This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/GfLgRhct9oW5wY_4r00bTaw-xQ4.roa File: GfLgRhct9oW5wY_4r00bTaw-xQ4.roa (raw, json) Hash identifier: 3WghsPFrwdwVOD+irlDGlyeR+gBCQou6bkuUAmEByMw= Subject key identifier: 19:F2:E0:46:17:2D:F6:85:B9:C1:8F:F8:AF:4D:1B:4D:AC:3E:C5:0E Certificate issuer: /CN=267ef37f3dcd607f9871d239502badbf9b56bc57 Certificate serial: 019B7CECE8A419F8CB8A239A18C737BCDC4D Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/GfLgRhct9oW5wY_4r00bTaw-xQ4.roa Signing time: Fri 02 Jan 2026 04:17:39 +0000 ROA not before: Fri 02 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206373 IP address blocks: 103.112.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e8:a4:19:f8:cb:8a:23:9a:18:c7:37:bc:dc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57 Validity Not Before: Jan 2 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19f2e046172df685b9c18ff8af4d1b4dac3ec50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dc:79:a2:3b:b7:73:af:47:35:a5:ad:bf:22: 9a:b0:43:e8:44:2e:0e:50:39:40:d4:ca:56:a1:86: 50:29:94:dc:c4:7f:53:ae:2d:4f:d9:59:96:5c:67: 5e:f6:9a:19:f9:b0:db:76:48:c0:42:77:6e:64:77: 3c:4b:36:cc:e2:bd:b4:fc:54:8a:52:a3:d7:96:0b: 3b:b9:54:9c:69:fc:1a:a8:a2:53:b4:62:53:7f:4a: 89:f8:34:17:f3:c0:df:3e:c7:23:a2:e2:eb:e7:77: 30:3e:6e:f0:c6:df:99:2e:6f:fd:ac:16:71:c2:ac: d6:54:af:a3:c2:66:ba:a7:44:35:27:49:71:7f:e7: e4:99:b4:2b:cd:d8:f6:de:81:74:5e:28:53:45:e2: a9:6c:55:91:27:1e:f8:a9:f6:b1:60:53:8e:0f:5c: c7:fd:8d:86:1a:2b:73:f3:28:ce:c6:d8:e2:6d:4a: 6b:40:d1:b8:d5:eb:ad:b5:68:6b:7c:a4:66:04:30: cd:1d:99:e0:d3:1a:bd:a1:61:5c:5d:c2:53:d9:6d: fa:30:ad:5b:21:5d:5c:90:88:34:87:d0:fa:b8:24: b2:4a:26:14:87:c7:3b:fe:78:51:bf:37:f4:2e:05: 5a:16:d9:a4:c1:61:d6:ce:91:12:12:81:69:af:e2: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F2:E0:46:17:2D:F6:85:B9:C1:8F:F8:AF:4D:1B:4D:AC:3E:C5:0E X509v3 Authority Key Identifier: keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/GfLgRhct9oW5wY_4r00bTaw-xQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.60.0/24 Signature Algorithm: sha256WithRSAEncryption 08:b0:35:e7:b6:23:29:2b:11:a7:ce:ec:c5:c6:be:d1:72:61: 42:88:5e:c9:ed:67:e0:9b:9b:7b:11:4a:21:59:f3:34:3d:ac: 9a:31:a3:bd:f7:0e:80:5c:58:24:28:53:c9:9b:e7:c0:c1:e4: eb:2a:fe:c2:6e:8b:e0:3e:18:6c:ae:f8:a4:7c:72:a5:6d:84: ef:d5:1a:5b:21:82:28:d8:02:89:d6:98:71:1c:6a:29:c4:01: 5a:e8:b8:6e:2a:3b:78:e5:bc:16:57:5b:ae:6d:ce:bb:28:4a: b5:89:76:8b:09:b5:8d:ca:24:75:ed:f9:e9:6c:13:2e:24:69: 7e:e4:b5:e1:4a:6d:54:58:3d:16:a7:0a:87:f9:4e:b9:b1:e0: 9d:8c:4c:02:18:ce:b1:54:c1:26:82:d9:85:e7:03:79:ec:d7: c1:2c:e0:3d:34:12:72:32:3f:d9:12:0b:77:a2:f9:69:32:12: 33:31:91:18:67:95:f7:33:82:7a:18:79:bb:07:18:dd:d0:72: a8:9f:84:fd:74:b2:53:75:66:62:3d:b7:1e:ab:64:f9:68:eb: 84:0b:88:41:9a:e4:75:e4:48:af:19:e6:8c:64:26:54:53:22: 28:b8:39:36:22:66:a8:e1:0a:b5:fb:60:0d:07:74:48:26:32: b7:f4:8c:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87OikGfjLiiOaGMc3vNxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2N2VmMzdmM2RjZDYwN2Y5ODcxZDIzOTUwMmJhZGJmOWI1 NmJjNTcwHhcNMjYwMTAyMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWYyZTA0NjE3MmRmNjg1YjljMThmZjhhZjRkMWI0ZGFjM2VjNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNx5oju3c69HNaWtvyKasEPoRC4O UDlA1MpWoYZQKZTcxH9Tri1P2VmWXGde9poZ+bDbdkjAQnduZHc8SzbM4r20/FSK UqPXlgs7uVScafwaqKJTtGJTf0qJ+DQX88DfPscjouLr53cwPm7wxt+ZLm/9rBZx wqzWVK+jwma6p0Q1J0lxf+fkmbQrzdj23oF0XihTReKpbFWRJx74qfaxYFOOD1zH /Y2GGitz8yjOxtjibUprQNG41euttWhrfKRmBDDNHZng0xq9oWFcXcJT2W36MK1b IV1ckIg0h9D6uCSySiYUh8c7/nhRvzf0LgVaFtmkwWHWzpESEoFpr+LjBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBny4EYXLfaFucGP+K9NG02sPsUOMB8GA1UdIwQY MBaAFCZ+8389zWB/mHHSOVArrb+bVrxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm43emZ6M05ZSC1ZY2RJNVVDdXR2NXRXdkZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZWExM2QtNmRmZS00ZDliLTllZjUt MzYyOGYwNmRiY2M3LzEvR2ZMZ1JoY3Q5b1c1d1lfNHIwMGJUYXcteFE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9kZWExM2QtNmRmZS00ZDliLTllZjUtMzYyOGYwNmRiY2M3 LzEvSm43emZ6M05ZSC1ZY2RJNVVDdXR2NXRXdkZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3A8MA0G CSqGSIb3DQEBCwUAA4IBAQAIsDXntiMpKxGnzuzFxr7RcmFCiF7J7Wfgm5t7EUoh WfM0PayaMaO99w6AXFgkKFPJm+fAweTrKv7CbovgPhhsrvikfHKlbYTv1RpbIYIo 2AKJ1phxHGopxAFa6LhuKjt45bwWV1uubc67KEq1iXaLCbWNyiR17fnpbBMuJGl+ 5LXhSm1UWD0WpwqH+U65seCdjEwCGM6xVMEmgtmF5wN57NfBLOA9NBJyMj/ZEgt3 ovlpMhIzMZEYZ5X3M4J6GHm7Bxjd0HKon4T9dLJTdWZiPbceq2T5aOuEC4hBmuR1 5EivGeaMZCZUUyIouDk2Imao4Qq1+2ANB3RIJjK39IyT -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:30 2026 by rpki-client