This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kO9WlUparYb6jLj3Al1HAfYWyc4.roa File: kO9WlUparYb6jLj3Al1HAfYWyc4.roa (raw, json) Hash identifier: uf/Ee/JGBTSZ54j7ty6QwzOZpLC0w43Jza7tQwup4Iw= Subject key identifier: 90:EF:56:95:4A:5A:AD:86:FA:8C:B8:F7:02:5D:47:01:F6:16:C9:CE Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019B77C741E6D5E65CA792229F3333DB9324 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kO9WlUparYb6jLj3Al1HAfYWyc4.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54252 IP address blocks: 103.69.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:41:e6:d5:e6:5c:a7:92:22:9f:33:33:db:93:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90ef56954a5aad86fa8cb8f7025d4701f616c9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:8d:bf:44:08:cf:ce:99:e4:e3:a6:2d:f3: 5d:4a:b9:88:b9:70:5b:1c:de:22:ad:13:ba:26:56: c2:15:9d:20:5a:ad:5e:0b:72:d4:4c:fc:e1:fa:91: 91:f3:07:9b:d2:36:76:81:4d:78:4d:e9:c2:21:8b: 03:e1:09:32:ee:6d:2a:ff:be:02:b0:e0:fa:45:34: 04:ac:75:34:3b:bd:73:32:1b:39:f6:84:c8:d0:7a: ee:ca:e0:1f:1c:a1:a0:f1:6e:27:b4:2b:26:63:0f: 85:46:a9:19:9f:33:33:ad:d2:df:32:bd:74:f0:39: 46:5e:1f:4a:75:80:e1:96:be:d6:94:9f:cb:65:56: 6c:ff:52:6d:d6:76:18:fb:c2:fd:f5:11:4c:ac:67: 31:3f:ba:50:5d:09:c0:9d:f1:5c:b8:5a:46:e6:8c: aa:ee:e1:23:d4:9f:75:14:9c:0c:86:47:b3:c0:b7: b7:cf:75:12:6e:c2:28:20:27:f6:80:b7:1a:f3:de: 52:4a:63:37:5f:e4:cf:81:11:38:86:55:1e:24:92: b6:00:3b:d1:09:87:b9:57:0e:07:89:05:3a:db:69: e1:64:13:1e:61:fd:2a:f0:89:7b:97:0e:67:2b:66: 41:57:7c:b0:45:2f:98:70:1f:bd:0a:03:6d:70:bf: 78:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EF:56:95:4A:5A:AD:86:FA:8C:B8:F7:02:5D:47:01:F6:16:C9:CE X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kO9WlUparYb6jLj3Al1HAfYWyc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.227.0/24 Signature Algorithm: sha256WithRSAEncryption 56:04:c2:fe:a8:89:f8:89:9d:2f:b7:f8:fc:33:6a:95:0e:ad: fb:43:c3:e0:c6:96:8c:45:a8:8f:80:eb:24:df:e9:97:3f:90: 1a:35:75:60:66:a1:18:b2:10:1a:4b:9f:35:02:a7:30:35:09: 30:00:4c:1b:b7:76:e3:d9:db:f1:19:84:1e:bb:e4:37:10:c5: c5:32:81:80:76:71:6d:b9:e3:39:f9:ae:6d:35:27:67:6e:d1: a5:a6:4f:a5:1c:d7:ab:b1:2a:2e:c4:3e:9d:ec:c3:80:c3:1e: a3:a8:05:9c:30:55:01:a4:60:33:13:2d:e2:29:71:ea:41:7d: c4:2b:95:84:25:d7:21:06:61:76:d7:25:aa:f8:6d:9d:d0:58: 35:77:76:2e:3b:3b:f1:3a:8b:23:6f:2e:9a:2e:19:5c:24:62: 04:25:3c:60:b4:8a:f0:20:37:a3:8a:a6:bf:3d:dc:42:9e:1d: ce:ab:17:1d:8d:28:42:02:95:59:c6:ea:47:dd:9a:55:ef:69: bf:8a:38:7c:f7:62:cc:df:7c:22:8a:80:8b:0e:54:f5:a9:59: 24:36:88:66:33:c4:06:ad:af:6b:36:27:e4:86:eb:4d:4c:c3: 16:c2:ee:18:42:f2:65:b5:0f:f4:90:8d:32:e9:f6:60:5f:6a: 05:bc:1a:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0Hm1eZcp5IinzMz25MkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGVmNTY5NTRhNWFhZDg2ZmE4Y2I4ZjcwMjVkNDcwMWY2MTZjOWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfyNv0QIz86Z5OOmLfNdSrmIuXBb HN4irRO6JlbCFZ0gWq1eC3LUTPzh+pGR8web0jZ2gU14TenCIYsD4Qky7m0q/74C sOD6RTQErHU0O71zMhs59oTI0HruyuAfHKGg8W4ntCsmYw+FRqkZnzMzrdLfMr10 8DlGXh9KdYDhlr7WlJ/LZVZs/1Jt1nYY+8L99RFMrGcxP7pQXQnAnfFcuFpG5oyq 7uEj1J91FJwMhkezwLe3z3USbsIoICf2gLca895SSmM3X+TPgRE4hlUeJJK2ADvR CYe5Vw4HiQU622nhZBMeYf0q8Il7lw5nK2ZBV3ywRS+YcB+9CgNtcL94HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJDvVpVKWq2G+oy49wJdRwH2FsnOMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEva085V2xVcGFyWWI2akxqM0FsMUhBZllXeWM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0XjMA0G CSqGSIb3DQEBCwUAA4IBAQBWBML+qIn4iZ0vt/j8M2qVDq37Q8PgxpaMRaiPgOsk 3+mXP5AaNXVgZqEYshAaS581AqcwNQkwAEwbt3bj2dvxGYQeu+Q3EMXFMoGAdnFt ueM5+a5tNSdnbtGlpk+lHNersSouxD6d7MOAwx6jqAWcMFUBpGAzEy3iKXHqQX3E K5WEJdchBmF21yWq+G2d0Fg1d3YuOzvxOosjby6aLhlcJGIEJTxgtIrwIDejiqa/ PdxCnh3OqxcdjShCApVZxupH3ZpV72m/ijh892LM33wiioCLDlT1qVkkNohmM8QG ra9rNifkhutNTMMWwu4YQvJltQ/0kI0y6fZgX2oFvBqo -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:12 2026 by rpki-client