This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/xdQ_ZlkxP5v5ViPVupIV8hvPz7M.roa File: xdQ_ZlkxP5v5ViPVupIV8hvPz7M.roa (raw, json) Hash identifier: LWf89RmWvwUT1HcABg2/HkUEix7BQagC3bE6b4XXXQ4= Subject key identifier: C5:D4:3F:66:59:31:3F:9B:F9:56:23:D5:BA:92:15:F2:1B:CF:CF:B3 Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6 Certificate serial: 019B0309CB71183A139D5E47159F6C535AB7 Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/xdQ_ZlkxP5v5ViPVupIV8hvPz7M.roa Signing time: Tue 09 Dec 2025 12:15:31 +0000 ROA not before: Tue 09 Dec 2025 12:15:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134434 IP address blocks: 103.193.165.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:09:cb:71:18:3a:13:9d:5e:47:15:9f:6c:53:5a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6 Validity Not Before: Dec 9 12:15:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c5d43f6659313f9bf95623d5ba9215f21bcfcfb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:af:23:1f:ab:35:54:49:6f:c0:d6:d0:cd: fa:71:e2:d5:15:2d:9f:2f:80:0d:c5:97:68:27:2e: 73:f8:ce:5b:f3:52:cc:7f:de:0c:72:90:41:cc:0d: 0b:9d:7d:8f:6a:6b:d4:50:71:02:0a:f4:e1:8f:37: d6:c2:15:56:65:6f:6e:70:fe:61:01:0a:30:c0:8d: 42:eb:93:74:5f:c0:58:9e:b7:52:77:63:22:f2:3f: 23:7d:93:8f:90:08:49:c7:22:78:dd:c7:57:a5:92: 19:46:d8:0e:37:7d:3c:53:ff:bf:76:47:fb:43:ab: 7e:f7:2b:16:42:c9:ba:0f:74:87:db:a9:b0:41:84: 80:9d:2f:4a:08:ca:b5:bb:ea:95:f7:d5:c6:ee:1a: b8:91:9b:2b:bb:46:62:e2:f3:3a:93:94:4b:13:14: 8a:41:78:10:57:36:12:d1:94:6a:00:c9:cc:cd:e5: e5:76:6f:b1:64:39:41:8e:56:68:4a:c1:67:1a:51: 16:99:e0:85:90:47:ab:3d:07:86:07:df:2a:1c:5c: 22:fc:68:cc:43:51:9e:dd:93:9c:4f:48:81:f1:90: a0:01:01:68:64:c5:a4:0a:24:2f:a8:6f:21:fe:83: d9:ee:78:d4:96:a3:92:40:5e:10:f5:24:05:49:43: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:3F:66:59:31:3F:9B:F9:56:23:D5:BA:92:15:F2:1B:CF:CF:B3 X509v3 Authority Key Identifier: keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/xdQ_ZlkxP5v5ViPVupIV8hvPz7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.165.0/24 Signature Algorithm: sha256WithRSAEncryption 36:c5:97:7e:2b:7a:f0:50:63:a3:4b:89:d5:b0:b7:55:63:9c: dd:bc:d6:43:12:c9:e6:17:92:28:e4:c8:84:7d:bd:77:19:08: 13:0f:ef:02:75:80:22:16:85:91:da:87:50:86:10:af:ad:4d: 4b:2c:47:db:cc:52:09:fd:2f:10:fa:af:15:7d:98:f9:f9:31: 81:96:7c:02:49:84:6b:2d:e4:db:87:07:19:39:30:b3:a7:a4: 88:80:6d:7c:66:7f:46:a2:f0:4a:9b:c8:77:40:ef:91:c7:ec: 5a:54:32:db:3e:79:ed:40:1f:36:1d:8f:27:53:4e:8c:6a:6b: 72:b3:42:60:3e:3c:ab:b2:b4:38:c7:39:ff:b1:bc:a0:bc:11: 34:89:a4:05:ec:13:5f:90:43:cd:83:3c:e0:c0:fe:c7:f6:8b: 3f:17:a5:83:25:ba:e6:3d:0c:53:b6:b3:cd:2d:f7:c4:8c:4f: 64:a2:8f:d1:c0:48:c1:45:4b:67:d7:e4:66:a2:d9:42:a1:d8: b3:02:a0:ca:d1:f4:f9:18:07:01:b7:93:16:fa:d0:8a:a4:06: e5:2a:b2:14:0a:be:31:a6:7a:73:2e:66:dd:59:04:6a:1d:46: 87:1b:2b:b8:bc:5e:d0:4c:8c:d0:8b:82:33:62:8c:ab:93:2a: 67:7a:ee:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsDCctxGDoTnV5HFZ9sU1q3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmU5NjEyZDE0NDBiYzZjNzA0ZTA0NjVmMGVmNWQ2Y2E3 Mzk3YTYwHhcNMjUxMjA5MTIxNTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWQ0M2Y2NjU5MzEzZjliZjk1NjIzZDViYTkyMTVmMjFiY2ZjZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBqvIx+rNVRJb8DW0M36ceLVFS2f L4ANxZdoJy5z+M5b81LMf94McpBBzA0LnX2PamvUUHECCvThjzfWwhVWZW9ucP5h AQowwI1C65N0X8BYnrdSd2Mi8j8jfZOPkAhJxyJ43cdXpZIZRtgON308U/+/dkf7 Q6t+9ysWQsm6D3SH26mwQYSAnS9KCMq1u+qV99XG7hq4kZsru0Zi4vM6k5RLExSK QXgQVzYS0ZRqAMnMzeXldm+xZDlBjlZoSsFnGlEWmeCFkEerPQeGB98qHFwi/GjM Q1Ge3ZOcT0iB8ZCgAQFoZMWkCiQvqG8h/oPZ7njUlqOSQF4Q9SQFSUMs3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMXUP2ZZMT+b+VYj1bqSFfIbz8+zMB8GA1UdIwQY MBaAFLu+lhLRRAvGxwTgRl8O9dbKc5emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mMjY0MGEtNDZlNy00NjUwLTgzYzUt Y2M1NWI4MTMwMmNmLzEveGRRX1psa3hQNXY1VmlQVnVwSVY4aHZQejdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9mMjY0MGEtNDZlNy00NjUwLTgzYzUtY2M1NWI4MTMwMmNm LzEvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8GlMA0G CSqGSIb3DQEBCwUAA4IBAQA2xZd+K3rwUGOjS4nVsLdVY5zdvNZDEsnmF5Io5MiE fb13GQgTD+8CdYAiFoWR2odQhhCvrU1LLEfbzFIJ/S8Q+q8VfZj5+TGBlnwCSYRr LeTbhwcZOTCzp6SIgG18Zn9GovBKm8h3QO+Rx+xaVDLbPnntQB82HY8nU06Mamty s0JgPjyrsrQ4xzn/sbygvBE0iaQF7BNfkEPNgzzgwP7H9os/F6WDJbrmPQxTtrPN LffEjE9koo/RwEjBRUtn1+RmotlCodizAqDK0fT5GAcBt5MW+tCKpAblKrIUCr4x pnpzLmbdWQRqHUaHGyu4vF7QTIzQi4IzYoyrkypneu4h -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:36 2025 by rpki-client