This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/b4_PAl3FJwHiYfqnX5gTO4eMtKc.roa File: b4_PAl3FJwHiYfqnX5gTO4eMtKc.roa (raw, json) Hash identifier: t+y+s2bg0wHTOTBG1WRXdbaJkbccAgcQxZ+uEghw71Q= Subject key identifier: 6F:8F:CF:02:5D:C5:27:01:E2:61:FA:A7:5F:98:13:3B:87:8C:B4:A7 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019BE12F94546B41213BAE9ACE9C3F9C0956 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/b4_PAl3FJwHiYfqnX5gTO4eMtKc.roa Signing time: Wed 21 Jan 2026 15:32:30 +0000 ROA not before: Wed 21 Jan 2026 15:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 103.228.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:2f:94:54:6b:41:21:3b:ae:9a:ce:9c:3f:9c:09:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 21 15:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f8fcf025dc52701e261faa75f98133b878cb4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:37:41:92:54:bc:44:8b:fc:00:e6:a3:69: 79:a5:5a:31:65:f3:62:0f:44:a2:4c:8f:c2:aa:a3: 5e:d0:89:4d:25:88:0e:5f:16:bf:aa:34:4a:35:fc: 24:dc:a1:da:cb:b6:1e:40:e2:ac:64:3d:6a:0f:2b: 8d:bb:62:52:bc:b1:82:7a:4b:34:bb:bc:9b:bd:d0: bf:fd:55:89:59:48:a0:34:8b:6b:25:da:2f:3b:ce: 53:86:36:e1:18:da:aa:e4:6c:3d:9e:56:40:4e:9d: 2e:14:d0:52:a7:7f:65:fa:8e:ba:6a:e6:6c:36:11: c3:c5:a3:18:bd:f7:76:24:f2:a3:48:53:1e:40:7a: 22:90:a9:73:d5:cb:2d:e2:da:a3:c5:7f:96:1d:77: 55:39:c1:b3:43:f6:96:94:63:3e:f7:68:15:85:5c: 04:2d:bb:2e:65:15:6f:9a:8b:bc:4e:ea:81:b8:2f: 6d:ce:b7:1c:29:8b:d9:a9:b9:b0:c4:6a:50:96:4b: 00:22:36:91:9c:1f:02:2c:22:f4:5a:42:5c:0f:fa: 10:e6:e1:33:f1:e7:b3:d1:99:46:42:3e:99:67:ed: e4:9a:a8:b4:3d:79:b1:e1:ee:b8:86:67:11:af:23: d7:d2:50:69:26:68:33:0a:42:25:cc:e2:a9:8b:be: e5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8F:CF:02:5D:C5:27:01:E2:61:FA:A7:5F:98:13:3B:87:8C:B4:A7 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/b4_PAl3FJwHiYfqnX5gTO4eMtKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.128.0/22 Signature Algorithm: sha256WithRSAEncryption af:eb:8a:bb:c6:2b:78:84:9d:c5:14:68:b0:bb:b8:8a:55:eb: 51:1b:1c:ba:05:b6:3f:5e:6b:13:ad:24:61:f7:39:00:73:67: 18:2f:f3:a6:e3:94:40:e7:71:0b:41:b7:0c:a6:60:8a:b0:31: 41:ee:2d:c3:0d:8b:40:cf:6a:7b:15:29:2a:74:06:9f:45:dd: ad:77:fd:d2:da:e5:0c:8b:47:68:31:69:15:3f:ce:c1:ba:b5: d1:d0:d3:60:80:d0:21:b0:de:33:f5:02:b0:5a:a6:ff:d8:23: 24:dc:6d:12:51:9a:71:08:04:94:db:47:74:f1:6a:4b:dd:50: 70:ac:5b:c2:8f:ca:eb:36:fb:4b:50:9f:cc:b2:97:75:ae:be: 54:37:7c:86:fd:e3:24:cc:58:3f:36:57:95:d6:05:a1:bf:4a: 15:0f:c3:1a:ad:fc:14:62:02:10:c1:47:3d:ca:bc:26:dd:0e: 22:25:d1:5a:57:65:de:5d:ed:a3:09:cf:08:45:4e:7d:b8:ab: d5:bd:62:ab:84:fc:14:5c:ff:82:82:fd:5f:39:87:1f:fd:b6: 79:89:fe:aa:73:23:4c:25:6f:e8:1f:4a:12:65:3b:58:d9:ff: 42:b5:5e:b6:f5:98:04:7b:4e:81:da:cb:0c:ee:eb:0a:94:da: 01:c3:fd:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvhL5RUa0EhO66azpw/nAlWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTIxMTUzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjhmY2YwMjVkYzUyNzAxZTI2MWZhYTc1Zjk4MTMzYjg3OGNiNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRc3QZJUvESL/ADmo2l5pVoxZfNi D0SiTI/CqqNe0IlNJYgOXxa/qjRKNfwk3KHay7YeQOKsZD1qDyuNu2JSvLGCeks0 u7ybvdC//VWJWUigNItrJdovO85ThjbhGNqq5Gw9nlZATp0uFNBSp39l+o66auZs NhHDxaMYvfd2JPKjSFMeQHoikKlz1cst4tqjxX+WHXdVOcGzQ/aWlGM+92gVhVwE LbsuZRVvmou8TuqBuC9tzrccKYvZqbmwxGpQlksAIjaRnB8CLCL0WkJcD/oQ5uEz 8eez0ZlGQj6ZZ+3kmqi0PXmx4e64hmcRryPX0lBpJmgzCkIlzOKpi77lPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+PzwJdxScB4mH6p1+YEzuHjLSnMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvYjRfUEFsM0ZKd0hpWWZxblg1Z1RPNGVNdEtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+SAMA0G CSqGSIb3DQEBCwUAA4IBAQCv64q7xit4hJ3FFGiwu7iKVetRGxy6BbY/XmsTrSRh 9zkAc2cYL/Om45RA53ELQbcMpmCKsDFB7i3DDYtAz2p7FSkqdAafRd2td/3S2uUM i0doMWkVP87BurXR0NNggNAhsN4z9QKwWqb/2CMk3G0SUZpxCASU20d08WpL3VBw rFvCj8rrNvtLUJ/Mspd1rr5UN3yG/eMkzFg/NleV1gWhv0oVD8MarfwUYgIQwUc9 yrwm3Q4iJdFaV2XeXe2jCc8IRU59uKvVvWKrhPwUXP+Cgv1fOYcf/bZ5if6qcyNM JW/oH0oSZTtY2f9CtV629ZgEe06B2ssM7usKlNoBw/3Z -----END CERTIFICATE-----Generated at Sun Jan 25 07:25:47 2026 by rpki-client