This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PtfcZRAvGEds10YqT69M0XwJa9Q.roa File: PtfcZRAvGEds10YqT69M0XwJa9Q.roa (raw, json) Hash identifier: bfvHId9gP/BafvkwXKfjOSD4aAz07tm8rYVHM/ZTQgo= Subject key identifier: 3E:D7:DC:65:10:2F:18:47:6C:D7:46:2A:4F:AF:4C:D1:7C:09:6B:D4 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1A1057C8CC2634611C0B08235B5CE Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PtfcZRAvGEds10YqT69M0XwJa9Q.roa Signing time: Fri 02 Jan 2026 18:21:40 +0000 ROA not before: Fri 02 Jan 2026 18:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7979 IP address blocks: 103.209.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a1:05:7c:8c:c2:63:46:11:c0:b0:82:35:b5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ed7dc65102f18476cd7462a4faf4cd17c096bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:10:42:ca:5b:0e:86:ec:a7:8f:56:d1:b5:b9: e8:14:33:16:1a:0a:64:28:6a:ca:c8:fc:4a:ca:1e: f7:96:d5:1e:2c:2d:22:0a:81:d4:81:1b:a0:ea:d1: 41:3f:91:2c:97:0e:80:af:88:1b:88:4a:05:e6:36: 9d:3e:0e:1a:08:d4:13:06:c5:9b:5d:52:f2:f2:6f: c4:96:a1:39:02:32:a2:5f:8b:1d:54:25:a7:2c:a7: 2e:94:65:9a:46:03:e0:3f:7d:53:ab:0c:63:d0:09: 82:79:66:a7:41:b5:52:db:be:d3:f0:32:ef:23:b8: d6:0c:49:e6:9f:fa:d6:a7:51:c5:6b:c2:12:42:49: a6:36:f0:46:83:10:ed:36:a5:ad:84:a5:97:38:14: 9d:a6:53:c9:e6:30:ca:2f:0b:72:c1:61:38:a4:88: 17:49:73:96:53:7e:43:69:89:1d:08:95:cc:f1:43: 56:64:96:fd:4f:c6:9a:8f:66:ed:d7:31:a8:ae:2a: 41:4a:af:22:17:38:97:af:da:d0:9f:22:89:e5:66: f5:f5:d6:98:04:90:53:03:5d:1c:32:31:6b:72:8f: 30:fa:de:da:d5:00:d2:a6:62:5b:99:d6:9c:1f:a4: 83:e1:19:51:fa:8e:d1:66:f1:0a:dd:c6:b6:3d:62: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D7:DC:65:10:2F:18:47:6C:D7:46:2A:4F:AF:4C:D1:7C:09:6B:D4 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PtfcZRAvGEds10YqT69M0XwJa9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.231.0/24 Signature Algorithm: sha256WithRSAEncryption 39:f4:7e:09:53:12:f9:19:76:85:9b:bf:a5:51:e9:11:48:18: 5a:27:79:1a:36:5f:11:9b:6f:88:cb:ba:09:42:df:ff:e5:00: 41:37:b5:32:42:73:35:cd:06:d7:d5:0a:a3:b5:16:dc:8d:9d: 01:71:b9:a1:0b:6f:71:c1:fb:aa:f4:3f:f8:22:a4:86:a7:32: 97:ea:b1:21:0b:d6:7c:6a:45:cb:8d:08:1c:7d:a4:45:7e:be: 02:e8:63:91:84:3f:40:b6:68:a8:25:bf:c1:dc:87:04:73:b4: 48:90:ff:78:08:de:73:7a:6f:d5:88:4c:07:eb:f4:42:ef:57: 0f:e6:d9:7a:e7:0c:a8:a9:d2:c4:21:dc:eb:8b:b4:ac:c8:07: 1b:4f:ab:37:2f:95:83:b5:15:72:ff:03:61:4b:7f:51:7c:14: ee:ca:d9:30:5f:eb:29:f9:47:c3:5d:69:61:88:b9:41:bd:80: 69:e8:fe:31:2d:86:dd:6a:a6:e3:18:d2:df:20:0d:46:69:16: 26:2c:00:82:f3:d2:c7:a4:e3:ba:54:7c:89:32:df:f6:f0:61: dd:31:38:f8:b2:4a:13:a3:73:1f:20:0f:28:1a:e5:88:e5:af: ad:33:02:0f:64:de:6f:28:59:37:54:a2:90:b1:4d:1a:f1:62: aa:68:31:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8aEFfIzCY0YRwLCCNbXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWQ3ZGM2NTEwMmYxODQ3NmNkNzQ2MmE0ZmFmNGNkMTdjMDk2YmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BBCylsOhuynj1bRtbnoFDMWGgpk KGrKyPxKyh73ltUeLC0iCoHUgRug6tFBP5Eslw6Ar4gbiEoF5jadPg4aCNQTBsWb XVLy8m/ElqE5AjKiX4sdVCWnLKculGWaRgPgP31Tqwxj0AmCeWanQbVS277T8DLv I7jWDEnmn/rWp1HFa8ISQkmmNvBGgxDtNqWthKWXOBSdplPJ5jDKLwtywWE4pIgX SXOWU35DaYkdCJXM8UNWZJb9T8aaj2bt1zGoripBSq8iFziXr9rQnyKJ5Wb19daY BJBTA10cMjFrco8w+t7a1QDSpmJbmdacH6SD4RlR+o7RZvEK3ca2PWLvyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD7X3GUQLxhHbNdGKk+vTNF8CWvUMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvUHRmY1pSQXZHRWRzMTBZcVQ2OU0wWHdKYTlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9HnMA0G CSqGSIb3DQEBCwUAA4IBAQA59H4JUxL5GXaFm7+lUekRSBhaJ3kaNl8Rm2+Iy7oJ Qt//5QBBN7UyQnM1zQbX1QqjtRbcjZ0BcbmhC29xwfuq9D/4IqSGpzKX6rEhC9Z8 akXLjQgcfaRFfr4C6GORhD9AtmioJb/B3IcEc7RIkP94CN5zem/ViEwH6/RC71cP 5tl65wyoqdLEIdzri7SsyAcbT6s3L5WDtRVy/wNhS39RfBTuytkwX+sp+UfDXWlh iLlBvYBp6P4xLYbdaqbjGNLfIA1GaRYmLACC89LHpOO6VHyJMt/28GHdMTj4skoT o3MfIA8oGuWI5a+tMwIPZN5vKFk3VKKQsU0a8WKqaDEf -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:51 2026 by rpki-client