This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/g-Dw0lZsOsb9XuKWb3g0E47UyIs.roa File: g-Dw0lZsOsb9XuKWb3g0E47UyIs.roa (raw, json) Hash identifier: nsgNEhjHAiGOzBMeJvhHNadyfL9YZc5PQ6L4B/Mp7pU= Subject key identifier: 83:E0:F0:D2:56:6C:3A:C6:FD:5E:E2:96:6F:78:34:13:8E:D4:C8:8B Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019B77C71D68077109E0BDED0F97B0ABE7A7 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/g-Dw0lZsOsb9XuKWb3g0E47UyIs.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210926 IP address blocks: 103.27.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1d:68:07:71:09:e0:bd:ed:0f:97:b0:ab:e7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83e0f0d2566c3ac6fd5ee2966f7834138ed4c88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:84:f9:af:6b:ca:30:55:5b:84:ae:8b:6d: a4:db:9e:24:d8:dc:4f:63:38:dc:9a:17:e3:43:0b: de:16:d1:a0:c2:f9:c2:99:a6:37:97:fd:c0:23:8d: ea:6c:ea:1b:14:d8:4d:c1:5e:05:1a:81:52:27:ba: 1c:dd:ea:5a:9e:28:ba:7c:b9:d1:16:03:eb:95:48: 06:57:32:30:76:60:aa:ff:f4:ae:6c:31:fe:cd:df: 91:e1:fb:f4:d6:69:77:48:de:a8:d1:47:3e:55:4e: e7:c0:e2:60:fb:6a:f2:42:b8:17:f4:0a:9f:87:6a: 00:59:bf:7a:cb:35:50:0a:1a:e3:1c:c8:5e:58:c7: d4:54:5d:f6:c1:a0:b1:b3:69:0e:00:a8:9e:4b:57: ac:6e:77:08:f6:a4:b9:b3:bc:bb:fb:71:6c:e6:d8: 1a:5d:cb:6a:1e:ba:83:b8:31:0b:35:e8:dd:05:4f: 62:10:ca:58:38:05:59:a3:aa:51:55:f3:80:cc:ff: 3f:80:24:67:f3:60:4a:9f:5e:f6:78:ff:78:9e:96: f2:cd:dc:68:0e:31:f9:5a:dc:0a:f3:4a:c3:0c:df: c1:2e:1c:a7:51:c8:e5:39:7b:9e:50:95:b3:e4:5a: 65:61:eb:fb:31:41:2b:b0:fa:c6:9b:ee:9b:a6:f3: 16:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E0:F0:D2:56:6C:3A:C6:FD:5E:E2:96:6F:78:34:13:8E:D4:C8:8B X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/g-Dw0lZsOsb9XuKWb3g0E47UyIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.27.159.0/24 Signature Algorithm: sha256WithRSAEncryption 31:7a:12:1a:cb:a2:16:2e:11:c7:10:54:d4:7b:9a:9d:48:bf: d4:a3:17:dc:88:45:e4:b8:bb:d7:ca:c0:7f:33:16:47:c4:21: e2:9e:ec:0f:d4:0d:78:66:0b:7c:37:77:4c:c4:00:b9:8e:bd: 7e:ce:69:5b:7e:87:f3:9c:51:ed:3b:42:50:fd:be:d2:a3:e7: 67:74:80:ad:d7:fd:df:11:fa:8d:0d:a1:69:fa:54:0e:39:17: 32:44:0a:36:83:be:6d:02:98:84:13:ee:6a:47:5b:37:51:48: c8:c1:25:1e:ec:f4:09:d1:8b:c5:8e:f8:49:63:ae:04:ca:54: 9a:97:d8:23:81:99:c1:c4:c8:15:99:1c:db:da:0c:c9:90:3d: 06:77:4b:81:be:65:8c:12:da:d6:26:6a:1a:8f:c2:c9:7e:90: 29:f4:9d:7d:a4:a7:57:28:c4:85:a4:6b:0e:cd:0b:c7:88:b1: c4:36:c4:21:16:e0:cd:8f:94:67:23:0f:c8:7b:52:31:fc:7e: f3:f8:3b:80:31:75:5a:8b:2b:98:fe:ff:2f:d2:ab:d1:4c:31: 5f:a1:77:eb:b5:72:78:e3:18:a7:c8:a7:23:e3:76:cb:cb:f5: 1d:f4:92:8d:a7:c5:80:c2:de:d0:26:f5:74:c6:f6:ba:f8:de: 08:06:6d:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xx1oB3EJ4L3tD5ewq+enMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2UwZjBkMjU2NmMzYWM2ZmQ1ZWUyOTY2Zjc4MzQxMzhlZDRjODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKmE+a9ryjBVW4Sui22k254k2NxP YzjcmhfjQwveFtGgwvnCmaY3l/3AI43qbOobFNhNwV4FGoFSJ7oc3epanii6fLnR FgPrlUgGVzIwdmCq//SubDH+zd+R4fv01ml3SN6o0Uc+VU7nwOJg+2ryQrgX9Aqf h2oAWb96yzVQChrjHMheWMfUVF32waCxs2kOAKieS1esbncI9qS5s7y7+3Fs5tga XctqHrqDuDELNejdBU9iEMpYOAVZo6pRVfOAzP8/gCRn82BKn172eP94npbyzdxo DjH5WtwK80rDDN/BLhynUcjlOXueUJWz5FplYev7MUErsPrGm+6bpvMWaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIPg8NJWbDrG/V7ilm94NBOO1MiLMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvZy1EdzBsWnNPc2I5WHVLV2IzZzBFNDdVeUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxufMA0G CSqGSIb3DQEBCwUAA4IBAQAxehIay6IWLhHHEFTUe5qdSL/UoxfciEXkuLvXysB/ MxZHxCHinuwP1A14Zgt8N3dMxAC5jr1+zmlbfofznFHtO0JQ/b7So+dndICt1/3f EfqNDaFp+lQOORcyRAo2g75tApiEE+5qR1s3UUjIwSUe7PQJ0YvFjvhJY64EylSa l9gjgZnBxMgVmRzb2gzJkD0Gd0uBvmWMEtrWJmoaj8LJfpAp9J19pKdXKMSFpGsO zQvHiLHENsQhFuDNj5RnIw/Ie1Ix/H7z+DuAMXVaiyuY/v8v0qvRTDFfoXfrtXJ4 4xinyKcj43bLy/Ud9JKNp8WAwt7QJvV0xva6+N4IBm2D -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:25 2026 by rpki-client