This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/vyNI85-k_7HIHmckCmjXLKePDU4.roa File: vyNI85-k_7HIHmckCmjXLKePDU4.roa (raw, json) Hash identifier: HwnFl6Kr7AQloXq7jUppVJIclmXUrEisdnMVtoaKo9E= Subject key identifier: BF:23:48:F3:9F:A4:FF:B1:C8:1E:67:24:0A:68:D7:2C:A7:8F:0D:4E Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019B7AC9266E5CEC819FA8D639BC972A12E6 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/vyNI85-k_7HIHmckCmjXLKePDU4.roa Signing time: Thu 01 Jan 2026 18:19:21 +0000 ROA not before: Thu 01 Jan 2026 18:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43289 IP address blocks: 103.197.148.0/22 maxlen: 24 178.17.160.0/20 maxlen: 24 178.175.128.0/19 maxlen: 24 178.175.160.0/20 maxlen: 24 193.200.160.0/24 maxlen: 24 2a00:1dc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:26:6e:5c:ec:81:9f:a8:d6:39:bc:97:2a:12:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Jan 1 18:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf2348f39fa4ffb1c81e67240a68d72ca78f0d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:e8:9b:4f:35:f9:cd:b0:80:40:5a:68:52: 3f:9b:8e:69:c4:f2:95:80:81:bc:77:99:89:73:d6: f7:b3:54:76:6e:63:1c:9c:0f:e2:bf:dc:2d:b4:68: 3a:c2:67:df:17:89:2e:c4:50:10:0d:c7:2a:e0:c0: 6e:2f:a2:af:77:f2:e3:94:a8:07:58:dd:c3:81:be: fe:8f:c8:46:5e:5c:9c:41:6f:17:25:ff:4d:3c:3c: 36:2d:2f:19:a2:04:e5:a0:3f:f5:6a:c7:81:cc:da: 27:e3:4b:38:5a:da:ab:45:4b:40:15:0a:7d:dd:9b: dd:50:e4:56:54:96:3a:ec:b6:84:02:a3:40:be:0f: 6a:bc:a9:de:8c:7c:52:41:5d:b2:9f:f8:f0:9d:9e: bc:97:75:b2:37:f5:68:ec:ba:f9:83:78:96:61:c0: 09:d8:2b:48:2f:8e:1e:41:93:76:f2:c2:78:a6:34: 98:1b:dd:b2:3a:34:3c:ef:9e:1a:25:72:6a:e4:25: 2c:56:76:03:62:a3:75:e1:c3:10:02:4a:9b:81:ab: 0b:5e:46:e8:bc:71:42:e0:17:11:97:70:b8:67:aa: f0:aa:bb:d4:8a:61:d6:80:c5:c3:9e:ad:89:f2:0c: 18:51:92:cb:7f:2e:f4:80:f2:40:37:c8:84:a2:28: 3d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:23:48:F3:9F:A4:FF:B1:C8:1E:67:24:0A:68:D7:2C:A7:8F:0D:4E X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/vyNI85-k_7HIHmckCmjXLKePDU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.148.0/22 178.17.160.0/20 178.175.128.0-178.175.175.255 193.200.160.0/24 IPv6: 2a00:1dc0::/29 Signature Algorithm: sha256WithRSAEncryption cb:61:7d:f0:f6:7e:4e:16:95:77:7d:ae:d6:6d:a5:e8:d5:f6: 83:8f:b1:0c:1f:ea:92:9e:cb:f9:bd:72:7a:8a:16:cd:72:47: a0:c3:5a:c4:11:5b:48:83:eb:d9:55:d2:6e:58:59:d6:69:54: f7:a9:24:11:29:fb:43:58:ca:2b:39:e3:9f:a4:b2:db:09:9e: e9:f1:fa:6a:7a:a4:23:84:97:19:c5:93:72:d2:41:2b:f6:cf: 11:0b:67:cb:cb:8c:a5:c7:76:31:79:31:a5:96:ea:92:4e:8e: cd:35:bb:50:4d:fd:bf:b6:fe:5b:22:38:31:9f:83:b3:72:f8: 8a:a1:b6:34:2d:f3:43:d7:71:12:28:ea:12:60:63:40:f5:af: 81:48:bd:04:04:f3:bc:ca:50:1a:01:3e:0e:cb:72:22:f9:9e: 79:59:a4:ff:5e:91:46:b2:b7:4c:24:a5:f9:be:fd:95:5c:2d: 58:7d:8b:74:94:49:ea:ff:98:b2:bb:3a:31:89:3b:4f:1a:d4: 70:12:10:f8:b8:44:81:50:d5:17:91:67:de:46:a7:89:64:5b: 42:13:df:8f:bf:bb:f1:69:9b:9a:77:0f:31:06:45:99:6f:f7: d5:23:1d:cd:f0:91:df:54:6f:56:03:97:24:f1:be:65:0d:d0: 91:ed:e7:6b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt6ySZuXOyBn6jWObyXKhLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYwMTAxMTgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjIzNDhmMzlmYTRmZmIxYzgxZTY3MjQwYTY4ZDcyY2E3OGYwZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOLom081+c2wgEBaaFI/m45pxPKV gIG8d5mJc9b3s1R2bmMcnA/iv9wttGg6wmffF4kuxFAQDccq4MBuL6Kvd/LjlKgH WN3Dgb7+j8hGXlycQW8XJf9NPDw2LS8ZogTloD/1aseBzNon40s4WtqrRUtAFQp9 3ZvdUORWVJY67LaEAqNAvg9qvKnejHxSQV2yn/jwnZ68l3WyN/Vo7Lr5g3iWYcAJ 2CtIL44eQZN28sJ4pjSYG92yOjQ8754aJXJq5CUsVnYDYqN14cMQAkqbgasLXkbo vHFC4BcRl3C4Z6rwqrvUimHWgMXDnq2J8gwYUZLLfy70gPJAN8iEoig94QIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFL8jSPOfpP+xyB5nJApo1yynjw1OMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdnlOSTg1LWtfN0hJSG1ja0NtalhMS2VQRFU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCZ8WUAwQE shGgMAwDBAeyr4ADBASyr6ADBADByKAwDQQCAAIwBwMFAyoAHcAwDQYJKoZIhvcN AQELBQADggEBAMthffD2fk4WlXd9rtZtpejV9oOPsQwf6pKey/m9cnqKFs1yR6DD WsQRW0iD69lV0m5YWdZpVPepJBEp+0NYyis545+kstsJnunx+mp6pCOElxnFk3LS QSv2zxELZ8vLjKXHdjF5MaWW6pJOjs01u1BN/b+2/lsiODGfg7Ny+IqhtjQt80PX cRIo6hJgY0D1r4FIvQQE87zKUBoBPg7LciL5nnlZpP9ekUayt0wkpfm+/ZVcLVh9 i3SUSer/mLK7OjGJO08a1HASEPi4RIFQ1ReRZ95Gp4lkW0IT34+/u/Fpm5p3DzEG RZlv99UjHc3wkd9Ub1YDlyTxvmUN0JHt52s= -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:49 2026 by rpki-client