This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa File: lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa (raw, json) Hash identifier: rLmZAKicjwEflAKkEb3bhMZ1sp7aW6UtUzE6SYNtwFo= Subject key identifier: 94:50:3C:4C:29:8E:B1:4C:1C:45:3F:88:1F:9F:B1:32:72:C8:9F:D8 Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019B7EA7393BF151FBB3EA78C26C8259BBC5 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa Signing time: Fri 02 Jan 2026 12:20:46 +0000 ROA not before: Fri 02 Jan 2026 12:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202914 IP address blocks: 103.204.121.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:39:3b:f1:51:fb:b3:ea:78:c2:6c:82:59:bb:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94503c4c298eb14c1c453f881f9fb13272c89fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:35:97:f1:92:34:11:ae:ee:a9:f3:df:9f: df:a6:f4:c8:0c:2d:a0:50:7a:c7:2a:5b:45:c5:65: 52:47:00:f2:e6:14:47:6f:e9:94:d3:4e:4b:c8:23: 0c:9e:3a:08:80:5b:78:bc:91:38:5f:8a:b5:33:b2: 3f:25:01:f1:2a:e1:9a:50:4b:1a:31:0e:be:2f:c9: c9:84:a1:65:03:ff:0e:9d:67:9e:c4:9d:2a:6d:3f: 82:ea:37:64:11:1f:60:84:52:cf:18:d4:94:09:63: 97:f0:50:29:9d:80:64:fd:1b:9d:a2:32:51:9c:0f: 10:0b:01:38:fe:79:da:bb:8f:86:ee:60:08:5f:c5: bb:76:08:33:64:3e:65:c2:c8:e9:d1:9b:70:b4:d6: 97:01:44:55:05:b0:0f:a1:81:8c:88:99:09:0c:a3: 3d:70:d5:79:ce:e2:8c:b7:fa:f6:2d:48:c3:db:21: 31:3e:a4:ec:ea:69:49:c4:de:5a:90:55:bc:08:f5: 0a:45:d9:0a:95:2e:18:e2:eb:5c:66:ac:eb:53:57: f9:72:51:8e:2a:7c:70:69:d6:49:27:da:30:01:ac: 45:ce:96:84:c4:86:3d:36:60:bb:38:ec:30:4d:41: 8e:f0:52:2a:ac:a5:bd:60:30:a2:e6:10:4c:ff:ce: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:50:3C:4C:29:8E:B1:4C:1C:45:3F:88:1F:9F:B1:32:72:C8:9F:D8 X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.204.121.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:5c:99:48:40:98:c4:84:60:37:9f:dd:55:a9:87:2d:d8:89: 13:a4:ba:5f:a6:be:4e:ea:f4:a0:d6:c5:3e:c3:3b:e8:68:d3: fd:53:ff:bc:11:1f:00:4c:fc:1d:d1:f2:04:e0:e6:97:5e:49: 79:7f:c2:35:83:53:29:d4:d4:00:e5:ab:f0:fe:0d:3a:20:9b: bb:9e:a5:ae:3b:6c:bd:9b:52:6d:f7:fc:ff:0d:54:33:96:28: ea:c3:84:fe:c1:b2:06:cd:f1:0f:5e:70:bc:9f:b4:48:28:72: b8:24:f7:3d:4a:8c:03:e9:ca:72:27:f4:10:38:36:a5:3f:ee: a4:a4:fa:9b:95:2a:a9:99:15:4d:c6:06:82:4d:f1:dc:55:76: 97:93:7d:9b:76:48:53:ec:3a:95:c3:91:7c:69:df:db:5d:30: e1:c8:f3:84:ad:2a:f0:f3:79:7f:01:33:ad:7a:cb:4a:95:30: bf:4a:75:bf:db:13:31:3e:ef:47:9c:c9:3c:b9:6e:7d:a7:fc: e2:bd:84:31:9f:16:e7:6e:55:1e:c0:28:10:f6:df:6a:00:34: 3e:e9:6d:b4:fa:b3:99:73:84:a2:c3:b4:77:c3:cf:f5:89:43: 02:1f:d9:26:b5:2f:0d:53:69:bd:e5:88:ac:5d:37:7b:37:e4: a0:6f:3c:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzk78VH7s+p4wmyCWbvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDUwM2M0YzI5OGViMTRjMWM0NTNmODgxZjlmYjEzMjcyYzg5ZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskI1l/GSNBGu7qnz35/fpvTIDC2g UHrHKltFxWVSRwDy5hRHb+mU005LyCMMnjoIgFt4vJE4X4q1M7I/JQHxKuGaUEsa MQ6+L8nJhKFlA/8OnWeexJ0qbT+C6jdkER9ghFLPGNSUCWOX8FApnYBk/RudojJR nA8QCwE4/nnau4+G7mAIX8W7dggzZD5lwsjp0ZtwtNaXAURVBbAPoYGMiJkJDKM9 cNV5zuKMt/r2LUjD2yExPqTs6mlJxN5akFW8CPUKRdkKlS4Y4utcZqzrU1f5clGO KnxwadZJJ9owAaxFzpaExIY9NmC7OOwwTUGO8FIqrKW9YDCi5hBM/84ZrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJRQPEwpjrFMHEU/iB+fsTJyyJ/YMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvbEZBOFRDbU9zVXdjUlQtSUg1LXhNbkxJbjlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8x5MA0G CSqGSIb3DQEBCwUAA4IBAQCaXJlIQJjEhGA3n91VqYct2IkTpLpfpr5O6vSg1sU+ wzvoaNP9U/+8ER8ATPwd0fIE4OaXXkl5f8I1g1Mp1NQA5avw/g06IJu7nqWuO2y9 m1Jt9/z/DVQzlijqw4T+wbIGzfEPXnC8n7RIKHK4JPc9SowD6cpyJ/QQODalP+6k pPqblSqpmRVNxgaCTfHcVXaXk32bdkhT7DqVw5F8ad/bXTDhyPOErSrw83l/ATOt estKlTC/SnW/2xMxPu9HnMk8uW59p/zivYQxnxbnblUewCgQ9t9qADQ+6W20+rOZ c4Siw7R3w8/1iUMCH9kmtS8NU2m95YisXTd7N+SgbzzJ -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:45 2026 by rpki-client