This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/nyUaCxI_mhIRPBfXAC2R7UepWOc.roa File: nyUaCxI_mhIRPBfXAC2R7UepWOc.roa (raw, json) Hash identifier: BNMy6MFZBy5AjuJVKDOH+Jxe3AlYQ8RZeSw5teIhi8Y= Subject key identifier: 9F:25:1A:0B:12:3F:9A:12:11:3C:17:D7:00:2D:91:ED:47:A9:58:E7 Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Certificate serial: 019AD27DF91B22B1B6A04D07B06B70756F57 Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/nyUaCxI_mhIRPBfXAC2R7UepWOc.roa Signing time: Sun 30 Nov 2025 02:01:02 +0000 ROA not before: Sun 30 Nov 2025 02:01:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50183 IP address blocks: 103.143.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d2:7d:f9:1b:22:b1:b6:a0:4d:07:b0:6b:70:75:6f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Validity Not Before: Nov 30 02:01:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f251a0b123f9a12113c17d7002d91ed47a958e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:0a:19:65:d8:f3:8a:47:62:e5:7f:0d:b0: 86:80:c8:d7:a8:89:f9:75:93:c0:f0:bd:de:f3:d1: a7:43:5f:24:8a:15:09:fd:04:b2:2f:85:57:d6:dc: 7a:15:12:1d:c1:26:0c:d6:d0:d1:51:6b:12:00:f2: 2a:af:a1:a8:e8:cd:f1:2c:09:5b:02:d9:e3:20:d0: 35:a0:47:f3:da:0f:47:69:5c:90:44:ec:ca:94:d2: 52:d4:f1:5c:e9:17:2f:e3:73:a8:f5:ac:4c:a7:34: 44:4a:5b:c6:40:a3:62:82:ba:af:f6:ff:16:09:0a: cb:5e:2c:0d:9c:9e:b2:fa:33:38:42:86:3e:c5:84: d9:e5:10:fc:b1:f5:95:7c:d0:4f:24:8d:18:be:91: 38:42:42:cc:43:5a:fd:70:cf:76:7e:23:c1:a9:b6: ac:2a:29:19:56:63:16:80:38:b1:e0:6b:12:20:a1: 33:f5:f6:1f:1a:33:58:b5:8d:e3:09:5a:61:b8:22: 31:b9:4a:b4:a9:0c:1d:21:d4:8a:5f:4f:56:21:c4: 57:6b:ee:16:d6:c5:28:bd:31:74:9b:f2:b9:70:ee: dd:7c:ee:d3:c3:f4:86:59:36:3c:7b:78:44:97:37: 69:11:fd:2b:24:0f:33:d7:fb:66:f1:8b:8c:cd:b8: bf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:25:1A:0B:12:3F:9A:12:11:3C:17:D7:00:2D:91:ED:47:A9:58:E7 X509v3 Authority Key Identifier: keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/nyUaCxI_mhIRPBfXAC2R7UepWOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.178.0/23 Signature Algorithm: sha256WithRSAEncryption 46:7b:9c:cd:c8:6a:c3:f0:7d:76:96:41:f9:0e:f3:b5:9e:2b: 00:b4:3b:66:52:81:6d:37:f1:6c:c4:4d:31:0b:e5:34:7e:66: 52:e8:04:3c:df:40:90:cf:3e:21:fa:29:ef:d6:48:ee:31:45: b1:29:7b:cb:98:cc:e2:c5:89:63:9e:c2:88:b5:5a:74:f9:64: 6c:66:32:8a:d7:67:0c:a8:b4:6f:e3:fd:29:ba:9c:33:34:f6: 7a:bb:37:d4:39:b2:c5:b4:7a:64:7c:61:e3:da:9a:52:e7:1a: 3e:6c:59:a2:fe:b4:b9:f3:ed:c3:78:34:64:87:bc:30:2a:0c: 1a:33:e2:74:65:89:88:96:0f:43:96:60:82:80:a1:b9:be:b3: 23:a7:08:1b:74:ee:a2:83:d5:c9:1c:db:e6:b8:49:28:f9:80: 1a:0c:50:fc:d0:f6:9f:d8:3a:c3:7c:8b:f4:d6:ba:7f:f8:9c: 6a:d5:16:8e:a4:18:82:26:b0:17:f6:80:5c:c1:d7:87:3d:82: f2:8b:e1:4a:6e:23:32:b6:74:16:79:fa:49:a7:28:7a:0e:b2: d5:a8:a9:81:06:12:4f:c1:77:4c:cf:e4:d5:cf:ff:c1:87:09: 86:08:35:df:e3:d8:b0:0e:c1:4d:f4:6b:47:ac:e9:03:83:54: 44:f7:8b:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrSffkbIrG2oE0HsGtwdW9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWQ0YTMyOTcwMmUyYzk4MzFjZDM2MjYyYmJiN2ZhN2I5 N2RlMzcwHhcNMjUxMTMwMDIwMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjI1MWEwYjEyM2Y5YTEyMTEzYzE3ZDcwMDJkOTFlZDQ3YTk1OGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz0KGWXY84pHYuV/DbCGgMjXqIn5 dZPA8L3e89GnQ18kihUJ/QSyL4VX1tx6FRIdwSYM1tDRUWsSAPIqr6Go6M3xLAlb AtnjINA1oEfz2g9HaVyQROzKlNJS1PFc6Rcv43Oo9axMpzRESlvGQKNigrqv9v8W CQrLXiwNnJ6y+jM4QoY+xYTZ5RD8sfWVfNBPJI0YvpE4QkLMQ1r9cM92fiPBqbas KikZVmMWgDix4GsSIKEz9fYfGjNYtY3jCVphuCIxuUq0qQwdIdSKX09WIcRXa+4W 1sUovTF0m/K5cO7dfO7Tw/SGWTY8e3hElzdpEf0rJA8z1/tm8YuMzbi/IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ8lGgsSP5oSETwX1wAtke1HqVjnMB8GA1UdIwQY MBaAFDpdSjKXAuLJgxzTYmK7t/p7l943MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEt MmNlYThlMTUzNjMyLzEvbnlVYUN4SV9taElSUEJmWEFDMlI3VWVwV09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEtMmNlYThlMTUzNjMy LzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4+yMA0G CSqGSIb3DQEBCwUAA4IBAQBGe5zNyGrD8H12lkH5DvO1nisAtDtmUoFtN/FsxE0x C+U0fmZS6AQ830CQzz4h+inv1kjuMUWxKXvLmMzixYljnsKItVp0+WRsZjKK12cM qLRv4/0pupwzNPZ6uzfUObLFtHpkfGHj2ppS5xo+bFmi/rS58+3DeDRkh7wwKgwa M+J0ZYmIlg9DlmCCgKG5vrMjpwgbdO6ig9XJHNvmuEko+YAaDFD80Paf2DrDfIv0 1rp/+Jxq1RaOpBiCJrAX9oBcwdeHPYLyi+FKbiMytnQWefpJpyh6DrLVqKmBBhJP wXdMz+TVz//BhwmGCDXf49iwDsFN9GtHrOkDg1RE94tj -----END CERTIFICATE-----Generated at Fri Dec 5 20:48:18 2025 by rpki-client