This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tE4X7jqrwznYCanL6cT-ETlRyec.roa File: tE4X7jqrwznYCanL6cT-ETlRyec.roa (raw, json) Hash identifier: Dm0bv9ETncJx1442UXTj7QJfg1XrijDGfnw1Q6naiMY= Subject key identifier: B4:4E:17:EE:3A:AB:C3:39:D8:09:A9:CB:E9:C4:FE:11:39:51:C9:E7 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC85BA17A1D715ADBCF42BFF7F2EDC3 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tE4X7jqrwznYCanL6cT-ETlRyec.roa Signing time: Thu 01 Jan 2026 18:18:29 +0000 ROA not before: Thu 01 Jan 2026 18:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 103.47.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5b:a1:7a:1d:71:5a:db:cf:42:bf:f7:f2:ed:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b44e17ee3aabc339d809a9cbe9c4fe113951c9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:96:cb:d3:da:a6:b5:a7:c4:c8:71:ab:75:46: 8a:3f:f5:28:7d:9d:f7:31:5a:aa:0a:3f:35:02:ae: 78:5f:3b:fd:9f:a1:92:62:0c:6c:a8:02:dd:87:ef: 00:c9:23:b9:df:ee:be:4a:dd:3d:6c:67:3c:13:21: 4f:84:63:34:49:fa:ff:32:1b:f3:e9:b9:6b:80:c8: 16:f9:57:91:64:6d:1d:53:fd:04:ca:09:c1:a6:31: 15:f0:28:13:d3:40:27:79:1c:94:50:46:86:e2:ad: 4d:e3:7a:fd:38:57:e5:2e:2f:93:39:1b:43:4c:79: f9:0d:66:ff:b7:c9:27:9f:7d:41:54:35:3e:1d:c7: ab:42:78:75:a3:f7:31:b4:4b:fd:d7:90:13:2d:5e: 89:0b:c3:d3:fa:b0:75:73:c2:14:62:64:6e:60:18: 08:85:80:7b:8f:86:5f:71:f9:18:c0:ba:9d:52:25: bc:b3:01:4f:89:ec:fe:d0:e6:a1:d3:4b:42:44:3c: 47:fb:82:b3:a7:81:c3:ee:b4:1e:4f:05:d5:11:df: d3:41:cc:65:93:85:51:7d:e9:16:ba:a9:85:55:4e: a3:65:f0:14:80:e9:43:0d:f2:6c:b7:6b:50:48:ec: 34:c6:f2:27:f3:33:54:1a:a9:61:5e:89:4b:40:a7: 0b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4E:17:EE:3A:AB:C3:39:D8:09:A9:CB:E9:C4:FE:11:39:51:C9:E7 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tE4X7jqrwznYCanL6cT-ETlRyec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.47.57.0/24 Signature Algorithm: sha256WithRSAEncryption cd:2c:95:b3:17:1c:d1:ce:e9:99:94:dd:33:b3:d9:8a:35:a1: 48:12:8a:3c:a6:ff:76:58:b4:75:f2:e9:74:43:c0:b5:55:66: d9:eb:1d:37:83:e2:50:56:a3:a4:ec:68:06:8f:f7:9c:a0:2d: 59:d4:af:03:03:11:73:6c:aa:5f:d7:98:dc:07:1c:28:88:f7: d8:01:a5:08:a3:dd:db:22:c7:dd:a1:e1:00:a6:af:17:ab:a5: 5f:5c:71:b4:6d:b5:77:de:09:04:fe:64:b4:4b:56:18:08:30: 1e:37:60:88:9c:6e:0d:99:5b:5a:70:04:9f:4c:fc:df:ce:5e: 81:59:9d:c9:fa:2f:48:da:68:92:a4:e6:8c:df:f8:bd:fe:9f: 97:c5:87:b7:da:e3:1f:3e:e3:b3:86:21:83:dc:97:71:93:d0: e6:12:7b:7b:d8:f2:e8:2a:c1:d2:15:3e:e8:3e:e3:bb:8c:e7: 9e:a8:03:ab:ba:d7:2b:7b:94:8c:2d:32:ab:10:47:7d:28:c0: 16:9d:47:d8:15:0c:ed:bb:7f:2f:11:da:4b:12:79:54:d0:a6: 4a:6c:4d:3d:6e:2a:fb:86:e3:4e:8d:e4:80:49:fe:57:80:fc: c4:c1:f8:22:45:cd:f8:16:f7:77:5b:b4:51:01:09:ab:1f:f1: 64:63:41:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFuheh1xWtvPQr/38u3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDRlMTdlZTNhYWJjMzM5ZDgwOWE5Y2JlOWM0ZmUxMTM5NTFjOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JbL09qmtafEyHGrdUaKP/UofZ33 MVqqCj81Aq54Xzv9n6GSYgxsqALdh+8AySO53+6+St09bGc8EyFPhGM0Sfr/Mhvz 6blrgMgW+VeRZG0dU/0EygnBpjEV8CgT00AneRyUUEaG4q1N43r9OFflLi+TORtD THn5DWb/t8knn31BVDU+HcerQnh1o/cxtEv915ATLV6JC8PT+rB1c8IUYmRuYBgI hYB7j4ZfcfkYwLqdUiW8swFPiez+0Oah00tCRDxH+4Kzp4HD7rQeTwXVEd/TQcxl k4VRfekWuqmFVU6jZfAUgOlDDfJst2tQSOw0xvIn8zNUGqlhXolLQKcLBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLROF+46q8M52Ampy+nE/hE5UcnnMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvdEU0WDdqcXJ3em5ZQ2FuTDZjVC1FVGxSeWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZy85MA0G CSqGSIb3DQEBCwUAA4IBAQDNLJWzFxzRzumZlN0zs9mKNaFIEoo8pv92WLR18ul0 Q8C1VWbZ6x03g+JQVqOk7GgGj/ecoC1Z1K8DAxFzbKpf15jcBxwoiPfYAaUIo93b IsfdoeEApq8Xq6VfXHG0bbV33gkE/mS0S1YYCDAeN2CInG4NmVtacASfTPzfzl6B WZ3J+i9I2miSpOaM3/i9/p+XxYe32uMfPuOzhiGD3Jdxk9DmEnt72PLoKsHSFT7o PuO7jOeeqAOrutcre5SMLTKrEEd9KMAWnUfYFQztu38vEdpLEnlU0KZKbE09bir7 huNOjeSASf5XgPzEwfgiRc34Fvd3W7RRAQmrH/FkY0H8 -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:34 2026 by rpki-client