This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/dlS92to4A9f1S912SRzTLHEbE0A.roa File: dlS92to4A9f1S912SRzTLHEbE0A.roa (raw, json) Hash identifier: OW3lsvHVvV3otwUqyxdsIOlk7EGfRauMAO6mtR1SKds= Subject key identifier: 76:54:BD:DA:DA:38:03:D7:F5:4B:DD:76:49:1C:D3:2C:71:1B:13:40 Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019B77C71CCE2724C1CB88E2CA29E6CD3644 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/dlS92to4A9f1S912SRzTLHEbE0A.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63801 IP address blocks: 103.31.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1c:ce:27:24:c1:cb:88:e2:ca:29:e6:cd:36:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7654bddada3803d7f54bdd76491cd32c711b1340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:a2:41:93:7c:d4:42:35:6f:8c:19:cc:ab: 4e:31:46:8d:00:60:2d:33:8d:a2:32:59:41:65:8b: 8f:35:67:dd:96:05:96:ab:2d:0c:cd:59:9f:7e:23: 66:dc:12:76:ed:19:73:f4:8f:6a:43:2b:48:0b:44: a2:b0:28:cf:bf:c1:05:27:57:5f:57:6b:f1:88:a3: a8:d3:c8:78:6c:5b:5e:61:c5:42:fe:57:69:e0:75: e9:34:bf:df:5e:75:32:7f:7d:12:a4:de:a0:e5:90: 88:2a:52:e3:a8:e6:8b:c8:2a:ac:af:2e:40:aa:2d: 6c:cb:9c:42:9b:04:d2:97:d0:e2:09:3d:76:40:15: 62:51:b0:59:c9:77:59:88:77:75:01:2f:31:08:99: d4:8b:7b:b0:f7:a6:9a:23:6b:1f:39:f6:03:55:57: 4c:82:76:fb:40:aa:31:a3:21:49:06:92:3f:42:da: 55:19:1d:a0:db:6d:7b:ed:89:18:67:c2:d5:d7:26: cf:50:2a:28:9d:fe:ce:90:03:c9:d1:13:00:7a:c1: 52:fe:12:33:7d:6b:dc:02:d9:61:74:7c:2b:7d:dc: 1c:ff:66:f8:b6:75:9e:91:d6:8d:56:6e:8b:d4:78: 90:cd:42:5c:4f:15:d1:6c:75:c3:55:23:ac:db:fb: 81:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:54:BD:DA:DA:38:03:D7:F5:4B:DD:76:49:1C:D3:2C:71:1B:13:40 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/dlS92to4A9f1S912SRzTLHEbE0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.77.0/24 Signature Algorithm: sha256WithRSAEncryption 04:b9:37:a6:d6:d5:2c:8c:27:96:1d:e7:ca:57:d0:f9:de:a5: 42:b9:7a:2f:77:eb:76:ba:d6:05:f5:74:a0:61:ba:b0:d0:ab: 3a:00:bf:6c:d2:f3:4e:9d:bd:54:01:37:21:45:f7:94:e4:a7: 2e:d1:f5:62:0c:66:29:74:93:ca:93:75:b3:4a:75:d9:f1:40: 7e:cb:a9:87:28:4e:6f:fb:44:7d:9f:a2:5f:ab:8a:31:ac:bc: 09:b9:79:4a:66:8b:4d:19:4b:9b:bc:58:3d:5f:83:e4:2d:b4: 2f:ed:8c:8f:d5:55:cc:8b:95:5b:2e:f5:c7:d3:b9:f4:05:98: 7a:5f:3c:d9:82:82:a8:e7:70:bf:f6:70:5c:04:5e:b2:91:0d: b6:a7:87:34:b0:e3:eb:6f:1e:a0:8f:08:f5:99:5c:98:b1:5d: 28:f5:1c:e6:b3:48:a7:74:15:8a:9e:3c:4c:06:5b:cc:d5:60: 12:43:36:96:0b:2d:e6:07:f0:a8:d2:92:42:d3:8e:c5:37:96: 93:93:8d:13:00:79:e2:14:5d:c6:af:54:ec:1b:e1:d6:ee:e0: 5f:8f:d9:08:d1:d1:e5:b7:23:a9:b1:06:59:d4:1b:1e:77:38: 2b:84:d4:64:5a:bb:53:dd:ef:18:ae:df:8e:f2:dc:51:74:c1: 2b:bd:c7:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxzOJyTBy4jiyinmzTZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjU0YmRkYWRhMzgwM2Q3ZjU0YmRkNzY0OTFjZDMyYzcxMWIxMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopqiQZN81EI1b4wZzKtOMUaNAGAt M42iMllBZYuPNWfdlgWWqy0MzVmffiNm3BJ27Rlz9I9qQytIC0SisCjPv8EFJ1df V2vxiKOo08h4bFteYcVC/ldp4HXpNL/fXnUyf30SpN6g5ZCIKlLjqOaLyCqsry5A qi1sy5xCmwTSl9DiCT12QBViUbBZyXdZiHd1AS8xCJnUi3uw96aaI2sfOfYDVVdM gnb7QKoxoyFJBpI/QtpVGR2g22177YkYZ8LV1ybPUCoonf7OkAPJ0RMAesFS/hIz fWvcAtlhdHwrfdwc/2b4tnWekdaNVm6L1HiQzUJcTxXRbHXDVSOs2/uBuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHZUvdraOAPX9Uvddkkc0yxxGxNAMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvZGxTOTJ0bzRBOWYxUzkxMlNSelRMSEViRTBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx9NMA0G CSqGSIb3DQEBCwUAA4IBAQAEuTem1tUsjCeWHefKV9D53qVCuXovd+t2utYF9XSg Ybqw0Ks6AL9s0vNOnb1UATchRfeU5Kcu0fViDGYpdJPKk3WzSnXZ8UB+y6mHKE5v +0R9n6Jfq4oxrLwJuXlKZotNGUubvFg9X4PkLbQv7YyP1VXMi5VbLvXH07n0BZh6 XzzZgoKo53C/9nBcBF6ykQ22p4c0sOPrbx6gjwj1mVyYsV0o9Rzms0indBWKnjxM BlvM1WASQzaWCy3mB/Co0pJC047FN5aTk40TAHniFF3Gr1TsG+HW7uBfj9kI0dHl tyOpsQZZ1BsedzgrhNRkWrtT3e8Yrt+O8txRdMErvcc2 -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:00 2026 by rpki-client