This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/SfOe7Fk4wovyDTf65PPkUvpmOj8.roa File: SfOe7Fk4wovyDTf65PPkUvpmOj8.roa (raw, json) Hash identifier: IqHL6wYMj66T9G8mGNVSsyQbaYrfdIedvTge6Q1Bbhs= Subject key identifier: 49:F3:9E:EC:59:38:C2:8B:F2:0D:37:FA:E4:F3:E4:52:FA:66:3A:3F Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019BB79772CA7596FEEFEF88D8C0B6FC8D45 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/SfOe7Fk4wovyDTf65PPkUvpmOj8.roa Signing time: Tue 13 Jan 2026 13:41:54 +0000 ROA not before: Tue 13 Jan 2026 13:41:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 103.69.226.0/24 maxlen: 24 185.191.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:97:72:ca:75:96:fe:ef:ef:88:d8:c0:b6:fc:8d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jan 13 13:41:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49f39eec5938c28bf20d37fae4f3e452fa663a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:71:00:a2:f2:63:93:1f:00:0e:ee:4d:ec: c6:57:9c:97:12:d6:21:64:15:07:36:e2:06:71:8e: bf:9b:9c:a1:81:d8:3f:44:52:86:48:49:a3:c4:e9: ef:62:a6:82:57:41:f6:c9:89:f3:51:b4:01:66:f6: 74:03:f0:ba:53:51:c9:b1:32:f3:44:fb:ac:52:98: 83:d0:72:83:ab:ba:81:d2:8a:a7:af:52:9d:22:91: 77:77:58:fa:7d:e5:8a:44:8f:d6:c7:33:5e:a6:15: a1:7d:68:66:86:50:21:24:32:f6:b8:20:e0:b5:b5: 71:c1:1b:b6:3a:66:13:97:a7:65:e9:95:07:df:5c: 2e:a4:7d:18:6b:a2:e2:be:05:9c:b0:55:f2:f7:fe: 31:d7:c5:dc:3b:70:48:19:e5:b8:2c:d4:a1:e6:cf: 7f:eb:ff:b6:1c:d9:64:68:3b:14:44:5e:aa:82:75: b9:60:0e:21:93:a0:b4:09:df:46:07:53:bb:9e:68: 8f:aa:95:55:76:cc:f3:9c:d6:62:8b:2f:cc:90:15: 50:95:66:88:5b:f0:9c:47:b1:a5:a5:5f:c7:52:bb: 7f:3b:0d:7f:dd:2c:0f:09:a4:6a:58:82:b4:e0:a3: 4e:2a:56:ec:d3:41:0b:89:1f:03:42:1f:b3:47:89: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F3:9E:EC:59:38:C2:8B:F2:0D:37:FA:E4:F3:E4:52:FA:66:3A:3F X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/SfOe7Fk4wovyDTf65PPkUvpmOj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.226.0/24 185.191.21.0/24 Signature Algorithm: sha256WithRSAEncryption b4:bd:97:a5:14:3b:83:df:51:b4:fe:1e:ea:dd:5c:10:21:3e: 92:ad:95:c3:39:23:f0:7d:1f:b3:8e:76:91:78:f2:2a:15:ba: 46:ea:4f:74:f2:55:f6:56:f4:9f:be:1e:2c:cf:18:39:7a:f5: fd:17:44:03:7c:0c:02:1c:7c:5e:f4:be:80:2a:ea:88:4b:c8: f1:ab:45:b2:6e:17:63:71:29:ca:0d:19:d2:04:74:6d:38:db: 78:93:0e:52:57:7e:d9:c5:40:95:53:1b:af:a5:a5:b9:56:8c: 2c:f3:9b:99:e0:da:f5:12:bd:b6:51:17:ab:e5:b0:5b:c9:9e: 4f:97:18:34:e2:80:95:65:05:17:a3:9b:91:a3:5c:81:73:ef: 70:3f:f9:e3:ba:da:b9:46:37:c6:14:59:81:2f:1a:82:4e:4a: ad:4b:45:e5:f5:48:93:b5:c8:07:89:37:f9:2c:e6:e2:a9:4f: d0:92:0c:53:f0:b3:54:16:43:5e:5f:2a:0e:ee:04:36:69:e5: f2:47:4c:cf:37:c4:e2:f5:3c:d4:be:86:1a:db:72:63:ba:1c: 7c:9a:77:dc:4a:56:54:c2:1d:e4:fe:8c:ee:58:ac:2a:b2:5f: 61:80:06:42:1f:e3:ad:3a:e7:ef:f2:84:4c:c4:60:46:06:40: 4f:d0:91:bd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZu3l3LKdZb+7++I2MC2/I1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMTEzMTM0MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWYzOWVlYzU5MzhjMjhiZjIwZDM3ZmFlNGYzZTQ1MmZhNjYzYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp99xAKLyY5MfAA7uTezGV5yXEtYh ZBUHNuIGcY6/m5yhgdg/RFKGSEmjxOnvYqaCV0H2yYnzUbQBZvZ0A/C6U1HJsTLz RPusUpiD0HKDq7qB0oqnr1KdIpF3d1j6feWKRI/WxzNephWhfWhmhlAhJDL2uCDg tbVxwRu2OmYTl6dl6ZUH31wupH0Ya6LivgWcsFXy9/4x18XcO3BIGeW4LNSh5s9/ 6/+2HNlkaDsURF6qgnW5YA4hk6C0Cd9GB1O7nmiPqpVVdszznNZiiy/MkBVQlWaI W/CcR7GlpV/HUrt/Ow1/3SwPCaRqWIK04KNOKlbs00ELiR8DQh+zR4mNYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEnznuxZOMKL8g03+uTz5FL6Zjo/MB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvU2ZPZTdGazR3b3Z5RFRmNjVQUGtVdnBtT2o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ0XiAwQA ub8VMA0GCSqGSIb3DQEBCwUAA4IBAQC0vZelFDuD31G0/h7q3VwQIT6SrZXDOSPw fR+zjnaRePIqFbpG6k908lX2VvSfvh4szxg5evX9F0QDfAwCHHxe9L6AKuqIS8jx q0WybhdjcSnKDRnSBHRtONt4kw5SV37ZxUCVUxuvpaW5Vows85uZ4Nr1Er22URer 5bBbyZ5Plxg04oCVZQUXo5uRo1yBc+9wP/njutq5RjfGFFmBLxqCTkqtS0Xl9UiT tcgHiTf5LObiqU/QkgxT8LNUFkNeXyoO7gQ2aeXyR0zPN8Ti9TzUvoYa23Jjuhx8 mnfcSlZUwh3k/ozuWKwqsl9hgAZCH+OtOufv8oRMxGBGBkBP0JG9 -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:26 2026 by rpki-client