This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/aLtWeupezBLiYrwMc00VinuvN_k.roa File: aLtWeupezBLiYrwMc00VinuvN_k.roa (raw, json) Hash identifier: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0= Subject key identifier: 68:BB:56:7A:EA:5E:CC:12:E2:62:BC:0C:73:4D:15:8A:7B:AF:37:F9 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019B7E381E3366930FE75CCC52DB95E27B89 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/aLtWeupezBLiYrwMc00VinuvN_k.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214036 IP address blocks: 103.229.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1e:33:66:93:0f:e7:5c:cc:52:db:95:e2:7b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68bb567aea5ecc12e262bc0c734d158a7baf37f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:c5:25:1b:ad:b8:0b:fa:28:21:0e:7e:a1: e1:7c:d3:b2:05:e7:bf:70:a5:e9:e7:e2:01:75:0b: 8f:6e:f8:54:87:02:7c:20:14:6f:9d:86:67:a8:13: 72:35:a5:75:de:e2:7d:1e:4c:f4:5f:02:3f:a2:58: 74:30:19:e5:a4:f6:7c:c7:f6:b9:e3:70:4e:72:fe: d5:d0:b7:e0:0b:fc:ba:8e:74:54:31:69:0a:3b:82: 14:cc:c3:33:bb:d7:93:f5:81:f5:c4:f5:f3:8e:e5: e0:0e:27:31:62:88:a0:2a:86:69:fb:a4:c6:bc:7c: e9:17:da:89:bc:44:3d:ac:a2:45:91:0f:7c:8d:ff: 14:ae:a6:7f:80:3a:48:31:bf:aa:ed:be:2d:24:ce: 7c:7a:8d:eb:7e:05:1d:89:f9:f4:f3:ee:66:54:6d: 12:9d:d9:77:7b:ae:f9:4d:10:c1:93:b9:6e:88:8a: 10:95:03:9d:89:0c:15:64:62:07:18:41:52:3c:cb: 4b:ff:bd:c0:cf:74:f8:99:89:ae:3a:d1:82:59:9b: 87:25:2a:77:9c:81:e4:69:28:22:cf:db:c1:47:71: 59:5b:6f:3f:16:07:70:4e:71:ca:ee:69:fd:db:b8: 2a:10:c3:f8:66:e6:13:6b:a3:a9:34:9b:93:12:79: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BB:56:7A:EA:5E:CC:12:E2:62:BC:0C:73:4D:15:8A:7B:AF:37:F9 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/aLtWeupezBLiYrwMc00VinuvN_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.81.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:b2:0b:08:08:63:ef:e2:a9:46:b3:7d:37:54:83:b6:ca:7e: 82:19:54:4a:5e:99:f0:83:e1:f0:85:a1:64:a5:47:ef:15:6b: 5f:e1:c9:ee:01:ac:86:5a:a6:32:86:13:5c:c8:10:a7:36:88: 4e:38:e9:3f:14:32:f8:e1:33:b5:fe:bd:ed:f3:a1:cf:99:a3: 27:96:79:86:ec:b6:48:9f:4e:7b:86:43:b3:82:c0:00:7a:32: 72:18:90:89:1a:a7:24:c5:03:2a:96:12:f1:10:4a:64:ce:55: 1f:f7:bb:94:c2:0e:7a:2e:ce:ae:bd:42:63:b0:e0:41:88:e3: 11:aa:fc:84:12:9a:6b:5e:b5:ee:eb:fe:bd:34:20:f6:01:a3: 71:24:81:9c:b1:62:de:39:81:b0:34:23:97:d2:c8:f8:22:b3: 4d:1b:68:67:9d:93:c2:da:f6:04:a7:d9:73:52:14:1a:76:71: 6c:bf:48:35:f2:5a:74:70:7a:3e:e4:34:9c:1f:63:30:7f:8e: 42:d3:ad:c3:56:d3:13:bc:cb:78:b5:2e:7b:11:81:df:a1:b1: c4:8d:07:fc:00:3c:5e:4c:89:87:f6:ed:54:46:55:c1:6c:59: a4:3a:94:73:13:71:2d:03:0f:5d:6c:f1:6e:88:35:f8:c7:4c: 28:ea:9e:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OB4zZpMP51zMUtuV4nuJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGJiNTY3YWVhNWVjYzEyZTI2MmJjMGM3MzRkMTU4YTdiYWYzN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyzFJRutuAv6KCEOfqHhfNOyBee/ cKXp5+IBdQuPbvhUhwJ8IBRvnYZnqBNyNaV13uJ9Hkz0XwI/olh0MBnlpPZ8x/a5 43BOcv7V0LfgC/y6jnRUMWkKO4IUzMMzu9eT9YH1xPXzjuXgDicxYoigKoZp+6TG vHzpF9qJvEQ9rKJFkQ98jf8UrqZ/gDpIMb+q7b4tJM58eo3rfgUdifn08+5mVG0S ndl3e675TRDBk7luiIoQlQOdiQwVZGIHGEFSPMtL/73Az3T4mYmuOtGCWZuHJSp3 nIHkaSgiz9vBR3FZW28/FgdwTnHK7mn927gqEMP4ZuYTa6OpNJuTEnmzzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGi7VnrqXswS4mK8DHNNFYp7rzf5MB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvYUx0V2V1cGV6QkxpWXJ3TWMwMFZpbnV2Tl9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+VRMA0G CSqGSIb3DQEBCwUAA4IBAQBvsgsICGPv4qlGs303VIO2yn6CGVRKXpnwg+HwhaFk pUfvFWtf4cnuAayGWqYyhhNcyBCnNohOOOk/FDL44TO1/r3t86HPmaMnlnmG7LZI n057hkOzgsAAejJyGJCJGqckxQMqlhLxEEpkzlUf97uUwg56Ls6uvUJjsOBBiOMR qvyEEpprXrXu6/69NCD2AaNxJIGcsWLeOYGwNCOX0sj4IrNNG2hnnZPC2vYEp9lz UhQadnFsv0g18lp0cHo+5DScH2Mwf45C063DVtMTvMt4tS57EYHfobHEjQf8ADxe TImH9u1URlXBbFmkOpRzE3EtAw9dbPFuiDX4x0wo6p6I -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:40 2026 by rpki-client