This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/b5PQ0LP3dQvaroi8uqIK4qRY8fE.roa File: b5PQ0LP3dQvaroi8uqIK4qRY8fE.roa (raw, json) Hash identifier: XUgOw13/DeGWuBII7wDdMVowQZGJyVYWSAsGuDpvOtw= Subject key identifier: 6F:93:D0:D0:B3:F7:75:0B:DA:AE:88:BC:BA:A2:0A:E2:A4:58:F1:F1 Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019B79ED433F456418639CF62BDAC49E6E0E Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/b5PQ0LP3dQvaroi8uqIK4qRY8fE.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44382 IP address blocks: 103.83.86.0/24 maxlen: 24 103.83.87.0/24 maxlen: 24 203.202.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:43:3f:45:64:18:63:9c:f6:2b:da:c4:9e:6e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f93d0d0b3f7750bdaae88bcbaa20ae2a458f1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:c0:a4:10:20:4a:81:06:fa:36:59:5c:5e: 32:7a:41:78:97:6c:61:9c:ef:5e:c2:42:73:f3:ee: 39:a4:97:40:00:ba:7d:7e:24:7b:ee:34:76:b8:1e: d9:5c:83:bc:c4:5a:8e:bd:88:48:36:49:e1:2b:02: b3:6b:f4:41:0c:3a:ac:5d:bc:7c:7e:a2:ca:41:00: da:06:9f:cf:ad:b8:37:a0:ae:1d:07:9f:75:5f:1a: f9:61:06:00:43:3d:1c:78:6f:c1:06:e3:c9:4f:8d: 3a:34:b6:e6:b1:77:d8:75:15:4d:3e:52:82:8b:27: 83:4c:aa:28:a8:f1:04:39:fd:bb:d2:17:3a:38:0e: b9:78:27:8f:da:d6:7e:0a:29:4c:ec:84:f0:84:64: 1b:68:ff:34:c9:f8:83:bb:f2:ea:ea:0b:86:16:ec: 2f:cb:fe:f9:ba:6a:a3:2b:c1:86:7f:c6:01:e8:9d: f5:92:80:d9:e7:8c:85:ea:26:b0:20:9d:98:c3:a2: 7f:20:4d:b3:0e:60:0a:d6:0d:1c:3b:6e:f7:e4:f4: 96:4d:c0:9b:ed:27:c2:ec:08:6f:d6:4e:0b:20:91: db:ff:13:7f:17:22:99:79:39:b6:4a:cf:08:61:de: f4:bb:0a:85:cf:6e:e2:71:49:21:e7:42:51:ce:48: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:93:D0:D0:B3:F7:75:0B:DA:AE:88:BC:BA:A2:0A:E2:A4:58:F1:F1 X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/b5PQ0LP3dQvaroi8uqIK4qRY8fE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.86.0/23 203.202.232.0/24 Signature Algorithm: sha256WithRSAEncryption 92:d8:9e:c3:6e:6f:50:ed:30:51:57:c5:34:3c:7d:3a:dd:bd: d8:20:48:d8:08:67:4d:ba:b1:a3:aa:41:8a:24:40:4f:1e:27: a8:5f:3a:7d:f4:bc:3c:59:8a:e4:7c:1e:92:85:09:02:3d:42: ca:ca:0e:1f:7c:c2:e2:94:92:f4:70:56:1c:d3:7e:00:b4:fb: cb:7f:50:0b:10:fe:50:de:18:4d:1a:5b:ae:c7:f1:b9:0d:e3: ca:1d:b8:fc:b7:38:13:87:b9:a9:96:2d:f7:18:52:9c:24:da: 03:c7:b8:45:c3:50:fb:49:c4:1f:9d:81:cd:fb:e3:5c:d4:9d: a0:40:46:8a:4f:66:7d:b9:ec:45:17:76:4c:8d:12:4a:ac:f2: 90:08:8b:a8:be:89:56:a5:ed:7d:8a:6f:ed:46:a8:5f:23:07: 51:3d:80:5e:bc:79:1d:c7:13:66:6c:25:f6:d2:dc:db:5f:48: 90:2a:76:54:55:2b:3c:71:0e:4a:34:4b:84:19:99:5f:58:dc: 2f:52:f8:36:cb:18:77:5f:d8:1c:a6:28:08:53:70:a6:70:f1: c7:3a:c3:a4:67:4c:1c:a9:64:ae:de:45:60:53:53:55:2f:3c: 12:00:96:6d:1d:9c:b6:4f:62:a0:13:a6:5c:5e:1a:d5:02:5d: 99:39:bd:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57UM/RWQYY5z2K9rEnm4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjkzZDBkMGIzZjc3NTBiZGFhZTg4YmNiYWEyMGFlMmE0NThmMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HXApBAgSoEG+jZZXF4yekF4l2xh nO9ewkJz8+45pJdAALp9fiR77jR2uB7ZXIO8xFqOvYhINknhKwKza/RBDDqsXbx8 fqLKQQDaBp/Prbg3oK4dB591Xxr5YQYAQz0ceG/BBuPJT406NLbmsXfYdRVNPlKC iyeDTKooqPEEOf270hc6OA65eCeP2tZ+CilM7ITwhGQbaP80yfiDu/Lq6guGFuwv y/75umqjK8GGf8YB6J31koDZ54yF6iawIJ2Yw6J/IE2zDmAK1g0cO2735PSWTcCb 7SfC7Ahv1k4LIJHb/xN/FyKZeTm2Ss8IYd70uwqFz27icUkh50JRzkiv+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG+T0NCz93UL2q6IvLqiCuKkWPHxMB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvYjVQUTBMUDNkUXZhcm9pOHVxSUs0cVJZOGZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBZ1NWAwQA y8roMA0GCSqGSIb3DQEBCwUAA4IBAQCS2J7Dbm9Q7TBRV8U0PH063b3YIEjYCGdN urGjqkGKJEBPHieoXzp99Lw8WYrkfB6ShQkCPULKyg4ffMLilJL0cFYc034AtPvL f1ALEP5Q3hhNGluux/G5DePKHbj8tzgTh7mpli33GFKcJNoDx7hFw1D7ScQfnYHN ++Nc1J2gQEaKT2Z9uexFF3ZMjRJKrPKQCIuovolWpe19im/tRqhfIwdRPYBevHkd xxNmbCX20tzbX0iQKnZUVSs8cQ5KNEuEGZlfWNwvUvg2yxh3X9gcpigIU3CmcPHH OsOkZ0wcqWSu3kVgU1NVLzwSAJZtHZy2T2KgE6ZcXhrVAl2ZOb1K -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:54 2026 by rpki-client