This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/8SAtM8IMR2YkrpygIGIpM4TdRCA.roa File: 8SAtM8IMR2YkrpygIGIpM4TdRCA.roa (raw, json) Hash identifier: paNW3tKH+SaFHT3KIqEpy4lTXiy0sBoaMdBNqSt4tE8= Subject key identifier: F1:20:2D:33:C2:0C:47:66:24:AE:9C:A0:20:62:29:33:84:DD:44:20 Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019B77C71894AA81FC2441EEAA164E18AA5A Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/8SAtM8IMR2YkrpygIGIpM4TdRCA.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 103.31.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:18:94:aa:81:fc:24:41:ee:aa:16:4e:18:aa:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1202d33c20c476624ae9ca02062293384dd4420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:af:7d:4a:4b:dc:67:ee:0e:ef:ba:71:bb: 27:5d:92:c3:fc:67:4e:f9:96:d1:86:99:07:11:3c: bd:40:ce:77:78:9e:54:31:6a:ea:24:f7:b6:13:00: ed:b5:22:32:33:d8:14:91:a9:6a:34:f3:f9:53:73: 29:8c:ee:9a:a8:2d:0d:63:c4:c8:3c:40:a9:9c:ca: 62:fe:84:e5:09:f5:87:0b:67:85:16:65:4c:ed:c4: 7f:66:d9:00:9e:21:a9:84:18:5d:0e:1c:b8:9a:bf: b2:50:16:5c:89:3a:47:14:f4:4f:3c:a2:69:79:3f: 26:a9:3e:6a:eb:83:b8:81:94:fb:d9:6c:46:30:4a: 83:e3:4c:76:e2:82:41:6b:a7:e6:1d:35:21:a1:f7: 63:43:1d:ff:82:f1:d3:1b:01:f7:98:58:0c:d8:9f: b6:ae:02:9b:df:d6:a4:85:89:a9:2e:38:ca:18:d0: ab:1b:cc:2d:1f:f1:73:98:e4:a0:b4:e5:9b:3f:5f: e3:59:60:00:a9:70:db:25:1a:45:03:a1:4c:f1:44: d6:fa:85:8d:da:49:39:d7:ee:94:2e:c9:a1:57:b6: 8a:48:c4:47:f0:81:45:5d:f0:22:4e:f1:5a:02:fb: 86:c2:26:d0:f8:4a:99:ba:dc:9c:dd:1c:f7:01:ed: 4e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:20:2D:33:C2:0C:47:66:24:AE:9C:A0:20:62:29:33:84:DD:44:20 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/8SAtM8IMR2YkrpygIGIpM4TdRCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.79.0/24 Signature Algorithm: sha256WithRSAEncryption c4:76:6b:b9:df:c5:85:56:30:ab:4f:78:a5:3a:a7:43:be:b5: 4f:79:60:26:a0:50:2f:58:80:4c:ff:46:d5:f4:ca:77:ce:e1: b5:aa:79:8f:53:4e:00:81:03:c0:e1:18:f2:a1:29:62:b3:87: 8b:0f:21:8c:cb:83:ec:ae:f2:25:93:01:d2:34:11:84:81:2a: 75:c2:95:f2:63:80:2e:9d:78:be:5f:84:65:e1:1c:59:47:c0: 68:eb:f1:20:4e:a8:c5:91:d8:92:c5:57:43:a4:74:b7:50:a2: 72:61:c7:6e:92:09:d5:ed:3c:8a:2a:9b:d4:26:48:08:03:4f: 9f:1a:89:5f:c6:cc:e7:e7:49:22:ac:74:ad:67:73:75:8d:41: 9f:19:33:94:c6:91:f1:ec:7e:31:b2:af:9c:47:9c:e9:e7:62: 99:9f:00:7e:bb:85:94:44:6c:8c:28:9b:4a:24:9c:c7:5c:76: fd:d1:d6:76:79:6e:ea:65:0d:5c:5a:4a:e7:c5:c4:f2:6d:ef: 4d:1a:c4:41:d5:6b:e4:9d:80:25:1e:af:00:7a:2e:b3:52:8e: e9:b7:e1:d2:7e:36:d5:a4:4d:dd:ad:8b:53:66:78:77:8f:a8: f7:ae:63:97:af:c9:ee:c3:85:7c:f9:16:dd:ad:9a:34:7e:6f: a5:fd:95:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxiUqoH8JEHuqhZOGKpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTIwMmQzM2MyMGM0NzY2MjRhZTljYTAyMDYyMjkzMzg0ZGQ0NDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujyvfUpL3GfuDu+6cbsnXZLD/GdO +ZbRhpkHETy9QM53eJ5UMWrqJPe2EwDttSIyM9gUkalqNPP5U3MpjO6aqC0NY8TI PECpnMpi/oTlCfWHC2eFFmVM7cR/ZtkAniGphBhdDhy4mr+yUBZciTpHFPRPPKJp eT8mqT5q64O4gZT72WxGMEqD40x24oJBa6fmHTUhofdjQx3/gvHTGwH3mFgM2J+2 rgKb39akhYmpLjjKGNCrG8wtH/FzmOSgtOWbP1/jWWAAqXDbJRpFA6FM8UTW+oWN 2kk51+6ULsmhV7aKSMRH8IFFXfAiTvFaAvuGwibQ+EqZutyc3Rz3Ae1OLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPEgLTPCDEdmJK6coCBiKTOE3UQgMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvOFNBdE04SU1SMllrcnB5Z0lHSXBNNFRkUkNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx9PMA0G CSqGSIb3DQEBCwUAA4IBAQDEdmu538WFVjCrT3ilOqdDvrVPeWAmoFAvWIBM/0bV 9Mp3zuG1qnmPU04AgQPA4RjyoSlis4eLDyGMy4PsrvIlkwHSNBGEgSp1wpXyY4Au nXi+X4Rl4RxZR8Bo6/EgTqjFkdiSxVdDpHS3UKJyYcdukgnV7TyKKpvUJkgIA0+f Golfxszn50kirHStZ3N1jUGfGTOUxpHx7H4xsq+cR5zp52KZnwB+u4WURGyMKJtK JJzHXHb90dZ2eW7qZQ1cWkrnxcTybe9NGsRB1WvknYAlHq8Aei6zUo7pt+HSfjbV pE3drYtTZnh3j6j3rmOXr8nuw4V8+RbdrZo0fm+l/ZWt -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:18 2026 by rpki-client