This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/04uw-mPVsZPyokPmUXcT4483PPE.roa File: 04uw-mPVsZPyokPmUXcT4483PPE.roa (raw, json) Hash identifier: cKR9IH8O8dSbu/1KnD9tUmBzwrnTGRKB/kY1E5KQJkY= Subject key identifier: D3:8B:B0:FA:63:D5:B1:93:F2:A2:43:E6:51:77:13:E3:8F:37:3C:F1 Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091 Certificate serial: 019B79111EFDF53F10041F121137CFF0A97D Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/04uw-mPVsZPyokPmUXcT4483PPE.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 103.82.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1e:fd:f5:3f:10:04:1f:12:11:37:cf:f0:a9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091 Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d38bb0fa63d5b193f2a243e6517713e38f373cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:db:15:ad:3f:a8:8b:3f:a2:5a:82:ff:48: 55:ca:57:fe:4e:69:70:aa:96:2f:05:64:a3:b8:f0: 2d:d7:84:9a:23:87:46:33:07:43:25:4c:69:9e:b0: db:85:db:c7:f7:8e:ec:df:74:0c:e6:6a:bc:88:0a: dd:ab:89:d9:3d:f6:d6:41:f6:44:92:df:25:4e:78: 1f:20:8f:00:d1:cb:54:06:77:47:5b:68:14:e0:a5: d1:a0:c0:eb:92:ce:19:f3:83:ba:9d:63:f0:8f:46: fc:2b:c3:6c:41:29:46:11:55:10:d8:61:42:1b:1c: be:ee:20:8b:e8:5a:3d:47:3e:a2:03:57:65:89:03: dc:a1:63:a3:2a:81:cf:a0:c0:c6:91:88:05:6f:89: 6e:73:b3:40:95:d8:c3:22:87:bb:59:a6:47:58:66: 09:a7:5d:45:f9:dc:6a:fe:be:60:00:0c:c5:c7:f4: 06:14:19:e2:17:92:22:5a:e2:d3:16:68:83:e9:65: 02:0e:83:2c:5f:8a:d1:ab:7f:5e:4f:36:38:ac:d7: c8:2b:4b:06:95:dd:fd:9d:a8:7d:5a:3c:5f:2e:7d: b3:b7:75:d7:38:6a:d1:ab:2c:5c:9d:00:f7:9a:c6: 2f:e4:06:3b:8e:a4:2d:c2:b2:89:c7:54:42:47:94: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8B:B0:FA:63:D5:B1:93:F2:A2:43:E6:51:77:13:E3:8F:37:3C:F1 X509v3 Authority Key Identifier: keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/04uw-mPVsZPyokPmUXcT4483PPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.82.102.0/24 Signature Algorithm: sha256WithRSAEncryption 77:7c:d9:45:e2:13:50:f3:aa:b1:22:3c:6c:96:6f:18:eb:1b: 32:f2:a9:3e:f1:be:cc:0d:c6:57:fa:c6:60:55:e2:6b:b8:64: 21:a4:92:75:4e:a0:50:98:5b:e5:23:26:62:e7:0e:bf:8a:66: b7:e6:75:41:5f:00:36:a6:90:36:6d:7e:26:a7:14:07:09:7a: e2:f0:d4:ba:ff:6b:0f:6d:89:b9:82:0c:0c:3b:c9:dd:19:e7: 1a:f2:23:1a:37:83:be:91:67:8e:e2:ee:23:aa:0b:65:fc:94: 29:c8:74:80:32:9d:e0:00:69:64:64:92:d9:d3:63:77:ec:2c: 51:59:b6:b4:c7:42:c3:18:8f:15:85:67:4e:4e:ea:e1:63:dc: 98:49:00:3d:af:2d:25:20:c6:63:3d:98:ac:48:52:a8:49:f3: 6b:7d:89:3e:ec:c7:4a:fd:81:92:94:d1:14:1e:9f:ed:99:52: ad:f1:e7:0a:59:fe:07:63:01:36:c1:3e:89:2e:f6:3c:d0:1c: 07:c9:5f:56:54:c8:ef:d3:0d:e1:13:3f:80:83:6c:7b:c0:6d: 2e:2f:48:51:b0:13:70:06:ae:26:e8:ee:75:fd:d7:09:d9:77: b9:e7:52:1a:59:43:8e:83:bb:8c:66:7f:b6:f4:c5:25:bd:3a: 69:5d:18:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ER799T8QBB8SETfP8Kl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0 YTAwOTEwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzhiYjBmYTYzZDViMTkzZjJhMjQzZTY1MTc3MTNlMzhmMzczY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRzbFa0/qIs/olqC/0hVylf+Tmlw qpYvBWSjuPAt14SaI4dGMwdDJUxpnrDbhdvH947s33QM5mq8iArdq4nZPfbWQfZE kt8lTngfII8A0ctUBndHW2gU4KXRoMDrks4Z84O6nWPwj0b8K8NsQSlGEVUQ2GFC Gxy+7iCL6Fo9Rz6iA1dliQPcoWOjKoHPoMDGkYgFb4luc7NAldjDIoe7WaZHWGYJ p11F+dxq/r5gAAzFx/QGFBniF5IiWuLTFmiD6WUCDoMsX4rRq39eTzY4rNfIK0sG ld39nah9WjxfLn2zt3XXOGrRqyxcnQD3msYv5AY7jqQtwrKJx1RCR5SyIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOLsPpj1bGT8qJD5lF3E+OPNzzxMB8GA1UdIwQY MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt NmZjMzQzZDc3Y2QyLzEvMDR1dy1tUFZzWlB5b2tQbVVYY1Q0NDgzUFBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1JmMA0G CSqGSIb3DQEBCwUAA4IBAQB3fNlF4hNQ86qxIjxslm8Y6xsy8qk+8b7MDcZX+sZg VeJruGQhpJJ1TqBQmFvlIyZi5w6/ima35nVBXwA2ppA2bX4mpxQHCXri8NS6/2sP bYm5ggwMO8ndGeca8iMaN4O+kWeO4u4jqgtl/JQpyHSAMp3gAGlkZJLZ02N37CxR Wba0x0LDGI8VhWdOTurhY9yYSQA9ry0lIMZjPZisSFKoSfNrfYk+7MdK/YGSlNEU Hp/tmVKt8ecKWf4HYwE2wT6JLvY80BwHyV9WVMjv0w3hEz+Ag2x7wG0uL0hRsBNw Bq4m6O51/dcJ2Xe551IaWUOOg7uMZn+29MUlvTppXRjF -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:15 2026 by rpki-client