This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/A0_vTRXLabRk2eyexuOL6kjByLc.roa File: A0_vTRXLabRk2eyexuOL6kjByLc.roa (raw, json) Hash identifier: 3ZfHxtMMA1yr6U4+FAWhPeoh4IpnNzx+O4iFKolGhEs= Subject key identifier: 03:4F:EF:4D:15:CB:69:B4:64:D9:EC:9E:C6:E3:8B:EA:48:C1:C8:B7 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DF36FE9E8BCBB686BD818E7CC2D2E Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/A0_vTRXLabRk2eyexuOL6kjByLc.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140543 IP address blocks: 103.110.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f3:6f:e9:e8:bc:bb:68:6b:d8:18:e7:cc:2d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=034fef4d15cb69b464d9ec9ec6e38bea48c1c8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a9:2c:74:10:8a:c3:c6:cb:aa:8a:a3:ed:bd: 42:8d:66:ad:40:f1:f2:23:0e:ac:6d:69:f7:62:cd: ed:96:f2:60:77:07:42:53:c1:3d:8a:da:74:07:a0: 8e:4b:0c:12:44:7f:19:e7:6d:ac:23:17:8d:74:5c: fe:b4:ee:07:04:cb:c4:b1:56:16:35:6d:b2:59:c5: a9:a4:c7:dd:24:c8:1b:6e:d9:b4:59:47:7b:51:37: ff:08:e7:95:f0:62:5b:26:b4:af:0e:b0:6a:4e:61: d0:25:29:39:ce:fe:79:a5:a2:7f:93:3a:f2:5a:7c: 44:4f:5d:ee:3e:ad:3b:34:9c:28:3e:29:6b:92:49: 70:94:99:89:e5:c9:a6:40:6e:cb:7d:6d:55:b6:6e: 29:79:6a:5d:89:61:ee:7e:c8:d3:a9:e1:58:b1:cb: b6:91:dd:9e:fd:af:15:e5:22:96:ad:c8:eb:74:bb: d0:7c:24:94:f1:86:7d:fe:c9:cf:d7:98:8b:c5:7e: 8c:07:f7:13:92:1b:54:c5:d4:a3:2e:cf:af:fa:c0: 6f:2a:51:b5:e4:08:11:3c:5d:98:8a:1d:d5:30:dd: 85:bb:e7:51:cf:e8:ae:57:62:9d:2e:b8:1b:97:45: 10:42:82:e2:f2:bb:0b:de:68:c9:43:67:cb:8f:5b: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4F:EF:4D:15:CB:69:B4:64:D9:EC:9E:C6:E3:8B:EA:48:C1:C8:B7 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/A0_vTRXLabRk2eyexuOL6kjByLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.39.0/24 Signature Algorithm: sha256WithRSAEncryption 69:36:c0:79:c1:14:8b:40:9d:83:0c:c2:49:f6:ae:14:88:80: 73:c7:06:d0:96:5b:1b:c0:12:9b:d0:3e:a6:76:a8:60:72:25: c5:0c:85:7f:36:60:5f:47:d8:1b:9b:01:eb:ff:b5:f6:87:e0: 15:9f:b8:e0:4c:a0:5e:b1:4f:c0:1b:a5:56:5b:7f:85:de:f2: f8:2d:b4:bf:3e:2a:1b:bc:92:cd:4e:10:37:9a:f8:db:d8:d8: 2b:be:da:72:ab:6f:cd:ad:7d:76:d8:8a:57:c7:cb:99:70:93: ba:80:52:f4:5b:fd:73:ee:db:79:64:bc:6a:b2:db:0d:a8:d4: eb:45:b8:33:cf:84:07:05:30:b6:eb:f4:53:b6:7d:39:34:dc: 42:9d:f5:ae:95:8c:62:45:df:7c:6b:a3:b7:e5:95:b3:da:d1: f5:18:c0:8c:8e:e9:ad:b2:f8:b4:4f:cd:9d:49:af:e6:c7:15: d0:0d:19:cf:18:36:3f:85:0a:df:c0:f3:4e:0f:81:97:3b:e9: 31:23:e7:5a:84:90:91:3b:e8:45:cc:29:d1:ab:56:36:3a:bc: 6d:c6:e1:c8:36:f1:4e:65:d6:96:97:3f:91:6c:f9:04:59:ea: 3a:28:00:11:ab:2a:66:a6:20:70:3a:de:f4:4d:cc:54:49:35: 1b:dc:2a:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffNv6ei8u2hr2BjnzC0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzRmZWY0ZDE1Y2I2OWI0NjRkOWVjOWVjNmUzOGJlYTQ4YzFjOGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKksdBCKw8bLqoqj7b1CjWatQPHy Iw6sbWn3Ys3tlvJgdwdCU8E9itp0B6COSwwSRH8Z522sIxeNdFz+tO4HBMvEsVYW NW2yWcWppMfdJMgbbtm0WUd7UTf/COeV8GJbJrSvDrBqTmHQJSk5zv55paJ/kzry WnxET13uPq07NJwoPilrkklwlJmJ5cmmQG7LfW1Vtm4peWpdiWHufsjTqeFYscu2 kd2e/a8V5SKWrcjrdLvQfCSU8YZ9/snP15iLxX6MB/cTkhtUxdSjLs+v+sBvKlG1 5AgRPF2Yih3VMN2Fu+dRz+iuV2KdLrgbl0UQQoLi8rsL3mjJQ2fLj1s3cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFANP700Vy2m0ZNnsnsbji+pIwci3MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvQTBfdlRSWExhYlJrMmV5ZXh1T0w2a2pCeUxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ24nMA0G CSqGSIb3DQEBCwUAA4IBAQBpNsB5wRSLQJ2DDMJJ9q4UiIBzxwbQllsbwBKb0D6m dqhgciXFDIV/NmBfR9gbmwHr/7X2h+AVn7jgTKBesU/AG6VWW3+F3vL4LbS/Piob vJLNThA3mvjb2Ngrvtpyq2/NrX122IpXx8uZcJO6gFL0W/1z7tt5ZLxqstsNqNTr Rbgzz4QHBTC26/RTtn05NNxCnfWulYxiRd98a6O35ZWz2tH1GMCMjumtsvi0T82d Sa/mxxXQDRnPGDY/hQrfwPNOD4GXO+kxI+dahJCRO+hFzCnRq1Y2OrxtxuHINvFO ZdaWlz+RbPkEWeo6KAARqypmpiBwOt70TcxUSTUb3Co0 -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:21 2026 by rpki-client