This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BKsDjyt7woIIXCAVgHp1dH5HosI.roa File: BKsDjyt7woIIXCAVgHp1dH5HosI.roa (raw, json) Hash identifier: B1rNAAOV81i3HetVmA48DqVvvBMtTb1oJtyU1HvbAeU= Subject key identifier: 04:AB:03:8F:2B:7B:C2:82:08:5C:20:15:80:7A:75:74:7E:47:A2:C2 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EB033AEDDB5FE49C3AB45D4C95E793 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BKsDjyt7woIIXCAVgHp1dH5HosI.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216415 IP address blocks: 103.25.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:03:3a:ed:db:5f:e4:9c:3a:b4:5d:4c:95:e7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04ab038f2b7bc282085c2015807a75747e47a2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:45:a7:97:d2:b2:d2:77:49:c1:a1:ff:a7: da:95:b6:b8:ef:28:55:15:9b:1d:6a:fa:8a:0e:4c: 1f:c0:61:0b:34:c9:b8:68:62:c6:13:50:f9:fa:05: 16:e6:66:0b:77:58:eb:89:e6:51:57:8d:23:e6:f5: 85:7e:bc:76:e9:53:37:36:4a:4a:52:00:f6:4f:d6: c3:f0:b1:cd:e6:0b:22:23:ab:da:e1:9f:2b:3b:dc: 07:7b:5d:09:f5:94:3c:05:e9:fd:24:ce:c9:66:33: 35:a8:00:56:0a:27:1a:80:57:f8:d7:4b:cd:cc:9c: fe:79:e6:e2:09:f9:7b:67:4a:6d:76:f1:4b:d9:56: 2f:61:0b:c7:8e:da:74:86:2d:0a:10:c1:65:e8:6b: 96:fc:c1:b9:2f:61:56:1b:7b:9a:85:00:14:72:e1: 0e:9d:3f:87:f8:b4:2c:cb:6e:21:3f:c1:7d:5c:8f: 33:1b:4f:40:ce:9f:1b:d7:0d:b1:ca:11:ce:98:4e: 24:33:9a:ac:4b:fb:04:2c:b8:82:b2:3b:04:68:f2: 8c:90:cb:d4:2d:9d:a1:7e:1b:3a:47:95:f4:0e:fb: fd:2f:db:3e:26:2b:fb:5c:bd:fb:12:79:63:3f:4a: b7:f0:c1:9d:d4:be:ff:90:01:05:b0:eb:0f:1c:89: 65:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AB:03:8F:2B:7B:C2:82:08:5C:20:15:80:7A:75:74:7E:47:A2:C2 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BKsDjyt7woIIXCAVgHp1dH5HosI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.85.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:c4:58:7d:a4:6e:c8:ea:fd:ab:ee:6e:12:28:a8:17:65:0b: 30:2b:3a:8b:39:3f:8d:44:7a:1a:03:62:39:11:f4:23:a8:dd: 0f:de:40:e8:e0:31:c7:cc:2f:98:3f:56:24:8b:5b:14:93:c7: 7b:9f:cb:21:57:18:f5:a4:0c:91:4c:ee:bf:19:76:18:11:2b: a4:32:7b:30:be:de:bd:dd:0a:2f:30:0a:9b:7e:4c:2d:30:77: 5a:e0:8d:8e:6d:56:61:72:4e:20:91:ae:48:83:f9:08:8f:ce: 0b:bc:98:82:99:dd:e5:95:76:08:96:6e:4b:12:8e:3d:38:81: 7f:12:d0:31:71:32:7c:cd:ca:87:5e:f1:b9:6e:82:6f:1f:01: f5:bb:7f:6f:8e:0a:2a:86:ce:16:b7:92:df:10:56:be:d9:71: 36:6b:af:18:5c:03:f1:89:4a:9d:1c:26:27:b2:cd:06:65:3e: f8:2b:e3:93:80:04:a8:14:36:f6:f5:95:96:cd:ca:30:7c:21: b2:41:ed:9a:ea:3e:4b:f3:39:af:f2:52:ca:d7:6c:23:3c:9a: 68:95:61:e3:79:3f:07:aa:49:b0:90:ad:98:b1:bb:38:12:66: b5:07:aa:ab:29:21:a8:69:ff:22:1a:2a:10:ce:ed:72:fa:10: 06:e4:2e:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26wM67dtf5Jw6tF1MleeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGFiMDM4ZjJiN2JjMjgyMDg1YzIwMTU4MDdhNzU3NDdlNDdhMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGJFp5fSstJ3ScGh/6falba47yhV FZsdavqKDkwfwGELNMm4aGLGE1D5+gUW5mYLd1jrieZRV40j5vWFfrx26VM3NkpK UgD2T9bD8LHN5gsiI6va4Z8rO9wHe10J9ZQ8Ben9JM7JZjM1qABWCicagFf410vN zJz+eebiCfl7Z0ptdvFL2VYvYQvHjtp0hi0KEMFl6GuW/MG5L2FWG3uahQAUcuEO nT+H+LQsy24hP8F9XI8zG09Azp8b1w2xyhHOmE4kM5qsS/sELLiCsjsEaPKMkMvU LZ2hfhs6R5X0Dvv9L9s+Jiv7XL37EnljP0q38MGd1L7/kAEFsOsPHIllXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFASrA48re8KCCFwgFYB6dXR+R6LCMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvQktzRGp5dDd3b0lJWENBVmdIcDFkSDVIb3NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxlVMA0G CSqGSIb3DQEBCwUAA4IBAQA9xFh9pG7I6v2r7m4SKKgXZQswKzqLOT+NRHoaA2I5 EfQjqN0P3kDo4DHHzC+YP1Yki1sUk8d7n8shVxj1pAyRTO6/GXYYESukMnswvt69 3QovMAqbfkwtMHda4I2ObVZhck4gka5Ig/kIj84LvJiCmd3llXYIlm5LEo49OIF/ EtAxcTJ8zcqHXvG5boJvHwH1u39vjgoqhs4Wt5LfEFa+2XE2a68YXAPxiUqdHCYn ss0GZT74K+OTgASoFDb29ZWWzcowfCGyQe2a6j5L8zmv8lLK12wjPJpolWHjeT8H qkmwkK2Ysbs4Ema1B6qrKSGoaf8iGioQzu1y+hAG5C7h -----END CERTIFICATE-----Generated at Sun Jan 25 12:00:52 2026 by rpki-client