This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/GPIsYlil8kPkRS6gEM2NHsqbCFY.roa File: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (raw, json) Hash identifier: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04= Subject key identifier: 18:F2:2C:62:58:A5:F2:43:E4:45:2E:A0:10:CD:8D:1E:CA:9B:08:56 Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Certificate serial: 019B797EB8B899AC01920E7BCB622373779D Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/GPIsYlil8kPkRS6gEM2NHsqbCFY.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202421 IP address blocks: 103.229.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b8:b8:99:ac:01:92:0e:7b:cb:62:23:73:77:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18f22c6258a5f243e4452ea010cd8d1eca9b0856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5d:a0:89:5e:1c:32:fb:90:ae:73:9e:50:2b: 9d:89:48:db:d5:20:b2:66:a3:3f:3f:7e:40:5a:58: 80:97:99:03:32:4d:d7:f8:a5:c4:c4:15:bc:2f:40: bd:e4:d6:c4:58:87:4d:8b:8e:23:58:f3:3b:4f:e2: c2:8e:c2:b7:28:88:41:e5:0c:76:5a:55:5c:ac:d8: 9a:37:0f:71:ce:9e:93:67:36:31:0c:3c:2c:51:ef: 4d:3c:09:51:2a:30:f1:20:fb:10:a5:bc:31:77:a3: ab:7b:2c:5e:6b:5b:8a:d1:6a:46:78:43:19:6c:5d: 1f:d1:c1:56:ba:7d:d0:bf:55:45:bf:5b:e6:f9:c6: b8:53:ca:98:9b:91:0d:9a:0a:45:ab:a0:e8:1e:51: fc:3f:be:70:96:08:e7:4d:5c:f6:69:05:8e:fd:9d: 8a:43:90:84:07:7e:1c:36:aa:f7:fa:9f:09:50:83: 06:cd:ca:68:e5:eb:10:0e:55:ed:47:a7:1d:be:cc: 98:1c:99:95:c2:1b:94:04:4b:4a:9c:bb:d7:ad:29: 1d:b0:29:d3:7c:b0:ad:4e:ad:84:93:18:ba:2f:70: 3b:4a:6b:b4:23:b3:34:e6:36:ac:29:f2:a4:a5:ff: df:53:53:25:39:ae:10:27:e3:d4:5b:12:58:9e:90: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F2:2C:62:58:A5:F2:43:E4:45:2E:A0:10:CD:8D:1E:CA:9B:08:56 X509v3 Authority Key Identifier: keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/GPIsYlil8kPkRS6gEM2NHsqbCFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.169.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:78:18:da:bf:72:01:e8:e0:a7:b1:85:0c:6e:45:d5:bd:78: 7f:54:8a:d2:62:91:a0:49:82:71:de:9d:79:86:d3:56:4b:42: 4a:a7:ca:bd:5d:4c:77:3e:04:27:9c:5c:95:1c:56:0d:ee:56: 74:20:ce:28:3d:4f:04:ba:be:e8:b9:8d:77:b8:38:bc:92:cb: 6f:d4:54:ba:69:52:97:ee:e7:74:63:98:93:6d:ff:00:d1:bc: bd:95:c4:c6:54:87:94:65:14:fb:86:6e:68:27:08:1b:3f:b2: ee:a3:3a:b1:37:4b:b7:40:ec:06:bb:22:75:42:c7:67:38:be: fe:d6:9e:f4:90:39:09:6a:d1:33:0d:0c:cc:dc:5b:72:f4:c0: d7:ad:b7:06:c1:bb:31:b2:49:1c:ff:62:e4:ca:8e:03:f0:c0: 8c:1b:5f:e5:46:81:3c:96:63:00:1e:ba:2e:0d:6c:00:2c:c1: cc:22:e3:a9:c7:6a:0c:13:cb:6f:8a:f6:c4:95:21:99:19:7d: 32:a3:46:2e:c2:8d:9d:09:d4:d2:78:4d:c6:cb:06:51:4f:90: 30:ac:14:88:2a:88:57:35:d7:65:b4:bf:3f:a5:48:50:90:6f: 98:32:34:fd:fa:37:d4:d2:be:06:fc:f2:fa:9d:1c:f9:79:8a: 69:7e:97:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fri4mawBkg57y2Ijc3edMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0 NDkwMjcwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGYyMmM2MjU4YTVmMjQzZTQ0NTJlYTAxMGNkOGQxZWNhOWIwODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l2giV4cMvuQrnOeUCudiUjb1SCy ZqM/P35AWliAl5kDMk3X+KXExBW8L0C95NbEWIdNi44jWPM7T+LCjsK3KIhB5Qx2 WlVcrNiaNw9xzp6TZzYxDDwsUe9NPAlRKjDxIPsQpbwxd6Oreyxea1uK0WpGeEMZ bF0f0cFWun3Qv1VFv1vm+ca4U8qYm5ENmgpFq6DoHlH8P75wlgjnTVz2aQWO/Z2K Q5CEB34cNqr3+p8JUIMGzcpo5esQDlXtR6cdvsyYHJmVwhuUBEtKnLvXrSkdsCnT fLCtTq2Ekxi6L3A7Smu0I7M05jasKfKkpf/fU1MlOa4QJ+PUWxJYnpB+uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBjyLGJYpfJD5EUuoBDNjR7KmwhWMB8GA1UdIwQY MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt MDU0OGQzODk1YTU1LzEvR1BJc1lsaWw4a1BrUlM2Z0VNMk5Ic3FiQ0ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1 LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+WpMA0G CSqGSIb3DQEBCwUAA4IBAQA7eBjav3IB6OCnsYUMbkXVvXh/VIrSYpGgSYJx3p15 htNWS0JKp8q9XUx3PgQnnFyVHFYN7lZ0IM4oPU8Eur7ouY13uDi8kstv1FS6aVKX 7ud0Y5iTbf8A0by9lcTGVIeUZRT7hm5oJwgbP7LuozqxN0u3QOwGuyJ1QsdnOL7+ 1p70kDkJatEzDQzM3Fty9MDXrbcGwbsxskkc/2Lkyo4D8MCMG1/lRoE8lmMAHrou DWwALMHMIuOpx2oME8tvivbElSGZGX0yo0Yuwo2dCdTSeE3GywZRT5AwrBSIKohX NddltL8/pUhQkG+YMjT9+jfU0r4G/PL6nRz5eYppfpcT -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:35 2026 by rpki-client