This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/kWBcLWbBpgxkDI6iP43AMVT02QQ.roa File: kWBcLWbBpgxkDI6iP43AMVT02QQ.roa (raw, json) Hash identifier: DhH8TmZUljkPYNL8msm1EY1T9GfinFMyYlzEgVbaeXM= Subject key identifier: 91:60:5C:2D:66:C1:A6:0C:64:0C:8E:A2:3F:8D:C0:31:54:F4:D9:04 Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5 Certificate serial: 019B7E37D741995A1E46FE6DCA0574B7AE96 Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/kWBcLWbBpgxkDI6iP43AMVT02QQ.roa Signing time: Fri 02 Jan 2026 10:19:07 +0000 ROA not before: Fri 02 Jan 2026 10:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210612 IP address blocks: 103.68.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d7:41:99:5a:1e:46:fe:6d:ca:05:74:b7:ae:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5 Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91605c2d66c1a60c640c8ea23f8dc03154f4d904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:3e:25:09:f8:66:bf:0c:e1:12:5e:48:81: 94:0b:e6:9c:c0:34:3d:a7:0c:1e:cf:4b:98:19:7b: f4:1a:42:f4:b4:ef:20:eb:19:a6:1e:7b:82:5d:5f: 18:db:07:42:b4:01:8d:fa:95:23:0e:ae:d0:68:7e: dd:1c:cb:de:e6:4d:e7:b2:6d:aa:c5:b6:2d:aa:13: 29:1d:82:07:66:00:c4:1e:7a:14:92:81:27:23:3f: 0c:1b:e8:fc:a4:6f:c9:83:79:8f:83:98:55:9b:83: a6:d3:52:e3:ee:89:dd:4f:01:11:3a:f7:0f:97:96: c4:a3:d4:3b:6d:9d:e5:cc:77:17:a5:52:b6:f0:87: 30:35:f9:7b:26:7a:85:63:5c:8e:7d:e3:0c:53:88: e3:f8:71:31:84:61:20:2b:1f:03:11:1e:03:bf:fb: 97:b8:34:60:42:c4:a7:ec:3a:62:25:5e:aa:45:17: bb:bc:7c:c3:02:62:19:87:68:57:f9:6b:f1:06:3f: 32:29:a4:5d:b6:16:0f:d7:dd:47:a0:06:7f:dc:9d: 18:d6:44:55:98:24:d1:44:2a:30:00:60:d7:10:37: 03:5f:97:09:a8:2b:5f:f0:f0:98:25:1d:3d:4a:b3: be:5e:12:58:d2:8c:9a:c5:1b:92:e9:91:15:77:09: 1c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:60:5C:2D:66:C1:A6:0C:64:0C:8E:A2:3F:8D:C0:31:54:F4:D9:04 X509v3 Authority Key Identifier: keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/kWBcLWbBpgxkDI6iP43AMVT02QQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.32.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:ec:46:d6:d0:72:6b:5c:42:9e:81:58:de:b5:1a:fc:7d:1f: 97:6c:4c:04:3c:de:5c:b9:87:fb:ef:54:25:1b:3a:ca:47:fa: 82:0a:4f:e7:5a:a5:8c:8b:c8:7f:79:2a:bd:89:d9:fe:91:8a: 0f:06:0c:e5:3e:ad:cd:95:d7:4a:74:59:28:a0:9f:f0:de:0c: 02:c8:e1:fe:8c:63:d3:77:f0:10:53:99:6f:5d:5f:db:b1:90: 4f:d1:ac:a2:fd:e6:29:a4:46:91:69:66:4d:97:44:65:27:dc: a9:4b:08:a6:0f:77:1f:a5:58:4a:af:49:98:da:a6:16:85:3d: fa:f4:ab:69:c0:80:cc:5c:56:48:6c:e9:e3:bb:eb:12:7f:bb: 2c:e5:0b:be:ad:55:82:65:4f:0a:32:62:e1:de:de:eb:61:74: f9:9a:d0:99:99:91:89:fb:84:0c:c2:67:86:b3:a7:53:93:94: d1:28:08:4e:be:fa:3c:3a:c2:46:51:48:5c:73:b4:7a:13:e1: 17:51:f2:c6:40:ab:6d:24:4e:80:a3:b5:d1:38:98:88:34:fc: 74:17:57:6c:5e:f9:5d:b6:76:89:3e:fa:23:a9:17:07:d7:82: 4a:75:7c:26:e2:14:55:bb:a9:44:1d:fa:81:91:8b:07:8b:8b: 68:e9:e9:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N9dBmVoeRv5tygV0t66WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODUwNjEzNjFiMTlmMjEyZWZlOTBjMmQ4Y2YzZWVlNjE3 ZjIwZTUwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTYwNWMyZDY2YzFhNjBjNjQwYzhlYTIzZjhkYzAzMTU0ZjRkOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAQ+JQn4Zr8M4RJeSIGUC+acwDQ9 pwwez0uYGXv0GkL0tO8g6xmmHnuCXV8Y2wdCtAGN+pUjDq7QaH7dHMve5k3nsm2q xbYtqhMpHYIHZgDEHnoUkoEnIz8MG+j8pG/Jg3mPg5hVm4Om01Lj7ondTwEROvcP l5bEo9Q7bZ3lzHcXpVK28IcwNfl7JnqFY1yOfeMMU4jj+HExhGEgKx8DER4Dv/uX uDRgQsSn7DpiJV6qRRe7vHzDAmIZh2hX+WvxBj8yKaRdthYP191HoAZ/3J0Y1kRV mCTRRCowAGDXEDcDX5cJqCtf8PCYJR09SrO+XhJY0oyaxRuS6ZEVdwkcDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFgXC1mwaYMZAyOoj+NwDFU9NkEMB8GA1UdIwQY MBaAFG2FBhNhsZ8hLv6QwtjPPu5hfyDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYt NjdhZDYwZDM4NmRkLzEva1dCY0xXYkJwZ3hrREk2aVA0M0FNVlQwMlFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYtNjdhZDYwZDM4NmRk LzEvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0QgMA0G CSqGSIb3DQEBCwUAA4IBAQAK7EbW0HJrXEKegVjetRr8fR+XbEwEPN5cuYf771Ql GzrKR/qCCk/nWqWMi8h/eSq9idn+kYoPBgzlPq3NlddKdFkooJ/w3gwCyOH+jGPT d/AQU5lvXV/bsZBP0ayi/eYppEaRaWZNl0RlJ9ypSwimD3cfpVhKr0mY2qYWhT36 9KtpwIDMXFZIbOnju+sSf7ss5Qu+rVWCZU8KMmLh3t7rYXT5mtCZmZGJ+4QMwmeG s6dTk5TRKAhOvvo8OsJGUUhcc7R6E+EXUfLGQKttJE6Ao7XROJiINPx0F1dsXvld tnaJPvojqRcH14JKdXwm4hRVu6lEHfqBkYsHi4to6enz -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:18 2026 by rpki-client