This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ebG0kvbq_8suazeELOsMQ69XvE8.roa File: ebG0kvbq_8suazeELOsMQ69XvE8.roa (raw, json) Hash identifier: TG9TudoAesj1oyPXl2faSn6fOhgWxo8Xmyr4vJj1DCk= Subject key identifier: 79:B1:B4:92:F6:EA:FF:CB:2E:6B:37:84:2C:EB:0C:43:AF:57:BC:4F Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAFE56FCB15C7E288BDAE75DA090B1 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ebG0kvbq_8suazeELOsMQ69XvE8.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211252 IP address blocks: 103.20.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fe:56:fc:b1:5c:7e:28:8b:da:e7:5d:a0:90:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79b1b492f6eaffcb2e6b37842ceb0c43af57bc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:04:f1:53:8c:49:8c:df:5d:57:7a:26:0e: a3:52:64:47:a2:c9:84:a8:39:42:21:f8:b5:6f:34: 7b:11:ff:4a:46:3c:37:11:58:1a:7d:f4:b7:b6:a5: 0b:7f:6b:5c:9a:86:af:d0:55:d1:9d:67:9e:57:af: 08:48:37:13:5c:8c:3a:da:80:c1:bf:88:05:b4:f0: bc:6a:53:8b:3f:3f:a2:4f:7b:0a:60:a6:57:29:ea: f1:5c:d5:31:19:34:c0:b4:43:46:cf:56:f2:41:74: 3b:47:70:bb:bd:75:3a:01:d0:9d:c6:19:d9:0f:15: 64:e5:c7:05:49:c1:91:1f:cb:40:70:42:7e:d4:85: 91:6f:cb:f8:d7:5a:f5:ac:66:ce:fb:68:c2:e6:b5: 45:92:b7:40:a1:a8:53:d5:e8:9d:f4:d8:64:aa:7f: a7:c2:61:83:0b:3d:45:ab:e0:a8:3c:38:eb:ac:a8: f4:84:45:9d:32:d2:e3:33:d5:51:e2:09:7c:36:c8: ca:5a:5f:8b:fb:28:54:43:2a:d0:de:65:cb:ac:49: 5a:35:85:f9:fa:e4:85:88:10:35:2c:98:6b:7a:cc: 7c:37:02:2a:5f:0c:ab:a8:37:74:00:44:af:5d:e8: b1:5f:1b:13:73:36:10:25:83:55:60:e1:31:e3:e0: 07:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B1:B4:92:F6:EA:FF:CB:2E:6B:37:84:2C:EB:0C:43:AF:57:BC:4F X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ebG0kvbq_8suazeELOsMQ69XvE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.36.0/22 Signature Algorithm: sha256WithRSAEncryption b0:24:76:ac:c7:31:22:61:5d:7f:42:05:f3:cc:c2:87:25:ae: 5b:c4:45:ec:0f:9e:5b:91:88:f3:2f:b3:0e:0b:b4:78:ac:6a: 74:d1:e6:a5:bd:94:dc:71:86:31:7c:68:56:44:8b:dd:ac:a2: e0:d7:9b:66:25:8a:a0:11:35:83:c9:a3:59:d6:32:ab:63:c8: b9:22:58:c0:64:43:4e:63:a6:77:26:bd:20:ac:93:08:06:b4: 7b:3e:ac:ca:a9:11:97:db:ff:49:12:aa:5d:57:0b:b3:60:2c: 7a:59:22:e5:d6:3b:ff:0b:37:e1:ab:94:24:14:31:02:a0:fc: ce:41:e3:38:44:b1:14:6d:b5:b0:93:28:e5:d2:17:17:da:94: 33:fb:a7:97:a4:a1:d2:b9:af:62:6b:f8:f6:22:12:62:14:bb: b6:fa:74:fc:47:90:e9:70:1f:10:fb:95:6e:e9:8c:11:ef:02: 70:0c:6c:ee:04:d5:10:57:6b:bd:51:53:11:b3:33:b1:ff:f4: 5b:c9:0c:f5:f6:8a:a0:7a:63:ac:53:5e:67:8e:f0:df:dc:b9: a1:03:10:b4:c9:3c:2f:7b:b7:39:74:e9:54:0f:e0:d5:65:35: 1f:db:0d:4e:6a:2d:ff:83:2d:07:7e:c5:15:a6:c2:0b:08:f9: c4:24:bc:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26v5W/LFcfiiL2uddoJCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWIxYjQ5MmY2ZWFmZmNiMmU2YjM3ODQyY2ViMGM0M2FmNTdiYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuesE8VOMSYzfXVd6Jg6jUmRHosmE qDlCIfi1bzR7Ef9KRjw3EVgaffS3tqULf2tcmoav0FXRnWeeV68ISDcTXIw62oDB v4gFtPC8alOLPz+iT3sKYKZXKerxXNUxGTTAtENGz1byQXQ7R3C7vXU6AdCdxhnZ DxVk5ccFScGRH8tAcEJ+1IWRb8v411r1rGbO+2jC5rVFkrdAoahT1eid9Nhkqn+n wmGDCz1Fq+CoPDjrrKj0hEWdMtLjM9VR4gl8NsjKWl+L+yhUQyrQ3mXLrElaNYX5 +uSFiBA1LJhresx8NwIqXwyrqDd0AESvXeixXxsTczYQJYNVYOEx4+AH4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmxtJL26v/LLms3hCzrDEOvV7xPMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvZWJHMGt2YnFfOHN1YXplRUxPc01RNjlYdkU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxQkMA0G CSqGSIb3DQEBCwUAA4IBAQCwJHasxzEiYV1/QgXzzMKHJa5bxEXsD55bkYjzL7MO C7R4rGp00ealvZTccYYxfGhWRIvdrKLg15tmJYqgETWDyaNZ1jKrY8i5IljAZENO Y6Z3Jr0grJMIBrR7PqzKqRGX2/9JEqpdVwuzYCx6WSLl1jv/Czfhq5QkFDECoPzO QeM4RLEUbbWwkyjl0hcX2pQz+6eXpKHSua9ia/j2IhJiFLu2+nT8R5DpcB8Q+5Vu 6YwR7wJwDGzuBNUQV2u9UVMRszOx//RbyQz19oqgemOsU15njvDf3LmhAxC0yTwv e7c5dOlUD+DVZTUf2w1Oai3/gy0HfsUVpsILCPnEJLy1 -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:33 2026 by rpki-client