This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Dy9QbuvQt6VWfoCPwbBUKOHXinE.roa File: Dy9QbuvQt6VWfoCPwbBUKOHXinE.roa (raw, json) Hash identifier: mar0QXa4yrOkYHNtEj7HaqHohElgw+e/5ZDpHYAjzwY= Subject key identifier: 0F:2F:50:6E:EB:D0:B7:A5:56:7E:80:8F:C1:B0:54:28:E1:D7:8A:71 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1BA87759A59A24BDA774A9276236F Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Dy9QbuvQt6VWfoCPwbBUKOHXinE.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 103.227.87.0/24 maxlen: 24 2a0f:31c1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ba:87:75:9a:59:a2:4b:da:77:4a:92:76:23:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f2f506eebd0b7a5567e808fc1b05428e1d78a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:83:cf:24:19:9d:ef:6b:0e:20:99:25:f1: a6:2f:ad:22:21:66:4c:ad:1e:15:d4:be:cd:04:fd: 74:bf:ce:c0:6e:cd:fa:89:62:cf:e3:11:38:89:45: 80:d4:a5:0a:e3:1f:1b:cb:8d:5d:a4:48:75:3b:9a: 30:cb:5c:b8:ff:ab:33:46:b0:d4:01:97:ea:15:64: 1b:97:5f:fe:a3:d3:67:64:49:8c:8e:5b:e7:f9:1a: a6:09:c6:4d:67:86:c4:52:47:47:8d:6c:4f:66:32: 4b:01:bb:94:ca:32:30:cb:79:15:c6:92:b5:5c:68: a4:e2:d8:cb:10:40:7e:72:00:f9:6d:a1:13:a9:02: 9d:71:e6:37:ed:fb:f1:50:c4:84:9c:cf:ed:ca:4c: a4:76:d9:51:4b:ab:9b:86:a9:f3:23:6b:d5:a4:8a: f2:22:2d:4c:5f:54:7a:45:13:21:89:98:96:32:36: 7e:4e:dd:1c:91:e3:cb:eb:c1:34:65:e1:cd:c3:17: 26:5d:68:32:d1:d2:ed:eb:c1:04:df:b5:4f:23:3a: 30:fe:7a:60:71:3f:af:37:65:8e:4f:11:5c:0a:9e: 45:81:f3:10:7d:27:52:56:7f:dc:7c:a7:a8:af:91: cd:b1:ec:7b:f6:db:3a:48:a2:97:8c:5c:12:41:a4: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2F:50:6E:EB:D0:B7:A5:56:7E:80:8F:C1:B0:54:28:E1:D7:8A:71 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Dy9QbuvQt6VWfoCPwbBUKOHXinE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.87.0/24 IPv6: 2a0f:31c1::/32 Signature Algorithm: sha256WithRSAEncryption a9:5e:a4:fd:f5:48:d0:e3:70:10:2f:a7:65:e3:61:1f:04:53: ae:c8:53:c1:f8:ac:bd:f1:17:15:b4:af:0d:d4:78:ce:fd:8b: 3f:0e:86:a4:0a:d9:c7:61:e3:01:2d:b2:f5:82:fc:eb:43:fc: 0e:79:a5:d7:80:6d:f4:8e:21:3a:06:68:ed:c1:58:10:e8:65: 55:f1:8d:6b:7f:d6:62:fe:f3:ec:7e:19:39:5a:27:77:d4:6e: ae:5f:c3:87:19:98:15:61:89:d8:c4:3d:70:b2:83:23:8d:12: e5:76:a9:5e:25:2c:43:e7:19:56:63:82:8b:e1:f8:d4:7f:30: 2e:fc:1d:77:83:af:db:2f:10:e9:97:b2:15:82:de:1e:6f:54: 7a:f5:0c:6f:bb:7b:5d:da:7f:ba:7e:09:a1:36:1b:06:6e:41: 09:e9:38:1c:5a:2d:14:b1:b1:c8:6c:e0:41:45:54:91:87:58: e8:37:8f:0a:8b:2a:b0:53:37:69:ca:a5:f3:72:71:2b:66:60: ed:4d:aa:80:42:9d:f7:45:92:8d:34:28:2f:9a:75:89:16:7c: a5:15:e7:ad:b2:f9:1e:57:14:ca:ba:f9:20:88:48:76:15:cf: 70:9e:e8:97:b9:39:28:68:63:e5:bd:fa:4b:ca:4a:0b:96:36: d5:80:60:8e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8bqHdZpZokvad0qSdiNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjJmNTA2ZWViZDBiN2E1NTY3ZTgwOGZjMWIwNTQyOGUxZDc4YTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N6DzyQZne9rDiCZJfGmL60iIWZM rR4V1L7NBP10v87Abs36iWLP4xE4iUWA1KUK4x8by41dpEh1O5owy1y4/6szRrDU AZfqFWQbl1/+o9NnZEmMjlvn+RqmCcZNZ4bEUkdHjWxPZjJLAbuUyjIwy3kVxpK1 XGik4tjLEEB+cgD5baETqQKdceY37fvxUMSEnM/tykykdtlRS6ubhqnzI2vVpIry Ii1MX1R6RRMhiZiWMjZ+Tt0ckePL68E0ZeHNwxcmXWgy0dLt68EE37VPIzow/npg cT+vN2WOTxFcCp5FgfMQfSdSVn/cfKeor5HNsex79ts6SKKXjFwSQaTenwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA8vUG7r0LelVn6Aj8GwVCjh14pxMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvRHk5UWJ1dlF0NlZXZm9DUHdiQlVLT0hYaW5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAZ+NXMA0E AgACMAcDBQAqDzHBMA0GCSqGSIb3DQEBCwUAA4IBAQCpXqT99UjQ43AQL6dl42Ef BFOuyFPB+Ky98RcVtK8N1HjO/Ys/DoakCtnHYeMBLbL1gvzrQ/wOeaXXgG30jiE6 BmjtwVgQ6GVV8Y1rf9Zi/vPsfhk5Wid31G6uX8OHGZgVYYnYxD1wsoMjjRLldqle JSxD5xlWY4KL4fjUfzAu/B13g6/bLxDpl7IVgt4eb1R69Qxvu3td2n+6fgmhNhsG bkEJ6TgcWi0UsbHIbOBBRVSRh1joN48KiyqwUzdpyqXzcnErZmDtTaqAQp33RZKN NCgvmnWJFnylFeetsvkeVxTKuvkgiEh2Fc9wnuiXuTkoaGPlvfpLykoLljbVgGCO -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:24 2026 by rpki-client