This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/ReyHSx5OaAHEAN_31kdMwxjhNUA.roa File: ReyHSx5OaAHEAN_31kdMwxjhNUA.roa (raw, json) Hash identifier: FJpHlOJWbKJBBURtI4JmCkNfG/SkO9cYxdgcfQETxWo= Subject key identifier: 45:EC:87:4B:1E:4E:68:01:C4:00:DF:F7:D6:47:4C:C3:18:E1:35:40 Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46 Certificate serial: 019B7BA3B6EF1F6E263AF107025045C19F4C Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/ReyHSx5OaAHEAN_31kdMwxjhNUA.roa Signing time: Thu 01 Jan 2026 22:18:05 +0000 ROA not before: Thu 01 Jan 2026 22:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203835 IP address blocks: 103.215.98.0/23 maxlen: 23 185.254.160.0/22 maxlen: 22 2a0c:4fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b6:ef:1f:6e:26:3a:f1:07:02:50:45:c1:9f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46 Validity Not Before: Jan 1 22:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45ec874b1e4e6801c400dff7d6474cc318e13540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:31:40:a9:f0:e4:20:56:1e:43:41:e9:c2:91: af:0e:ae:7c:46:f4:25:1a:6c:be:50:bb:42:b5:80: e4:c8:9d:10:25:8b:f0:58:50:47:94:3c:b1:dc:f1: d5:0d:0f:21:e1:73:21:52:ec:51:ae:0e:b7:49:e1: 89:b2:6e:69:b1:38:77:39:8d:00:39:51:ce:f0:ae: 40:87:66:36:da:5b:23:1d:27:5d:87:c5:fd:a4:6a: b9:db:53:55:3f:75:05:48:da:4d:00:8d:89:2b:1d: 04:55:9f:9b:2d:0f:65:9c:6c:a6:ef:ab:27:6d:5c: 51:49:f2:a9:ca:fb:9e:1b:51:d7:60:2d:1f:9a:4c: ab:fd:cf:8e:cd:55:fd:cd:d2:60:d0:07:d4:d4:e7: 4a:ec:cc:57:c1:58:a4:d9:cc:e4:20:ef:56:6a:99: f6:82:59:19:7b:0d:60:aa:d0:fe:22:33:c4:f7:06: 98:40:3c:46:30:0e:a7:f8:f8:b8:d9:99:29:e2:e9: d0:0c:d5:94:24:d1:e4:bb:6f:f5:41:0f:f6:fb:b0: 1c:2b:aa:df:95:11:0b:57:e7:36:01:3d:12:80:14: 49:90:aa:ac:70:ee:4a:7a:34:38:76:ad:92:78:85: f9:68:be:80:0b:20:58:43:8e:8f:a8:77:c7:af:f5: d9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EC:87:4B:1E:4E:68:01:C4:00:DF:F7:D6:47:4C:C3:18:E1:35:40 X509v3 Authority Key Identifier: keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/ReyHSx5OaAHEAN_31kdMwxjhNUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.215.98.0/23 185.254.160.0/22 IPv6: 2a0c:4fc0::/29 Signature Algorithm: sha256WithRSAEncryption 61:8a:2a:f6:95:b2:af:64:8a:8e:5d:6c:44:df:c2:8d:38:a8: 86:b1:13:40:1a:3e:b3:55:8f:64:b8:5f:9d:4e:41:7e:1e:0c: d1:8a:c7:04:47:91:18:34:0b:a4:25:19:a3:a6:9b:a2:5b:01: f0:c8:f9:d5:2f:22:d8:2e:51:c9:90:ed:32:a5:c9:5b:84:60: 1f:66:a2:7c:3a:b8:aa:b2:83:01:7c:66:01:11:ca:bd:98:13: da:7e:cd:41:35:c3:27:91:38:f2:79:78:6c:39:1a:da:7b:20: 00:a8:02:89:03:16:c7:69:7a:41:d3:fb:77:a6:ad:7f:19:b4: 4f:e0:cd:08:0f:3d:b8:1b:3c:16:34:56:e6:f8:92:6f:dd:d7: 7b:ea:71:25:a4:19:47:67:97:6e:53:35:d7:93:03:07:7b:3e: c4:b8:4f:66:4a:1f:66:45:2b:d4:09:6c:2a:a1:a4:96:bd:a7: 78:39:c5:bb:20:ea:eb:ec:0b:07:74:83:f2:25:b1:d1:89:fe: bb:b1:13:28:a3:85:30:84:8d:b5:bd:2f:c7:fc:7d:ed:2f:d7: 29:4c:e8:fe:54:4a:b5:30:7e:cc:0a:ad:e7:39:88:c1:0b:0a: 25:5d:b5:9f:9f:fe:7a:84:6d:56:0e:d5:f3:af:15:13:54:b0: 69:40:d6:18 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7o7bvH24mOvEHAlBFwZ9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Y2NjMGVjZGNlYjdjNGRhOTEyZTFkNzkyYmQxNmU2MjJh ZjRhNDYwHhcNMjYwMTAxMjIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWVjODc0YjFlNGU2ODAxYzQwMGRmZjdkNjQ3NGNjMzE4ZTEzNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TFAqfDkIFYeQ0HpwpGvDq58RvQl Gmy+ULtCtYDkyJ0QJYvwWFBHlDyx3PHVDQ8h4XMhUuxRrg63SeGJsm5psTh3OY0A OVHO8K5Ah2Y22lsjHSddh8X9pGq521NVP3UFSNpNAI2JKx0EVZ+bLQ9lnGym76sn bVxRSfKpyvueG1HXYC0fmkyr/c+OzVX9zdJg0AfU1OdK7MxXwVik2czkIO9Wapn2 glkZew1gqtD+IjPE9waYQDxGMA6n+Pi42Zkp4unQDNWUJNHku2/1QQ/2+7AcK6rf lRELV+c2AT0SgBRJkKqscO5KejQ4dq2SeIX5aL6ACyBYQ46PqHfHr/XZjQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEXsh0seTmgBxADf99ZHTMMY4TVAMB8GA1UdIwQY MBaAFJfMwOzc63xNqRLh15K9FuYir0pGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDh6QTdOenJmRTJwRXVIWGtyMFc1aUt2U2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wYWE0ZGQtM2ZhYS00YjNjLWI0YzAt OTNkMTdhMjljMGE5LzEvUmV5SFN4NU9hQUhFQU5fMzFrZE13eGpoTlVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8wYWE0ZGQtM2ZhYS00YjNjLWI0YzAtOTNkMTdhMjljMGE5 LzEvbDh6QTdOenJmRTJwRXVIWGtyMFc1aUt2U2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBZ9diAwQC uf6gMA0EAgACMAcDBQMqDE/AMA0GCSqGSIb3DQEBCwUAA4IBAQBhiir2lbKvZIqO XWxE38KNOKiGsRNAGj6zVY9kuF+dTkF+HgzRiscER5EYNAukJRmjppuiWwHwyPnV LyLYLlHJkO0ypclbhGAfZqJ8OriqsoMBfGYBEcq9mBPafs1BNcMnkTjyeXhsORra eyAAqAKJAxbHaXpB0/t3pq1/GbRP4M0IDz24GzwWNFbm+JJv3dd76nElpBlHZ5du UzXXkwMHez7EuE9mSh9mRSvUCWwqoaSWvad4OcW7IOrr7AsHdIPyJbHRif67sRMo o4UwhI21vS/H/H3tL9cpTOj+VEq1MH7MCq3nOYjBCwolXbWfn/56hG1WDtXzrxUT VLBpQNYY -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:15 2026 by rpki-client