This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/rrn-hLlASc3QfQ_2G9XagIYTuhQ.roa File: rrn-hLlASc3QfQ_2G9XagIYTuhQ.roa (raw, json) Hash identifier: 6mhOZyZWiBej5y33Jy7KbJNVz0VK2ieBWiaEGjbBwok= Subject key identifier: AE:B9:FE:84:B9:40:49:CD:D0:7D:0F:F6:1B:D5:DA:80:86:13:BA:14 Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Certificate serial: 019BB74C5EEA481DD959EB34171980504190 Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/rrn-hLlASc3QfQ_2G9XagIYTuhQ.roa Signing time: Tue 13 Jan 2026 12:19:54 +0000 ROA not before: Tue 13 Jan 2026 12:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212667 IP address blocks: 103.160.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:4c:5e:ea:48:1d:d9:59:eb:34:17:19:80:50:41:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Validity Not Before: Jan 13 12:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aeb9fe84b94049cdd07d0ff61bd5da808613ba14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:32:ac:6d:1b:7a:8f:ae:32:7e:34:44:a6:5a: 3a:23:08:e2:94:29:60:f4:a5:04:21:78:16:17:6a: dd:35:af:24:4c:a8:26:dd:16:ef:c4:ba:0f:4a:8c: 7a:a9:66:5f:47:3f:d0:51:10:6c:38:bb:50:ea:b7: cb:79:83:ef:4a:b4:ab:60:03:24:08:dc:e4:d6:55: f9:25:cf:73:17:b3:bd:fe:4c:4a:ee:b0:6c:fd:88: 89:a1:18:29:ea:e1:cc:df:43:d7:7d:d7:d6:d8:12: df:ca:d7:b8:26:60:25:a4:bc:01:4b:7d:1e:9e:8f: e3:85:d7:8f:a3:13:56:11:aa:40:8a:6a:74:a9:c4: 38:4e:fb:22:e0:7c:b0:6e:2c:dd:93:82:d8:42:bf: 21:be:0b:d5:f7:f7:3a:bb:fa:7a:fe:27:26:8a:21: ad:33:b8:38:a9:7a:fc:90:ef:1c:14:dc:ee:ce:ae: 1f:85:04:07:8b:98:78:de:cc:5a:ba:6b:7b:11:0e: fb:85:df:a5:bd:52:16:6b:29:be:0d:c3:6d:66:47: a8:99:cd:af:49:07:f2:3e:67:86:ad:53:9f:7f:83: ad:98:4d:8d:c6:fb:8a:94:f9:eb:5e:02:36:0c:fa: 98:e5:a5:47:2a:44:cc:56:38:c5:87:74:6e:c3:63: 89:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B9:FE:84:B9:40:49:CD:D0:7D:0F:F6:1B:D5:DA:80:86:13:BA:14 X509v3 Authority Key Identifier: keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/rrn-hLlASc3QfQ_2G9XagIYTuhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.59.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:7c:be:d3:d9:51:3e:c8:63:90:5d:e7:57:32:4b:91:5e:1c: ef:e0:b9:47:f6:c8:9c:1c:ce:78:cb:59:61:6b:d9:b6:1c:9c: e3:43:37:16:10:0d:77:ef:c6:8b:ab:52:1d:66:4d:86:9f:18: 7d:09:16:d4:aa:c9:5b:76:36:b3:70:46:2a:c9:f9:67:1f:85: d7:ac:88:c1:10:35:50:eb:0b:c1:6b:12:ac:95:e8:62:fb:05: 1e:39:eb:0e:d8:39:e9:a8:e2:52:ed:72:18:49:d9:b1:58:b6: 65:0f:64:c5:3a:78:68:f7:23:69:59:5b:aa:9b:94:c6:36:b0: da:5d:33:89:2b:47:d0:91:51:39:87:67:e8:21:e3:e7:f8:2e: 72:e6:23:59:b3:2d:6e:7e:10:ca:f5:82:f3:14:45:9f:cd:7b: 37:22:dd:ff:39:0c:8f:4f:7a:2d:b7:34:3b:b7:6b:8e:99:e0: 4c:b0:1e:59:04:cd:9b:6d:6c:ba:b0:12:25:4b:d6:94:5e:8e: 8e:2c:b2:05:3b:25:f6:a0:f6:b2:bd:ef:bf:1d:d1:32:23:a3: 97:4d:95:51:24:83:a3:ca:a4:7b:e0:f2:f8:6c:01:9b:a4:6c: af:9f:e7:67:28:22:76:3f:8a:9e:e8:8c:86:ac:59:d8:3e:38: 7c:36:91:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu3TF7qSB3ZWes0FxmAUEGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjI2Mjc2NzI4NzdkMGY2ZGU5YmM0ZTdlMTg2ZWVkZDEz NTYxMTAwHhcNMjYwMTEzMTIxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWI5ZmU4NGI5NDA0OWNkZDA3ZDBmZjYxYmQ1ZGE4MDg2MTNiYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TKsbRt6j64yfjREplo6IwjilClg 9KUEIXgWF2rdNa8kTKgm3RbvxLoPSox6qWZfRz/QURBsOLtQ6rfLeYPvSrSrYAMk CNzk1lX5Jc9zF7O9/kxK7rBs/YiJoRgp6uHM30PXfdfW2BLfyte4JmAlpLwBS30e no/jhdePoxNWEapAimp0qcQ4Tvsi4Hywbizdk4LYQr8hvgvV9/c6u/p6/icmiiGt M7g4qXr8kO8cFNzuzq4fhQQHi5h43sxaumt7EQ77hd+lvVIWaym+DcNtZkeomc2v SQfyPmeGrVOff4OtmE2NxvuKlPnrXgI2DPqY5aVHKkTMVjjFh3Ruw2OJEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK65/oS5QEnN0H0P9hvV2oCGE7oUMB8GA1UdIwQY MBaAFP+yYnZyh30Pbem8Tn4Ybu3RNWEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgt MTk3NDY5NDc1NThkLzEvcnJuLWhMbEFTYzNRZlFfMkc5WGFnSVlUdWhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgtMTk3NDY5NDc1NThk LzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6A7MA0G CSqGSIb3DQEBCwUAA4IBAQAffL7T2VE+yGOQXedXMkuRXhzv4LlH9sicHM54y1lh a9m2HJzjQzcWEA1378aLq1IdZk2Gnxh9CRbUqslbdjazcEYqyflnH4XXrIjBEDVQ 6wvBaxKslehi+wUeOesO2DnpqOJS7XIYSdmxWLZlD2TFOnho9yNpWVuqm5TGNrDa XTOJK0fQkVE5h2foIePn+C5y5iNZsy1ufhDK9YLzFEWfzXs3It3/OQyPT3ottzQ7 t2uOmeBMsB5ZBM2bbWy6sBIlS9aUXo6OLLIFOyX2oPayve+/HdEyI6OXTZVRJIOj yqR74PL4bAGbpGyvn+dnKCJ2P4qe6IyGrFnYPjh8NpFk -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:57 2026 by rpki-client