This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-svH9-Oxcarpk8XsfMX6pcZ0U9I.roa File: 1-svH9-Oxcarpk8XsfMX6pcZ0U9I.roa (raw, json) Hash identifier: C9stbDKoCMU1yYjJJ49NmkIl6N3xF/1TycTR4LPXuFE= Subject key identifier: FA:CB:C7:F7:E3:B1:71:AA:E9:93:C5:EC:7C:C5:FA:A5:C6:74:53:D2 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F30F4259347F328A180476065EBCD Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-svH9-Oxcarpk8XsfMX6pcZ0U9I.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63930 IP address blocks: 103.146.96.0/24 maxlen: 24 103.147.171.0/24 maxlen: 24 103.152.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:30:f4:25:93:47:f3:28:a1:80:47:60:65:eb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=facbc7f7e3b171aae993c5ec7cc5faa5c67453d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:c3:62:a1:07:5a:45:46:61:78:79:a1:f8: 1b:7b:4c:75:99:24:55:58:7c:a2:e1:6a:56:7b:b0: 7c:91:b6:b6:df:e5:e4:36:f9:cb:11:55:31:34:b9: b1:33:04:ab:1e:9a:af:35:0f:1f:f3:6e:54:15:d3: d6:32:c4:a4:db:56:21:b1:b3:df:b8:fc:36:ec:68: 19:b9:fd:7d:6f:2b:a3:08:34:41:d7:55:4c:77:c1: 19:29:68:50:27:8b:41:1f:9b:f9:6f:f6:09:1a:d5: 37:d4:ab:b3:86:a0:b3:46:ad:03:de:95:10:7c:49: 19:ea:1d:cc:36:8f:d1:1b:29:11:73:2e:27:73:07: eb:af:79:f2:5a:21:e8:bd:28:40:65:f9:b9:c5:78: 13:fa:54:e1:07:df:5b:68:93:ef:a2:80:38:9c:4b: 0f:cf:7a:3e:72:e4:33:25:25:15:a5:d2:f1:c5:1f: fe:45:c5:1e:ef:db:76:91:9f:ea:55:af:5c:fc:c4: db:bf:e8:73:ae:38:cf:76:99:9b:4b:3a:9f:80:5f: 35:40:35:e2:5c:5d:ca:f4:4d:14:97:07:15:e9:b5: 90:e4:03:a9:f0:e5:80:20:3e:ec:f6:4b:95:40:44: c3:77:4a:b1:46:62:1d:c5:79:76:29:2d:3a:ca:22: b3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CB:C7:F7:E3:B1:71:AA:E9:93:C5:EC:7C:C5:FA:A5:C6:74:53:D2 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-svH9-Oxcarpk8XsfMX6pcZ0U9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.96.0/24 103.147.171.0/24 103.152.174.0/24 Signature Algorithm: sha256WithRSAEncryption 21:83:27:ee:6f:5e:15:fa:47:24:12:ba:bd:3a:4b:7a:b9:9a: 23:f0:0b:9a:20:4e:fe:d8:5a:23:10:a6:bc:7f:46:da:e0:dd: 48:7a:ca:14:8b:77:ef:6c:6e:44:fb:73:39:5a:05:5a:f3:d2: b5:83:c5:d1:89:00:01:55:c2:7d:02:37:ba:72:ea:22:15:17: 70:bd:ad:7c:14:c7:68:fb:e9:51:33:a7:ab:91:88:63:6e:26: cd:4a:7b:74:04:31:83:73:07:2f:f8:3e:a5:a7:04:50:c4:64: 51:de:f1:49:4d:6b:fa:a8:07:ee:1c:49:1a:a5:ce:92:c0:a7: 88:52:39:88:70:ec:df:26:61:f3:4f:d8:d8:85:d8:da:82:29: 09:0e:cb:3e:d1:d0:f9:a7:85:90:cf:b7:2e:dd:a6:ce:a3:e0: 82:54:f9:05:88:5e:cf:5d:ff:56:e4:f7:de:c0:81:56:cd:15: 37:49:f3:fa:bb:1a:b6:77:25:e7:a4:c3:72:43:9a:b3:59:72: 41:63:bf:4c:a6:dc:f8:52:bb:d9:d8:15:1c:f6:6c:57:60:0c: 53:68:a4:f0:cb:96:f1:53:bf:8f:67:ae:e0:30:cf:0e:d9:0a: 8a:fa:de:08:d5:f1:e4:20:75:7e:9e:dd:16:e7:f8:72:97:db: 91:82:f1:e0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt5fzD0JZNH8yihgEdgZevNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWNiYzdmN2UzYjE3MWFhZTk5M2M1ZWM3Y2M1ZmFhNWM2NzQ1M2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsPDYqEHWkVGYXh5ofgbe0x1mSRV WHyi4WpWe7B8kba23+XkNvnLEVUxNLmxMwSrHpqvNQ8f825UFdPWMsSk21YhsbPf uPw27GgZuf19byujCDRB11VMd8EZKWhQJ4tBH5v5b/YJGtU31KuzhqCzRq0D3pUQ fEkZ6h3MNo/RGykRcy4ncwfrr3nyWiHovShAZfm5xXgT+lThB99baJPvooA4nEsP z3o+cuQzJSUVpdLxxR/+RcUe79t2kZ/qVa9c/MTbv+hzrjjPdpmbSzqfgF81QDXi XF3K9E0UlwcV6bWQ5AOp8OWAID7s9kuVQETDd0qxRmIdxXl2KS06yiKz1QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPrLx/fjsXGq6ZPF7HzF+qXGdFPSMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvMS1zdkg5LU94Y2FycGs4WHNmTVg2cGNaMFU5SS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjQvMmI2MDMwLTZkODgtNGUzZS05ZjNhLWE2NjdiYjc2NTA2 MC8xL0xtcUc1aThNNlk0QzZZQ0duX1JCVHVLZzhNNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGeSYAME AGeTqwMEAGeYrjANBgkqhkiG9w0BAQsFAAOCAQEAIYMn7m9eFfpHJBK6vTpLerma I/ALmiBO/thaIxCmvH9G2uDdSHrKFIt372xuRPtzOVoFWvPStYPF0YkAAVXCfQI3 unLqIhUXcL2tfBTHaPvpUTOnq5GIY24mzUp7dAQxg3MHL/g+pacEUMRkUd7xSU1r +qgH7hxJGqXOksCniFI5iHDs3yZh80/Y2IXY2oIpCQ7LPtHQ+aeFkM+3Lt2mzqPg glT5BYhez13/VuT33sCBVs0VN0nz+rsatncl56TDckOas1lyQWO/TKbc+FK72dgV HPZsV2AMU2ik8MuW8VO/j2eu4DDPDtkKivreCNXx5CB1fp7dFuf4cpfbkYLx4A== -----END CERTIFICATE-----Generated at Sun Jan 18 22:12:36 2026 by rpki-client