This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/47SPVD5eRBRtQOdhkPJLtKlWVtw.roa File: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (raw, json) Hash identifier: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc= Subject key identifier: E3:B4:8F:54:3E:5E:44:14:6D:40:E7:61:90:F2:4B:B4:A9:56:56:DC Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019B797DE41490A58F7990B3B5F37EBA4937 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/47SPVD5eRBRtQOdhkPJLtKlWVtw.roa Signing time: Thu 01 Jan 2026 12:17:32 +0000 ROA not before: Thu 01 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197981 IP address blocks: 103.57.156.0/22 maxlen: 22 176.67.88.0/21 maxlen: 21 185.103.64.0/22 maxlen: 22 185.103.64.0/23 maxlen: 23 2a00:89c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e4:14:90:a5:8f:79:90:b3:b5:f3:7e:ba:49:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3b48f543e5e44146d40e76190f24bb4a95656dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:5d:a4:33:dd:71:9b:59:68:37:af:bb:a8: 82:b7:b6:57:be:51:3c:2b:8e:cb:5a:c4:1b:b3:bd: d2:e9:54:20:87:3e:5e:c1:b6:58:cc:41:57:7a:88: 9b:d9:df:f2:85:7e:a4:fc:b0:0c:97:ce:1b:32:37: 20:dc:47:3b:4d:a6:34:de:80:da:6c:6c:3e:d5:bb: a2:d0:03:d8:19:8f:e1:d6:af:0a:1f:a7:4e:21:c9: 7e:2a:46:76:24:aa:6c:1d:22:79:ab:ec:a3:75:79: 7d:56:90:28:c4:9a:09:d6:e3:53:2b:26:bb:7c:33: ea:15:b3:2d:0f:4f:35:4e:fa:c1:71:cb:15:0c:e1: d2:e4:ee:4d:a3:ab:29:40:27:62:57:90:3e:b1:f9: d4:5d:e0:a6:b4:e5:37:04:68:2d:e8:ce:bc:d7:59: 26:43:58:04:0f:1c:92:a0:bb:f9:a7:37:e5:9b:fe: 16:54:72:67:a8:86:51:c8:66:1c:77:86:30:37:6f: e5:1b:af:26:be:23:5a:14:97:fd:46:af:11:a5:62: c5:4c:52:b2:f9:41:84:a0:77:02:aa:b4:46:ab:cc: 66:b7:b8:1a:0e:94:12:c1:b3:a7:56:bc:ef:bb:18: 22:2e:75:44:c1:2a:a1:95:ae:8f:be:b6:fa:df:5b: aa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B4:8F:54:3E:5E:44:14:6D:40:E7:61:90:F2:4B:B4:A9:56:56:DC X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/47SPVD5eRBRtQOdhkPJLtKlWVtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.57.156.0/22 176.67.88.0/21 185.103.64.0/22 IPv6: 2a00:89c0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:55:ab:6e:ce:d5:87:a6:5e:38:21:9f:50:9b:dc:48:20:c7: 77:93:d8:c0:30:9d:a4:d4:73:79:95:0c:a3:c6:17:97:d6:f9: 09:67:cc:b8:d2:97:60:e5:d0:e9:09:dd:ae:05:d9:2e:61:25: 49:08:0b:85:aa:c4:ab:e2:92:83:b7:9c:48:e9:fe:e4:9e:10: 88:36:43:a6:09:11:28:94:62:7e:79:fa:0a:e7:ed:16:25:43: 1e:58:52:69:6c:aa:c3:9e:d4:fa:b6:e1:68:1b:08:98:51:49: e9:ba:9f:2c:26:01:a1:b2:25:a2:15:5d:43:78:ce:6d:94:aa: 9d:77:c0:50:13:ed:b3:4a:d9:c7:ae:cf:10:b1:eb:d7:7b:79: 29:50:b1:92:61:08:f9:35:fe:07:30:c6:46:5f:8b:38:58:7e: 5a:c0:ec:b0:75:1e:72:74:08:2f:e0:94:18:33:cc:5b:b5:55: ef:91:a8:54:ba:bb:6a:b1:ca:7b:58:8c:be:f5:57:24:c8:90: 3b:c1:47:81:58:47:88:c4:03:3d:05:36:69:bd:89:37:a2:cb: 36:c1:16:79:43:da:75:09:9a:8d:6b:b4:41:c7:5d:e1:1b:88: 4c:eb:e3:56:7a:10:de:08:c6:4c:86:de:23:1c:a0:ad:28:0b: 3a:42:ca:79 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5feQUkKWPeZCztfN+ukk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2I0OGY1NDNlNWU0NDE0NmQ0MGU3NjE5MGYyNGJiNGE5NTY1NmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp5dpDPdcZtZaDevu6iCt7ZXvlE8 K47LWsQbs73S6VQghz5ewbZYzEFXeoib2d/yhX6k/LAMl84bMjcg3Ec7TaY03oDa bGw+1bui0APYGY/h1q8KH6dOIcl+KkZ2JKpsHSJ5q+yjdXl9VpAoxJoJ1uNTKya7 fDPqFbMtD081TvrBccsVDOHS5O5No6spQCdiV5A+sfnUXeCmtOU3BGgt6M6811km Q1gEDxySoLv5pzflm/4WVHJnqIZRyGYcd4YwN2/lG68mviNaFJf9Rq8RpWLFTFKy +UGEoHcCqrRGq8xmt7gaDpQSwbOnVrzvuxgiLnVEwSqhla6Pvrb631uq1wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOO0j1Q+XkQUbUDnYZDyS7SpVlbcMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvNDdTUFZENWVSQlJ0UU9kaGtQSkx0S2xXVnR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCZzmcAwQD sENYAwQCuWdAMA0EAgACMAcDBQAqAInAMA0GCSqGSIb3DQEBCwUAA4IBAQAsVatu ztWHpl44IZ9Qm9xIIMd3k9jAMJ2k1HN5lQyjxheX1vkJZ8y40pdg5dDpCd2uBdku YSVJCAuFqsSr4pKDt5xI6f7knhCINkOmCREolGJ+efoK5+0WJUMeWFJpbKrDntT6 tuFoGwiYUUnpup8sJgGhsiWiFV1DeM5tlKqdd8BQE+2zStnHrs8QsevXe3kpULGS YQj5Nf4HMMZGX4s4WH5awOywdR5ydAgv4JQYM8xbtVXvkahUurtqscp7WIy+9Vck yJA7wUeBWEeIxAM9BTZpvYk3oss2wRZ5Q9p1CZqNa7RBx13hG4hM6+NWehDeCMZM ht4jHKCtKAs6Qsp5 -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:31 2026 by rpki-client