpoy1rwqHGPUlnXkqFFBYuLBOiFXHKf3HqlcjZGFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJbDGiqd7AtXOXMxV7MUA5jT/cZpMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvbHNNYUtwM3NDMWM1Y3pGWHN4UURtTlA5eG1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ8QKMA0G CSqGSIb3DQEBCwUAA4IBAQCQNf/Qu/M5jZlD313wi3RGZP7Yu0v+n46sMfmp0KbX OFWLPY0sNj6TqMUs0epQyM5dQlL1mG5WN+bs9wlq3AuEJfLbuJ5tOOkpfTdoF5/6 kvYi3foBP8HCUBP4q3pM1dQnpx6M3t1ihTXEGKLAVtTNcH/c1Y22AnnKP5s5mWr+ f1VWDoG7wMPglTHYec7C/a9d1bbFYdrSBOfXi/F9ZUcA/uv5iH8/j5SwZWX+8iPt +qzNOgMa+J53rEIqZgpTfT5y1MMKO/bXS6gVQktSv4e9FbsSuiPVutskUGaql/YS XZKW+Qzo15tBODKVvVUFmebgtWeF5lKKXzkAUp39ojAt -----END CERTIFICATE-----Generated at Sun Jan 25 03:14:51 2026 by rpki-client