This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/PIPf2jUefSz2ZFBXKna-6VzqQZ4.roa File: PIPf2jUefSz2ZFBXKna-6VzqQZ4.roa (raw, json) Hash identifier: o/bRmUIqx18lwwP9fu4h2MQE0btvhHW7pc9iZu6+fKY= Subject key identifier: 3C:83:DF:DA:35:1E:7D:2C:F6:64:50:57:2A:76:BE:E9:5C:EA:41:9E Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019ACC1D5F94C14F35C4306F9E4BC2E71173 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/PIPf2jUefSz2ZFBXKna-6VzqQZ4.roa Signing time: Fri 28 Nov 2025 20:17:48 +0000 ROA not before: Fri 28 Nov 2025 20:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44486 IP address blocks: 103.27.156.0/24 maxlen: 24 103.31.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:1d:5f:94:c1:4f:35:c4:30:6f:9e:4b:c2:e7:11:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Nov 28 20:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3c83dfda351e7d2cf66450572a76bee95cea419e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4b:04:8b:22:8b:c2:1a:d2:1f:38:2b:66:a9: 0a:04:d5:89:0e:ac:9f:2d:62:be:95:3c:f7:c6:f4: e7:96:3f:21:a8:3a:c7:38:8a:64:3f:7f:0f:51:21: ac:10:0f:8a:cb:e4:cb:0a:53:db:82:30:dd:55:17: 9f:85:91:1f:d5:01:1e:55:67:11:5e:c3:dd:85:bc: 2d:44:e3:ef:9e:fd:40:76:fc:3b:80:75:3d:96:c1: cb:b3:a9:29:2d:3e:34:7c:3e:57:35:17:38:0d:f0: 60:cb:b5:10:7a:62:c7:c3:f2:ef:c1:e6:6b:41:18: 44:95:7e:cd:59:74:73:50:92:ca:22:55:bf:8f:f6: d2:52:66:1f:5d:e6:97:bd:1e:25:11:a1:31:f7:83: f9:65:02:a7:8c:68:b0:ee:2c:32:6d:c4:81:6c:50: 1a:24:94:5f:e0:0a:65:10:69:79:9b:67:6d:79:72: 08:66:ce:0e:17:d8:d1:87:7a:54:f5:4c:b2:00:d6: a4:4a:7d:b9:90:8c:0e:6a:47:d6:74:63:9d:d4:51: f6:c2:6a:6f:ef:2e:59:41:f7:24:2a:01:00:7e:3d: b6:89:ff:4e:2d:f7:36:33:cb:7b:a1:73:ce:7c:86: 7e:0a:c3:f9:49:4c:18:ca:3b:f7:e1:e5:2c:20:2a: 51:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:83:DF:DA:35:1E:7D:2C:F6:64:50:57:2A:76:BE:E9:5C:EA:41:9E X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/PIPf2jUefSz2ZFBXKna-6VzqQZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.27.156.0/24 103.31.76.0/24 Signature Algorithm: sha256WithRSAEncryption aa:e1:ca:c2:c3:f3:cb:a0:2c:b2:d1:a6:57:be:4b:45:6b:8c: c2:57:84:56:4a:b4:87:90:a8:9f:89:a3:74:be:d6:51:5f:4a: 65:14:6b:83:c0:9d:79:ba:d1:a8:89:1e:df:08:36:f2:f7:6e: cf:69:6c:4b:73:a8:62:bb:b9:30:06:e5:87:4a:f1:e7:58:fc: f3:6d:5f:27:c3:87:1c:b6:df:f7:16:ae:5d:86:f6:0b:56:e9: a2:28:bc:ff:ab:ff:d8:75:ac:f6:f5:e8:09:4e:96:83:f5:da: 78:5c:a9:25:de:58:0f:3e:1e:ce:a9:9c:8f:d4:d6:7e:02:f6: c1:62:b2:29:fd:58:ba:34:b4:fa:cd:1f:f6:7b:ab:bf:4e:21: 2d:15:39:38:b6:a7:59:b7:3b:75:90:05:d0:fc:56:24:2f:fe: 0f:81:90:59:73:c1:50:51:ef:34:fd:6d:61:fb:17:08:06:aa: 54:89:3c:86:0b:e2:2c:0e:cb:64:53:18:32:4f:a6:99:c5:b7: 4f:cb:14:64:29:f7:0f:d9:66:1a:13:30:5a:6e:28:da:07:df: 20:63:77:0f:86:b3:a6:4c:01:d1:c9:8c:0e:e4:c6:80:02:8c: d4:a2:43:dc:22:96:6a:35:c8:7c:de:00:36:55:08:f1:54:9c: f9:c1:ac:74 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrMHV+UwU81xDBvnkvC5xFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUxMTI4MjAxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzgzZGZkYTM1MWU3ZDJjZjY2NDUwNTcyYTc2YmVlOTVjZWE0MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUsEiyKLwhrSHzgrZqkKBNWJDqyf LWK+lTz3xvTnlj8hqDrHOIpkP38PUSGsEA+Ky+TLClPbgjDdVRefhZEf1QEeVWcR XsPdhbwtROPvnv1Advw7gHU9lsHLs6kpLT40fD5XNRc4DfBgy7UQemLHw/LvweZr QRhElX7NWXRzUJLKIlW/j/bSUmYfXeaXvR4lEaEx94P5ZQKnjGiw7iwybcSBbFAa JJRf4AplEGl5m2dteXIIZs4OF9jRh3pU9UyyANakSn25kIwOakfWdGOd1FH2wmpv 7y5ZQfckKgEAfj22if9OLfc2M8t7oXPOfIZ+CsP5SUwYyjv34eUsICpR3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDyD39o1Hn0s9mRQVyp2vulc6kGeMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvUElQZjJqVWVmU3oyWkZCWEtuYS02VnpxUVo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZxucAwQA Zx9MMA0GCSqGSIb3DQEBCwUAA4IBAQCq4crCw/PLoCyy0aZXvktFa4zCV4RWSrSH kKifiaN0vtZRX0plFGuDwJ15utGoiR7fCDby927PaWxLc6hiu7kwBuWHSvHnWPzz bV8nw4cctt/3Fq5dhvYLVumiKLz/q//Ydaz29egJTpaD9dp4XKkl3lgPPh7OqZyP 1NZ+AvbBYrIp/Vi6NLT6zR/2e6u/TiEtFTk4tqdZtzt1kAXQ/FYkL/4PgZBZc8FQ Ue80/W1h+xcIBqpUiTyGC+IsDstkUxgyT6aZxbdPyxRkKfcP2WYaEzBabijaB98g Y3cPhrOmTAHRyYwO5MaAAozUokPcIpZqNch83gA2VQjxVJz5wax0 -----END CERTIFICATE-----Generated at Fri Nov 28 22:19:29 2025 by rpki-client