This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/p2AzkUO3C5oqCv2QoRULXeAoSyo.roa File: p2AzkUO3C5oqCv2QoRULXeAoSyo.roa (raw, json) Hash identifier: or4NBV5xd/f5gW+2LqO0MPaz/eInyJCvbrkcc5Z8u5Q= Subject key identifier: A7:60:33:91:43:B7:0B:9A:2A:0A:FD:90:A1:15:0B:5D:E0:28:4B:2A Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC8501B77B76D05364726FE7168DF51 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/p2AzkUO3C5oqCv2QoRULXeAoSyo.roa Signing time: Thu 01 Jan 2026 18:18:26 +0000 ROA not before: Thu 01 Jan 2026 18:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20648 IP address blocks: 103.63.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:50:1b:77:b7:6d:05:36:47:26:fe:71:68:df:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a760339143b70b9a2a0afd90a1150b5de0284b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:c5:63:f9:61:92:aa:e7:bc:86:f2:54:44: 4f:45:94:91:21:20:bb:ff:b6:ea:43:22:35:6a:c4: d0:3f:e4:c2:d0:9b:7c:ab:f9:c2:63:58:7d:67:ae: 86:48:3b:27:06:0a:b5:0f:85:db:ad:4a:e8:c0:85: 16:6e:8b:62:1b:11:21:b8:e3:d0:c1:ad:af:39:b2: 80:d7:38:0e:c6:46:b4:f3:6d:f9:50:6e:8c:7a:d3: 6c:ce:fe:9a:6e:1d:6c:51:83:a7:7f:e1:c4:c1:aa: 5b:a5:00:fa:98:63:21:a0:66:7d:f2:fa:1e:de:c8: d5:5e:77:99:a7:cb:14:2d:6f:76:d9:b6:af:c7:b6: 98:4d:44:8d:60:d8:5c:39:56:e6:bb:64:44:55:a9: 00:83:2b:52:3f:69:82:26:66:e4:b0:a9:83:2e:08: 22:ca:8f:64:84:48:88:2f:73:85:73:67:3f:1e:a4: 4a:1a:75:a2:66:82:62:a2:8a:b1:d2:28:0b:6b:d8: ec:08:ea:1c:a6:cf:e8:e2:dd:c3:62:b0:98:a8:d0: 46:73:ec:42:d9:e1:85:40:ae:a2:52:31:4b:f5:dd: 14:c9:23:59:13:b8:f6:91:14:7d:8f:55:cb:42:8a: a3:cc:6a:fb:12:c4:7c:08:ec:77:d8:33:89:34:79: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:60:33:91:43:B7:0B:9A:2A:0A:FD:90:A1:15:0B:5D:E0:28:4B:2A X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/p2AzkUO3C5oqCv2QoRULXeAoSyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.63.31.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:51:8f:45:e4:14:64:12:4f:8a:42:bb:fc:0f:a2:f4:45:d3: b5:76:94:62:6d:3a:ef:c9:ea:15:6f:eb:2f:04:03:89:3d:45: cc:0f:1a:fb:78:ec:19:01:c4:22:7c:e0:8e:af:f4:72:8c:16: 5e:26:e5:b8:fe:93:55:b7:00:6c:a7:ae:f7:e6:a6:1f:bc:46: 3c:ba:2f:b5:cc:c3:44:cb:34:e5:68:fa:51:b4:61:e9:38:44: c1:c8:d8:c0:70:8c:74:c9:e3:d4:35:93:c6:3b:db:7c:dd:02: d3:74:06:cf:1e:11:a9:05:a7:62:b9:62:c8:8c:18:d0:62:aa: 85:71:6e:0c:b0:9c:69:84:7c:48:f2:bb:54:05:56:6c:b8:26: b8:d4:d6:2e:57:ff:78:18:df:b0:1c:ba:fe:3d:62:48:c1:b7: 73:64:93:b9:0e:20:d3:78:22:bf:0b:0a:4c:92:0f:4a:3a:6e: 04:c9:e5:e6:6e:b5:0b:b3:1c:ef:77:91:63:09:9d:65:74:4d: 02:4b:16:b2:c3:70:a6:6d:78:ee:80:6e:96:d1:a0:c5:89:38: f9:b3:c7:fd:1c:50:28:cf:8f:14:bc:fb:91:13:dc:26:80:f4: 15:62:1d:16:49:4d:60:54:bc:91:b8:ff:a5:20:09:64:a6:1f: 43:36:70:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFAbd7dtBTZHJv5xaN9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzYwMzM5MTQzYjcwYjlhMmEwYWZkOTBhMTE1MGI1ZGUwMjg0YjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQzFY/lhkqrnvIbyVERPRZSRISC7 /7bqQyI1asTQP+TC0Jt8q/nCY1h9Z66GSDsnBgq1D4XbrUrowIUWbotiGxEhuOPQ wa2vObKA1zgOxka08235UG6MetNszv6abh1sUYOnf+HEwapbpQD6mGMhoGZ98voe 3sjVXneZp8sULW922bavx7aYTUSNYNhcOVbmu2REVakAgytSP2mCJmbksKmDLggi yo9khEiIL3OFc2c/HqRKGnWiZoJiooqx0igLa9jsCOocps/o4t3DYrCYqNBGc+xC 2eGFQK6iUjFL9d0UySNZE7j2kRR9j1XLQoqjzGr7EsR8COx32DOJNHk2UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdgM5FDtwuaKgr9kKEVC13gKEsqMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvcDJBemtVTzNDNW9xQ3YyUW9SVUxYZUFvU3lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZz8fMA0G CSqGSIb3DQEBCwUAA4IBAQA/UY9F5BRkEk+KQrv8D6L0RdO1dpRibTrvyeoVb+sv BAOJPUXMDxr7eOwZAcQifOCOr/RyjBZeJuW4/pNVtwBsp6735qYfvEY8ui+1zMNE yzTlaPpRtGHpOETByNjAcIx0yePUNZPGO9t83QLTdAbPHhGpBadiuWLIjBjQYqqF cW4MsJxphHxI8rtUBVZsuCa41NYuV/94GN+wHLr+PWJIwbdzZJO5DiDTeCK/CwpM kg9KOm4EyeXmbrULsxzvd5FjCZ1ldE0CSxayw3CmbXjugG6W0aDFiTj5s8f9HFAo z48UvPuRE9wmgPQVYh0WSU1gVLyRuP+lIAlkph9DNnC4 -----END CERTIFICATE-----Generated at Thu Jan 8 08:55:11 2026 by rpki-client