This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/Kcqh7YgMjXr3Su1lIN7jhAfcEIc.roa File: Kcqh7YgMjXr3Su1lIN7jhAfcEIc.roa (raw, json) Hash identifier: VypdL+t+Km3avCeeLRSu2LBHbDwKwpUGNeK6Kc08dJE= Subject key identifier: 29:CA:A1:ED:88:0C:8D:7A:F7:4A:ED:65:20:DE:E3:84:07:DC:10:87 Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491 Certificate serial: 019B7C80487A07E4C773BAB0A0BB288F3131 Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/Kcqh7YgMjXr3Su1lIN7jhAfcEIc.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 103.54.88.0/23 maxlen: 32 103.54.90.0/23 maxlen: 32 103.126.48.0/24 maxlen: 32 103.126.49.0/24 maxlen: 32 103.209.228.0/24 maxlen: 32 103.209.229.0/24 maxlen: 32 2a00:9940::/30 maxlen: 128 2a00:9944::/30 maxlen: 128 2a04:e880::/30 maxlen: 128 2a04:e884::/30 maxlen: 128 2a06:4b80::/30 maxlen: 128 2a06:4b84::/30 maxlen: 128 2a06:8540::/30 maxlen: 128 2a06:8544::/30 maxlen: 128 2a06:9dc0::/30 maxlen: 128 2a06:9dc4::/30 maxlen: 128 2a07:35c0::/30 maxlen: 128 2a07:35c4::/30 maxlen: 128 2a09:2340::/30 maxlen: 128 2a09:2344::/30 maxlen: 128 2a0a:6cc0::/30 maxlen: 128 2a0a:6cc4::/30 maxlen: 128 2a0a:cfc0::/30 maxlen: 128 2a0a:cfc4::/30 maxlen: 128 2a0c:52c0::/30 maxlen: 128 2a0c:52c4::/30 maxlen: 128 2a0d:8180::/30 maxlen: 128 2a0d:8184::/30 maxlen: 128 2a0d:c500::/30 maxlen: 128 2a0d:c504::/30 maxlen: 128 2a0d:fd80::/30 maxlen: 128 2a0d:fd84::/30 maxlen: 128 2a0e:3dc0::/30 maxlen: 128 2a0e:3dc4::/30 maxlen: 128 2a0e:7fc0::/30 maxlen: 128 2a0e:7fc4::/30 maxlen: 128 2a0f:f9c0::/30 maxlen: 128 2a0f:f9c4::/30 maxlen: 128 2a10:c80::/30 maxlen: 128 2a10:c84::/30 maxlen: 128 2a10:5480::/30 maxlen: 128 2a10:5484::/30 maxlen: 128 2a10:7b80::/30 maxlen: 128 2a10:7b84::/30 maxlen: 128 2a11:3f40::/30 maxlen: 128 2a11:3f44::/30 maxlen: 128 2a14:2b80::/30 maxlen: 128 2a14:2b84::/30 maxlen: 128 2a14:5c80::/30 maxlen: 128 2a14:5c84::/30 maxlen: 128 2a14:6580::/30 maxlen: 128 2a14:6584::/30 maxlen: 128 2a14:7080::/30 maxlen: 128 2a14:7084::/30 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:48:7a:07:e4:c7:73:ba:b0:a0:bb:28:8f:31:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29caa1ed880c8d7af74aed6520dee38407dc1087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:66:1c:67:42:52:a7:2e:90:83:7d:53:b7: aa:0c:bd:b9:25:13:8f:8f:29:7e:e7:da:f2:bb:dd: 6d:c8:4b:1c:7a:bd:64:2c:21:c5:d1:a2:c4:6a:8a: 1c:aa:e6:8a:fb:6c:29:ae:cd:79:96:bf:ba:f0:4e: a9:ee:17:5a:99:9e:65:2d:e0:b0:f6:bd:75:86:3c: 0f:56:2f:a7:ed:c5:70:72:f7:bf:eb:f5:88:81:62: ff:7a:50:a2:f7:59:39:18:6c:c3:d5:b0:f7:d0:4d: e5:17:df:2b:5b:55:c8:ae:27:95:8d:fc:7b:47:b2: e3:69:59:3f:cd:77:08:c0:05:ac:e9:57:0d:c5:85: 03:1d:fe:5f:b5:ab:ed:f4:b7:d0:49:0f:3d:26:65: 97:e4:b6:96:c5:1e:cb:1d:24:0e:ac:ee:f5:82:da: d6:17:79:7a:27:81:48:0d:2d:55:56:9d:06:0d:b5: 4e:35:82:6b:5c:6e:39:00:de:15:ce:ee:e4:70:f1: 19:b2:a5:01:1c:41:a4:12:84:ea:0f:a0:32:6c:48: 92:bc:79:d9:05:5f:0c:d4:04:20:d8:47:a3:11:2d: a4:f5:d7:36:c9:3d:27:00:e0:38:c2:a0:4f:49:20: 36:e8:9f:33:a4:c5:27:da:41:88:05:35:dc:70:1e: bb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CA:A1:ED:88:0C:8D:7A:F7:4A:ED:65:20:DE:E3:84:07:DC:10:87 X509v3 Authority Key