This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/1-quxXBKvCjIMJIo0c4Ek-_o9n60.roa File: 1-quxXBKvCjIMJIo0c4Ek-_o9n60.roa (raw, json) Hash identifier: 7fCoELEZu1vlP7fRuazqqj8PPVK+svGM+aO+Oau727Q= Subject key identifier: FA:AB:B1:5C:12:AF:0A:32:0C:24:8A:34:73:81:24:FB:FA:3D:9F:AD Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B79111C0FB599C1939479C1E7F75BBF64 Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/1-quxXBKvCjIMJIo0c4Ek-_o9n60.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136744 IP address blocks: 103.35.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1c:0f:b5:99:c1:93:94:79:c1:e7:f7:5b:bf:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faabb15c12af0a320c248a34738124fbfa3d9fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4b:90:70:b5:12:af:5f:9f:93:4f:2c:9b:a1: a4:6f:94:cd:1f:11:51:a4:47:19:cd:ac:36:73:ff: 6b:bb:d1:89:5b:13:8f:fc:63:3b:2d:3d:d7:4c:9d: 5e:98:d0:4f:a1:3e:ff:1e:6c:11:f4:86:96:dc:6e: da:07:1a:4f:d8:6c:53:36:e8:9b:b4:1f:07:5a:9c: 23:8b:0f:a2:7a:68:2e:08:f6:72:b3:58:00:b5:d9: 4e:3c:c2:5f:0c:29:31:99:11:3b:6b:67:b4:be:35: c3:b6:ff:09:0a:0c:c1:b5:14:47:64:37:2c:20:de: 11:2e:56:e2:9d:e1:8f:dc:ef:6c:04:20:25:12:f2: 10:e5:69:07:e7:ca:f0:ef:48:6c:96:7d:42:cb:f6: db:62:e9:5f:b9:5d:f4:ab:cd:87:fc:28:ed:71:4d: a6:5f:c1:da:24:ea:76:c8:eb:0b:a3:2a:9d:89:27: ab:0a:94:88:05:b1:00:2c:b8:24:4f:4f:49:8a:48: 54:dc:38:e9:90:51:72:8c:7a:d6:b0:60:8c:79:c1: ff:ff:8e:bd:6e:fb:14:1e:7b:23:e3:29:46:97:17: 68:8b:ad:a1:7b:ff:5f:8a:35:b4:ff:55:c8:a5:c0: d6:ee:75:a6:9f:17:7a:fe:76:0e:ed:fc:9d:71:e2: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AB:B1:5C:12:AF:0A:32:0C:24:8A:34:73:81:24:FB:FA:3D:9F:AD X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/1-quxXBKvCjIMJIo0c4Ek-_o9n60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.35.56.0/22 Signature Algorithm: sha256WithRSAEncryption 59:bc:6b:b2:62:26:f9:84:21:1e:c8:66:c8:53:42:32:6e:54: 08:6e:3f:af:01:18:00:7f:16:ed:32:12:34:73:01:d3:46:ea: b5:4a:d0:63:59:88:79:56:4c:62:24:cb:13:95:46:7a:05:db: 2c:4e:44:38:8d:8b:48:eb:0d:c6:fb:96:4f:12:fc:8c:93:5a: 7a:4d:a9:3c:3e:3d:1e:03:0e:3b:2c:b3:54:33:a1:b2:f3:30: eb:82:fd:1a:3a:25:e8:e9:24:99:bc:3a:d7:14:bb:19:a3:94: 07:a4:49:8a:e6:25:71:9c:6e:b7:08:18:f4:87:ef:df:29:64: 57:53:7a:b0:50:ef:70:0d:3b:6d:a8:1b:8a:a4:59:e8:c5:eb: 08:d2:4f:ad:02:15:d3:3d:6c:7e:c1:85:7e:2d:6a:d5:c3:c9: f5:33:1d:00:39:92:19:ac:8d:86:39:85:4d:0d:7e:8c:f1:dd: c6:b7:00:a0:31:2a:44:51:4c:91:21:4c:68:39:d4:98:f0:5b: 21:6f:d0:09:fc:47:8e:b0:9d:05:5f:af:46:99:ca:04:99:3f: c4:c3:77:d1:b7:aa:92:38:46:28:ce:2a:e3:86:fb:dc:87:45: ea:92:9a:62:6e:45:af:a2:5e:31:19:aa:e3:6f:67:df:64:77: ce:22:19:d3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5ERwPtZnBk5R5wef3W79kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWFiYjE1YzEyYWYwYTMyMGMyNDhhMzQ3MzgxMjRmYmZhM2Q5ZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEuQcLUSr1+fk08sm6Gkb5TNHxFR pEcZzaw2c/9ru9GJWxOP/GM7LT3XTJ1emNBPoT7/HmwR9IaW3G7aBxpP2GxTNuib tB8HWpwjiw+iemguCPZys1gAtdlOPMJfDCkxmRE7a2e0vjXDtv8JCgzBtRRHZDcs IN4RLlbineGP3O9sBCAlEvIQ5WkH58rw70hsln1Cy/bbYulfuV30q82H/CjtcU2m X8HaJOp2yOsLoyqdiSerCpSIBbEALLgkT09JikhU3DjpkFFyjHrWsGCMecH//469 bvsUHnsj4ylGlxdoi62he/9fijW0/1XIpcDW7nWmnxd6/nYO7fydceLB3QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqrsVwSrwoyDCSKNHOBJPv6PZ+tMB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvMS1xdXhYQkt2Q2pJTUpJbzBjNEVrLV9vOW42MC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjAvNDZkYjNhLWE1NzMtNGYyOC1iNDNiLTM3YjYyZDIyMzky NC8xLzUxVERSOWFORlVrOTV4dTVZdkNsWi1FMDFnTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcjODAN BgkqhkiG9w0BAQsFAAOCAQEAWbxrsmIm+YQhHshmyFNCMm5UCG4/rwEYAH8W7TIS NHMB00bqtUrQY1mIeVZMYiTLE5VGegXbLE5EOI2LSOsNxvuWTxL8jJNaek2pPD49 HgMOOyyzVDOhsvMw64L9Gjol6Okkmbw61xS7GaOUB6RJiuYlcZxutwgY9Ifv3ylk V1N6sFDvcA07bagbiqRZ6MXrCNJPrQIV0z1sfsGFfi1q1cPJ9TMdADmSGayNhjmF TQ1+jPHdxrcAoDEqRFFMkSFMaDnUmPBbIW/QCfxHjrCdBV+vRpnKBJk/xMN30beq kjhGKM4q44b73IdF6pKaYm5Fr6JeMRmq429n32R3ziIZ0w== -----END CERTIFICATE-----Generated at Wed Jan 21 15:07:35 2026 by rpki-client