This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/exXkKYTtUDjde_sRikIrk050twk.roa File: exXkKYTtUDjde_sRikIrk050twk.roa (raw, json) Hash identifier: wS6gest7TLN8j3W6GI2oKTVveIMP3Ho87+QuUUyIfgc= Subject key identifier: 7B:15:E4:29:84:ED:50:38:DD:7B:FB:11:8A:42:2B:93:4E:74:B7:09 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019B791098E1E7D68D05CBBA6CD0D3303114 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/exXkKYTtUDjde_sRikIrk050twk.roa Signing time: Thu 01 Jan 2026 10:18:09 +0000 ROA not before: Thu 01 Jan 2026 10:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205250 IP address blocks: 192.103.86.0/24 maxlen: 24 192.103.91.0/24 maxlen: 24 192.103.92.0/24 maxlen: 24 192.103.105.0/24 maxlen: 24 192.103.106.0/24 maxlen: 24 192.103.110.0/24 maxlen: 24 192.103.111.0/24 maxlen: 24 192.103.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:98:e1:e7:d6:8d:05:cb:ba:6c:d0:d3:30:31:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jan 1 10:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b15e42984ed5038dd7bfb118a422b934e74b709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:2a:13:5c:c0:ae:57:c2:a1:09:9e:33:07: e2:fb:aa:e0:9b:79:c9:19:e3:a4:f2:22:bb:41:8c: fb:94:02:42:60:89:10:23:4d:c6:53:ef:24:21:cd: 8c:4d:fc:3e:a8:96:f7:8b:03:2e:bc:c5:7b:02:da: 67:04:76:74:01:a0:39:80:c7:6b:5b:e3:f3:84:6a: 3e:45:4c:af:d7:e0:39:d1:6f:25:13:86:7a:10:76: 5b:f1:8c:9d:dd:c9:0c:e6:9e:b2:0f:f3:3b:3d:77: b6:4e:f7:2b:2b:2c:c8:57:b5:62:d1:50:f0:7d:1a: ee:4a:8f:d5:04:6f:5d:32:6b:3b:51:cc:25:f2:05: 7c:96:d2:48:a9:1c:f2:90:6b:0f:fb:04:38:ee:c5: 4d:a3:81:4f:0e:b9:e7:d9:b9:64:0c:b0:28:92:ba: 09:0b:8b:8d:11:51:a9:35:8f:4d:a0:3f:08:40:16: a3:5f:13:ee:de:e9:f0:64:fb:c2:67:b7:53:13:01: 0d:00:0f:78:89:ae:f3:00:85:e8:fd:1e:25:8f:6e: 9b:b4:fb:63:30:65:d0:37:73:0d:00:08:61:32:13: a2:3f:2d:cd:69:0e:7c:09:86:9b:bf:10:04:b1:ac: 2e:b8:76:f1:fe:42:cd:52:0c:68:62:f3:00:43:15: 90:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:15:E4:29:84:ED:50:38:DD:7B:FB:11:8A:42:2B:93:4E:74:B7:09 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/exXkKYTtUDjde_sRikIrk050twk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.103.86.0/24 192.103.91.0-192.103.92.255 192.103.105.0-192.103.106.255 192.103.110.0/23 192.103.116.0/24 Signature Algorithm: sha256WithRSAEncryption 50:7d:e9:ba:af:d8:cc:aa:b2:09:8c:cf:14:2e:5a:91:3a:e8: 9e:9b:d6:42:76:5c:9b:9f:26:e6:9d:78:ed:83:ea:18:3e:e6: e6:79:f7:00:3b:f4:75:9c:f6:94:56:37:9f:dc:4b:aa:02:97: 3d:5d:b7:0a:48:2b:1d:a2:db:7f:db:c3:bb:39:39:11:d6:cd: bc:3d:ed:fc:83:a2:b4:94:be:2e:17:9c:c8:45:76:2a:0d:f5: 1b:89:47:22:e9:0a:bd:52:4a:e1:80:59:6a:c0:cb:7c:12:75: 6d:e3:ae:e1:51:fa:7e:a5:33:20:28:b2:43:f4:62:bf:5c:8a: 98:eb:19:70:de:68:5a:a7:2f:a7:0e:7c:c9:f2:86:89:95:a4: ae:c1:8b:09:7a:64:34:cd:83:f6:82:1c:75:31:bd:31:44:e0: 1d:3f:32:a5:a3:e3:d2:bf:46:0e:df:96:58:cb:a2:ce:d8:bc: ec:e8:79:cf:b9:ec:e7:c5:bc:20:05:1c:91:2b:37:c3:04:6b: e5:53:ff:bf:00:ec:86:a5:a8:5d:01:62:f0:0a:5a:2f:36:f5: cb:82:1f:bb:df:46:b9:59:6e:46:b2:6b:b6:aa:9b:bd:cf:04: 76:5d:da:c8:34:5f:0b:a9:93:86:2a:7d:67:b0:02:92:5a:75: 65:d5:dc:c8 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt5EJjh59aNBcu6bNDTMDEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwMTAxMTAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjE1ZTQyOTg0ZWQ1MDM4ZGQ3YmZiMTE4YTQyMmI5MzRlNzRiNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+MqE1zArlfCoQmeMwfi+6rgm3nJ GeOk8iK7QYz7lAJCYIkQI03GU+8kIc2MTfw+qJb3iwMuvMV7AtpnBHZ0AaA5gMdr W+PzhGo+RUyv1+A50W8lE4Z6EHZb8Yyd3ckM5p6yD/M7PXe2TvcrKyzIV7Vi0VDw fRruSo/VBG9dMms7Ucwl8gV8ltJIqRzykGsP+wQ47sVNo4FPDrnn2blkDLAokroJ C4uNEVGpNY9NoD8IQBajXxPu3unwZPvCZ7dTEwENAA94ia7zAIXo/R4lj26btPtj MGXQN3MNAAhhMhOiPy3NaQ58CYabvxAEsawuuHbx/kLNUgxoYvMAQxWQOQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFHsV5CmE7VA43Xv7EYpCK5NOdLcJMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvZXhYa0tZVHRVRGpkZV9zUmlrSXJrMDUwdHdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAwGdWMAwD BADAZ1sDBADAZ1wwDAMEAMBnaQMEAMBnagMEAcBnbgMEAMBndDANBgkqhkiG9w0B AQsFAAOCAQEAUH3puq/YzKqyCYzPFC5akTronpvWQnZcm58m5p147YPqGD7m5nn3 ADv0dZz2lFY3n9xLqgKXPV23CkgrHaLbf9vDuzk5EdbNvD3t/IOitJS+LhecyEV2 Kg31G4lHIukKvVJK4YBZasDLfBJ1beOu4VH6fqUzICiyQ/Riv1yKmOsZcN5oWqcv pw58yfKGiZWkrsGLCXpkNM2D9oIcdTG9MUTgHT8ypaPj0r9GDt+WWMuizti87Oh5 z7ns58W8IAUckSs3wwRr5VP/vwDshqWoXQFi8ApaLzb1y4Ifu99GuVluRrJrtqqb vc8Edl3ayDRfC6mThip9Z7ACklp1ZdXcyA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:56 2026 by rpki-client