This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EIcqq41CifIvZ6q2-ReaMWSKdRY.roa File: EIcqq41CifIvZ6q2-ReaMWSKdRY.roa (raw, json) Hash identifier: nZhmx60it+FPIFRMeqSVGonXrlUgZHNsyyNSPTVTcCo= Subject key identifier: 10:87:2A:AB:8D:42:89:F2:2F:67:AA:B6:F9:17:9A:31:64:8A:75:16 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D4D8595146D05B7BC1CB0B445BE71 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EIcqq41CifIvZ6q2-ReaMWSKdRY.roa Signing time: Fri 02 Jan 2026 06:20:25 +0000 ROA not before: Fri 02 Jan 2026 06:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197759 IP address blocks: 203.159.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:4d:85:95:14:6d:05:b7:bc:1c:b0:b4:45:be:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10872aab8d4289f22f67aab6f9179a31648a7516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f1:9c:02:e9:57:88:47:ee:ef:18:f1:07:3a: f2:3f:9d:d4:eb:81:61:2d:66:60:e7:01:2d:0a:10: 58:48:14:d0:53:2f:4f:d8:5e:b4:64:5c:ef:e8:70: e2:6a:bb:ff:6e:84:ac:5c:a9:64:81:f2:22:4c:9f: 78:0a:56:99:da:c0:9d:c5:4c:78:97:ed:e8:a0:ae: 6e:9e:3b:22:6c:cd:28:59:2f:1a:d9:9c:3d:a9:f9: 0a:d9:62:2a:6a:3e:9c:76:28:54:cb:53:4e:57:d5: d0:4e:f2:f6:0e:e0:99:5d:3d:f5:3a:f7:c8:81:7a: 0e:69:be:40:96:fb:17:22:4b:56:b9:3f:d9:b9:60: cd:cd:84:22:33:e0:0b:da:05:53:7a:62:d7:14:5e: f9:e8:17:a4:a2:65:8a:d9:4f:ef:fd:7f:4d:13:4f: 8a:68:85:0a:da:55:2a:0c:3e:7b:02:10:aa:84:a5: 98:73:fa:53:1d:19:11:c6:19:8d:73:b3:db:7b:e3: f8:e0:74:d1:39:9e:6b:c7:c6:11:91:7e:2c:e7:a3: 7e:2b:f0:2b:c2:e8:37:59:af:5d:ec:59:4b:2f:59: d5:fe:6a:f9:9f:36:cb:7c:d5:fd:79:d2:4a:75:9e: 19:ef:77:03:dc:46:42:3c:91:b5:d6:db:69:cf:9e: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:87:2A:AB:8D:42:89:F2:2F:67:AA:B6:F9:17:9A:31:64:8A:75:16 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EIcqq41CifIvZ6q2-ReaMWSKdRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.159.83.0/24 Signature Algorithm: sha256WithRSAEncryption 41:5e:a6:7b:5e:31:d0:de:ff:da:1b:0b:cd:36:86:76:a1:21: 36:c1:79:c6:e4:a0:c7:9e:fd:4c:dc:04:1f:98:86:3c:07:c8: 75:56:39:f5:17:27:a3:b2:71:9e:e9:6d:2d:7c:41:54:25:b5: 58:53:48:b9:f4:d2:d9:07:7c:d4:9f:1f:d3:7f:d3:14:8f:cd: e9:dd:2d:6b:de:16:84:5b:5d:ed:fc:01:6d:87:2d:d9:58:8f: 0c:94:1b:e5:84:6f:36:3a:0f:fd:1c:0d:03:aa:1c:bb:32:5e: c5:5d:21:5a:b9:c1:1c:31:ab:15:c9:39:ea:26:87:f5:21:b6: a0:74:eb:7a:2c:26:a5:3f:fb:31:ff:8b:9c:0f:c3:5d:ad:4c: e4:ea:87:25:53:2f:fd:4c:53:69:c6:ef:b4:89:c4:d6:b5:88: b8:f3:b4:39:39:5f:a8:3d:2e:98:d0:5d:df:bb:ac:34:81:b9: 62:b7:bc:65:29:66:76:2e:a1:87:51:7d:c2:5e:db:4b:c9:51: ad:df:c1:85:42:db:91:e0:b4:47:cd:fa:dc:3f:04:57:96:2c: d9:e0:b1:e3:e9:7c:60:10:8d:9a:f2:af:24:51:ae:a0:5f:94: ad:ab:7c:54:16:79:6b:54:50:86:55:fb:4e:33:57:fb:f8:8e: aa:40:e4:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XU2FlRRtBbe8HLC0Rb5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDg3MmFhYjhkNDI4OWYyMmY2N2FhYjZmOTE3OWEzMTY0OGE3NTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fGcAulXiEfu7xjxBzryP53U64Fh LWZg5wEtChBYSBTQUy9P2F60ZFzv6HDiarv/boSsXKlkgfIiTJ94ClaZ2sCdxUx4 l+3ooK5unjsibM0oWS8a2Zw9qfkK2WIqaj6cdihUy1NOV9XQTvL2DuCZXT31OvfI gXoOab5AlvsXIktWuT/ZuWDNzYQiM+AL2gVTemLXFF756BekomWK2U/v/X9NE0+K aIUK2lUqDD57AhCqhKWYc/pTHRkRxhmNc7Pbe+P44HTROZ5rx8YRkX4s56N+K/Ar wug3Wa9d7FlLL1nV/mr5nzbLfNX9edJKdZ4Z73cD3EZCPJG11ttpz57cBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCHKquNQonyL2eqtvkXmjFkinUWMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvRUljcXE0MUNpZkl2WjZxMi1SZWFNV1NLZFJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy59TMA0G CSqGSIb3DQEBCwUAA4IBAQBBXqZ7XjHQ3v/aGwvNNoZ2oSE2wXnG5KDHnv1M3AQf mIY8B8h1Vjn1FyejsnGe6W0tfEFUJbVYU0i59NLZB3zUnx/Tf9MUj83p3S1r3haE W13t/AFthy3ZWI8MlBvlhG82Og/9HA0Dqhy7Ml7FXSFaucEcMasVyTnqJof1Ibag dOt6LCalP/sx/4ucD8NdrUzk6oclUy/9TFNpxu+0icTWtYi487Q5OV+oPS6Y0F3f u6w0gblit7xlKWZ2LqGHUX3CXttLyVGt38GFQtuR4LRHzfrcPwRXlizZ4LHj6Xxg EI2a8q8kUa6gX5Stq3xUFnlrVFCGVftOM1f7+I6qQOSH -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:20 2026 by rpki-client