This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/3NH2sdioISEJI45kPXSkVZvUldU.roa File: 3NH2sdioISEJI45kPXSkVZvUldU.roa (raw, json) Hash identifier: NrfDSmOx/pWg7aHFmWwUVpvGFkVt9HkGBGabFsaeXmk= Subject key identifier: DC:D1:F6:B1:D8:A8:21:21:09:23:8E:64:3D:74:A4:55:9B:D4:95:D5 Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019B77C718DA78DAC4D2987EF3DCB7AF1E7F Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/3NH2sdioISEJI45kPXSkVZvUldU.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15731 IP address blocks: 103.146.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:18:da:78:da:c4:d2:98:7e:f3:dc:b7:af:1e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcd1f6b1d8a8212109238e643d74a4559bd495d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:d0:59:87:68:49:a7:ab:79:9a:ca:cb:59: 85:fa:9b:f3:e4:56:27:91:8f:a1:6f:6b:f6:9a:8b: 5d:52:4e:8a:4e:e6:9f:01:c1:51:32:57:d8:d7:1b: 07:86:e9:75:f0:3e:b4:a5:80:22:a8:a3:45:51:f8: ea:f9:7b:5e:87:ee:4c:eb:e8:c9:46:5c:44:21:ad: 76:ff:a8:9a:24:5f:fd:54:d6:97:b5:8b:9c:d2:b7: 62:19:08:78:5c:98:98:26:8f:a8:26:c6:b0:a3:77: 94:10:88:bb:eb:b6:ca:cb:e2:62:f6:42:be:f3:cc: 78:a0:8c:59:ea:7c:82:c1:5a:88:43:3e:33:f9:bf: 2b:1f:09:37:42:31:4e:fd:04:e3:ca:54:3c:dd:f0: 17:04:c1:d7:32:48:9f:ff:92:8f:84:0d:5c:25:7b: b7:ea:d7:f4:dc:f5:4f:f5:14:42:c7:94:8d:40:c9: 74:b1:d9:00:4a:41:fb:78:3c:69:5c:46:d7:22:1e: c2:13:d6:63:d2:1d:87:db:4e:d4:c3:0d:dd:2b:84: a5:55:66:74:cc:05:b4:d0:f1:30:4c:2c:b1:e1:31: 9f:f0:3e:12:5f:07:0c:aa:09:ad:1f:6f:cc:c4:91: 10:a4:d8:a7:28:4c:d2:05:05:15:5d:62:69:e9:36: 33:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D1:F6:B1:D8:A8:21:21:09:23:8E:64:3D:74:A4:55:9B:D4:95:D5 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/3NH2sdioISEJI45kPXSkVZvUldU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.118.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:e2:e0:81:6c:59:1d:6a:33:16:73:dc:ea:52:4c:39:04:6e: 96:92:55:68:c8:8e:4d:c8:0e:67:26:26:59:5c:da:6f:b4:a0: 7f:15:68:73:39:58:ed:06:32:00:70:8f:90:9a:fb:d5:68:e4: 29:6a:47:a8:94:fd:46:25:d2:cf:13:e8:f5:61:53:9b:65:eb: 89:0e:a3:3e:51:f7:b6:94:f4:3b:1a:78:6a:67:3c:14:9d:f9: 3b:1f:63:05:f6:f7:f0:97:ab:d6:2b:35:f8:35:38:4c:c1:8d: 90:c0:e8:22:4a:45:04:aa:36:b6:af:22:7a:9d:7b:06:cc:2e: f2:dd:b1:a3:a1:61:e8:e6:b0:31:d5:f0:7e:b8:69:c7:a4:29: 72:ba:fe:02:3b:97:a3:e2:24:6d:96:b2:dd:90:ec:40:ab:f2: 7f:07:c2:03:db:c9:55:3e:ff:ea:8b:ad:fd:a4:d0:c1:7e:bb: fb:68:61:81:8a:c1:8a:5f:43:8b:97:1c:d0:22:00:ed:ac:d9: 4b:98:40:6f:64:b4:39:6d:88:51:6f:42:de:86:53:3f:7b:11: 0b:d6:b6:2b:8c:7a:70:be:de:51:a6:14:a9:1c:5e:6f:1d:b8: c7:46:61:b5:f1:9f:f3:6d:d2:12:c5:b9:3d:c0:fa:5a:d4:4a: 68:62:c7:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxjaeNrE0ph+89y3rx5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2QxZjZiMWQ4YTgyMTIxMDkyMzhlNjQzZDc0YTQ1NTliZDQ5NWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFDQWYdoSaereZrKy1mF+pvz5FYn kY+hb2v2motdUk6KTuafAcFRMlfY1xsHhul18D60pYAiqKNFUfjq+Xteh+5M6+jJ RlxEIa12/6iaJF/9VNaXtYuc0rdiGQh4XJiYJo+oJsawo3eUEIi767bKy+Ji9kK+ 88x4oIxZ6nyCwVqIQz4z+b8rHwk3QjFO/QTjylQ83fAXBMHXMkif/5KPhA1cJXu3 6tf03PVP9RRCx5SNQMl0sdkASkH7eDxpXEbXIh7CE9Zj0h2H207Uww3dK4SlVWZ0 zAW00PEwTCyx4TGf8D4SXwcMqgmtH2/MxJEQpNinKEzSBQUVXWJp6TYzkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNzR9rHYqCEhCSOOZD10pFWb1JXVMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvM05IMnNkaW9JU0VKSTQ1a1BYU2tWWnZVbGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5J2MA0G CSqGSIb3DQEBCwUAA4IBAQCM4uCBbFkdajMWc9zqUkw5BG6WklVoyI5NyA5nJiZZ XNpvtKB/FWhzOVjtBjIAcI+QmvvVaOQpakeolP1GJdLPE+j1YVObZeuJDqM+Ufe2 lPQ7GnhqZzwUnfk7H2MF9vfwl6vWKzX4NThMwY2QwOgiSkUEqja2ryJ6nXsGzC7y 3bGjoWHo5rAx1fB+uGnHpClyuv4CO5ej4iRtlrLdkOxAq/J/B8ID28lVPv/qi639 pNDBfrv7aGGBisGKX0OLlxzQIgDtrNlLmEBvZLQ5bYhRb0LehlM/exEL1rYrjHpw vt5RphSpHF5vHbjHRmG18Z/zbdISxbk9wPpa1EpoYscB -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:29 2026 by rpki-client