This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kkthM6x4Ysu2XnPDWjsE39daKn0.roa File: kkthM6x4Ysu2XnPDWjsE39daKn0.roa (raw, json) Hash identifier: o1OCShpXhJCej1+TLGy+wNUVBQNCSWPRc+kGPF2E0ys= Subject key identifier: 92:4B:61:33:AC:78:62:CB:B6:5E:73:C3:5A:3B:04:DF:D7:5A:2A:7D Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BBDC1484CAC9DD81F8BD796AD02FCE2E8 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kkthM6x4Ysu2XnPDWjsE39daKn0.roa Signing time: Wed 14 Jan 2026 18:25:19 +0000 ROA not before: Wed 14 Jan 2026 18:25:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 103.114.41.0/24 maxlen: 24 2a0f:6d80::/29 maxlen: 29 2a13:18c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:c1:48:4c:ac:9d:d8:1f:8b:d7:96:ad:02:fc:e2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 14 18:25:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=924b6133ac7862cbb65e73c35a3b04dfd75a2a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:33:06:ef:b3:83:e2:e5:9e:ea:9c:a4:8c: eb:e1:96:7c:6e:3a:1a:9c:f3:d3:14:76:03:32:d3: d7:8d:8d:1b:9f:a2:4d:d7:eb:7f:37:3d:c9:ec:94: fd:70:51:74:2a:ae:13:68:c3:e8:ae:2e:83:c3:a8: 02:24:de:3c:6b:5c:3a:df:3a:33:80:de:24:5f:36: ee:6b:85:09:15:71:38:1b:1b:8f:80:27:65:2a:86: 5e:84:ca:e7:70:b9:44:24:14:89:a0:c7:24:36:2c: d8:a7:be:e2:fb:92:4f:a0:af:56:85:74:37:dd:d8: b9:35:d2:2a:c4:76:4e:7b:6b:fa:a9:66:51:cc:c3: e7:fa:36:72:58:fe:91:00:cd:c5:ad:76:8a:9f:b3: 02:f4:0a:fc:46:ae:0e:2e:ef:61:cf:df:fc:4d:79: 8e:e8:d5:29:51:48:bb:ff:6e:6f:ee:15:b2:b9:67: 60:17:3b:ea:8f:5d:3d:f0:57:0c:78:7e:cb:c0:74: 3a:05:e7:54:80:bb:35:5c:0b:dd:1d:e9:61:6a:79: 41:75:5e:0f:8d:c6:3a:31:4c:96:20:d2:e8:14:2a: 23:eb:67:5c:ef:e8:72:a3:ca:5c:88:5e:89:a0:29: f8:bd:6e:f7:e7:5b:d6:a8:29:47:a8:69:63:57:6a: 4b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4B:61:33:AC:78:62:CB:B6:5E:73:C3:5A:3B:04:DF:D7:5A:2A:7D X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kkthM6x4Ysu2XnPDWjsE39daKn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.114.41.0/24 IPv6: 2a0f:6d80::/29 2a13:18c2::/32 Signature Algorithm: sha256WithRSAEncryption 0d:ca:1e:3f:f4:1d:e3:8b:d3:c1:1f:b4:b9:04:35:c1:87:27: 58:6f:6e:11:77:bf:54:12:39:ff:2c:4d:ce:e3:e5:4c:94:71: 1d:7d:14:2f:cd:1d:a3:e3:63:ba:f9:d6:43:6b:f9:c1:58:fb: a4:61:82:8a:99:b2:cb:e6:2e:f8:c0:1a:f6:3d:83:6d:c6:c6: fd:12:47:c9:4f:90:65:32:8d:03:21:8d:d5:64:37:10:c2:58: 54:50:bc:2b:f8:d2:3c:ac:9c:7a:a7:07:35:1b:11:21:73:42: 51:49:b3:0d:7f:65:45:82:2b:55:b6:82:27:b6:f6:79:99:11: 9d:9d:48:ea:88:35:ad:6a:91:61:7c:c3:14:2f:ec:af:98:45: 55:30:0b:82:31:11:b7:ce:09:c7:62:08:9b:da:41:b5:34:fd: 6e:17:bd:ce:45:84:40:f6:af:05:46:32:70:7f:62:dc:c6:04: 40:b2:2a:d6:64:4c:f5:89:db:87:71:e8:80:2a:03:b9:fd:8b: 41:8c:0a:fc:df:76:bd:c5:d6:6c:b3:1a:3b:2c:db:06:b3:e4: e7:f4:91:10:c3:26:76:5c:a4:dc:6b:aa:93:a6:72:9a:9b:11: 89:01:5f:88:ce:73:38:06:44:91:6d:f4:d2:0c:7b:fe:a5:6b: cc:73:3f:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZu9wUhMrJ3YH4vXlq0C/OLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTE0MTgyNTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjRiNjEzM2FjNzg2MmNiYjY1ZTczYzM1YTNiMDRkZmQ3NWEyYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRQzBu+zg+LlnuqcpIzr4ZZ8bjoa nPPTFHYDMtPXjY0bn6JN1+t/Nz3J7JT9cFF0Kq4TaMPori6Dw6gCJN48a1w63zoz gN4kXzbua4UJFXE4GxuPgCdlKoZehMrncLlEJBSJoMckNizYp77i+5JPoK9WhXQ3 3di5NdIqxHZOe2v6qWZRzMPn+jZyWP6RAM3FrXaKn7MC9Ar8Rq4OLu9hz9/8TXmO 6NUpUUi7/25v7hWyuWdgFzvqj1098FcMeH7LwHQ6BedUgLs1XAvdHelhanlBdV4P jcY6MUyWINLoFCoj62dc7+hyo8pciF6JoCn4vW7351vWqClHqGljV2pLXQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFJJLYTOseGLLtl5zw1o7BN/XWip9MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEva2t0aE02eDRZc3UyWG5QRFdqc0UzOWRhS24wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAZ3IpMBQE AgACMA4DBQMqD22AAwUAKhMYwjANBgkqhkiG9w0BAQsFAAOCAQEADcoeP/Qd44vT wR+0uQQ1wYcnWG9uEXe/VBI5/yxNzuPlTJRxHX0UL80do+NjuvnWQ2v5wVj7pGGC ipmyy+Yu+MAa9j2DbcbG/RJHyU+QZTKNAyGN1WQ3EMJYVFC8K/jSPKyceqcHNRsR IXNCUUmzDX9lRYIrVbaCJ7b2eZkRnZ1I6og1rWqRYXzDFC/sr5hFVTALgjERt84J x2IIm9pBtTT9bhe9zkWEQPavBUYycH9i3MYEQLIq1mRM9Ynbh3HogCoDuf2LQYwK /N92vcXWbLMaOyzbBrPk5/SREMMmdlyk3Guqk6ZympsRiQFfiM5zOAZEkW300gx7 /qVrzHM/TA== -----END CERTIFICATE-----Generated at Mon Jan 19 18:02:10 2026 by rpki-client