This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/rb-Sc2sMQouk09qe65I3IdAX2Wg.roa File: rb-Sc2sMQouk09qe65I3IdAX2Wg.roa (raw, json) Hash identifier: oIYCzWn5Llby9+MplpHfCcN3dR2X1heBfsWvSaio7wY= Subject key identifier: AD:BF:92:73:6B:0C:42:8B:A4:D3:DA:9E:EB:92:37:21:D0:17:D9:68 Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019AD78068DCA21C61AAA600F65DE4EE52FE Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/rb-Sc2sMQouk09qe65I3IdAX2Wg.roa Signing time: Mon 01 Dec 2025 01:21:48 +0000 ROA not before: Mon 01 Dec 2025 01:21:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138968 IP address blocks: 103.76.85.0/24 maxlen: 24 103.76.86.0/24 maxlen: 24 103.76.87.0/24 maxlen: 24 116.206.92.0/22 maxlen: 24 203.189.232.0/23 maxlen: 24 2a0f:6700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d7:80:68:dc:a2:1c:61:aa:a6:00:f6:5d:e4:ee:52:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Dec 1 01:21:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=adbf92736b0c428ba4d3da9eeb923721d017d968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2b:cb:64:9a:e2:09:d0:a8:32:05:70:87:c6: 7b:6a:0a:70:06:ca:04:cf:81:f3:a4:14:7d:41:55: b4:59:04:80:36:8c:ba:7b:e1:e5:f2:7a:03:70:70: 61:af:f4:52:b2:c5:b3:c4:08:45:7f:6c:af:ba:e1: 23:08:1e:c3:88:1b:be:fe:30:4d:87:a1:58:f7:5d: bf:f7:a1:7a:0b:e6:08:c2:00:8b:80:ef:bc:ac:0e: e2:8e:bd:c0:7d:71:8b:9c:cf:1a:f3:48:af:67:99: fa:25:63:cf:6b:26:b1:12:21:54:52:d7:c6:a5:fd: 09:a8:25:67:67:00:1a:78:f9:c8:8f:4b:89:b6:8e: 43:1b:b6:d5:18:c8:c4:24:8a:a8:a9:18:91:f6:5b: e5:77:bf:b6:e4:5f:0c:23:69:d1:3c:b4:ce:f3:e2: fa:ef:a1:b5:c9:85:92:26:13:fa:29:da:e7:05:7f: 27:e2:60:d5:0a:cc:1d:9e:96:83:b5:71:ea:db:64: 46:91:b1:b9:37:7d:7d:ff:2c:f7:88:7b:db:eb:5d: db:c7:b6:51:80:52:12:91:de:77:0c:ee:fc:16:5a: 47:ae:86:93:4d:c4:8b:f7:03:2c:50:c0:d4:1c:73: 23:15:ce:1e:75:76:1f:d9:4b:99:7a:2a:1e:ae:06: 3d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BF:92:73:6B:0C:42:8B:A4:D3:DA:9E:EB:92:37:21:D0:17:D9:68 X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/rb-Sc2sMQouk09qe65I3IdAX2Wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.85.0-103.76.87.255 116.206.92.0/22 203.189.232.0/23 IPv6: 2a0f:6700::/29 Signature Algorithm: sha256WithRSAEncryption 13:8f:66:4f:50:91:3a:11:c0:50:4f:29:0c:94:fd:fa:e6:32: 25:56:c7:50:c4:47:2c:9f:b4:2b:d3:ad:fb:5c:6e:2a:77:24: 84:70:fa:89:9e:d2:1a:94:5e:aa:97:84:e9:d5:dd:bd:75:06: ab:b5:ce:b3:fc:b9:db:a3:e3:11:32:08:74:f8:ff:a8:7f:ec: d6:47:58:eb:84:74:7b:27:80:bf:93:ee:ff:c8:fe:12:93:18: a3:9b:63:10:e6:a3:98:ea:f2:03:d5:c5:03:b4:3f:0c:f6:75: e2:c7:0a:b2:24:21:8a:fa:46:c0:fe:46:b4:c3:7c:23:2e:28: 14:81:13:71:e9:5c:ab:4d:62:2f:0c:cc:cf:89:89:bb:ea:85: f8:a6:b9:3b:84:72:46:66:b4:0c:9b:c3:58:6d:06:d9:5d:a3: d9:c7:88:d4:96:11:16:a4:5f:0f:2c:4e:38:29:33:f3:b4:4f: 58:a3:96:b2:08:54:5e:ff:be:75:92:de:56:20:e9:f3:85:67: 21:39:62:87:88:ab:c8:67:25:09:a1:eb:1c:62:f1:40:50:e5: 6c:9d:c3:89:ec:d5:ab:69:ea:eb:88:97:bd:8d:db:06:63:0d: 57:1c:90:c4:61:b4:e6:e3:af:c4:fb:4a:99:0f:58:79:bb:bd: 80:0a:5e:07 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZrXgGjcohxhqqYA9l3k7lL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjUxMjAxMDEyMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGJmOTI3MzZiMGM0MjhiYTRkM2RhOWVlYjkyMzcyMWQwMTdkOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CvLZJriCdCoMgVwh8Z7agpwBsoE z4HzpBR9QVW0WQSANoy6e+Hl8noDcHBhr/RSssWzxAhFf2yvuuEjCB7DiBu+/jBN h6FY912/96F6C+YIwgCLgO+8rA7ijr3AfXGLnM8a80ivZ5n6JWPPayaxEiFUUtfG pf0JqCVnZwAaePnIj0uJto5DG7bVGMjEJIqoqRiR9lvld7+25F8MI2nRPLTO8+L6 76G1yYWSJhP6KdrnBX8n4mDVCswdnpaDtXHq22RGkbG5N319/yz3iHvb613bx7ZR gFISkd53DO78FlpHroaTTcSL9wMsUMDUHHMjFc4edXYf2UuZeioergY9GQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFK2/knNrDEKLpNPanuuSNyHQF9loMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvcmItU2Myc01Rb3VrMDlxZTY1STNJZEFYMldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBABnTFUD BANnTFADBAJ0zlwDBAHLvegwDQQCAAIwBwMFAyoPZwAwDQYJKoZIhvcNAQELBQAD ggEBABOPZk9QkToRwFBPKQyU/frmMiVWx1DERyyftCvTrftcbip3JIRw+ome0hqU XqqXhOnV3b11Bqu1zrP8uduj4xEyCHT4/6h/7NZHWOuEdHsngL+T7v/I/hKTGKOb YxDmo5jq8gPVxQO0Pwz2deLHCrIkIYr6RsD+RrTDfCMuKBSBE3HpXKtNYi8MzM+J ibvqhfimuTuEckZmtAybw1htBtldo9nHiNSWERakXw8sTjgpM/O0T1ijlrIIVF7/ vnWS3lYg6fOFZyE5YoeIq8hnJQmh6xxi8UBQ5Wydw4ns1atp6uuIl72N2wZjDVcc kMRhtObjr8T7SpkPWHm7vYAKXgc= -----END CERTIFICATE-----Generated at Sat Dec 6 16:43:53 2025 by rpki-client