This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/RNm4M6_G_9bDqlzkkkMwOJsXxLY.roa File: RNm4M6_G_9bDqlzkkkMwOJsXxLY.roa (raw, json) Hash identifier: lqA/RuUKuPMddo9q5IetsxxRlSYvHTaYbQoeU6IOKZM= Subject key identifier: 44:D9:B8:33:AF:C6:FF:D6:C3:AA:5C:E4:92:43:30:38:9B:17:C4:B6 Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e Certificate serial: 019B76EAFAB356EEA00754498A8543E0590A Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/RNm4M6_G_9bDqlzkkkMwOJsXxLY.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216053 IP address blocks: 202.37.103.0/24 maxlen: 24 203.21.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fa:b3:56:ee:a0:07:54:49:8a:85:43:e0:59:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44d9b833afc6ffd6c3aa5ce4924330389b17c4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ad:ae:e6:75:6d:93:fe:da:c0:a8:dc:bc:de: 03:f5:10:6d:a9:8e:fe:89:ac:2f:76:8f:26:46:4a: e4:e4:5c:82:8e:80:34:72:21:71:98:45:17:1d:b5: fa:3f:2f:df:e7:f3:57:a8:27:9f:ea:df:ac:5a:cf: d3:dc:68:7d:04:42:b6:1f:ab:81:3d:3d:f3:df:b0: 3f:06:63:75:b5:80:6e:11:db:bb:06:f1:92:fb:46: b8:16:d5:f3:92:f0:dd:1b:fe:ef:bf:38:b2:3a:88: 2b:13:d9:22:42:8d:33:15:e0:a1:ae:dc:70:53:6a: 53:a6:1b:5c:29:9c:37:a9:1c:24:97:66:dd:1e:5d: 25:1f:1f:d6:73:22:a8:99:19:68:d0:6e:f5:25:3d: e2:67:68:c9:b3:3e:46:5d:c4:26:8e:51:d9:79:ef: 1e:68:41:59:36:08:42:31:40:85:21:e4:3b:52:88: b7:20:2e:8c:b2:61:46:90:02:6f:e2:9b:18:ad:47: db:1a:97:7f:ed:a3:2e:ed:e4:6f:36:5c:50:33:df: 97:cd:cc:7f:fe:09:3a:68:19:b3:b4:0e:1d:3a:54: 32:4c:34:1c:41:6c:ba:8a:ce:ae:53:a4:40:95:a7: 7a:2a:1e:fd:23:86:34:9d:e3:32:8e:19:6f:29:fd: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D9:B8:33:AF:C6:FF:D6:C3:AA:5C:E4:92:43:30:38:9B:17:C4:B6 X509v3 Authority Key Identifier: keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/RNm4M6_G_9bDqlzkkkMwOJsXxLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.37.103.0/24 203.21.4.0/24 Signature Algorithm: sha256WithRSAEncryption 45:b5:ad:c9:15:0b:f5:ea:6b:7d:2f:85:a1:6f:9b:0a:a2:ca: 02:ec:b8:71:34:ae:27:6f:62:cb:81:2e:38:f0:c6:4e:f8:a7: a8:4b:1c:2c:93:14:02:90:66:61:4c:49:7e:07:ee:92:03:a6: 8b:32:35:2c:9a:52:78:b0:16:8f:f7:7c:2d:fd:e1:97:13:43: 25:f0:7b:11:78:15:62:bd:98:79:e8:23:43:55:43:e7:b1:4b: 5a:ac:6a:a4:e8:91:04:a4:29:4b:d8:00:4a:81:92:1f:27:fb: 65:8e:1a:8f:e4:d7:13:e9:38:8a:5f:b8:08:4c:64:59:f3:4d: 65:5e:ae:15:1a:34:46:d3:22:8e:44:26:48:53:da:58:8c:1a: a4:50:5c:d2:5b:22:c1:2f:ab:e2:63:b2:ef:84:dd:b5:4d:91: ce:23:61:b7:8e:38:d7:c9:58:f8:95:58:00:39:0f:2f:84:12: e2:19:cc:15:57:5b:ac:03:2c:d6:a2:10:43:ae:f9:b6:a3:3e: 11:47:91:d9:a5:e8:ec:94:2c:2c:42:a3:c3:5c:14:e0:d1:8a: a8:bd:ef:a7:4e:82:f9:35:e2:f8:99:fc:33:db:2b:75:8e:ad: 25:98:90:ca:21:a4:76:9b:d5:f6:02:65:b3:ae:a3:29:4c:f8: 6a:09:24:3d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26vqzVu6gB1RJioVD4FkKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNWExMDkzMzZkZTg5NzEyZTI0OWM5ODQ2YzlkYmIxYjNj OThjN2UwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGQ5YjgzM2FmYzZmZmQ2YzNhYTVjZTQ5MjQzMzAzODliMTdjNGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl62u5nVtk/7awKjcvN4D9RBtqY7+ iawvdo8mRkrk5FyCjoA0ciFxmEUXHbX6Py/f5/NXqCef6t+sWs/T3Gh9BEK2H6uB PT3z37A/BmN1tYBuEdu7BvGS+0a4FtXzkvDdG/7vvziyOogrE9kiQo0zFeChrtxw U2pTphtcKZw3qRwkl2bdHl0lHx/WcyKomRlo0G71JT3iZ2jJsz5GXcQmjlHZee8e aEFZNghCMUCFIeQ7Uoi3IC6MsmFGkAJv4psYrUfbGpd/7aMu7eRvNlxQM9+Xzcx/ /gk6aBmztA4dOlQyTDQcQWy6is6uU6RAlad6Kh79I4Y0neMyjhlvKf3UlQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFETZuDOvxv/Ww6pc5JJDMDibF8S2MB8GA1UdIwQY MBaAFJBaEJM23olxLiScmEbJ27GzyYx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYt YjI0OGNmYTk2YTY5LzEvUk5tNE02X0dfOWJEcWx6a2trTXdPSnNYeExZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYtYjI0OGNmYTk2YTY5 LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAyiVnAwQA yxUEMA0GCSqGSIb3DQEBCwUAA4IBAQBFta3JFQv16mt9L4Whb5sKosoC7LhxNK4n b2LLgS448MZO+KeoSxwskxQCkGZhTEl+B+6SA6aLMjUsmlJ4sBaP93wt/eGXE0Ml 8HsReBVivZh56CNDVUPnsUtarGqk6JEEpClL2ABKgZIfJ/tljhqP5NcT6TiKX7gI TGRZ801lXq4VGjRG0yKORCZIU9pYjBqkUFzSWyLBL6viY7LvhN21TZHOI2G3jjjX yVj4lVgAOQ8vhBLiGcwVV1usAyzWohBDrvm2oz4RR5HZpejslCwsQqPDXBTg0Yqo ve+nToL5NeL4mfwz2yt1jq0lmJDKIaR2m9X2AmWzrqMpTPhqCSQ9 -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:01 2026 by rpki-client