Identifier: keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/Kcqh7YgMjXr3Su1lIN7jhAfcEIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.88.0/22 103.126.48.0/23 103.209.228.0/23 IPv6: 2a00:9940::/29 2a04:e880::/29 2a06:4b80::/29 2a06:8540::/29 2a06:9dc0::/29 2a07:35c0::/29 2a09:2340::/29 2a0a:6cc0::/29 2a0a:cfc0::/29 2a0c:52c0::/29 2a0d:8180::/29 2a0d:c500::/29 2a0d:fd80::/29 2a0e:3dc0::/29 2a0e:7fc0::/29 2a0f:f9c0::/29 2a10:c80::/29 2a10:5480::/29 2a10:7b80::/29 2a11:3f40::/29 2a14:2b80::/29 2a14:5c80::/29 2a14:6580::/29 2a14:7080::/29 Signature Algorithm: sha256WithRSAEncryption 9b:06:2c:49:17:0f:fd:33:a3:3c:bf:94:9c:15:58:63:6f:2a: f4:3b:75:df:0c:8f:63:1a:f7:6f:63:d5:ff:36:c9:b4:1d:af: 40:94:dd:93:87:7b:7b:58:2f:2e:6d:1b:40:95:b3:d5:50:0b: 90:46:0b:80:33:f3:5a:4a:74:7d:65:28:e0:83:a2:bc:9f:66: b0:49:55:05:c0:aa:1f:e6:b4:56:95:06:af:50:39:bb:d5:f3: 87:a0:ce:03:9b:21:60:f8:55:e6:5a:b5:fc:d4:8b:66:00:9a: 82:e4:15:06:a5:53:13:fc:d1:1f:15:68:83:0d:3a:24:f2:75: e3:e7:3c:b9:f1:d9:af:a6:82:4f:24:a5:09:62:15:fd:d3:3b: 91:65:6f:78:0a:01:d7:32:a0:b0:7a:22:b7:d5:b5:42:b3:fa: 3d:25:85:9e:71:d3:9b:e3:cf:e6:f4:b8:2d:35:02:82:d9:13: 85:75:ef:22:f0:1e:f4:8d:04:86:66:3a:b7:b8:5f:13:56:dd: f0:a3:18:79:e4:79:37:1c:4e:a9:aa:cc:ea:d1:d2:94:f1:e0: 7e:99:46:49:25:60:c2:8b:cf:82:8a:63:43:b8:88:d1:ff:4a: 18:dd:70:bd:e4:e3:e9:49:49:5a:b9:74:e7:ea:00:7f:48:5d: 7a:25:96:86 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgISAZt8gEh6B+THc7qwoLsojzExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MDc0NzE0MTQyZjgzOTcwMTQ4ZmFiMGVjM2UyMTE3YzM5 M2M0OTEwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWNhYTFlZDg4MGM4ZDdhZjc0YWVkNjUyMGRlZTM4NDA3ZGMxMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT5mHGdCUqcukIN9U7eqDL25JROP jyl+59ryu91tyEscer1kLCHF0aLEaoocquaK+2wprs15lr+68E6p7hdamZ5lLeCw 9r11hjwPVi+n7cVwcve/6/WIgWL/elCi91k5GGzD1bD30E3lF98rW1XIrieVjfx7 R7LjaVk/zXcIwAWs6VcNxYUDHf5ftavt9LfQSQ89JmWX5LaWxR7LHSQOrO71gtrW F3l6J4FIDS1VVp0GDbVONYJrXG45AN4Vzu7kcPEZsqUBHEGkEoTqD6AybEiSvHnZ BV8M1AQg2EejES2k9dc2yT0nAOA4wqBPSSA26J8zpMUn2kGIBTXccB67tQIDAQAB o4ICyjCCAsYwHQYDVR0OBBYEFCnKoe2IDI1690rtZSDe44QH3BCHMB8GA1UdIwQY MBaAFNQHRxQUL4OXAUj6sOw+IRfDk8SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTkt ZDc5Y2UyZGVlYTcwLzEvS2NxaDdZZ01qWHIzU3UxbElON2poQWZjRUljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTktZDc5Y2UyZGVlYTcw LzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDAYBAIAATASAwQCZzZY AwQBZ34wAwQBZ9HkMIGvBAIAAjCBqAMFAyoAmUADBQMqBOiAAwUDKgZLgAMFAyoG hUADBQMqBp3AAwUDKgc1wAMFAyoJI0ADBQMqCmzAAwUDKgrPwAMFAyoMUsADBQMq DYGAAwUDKg3FAAMFAyoN/YADBQMqDj3AAwUDKg5/wAMFAyoP+cADBQMqEAyAAwUD KhBUgAMFAyoQe4ADBQMqET9AAwUDKhQrgAMFAyoUXIADBQMqFGWAAwUDKhRwgDAN BgkqhkiG9w0BAQsFAAOCAQEAmwYsSRcP/TOjPL+UnBVYY28q9Dt13wyPYxr3b2PV /zbJtB2vQJTdk4d7e1gvLm0bQJWz1VALkEYLgDPzWkp0fWUo4IOivJ9msElVBcCq H+a0VpUGr1A5u9Xzh6DOA5shYPhV5lq1/NSLZgCaguQVBqVTE/zRHxVogw06JPJ1 4+c8ufHZr6aCTySlCWIV/dM7kWVveAoB1zKgsHoit9W1QrP6PSWFnnHTm+PP5vS4 LTUCgtkThXXvIvAe9I0EhmY6t7hfE1bd8KMYeeR5NxxOqarM6tHSlPHgfplGSSVg wovPgopjQ7iI0f9KGN1wveTj6UlJWrl05+oAf0hdeiWWhg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:21 2026 by rpki-client