This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/klCGnRobFDTStzZHH_87-rAXGCQ.roa File: klCGnRobFDTStzZHH_87-rAXGCQ.roa (raw, json) Hash identifier: y1ltdNIKY5eSnD7XFYZOka5u7ddS55v/gI9bnMxkSSU= Subject key identifier: 92:50:86:9D:1A:1B:14:34:D2:B7:36:47:1F:FF:3B:FA:B0:17:18:24 Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Certificate serial: 019B76EB8CEB7592EEFF7D32D2BC7CEE9A21 Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/klCGnRobFDTStzZHH_87-rAXGCQ.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202914 IP address blocks: 103.37.180.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:eb:75:92:ee:ff:7d:32:d2:bc:7c:ee:9a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9250869d1a1b1434d2b736471fff3bfab0171824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5b:80:9f:0f:d0:83:f1:90:a8:1b:18:a9:a0: d5:59:44:07:16:db:a9:01:fb:1c:c5:ed:c6:7a:41: 37:32:2e:58:ca:f2:98:cf:f2:7d:c1:35:2b:c5:55: b7:04:66:35:c6:de:98:85:66:af:d5:f1:57:ea:7e: c8:6b:17:29:99:81:c4:e3:60:e3:b2:f9:2d:48:b5: 08:50:5f:de:3b:c1:30:62:49:4e:6c:dc:3e:c4:0f: 8e:4e:27:ff:d6:90:b9:99:e6:20:72:db:6e:77:58: ee:5e:f0:d5:21:c3:f2:ea:d5:8e:6b:ba:b8:6b:24: 01:85:61:1e:ca:b3:ab:9b:0b:64:1a:02:e6:0b:70: 23:7a:10:b8:8a:85:90:53:cd:0d:a6:a8:35:20:36: 8c:b9:99:a0:e0:8f:ed:af:7d:11:69:1c:f0:39:f9: a1:bf:43:c4:71:52:f5:8f:06:70:ce:b2:e8:05:5e: ea:a3:46:7f:6b:94:36:ec:9b:ba:c4:2c:7d:69:39: 0b:06:88:f3:20:2b:d9:7a:ff:88:60:8d:86:04:05: 4c:a5:61:79:66:ee:2e:2e:ba:1d:87:fb:54:a0:aa: 07:f9:3b:5d:0e:b1:0c:53:d9:f1:2b:e7:c4:6b:28: 7f:f9:bb:5f:f9:cc:9a:bb:a6:be:85:1a:ee:fe:4b: e3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:50:86:9D:1A:1B:14:34:D2:B7:36:47:1F:FF:3B:FA:B0:17:18:24 X509v3 Authority Key Identifier: keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/klCGnRobFDTStzZHH_87-rAXGCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.37.180.0/22 Signature Algorithm: sha256WithRSAEncryption 09:c3:63:d0:a7:cf:7a:ed:c5:14:8f:d0:ea:b1:76:29:aa:a8: 3b:0d:5e:dc:6b:ce:1d:a3:8d:78:f6:ba:17:2a:a6:df:91:9c: e0:b1:c1:d1:ec:81:67:df:f9:74:c3:1d:0b:77:fb:40:30:30: ae:58:1f:e2:56:b2:6e:65:ae:eb:25:c7:1c:d4:4a:30:88:fe: 64:c3:40:0e:a3:7d:a7:69:7c:33:f0:35:3c:e3:52:a5:97:90: 4b:dd:6b:61:c2:96:07:c1:41:6c:67:7d:0d:e2:d8:f0:f9:97: c4:a6:6d:7e:97:63:0b:4f:3e:5d:da:0d:11:04:9e:df:9c:26: 72:36:02:68:2c:4e:d2:ee:ab:b8:3d:b9:32:9b:8f:8d:75:99: 50:22:ea:ab:4d:63:97:39:20:df:2e:c0:4a:b1:6e:dc:7a:fd: 6d:f0:63:74:65:7a:89:9e:32:46:07:73:69:57:fb:b3:cc:22: 39:6e:79:3d:5e:a2:fa:6f:9f:00:6f:ea:3d:5c:47:9d:1a:ff: 8b:d6:7c:64:46:a6:c7:56:54:8c:e4:02:fa:be:d4:f1:8d:6e: 81:88:cb:09:42:25:a5:cc:70:cf:5c:a9:bb:de:90:c0:02:bb: bf:ac:9a:8d:fd:46:18:34:5a:65:9f:b8:2c:5b:78:77:27:65: ab:7e:10:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264zrdZLu/30y0rx87pohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx MGU4M2MwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjUwODY5ZDFhMWIxNDM0ZDJiNzM2NDcxZmZmM2JmYWIwMTcxODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFuAnw/Qg/GQqBsYqaDVWUQHFtup Afscxe3GekE3Mi5YyvKYz/J9wTUrxVW3BGY1xt6YhWav1fFX6n7IaxcpmYHE42Dj svktSLUIUF/eO8EwYklObNw+xA+OTif/1pC5meYgcttud1juXvDVIcPy6tWOa7q4 ayQBhWEeyrOrmwtkGgLmC3AjehC4ioWQU80Npqg1IDaMuZmg4I/tr30RaRzwOfmh v0PEcVL1jwZwzrLoBV7qo0Z/a5Q27Ju6xCx9aTkLBojzICvZev+IYI2GBAVMpWF5 Zu4uLrodh/tUoKoH+TtdDrEMU9nxK+fEayh/+btf+cyau6a+hRru/kvjOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJQhp0aGxQ00rc2Rx//O/qwFxgkMB8GA1UdIwQY MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt ZmMzN2ZiMGNkNDNiLzEva2xDR25Sb2JGRFRTdHpaSEhfODctckFYR0NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZyW0MA0G CSqGSIb3DQEBCwUAA4IBAQAJw2PQp8967cUUj9DqsXYpqqg7DV7ca84do4149roX KqbfkZzgscHR7IFn3/l0wx0Ld/tAMDCuWB/iVrJuZa7rJccc1EowiP5kw0AOo32n aXwz8DU841Kll5BL3WthwpYHwUFsZ30N4tjw+ZfEpm1+l2MLTz5d2g0RBJ7fnCZy NgJoLE7S7qu4Pbkym4+NdZlQIuqrTWOXOSDfLsBKsW7cev1t8GN0ZXqJnjJGB3Np V/uzzCI5bnk9XqL6b58Ab+o9XEedGv+L1nxkRqbHVlSM5AL6vtTxjW6BiMsJQiWl zHDPXKm73pDAAru/rJqN/UYYNFpln7gsW3h3J2WrfhC9 -----END CERTIFICATE-----Generated at Sun Jan 25 16:34:10 2026 by rpki-client