This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/eWHL2KDrJjJ8ZSeJDpUQ4WKF2Gk.roa File: eWHL2KDrJjJ8ZSeJDpUQ4WKF2Gk.roa (raw, json) Hash identifier: 7JmTL04KBPq1kd3qGXa89Y/80yoHChM4TTSdZFS3a48= Subject key identifier: 79:61:CB:D8:A0:EB:26:32:7C:65:27:89:0E:95:10:E1:62:85:D8:69 Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e Certificate serial: 019B7C7F0A1A1493ADB9D4D46DD2E16816AD Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/eWHL2KDrJjJ8ZSeJDpUQ4WKF2Gk.roa Signing time: Fri 02 Jan 2026 02:17:38 +0000 ROA not before: Fri 02 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215606 IP address blocks: 103.241.49.0/24 maxlen: 24 2a0a:51c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:0a:1a:14:93:ad:b9:d4:d4:6d:d2:e1:68:16:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e Validity Not Before: Jan 2 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7961cbd8a0eb26327c6527890e9510e16285d869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fb:42:9f:3a:a0:ab:5b:44:fc:8f:9e:c5:c4: 93:96:4f:71:23:dc:09:ae:cb:17:90:20:bf:25:bb: 17:89:29:26:f3:09:dd:f7:13:9e:12:47:66:e2:eb: c3:75:5a:a6:5e:e5:0c:b1:9f:0e:2f:f3:51:bf:2e: 52:97:f6:51:0b:31:53:e8:cf:94:d5:51:c7:7f:32: 50:61:af:aa:51:e3:53:4d:76:8e:f7:92:40:48:70: 08:57:ee:f8:7e:4c:8c:24:03:6c:6f:85:70:8a:f6: f6:5b:1e:43:c1:d3:78:18:e4:31:5d:da:20:db:81: e5:b3:e5:7c:96:aa:d1:fc:62:38:91:7b:6a:d6:07: 0d:68:ba:3c:7b:25:0e:d9:59:3e:96:6f:d7:76:8a: 3a:74:7e:8c:b2:4a:c3:39:6e:78:70:90:51:b9:fb: 53:b9:7a:ff:b2:f3:02:94:9c:e6:e2:2d:c1:1c:8a: 70:fd:76:ad:5a:cb:6e:69:78:12:1e:90:2b:30:76: a9:fe:88:ec:60:7c:a2:38:89:fd:de:94:fd:6d:f0: 0f:9f:b9:2f:28:a4:e4:12:f8:32:3b:6f:0f:8b:3e: 1f:c1:ae:36:ab:39:3e:5c:8c:99:cc:cf:1d:0b:d7: 11:8c:25:62:c5:8f:30:5b:79:80:4c:12:76:0b:a4: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:61:CB:D8:A0:EB:26:32:7C:65:27:89:0E:95:10:E1:62:85:D8:69 X509v3 Authority Key Identifier: keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/eWHL2KDrJjJ8ZSeJDpUQ4WKF2Gk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.241.49.0/24 IPv6: 2a0a:51c5::/32 Signature Algorithm: sha256WithRSAEncryption 60:71:a1:98:67:39:11:6c:45:cb:35:60:a8:6b:7d:17:58:b0: 84:43:33:9a:21:2f:bc:09:a7:03:53:f3:0e:bc:75:ae:16:e4: f3:ca:46:8d:1f:8f:2f:a3:e8:6c:ce:77:ee:df:bf:5a:d6:7f: 6e:9e:2d:a7:0e:02:7c:89:5d:ee:c0:ac:35:df:ba:c4:70:33: ca:55:0a:7b:c8:03:c0:26:49:81:76:a2:8c:57:b7:51:34:cd: c9:77:af:59:2e:3c:6a:77:a3:91:17:66:ff:08:2f:28:c4:9c: 06:ea:bc:9d:8d:e3:4a:3d:25:c8:76:7b:46:8f:05:39:0f:4f: 75:ee:e0:40:77:99:1b:81:d0:c5:04:52:2d:90:b1:ea:f3:2c: ca:bf:a5:c0:32:6e:71:a5:3b:47:02:a0:4f:60:92:10:82:f3: 88:04:9e:c6:81:c9:57:a9:ea:58:99:46:d8:61:91:d3:a4:fd: 62:58:24:f1:9a:8d:ea:46:87:02:d3:5e:e1:fb:44:aa:70:3c: d8:36:b6:f6:cf:6b:f0:65:91:da:09:90:7d:55:61:14:85:1a: 6e:91:5e:f5:35:af:31:d2:26:61:d3:d5:5c:92:66:f9:c1:73: 58:07:08:4f:eb:0e:c3:67:f6:77:ba:2c:95:a9:86:16:da:88: ba:30:1f:ab -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8fwoaFJOtudTUbdLhaBatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzAwN2U1MDgyYjhlOGQ4Mjg5MDE4NzE4Y2ZkNTI3YTc4 OTNlNWUwHhcNMjYwMTAyMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTYxY2JkOGEwZWIyNjMyN2M2NTI3ODkwZTk1MTBlMTYyODVkODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PtCnzqgq1tE/I+excSTlk9xI9wJ rssXkCC/JbsXiSkm8wnd9xOeEkdm4uvDdVqmXuUMsZ8OL/NRvy5Sl/ZRCzFT6M+U 1VHHfzJQYa+qUeNTTXaO95JASHAIV+74fkyMJANsb4Vwivb2Wx5DwdN4GOQxXdog 24Hls+V8lqrR/GI4kXtq1gcNaLo8eyUO2Vk+lm/Xdoo6dH6MskrDOW54cJBRuftT uXr/svMClJzm4i3BHIpw/XatWstuaXgSHpArMHap/ojsYHyiOIn93pT9bfAPn7kv KKTkEvgyO28Piz4fwa42qzk+XIyZzM8dC9cRjCVixY8wW3mATBJ2C6Th8wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHlhy9ig6yYyfGUniQ6VEOFihdhpMB8GA1UdIwQY MBaAFCfAB+UIK46NgokBhxjP1SeniT5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEt MmM2NGMyOTEzNTNlLzEvZVdITDJLRHJKako4WlNlSkRwVVE0V0tGMkdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEtMmM2NGMyOTEzNTNl LzEvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAZ/ExMA0E AgACMAcDBQAqClHFMA0GCSqGSIb3DQEBCwUAA4IBAQBgcaGYZzkRbEXLNWCoa30X WLCEQzOaIS+8CacDU/MOvHWuFuTzykaNH48vo+hsznfu379a1n9uni2nDgJ8iV3u wKw137rEcDPKVQp7yAPAJkmBdqKMV7dRNM3Jd69ZLjxqd6ORF2b/CC8oxJwG6ryd jeNKPSXIdntGjwU5D0917uBAd5kbgdDFBFItkLHq8yzKv6XAMm5xpTtHAqBPYJIQ gvOIBJ7GgclXqepYmUbYYZHTpP1iWCTxmo3qRocC017h+0SqcDzYNrb2z2vwZZHa CZB9VWEUhRpukV71Na8x0iZh09Vckmb5wXNYBwhP6w7DZ/Z3uiyVqYYW2oi6MB+r -----END CERTIFICATE-----Generated at Sun Jan 25 19:58:56 2026 by rpki-client