This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/prFWMyyh4b6FCl9yWAgF2vzlwxU.roa File: prFWMyyh4b6FCl9yWAgF2vzlwxU.roa (raw, json) Hash identifier: groLGWlq9jIZGQSGnIha4+/vgSrJsr+lZIMNeWi+b40= Subject key identifier: A6:B1:56:33:2C:A1:E1:BE:85:0A:5F:72:58:08:05:DA:FC:E5:C3:15 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DF9CB0B6E6DCFF075F32D75C3EE5D Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/prFWMyyh4b6FCl9yWAgF2vzlwxU.roa Signing time: Thu 01 Jan 2026 12:17:37 +0000 ROA not before: Thu 01 Jan 2026 12:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206230 IP address blocks: 103.73.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f9:cb:0b:6e:6d:cf:f0:75:f3:2d:75:c3:ee:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6b156332ca1e1be850a5f72580805dafce5c315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:e1:ca:c0:4a:29:c2:e3:5a:b5:20:0f:c6: 18:e0:3c:73:4e:c1:26:e6:69:4e:2b:50:d0:47:f1: 64:c8:21:0b:23:4f:17:b9:13:1d:1a:f3:f6:63:53: 5f:cd:6e:e0:e0:9e:c1:04:1e:85:38:45:c9:42:84: 24:9a:74:09:34:7e:e6:84:43:10:b4:65:c4:0d:1d: 45:22:c5:14:bc:ee:45:c8:1c:04:4e:29:8f:3e:53: 05:15:5d:6f:4f:49:48:23:b8:d8:ca:2d:95:29:81: 37:ca:6a:18:b1:1c:13:7a:be:c4:62:59:af:a3:8b: 0c:83:a0:16:d2:bb:20:73:dd:db:91:97:c9:d7:db: 8a:84:f9:01:8e:eb:12:45:6a:82:22:ea:fe:d0:2a: 57:f6:23:2e:34:c0:6a:72:25:2d:51:24:67:43:46: df:7a:ee:bb:56:0c:de:0c:9a:78:cf:2b:4c:d2:90: 1c:14:79:42:06:dc:86:aa:2f:28:89:57:52:e5:c2: fc:37:c1:33:7a:06:77:8b:40:8c:29:e5:4f:bd:11: a6:55:e5:33:6c:38:14:69:c4:63:76:a7:14:56:7d: 5d:59:74:97:6b:9a:82:3d:36:39:7b:0c:8d:09:32: 7d:18:e8:9e:9d:27:ee:08:82:8b:ad:59:b1:fc:83: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B1:56:33:2C:A1:E1:BE:85:0A:5F:72:58:08:05:DA:FC:E5:C3:15 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/prFWMyyh4b6FCl9yWAgF2vzlwxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.34.0/24 Signature Algorithm: sha256WithRSAEncryption 08:b8:1c:bd:f3:43:be:d8:2f:fe:08:5b:0d:70:58:6d:41:5b: dd:5d:dd:32:bd:ed:25:76:a4:47:03:dd:92:07:15:20:58:e7: ca:f5:cb:b9:fe:24:4c:23:7a:b8:71:bc:6d:fb:b7:51:bc:f2: 26:fd:b5:c5:73:8f:4f:c3:78:57:33:14:25:0e:5b:46:0a:c2: 49:de:ee:17:09:32:ab:29:f6:cf:bf:f5:2f:d1:1d:d2:b2:6e: 0c:12:5b:ad:c6:78:69:68:e5:f3:b7:2b:28:8a:96:33:65:3d: 77:a9:f2:f9:e2:ca:a9:94:41:f4:23:be:ea:37:6f:ac:8f:a0: 5e:21:79:1a:2d:9f:12:e6:98:a7:b3:e1:6e:b8:9b:41:22:c7: 4e:51:03:ee:27:61:76:b4:fd:f2:9d:6f:d5:1a:1c:72:81:99: 3f:ff:68:92:d6:39:df:a0:33:06:fc:bc:4f:a0:b3:af:4c:a7: ee:00:77:ca:cc:d2:e4:e3:12:f8:f2:20:52:9f:83:b5:41:d0: 7b:f3:91:a3:66:22:6b:be:89:4b:90:9f:8c:25:7c:7d:96:b1: 85:5b:e5:45:c4:35:bb:4d:a1:45:45:7f:99:3d:6a:de:93:ca: 38:be:51:09:c8:ac:18:a9:bc:87:00:06:c0:77:f8:97:79:77: 9b:cf:a9:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffnLC25tz/B18y11w+5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmIxNTYzMzJjYTFlMWJlODUwYTVmNzI1ODA4MDVkYWZjZTVjMzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU3hysBKKcLjWrUgD8YY4DxzTsEm 5mlOK1DQR/FkyCELI08XuRMdGvP2Y1NfzW7g4J7BBB6FOEXJQoQkmnQJNH7mhEMQ tGXEDR1FIsUUvO5FyBwETimPPlMFFV1vT0lII7jYyi2VKYE3ymoYsRwTer7EYlmv o4sMg6AW0rsgc93bkZfJ19uKhPkBjusSRWqCIur+0CpX9iMuNMBqciUtUSRnQ0bf eu67VgzeDJp4zytM0pAcFHlCBtyGqi8oiVdS5cL8N8EzegZ3i0CMKeVPvRGmVeUz bDgUacRjdqcUVn1dWXSXa5qCPTY5ewyNCTJ9GOienSfuCIKLrVmx/IN8YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKaxVjMsoeG+hQpfclgIBdr85cMVMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvcHJGV015eWg0YjZGQ2w5eVdBZ0Yydnpsd3hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0kiMA0G CSqGSIb3DQEBCwUAA4IBAQAIuBy980O+2C/+CFsNcFhtQVvdXd0yve0ldqRHA92S BxUgWOfK9cu5/iRMI3q4cbxt+7dRvPIm/bXFc49Pw3hXMxQlDltGCsJJ3u4XCTKr KfbPv/Uv0R3Ssm4MElutxnhpaOXztysoipYzZT13qfL54sqplEH0I77qN2+sj6Be IXkaLZ8S5pins+FuuJtBIsdOUQPuJ2F2tP3ynW/VGhxygZk//2iS1jnfoDMG/LxP oLOvTKfuAHfKzNLk4xL48iBSn4O1QdB785GjZiJrvolLkJ+MJXx9lrGFW+VFxDW7 TaFFRX+ZPWrek8o4vlEJyKwYqbyHAAbAd/iXeXebz6mW -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:57 2026 by rpki-client