This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/oEduJAl4RTWtM6zwXdI0ziLh6rs.roa File: oEduJAl4RTWtM6zwXdI0ziLh6rs.roa (raw, json) Hash identifier: GFX4/mgYvelVvEnpmoKwgMTfCGzjJ8NR2rNnzEY3VSQ= Subject key identifier: A0:47:6E:24:09:78:45:35:AD:33:AC:F0:5D:D2:34:CE:22:E1:EA:BB Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Certificate serial: 019B76EB8C691C542D0C43528A9DB0D97215 Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/oEduJAl4RTWtM6zwXdI0ziLh6rs.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136787 IP address blocks: 103.53.82.0/24 maxlen: 24 103.53.83.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:69:1c:54:2d:0c:43:52:8a:9d:b0:d9:72:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0476e2409784535ad33acf05dd234ce22e1eabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:04:2a:17:6e:64:b5:4b:11:9b:c3:cd:22:07: dd:98:d7:43:ad:1e:7f:1b:3d:3a:6f:f6:ba:a1:e5: 78:1b:ca:ea:43:2e:e0:b0:1d:b0:76:43:3a:c1:92: 8a:30:49:a3:d2:5a:5d:8f:4d:fb:25:3d:69:16:d6: a8:0c:58:52:20:71:c9:c6:5f:da:97:ab:f8:94:de: 8e:1d:96:f2:21:bc:6a:c1:33:14:c3:8b:fb:0d:d4: bd:a2:a5:41:26:8b:6a:5e:8a:98:52:88:78:2a:0a: 5b:08:1f:bd:80:b5:fd:66:46:d8:ae:3e:20:0b:3c: 5c:25:fb:34:02:64:4f:df:8f:32:51:0f:0c:0c:04: 88:61:3d:64:0d:ec:cb:01:17:04:08:b5:29:19:a3: 07:fc:55:5b:5d:a5:55:e6:30:84:c4:aa:19:ff:a0: 02:3d:03:a7:42:32:59:2f:d2:d6:6d:2b:4a:b8:c8: db:56:ef:8f:ea:d8:b2:d6:c7:7a:46:55:34:46:85: ec:a5:74:67:39:c6:31:b2:64:06:d1:0c:95:12:e6: a5:22:ba:6b:d7:5b:5a:4b:93:7a:75:5e:5c:5b:a9: a6:e6:0f:7d:9c:6c:74:19:a1:7f:ee:9c:21:e3:e0: 9a:96:60:9c:a2:56:d3:0d:54:60:33:7b:28:74:84: 0b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:47:6E:24:09:78:45:35:AD:33:AC:F0:5D:D2:34:CE:22:E1:EA:BB X509v3 Authority Key Identifier: keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/oEduJAl4RTWtM6zwXdI0ziLh6rs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.53.82.0/23 Signature Algorithm: sha256WithRSAEncryption 00:78:7a:53:c7:70:a4:f3:6b:fa:3f:9f:99:7a:59:06:a1:f1: dc:3d:69:bc:84:63:f2:c6:41:75:88:e3:2d:54:7a:e7:f5:e5: b6:33:56:66:4c:a8:39:eb:1e:fc:60:7a:31:02:45:4d:b2:0c: a9:d8:0e:11:ca:f5:b1:69:2e:90:2e:06:5e:f4:88:08:2c:71: a5:b3:6f:cf:3d:47:f9:cc:86:89:a5:eb:d3:0e:14:61:f8:85: c7:70:54:9b:d0:80:04:af:5f:8f:d5:1d:bd:80:68:a5:f5:a9: 1c:68:b9:83:3b:2c:b4:97:32:8a:48:d0:c9:af:c4:63:73:fe: fa:21:6e:29:81:35:88:d5:62:e9:45:bf:ed:ef:75:40:83:3e: 53:ee:9d:fd:01:8f:bf:ff:b2:49:e4:7e:38:d3:03:de:52:76: 7b:e4:8e:c5:df:12:5f:31:15:f4:fd:77:0b:41:7f:23:99:dc: 29:de:81:8f:0a:ab:ba:80:e9:05:40:6b:37:b9:4f:c9:66:97: 05:ff:1a:04:32:86:14:05:ce:e0:d2:24:79:22:59:6d:f9:4a: 94:d4:14:bc:ad:e8:cd:ff:5d:b8:33:90:b4:4f:cd:06:7e:40: 67:42:82:e7:67:40:b8:c9:a7:2d:0a:fe:91:b2:9a:4a:ee:f2: f2:c1:af:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264xpHFQtDENSip2w2XIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx MGU4M2MwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDQ3NmUyNDA5Nzg0NTM1YWQzM2FjZjA1ZGQyMzRjZTIyZTFlYWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gQqF25ktUsRm8PNIgfdmNdDrR5/ Gz06b/a6oeV4G8rqQy7gsB2wdkM6wZKKMEmj0lpdj037JT1pFtaoDFhSIHHJxl/a l6v4lN6OHZbyIbxqwTMUw4v7DdS9oqVBJotqXoqYUoh4KgpbCB+9gLX9ZkbYrj4g CzxcJfs0AmRP348yUQ8MDASIYT1kDezLARcECLUpGaMH/FVbXaVV5jCExKoZ/6AC PQOnQjJZL9LWbStKuMjbVu+P6tiy1sd6RlU0RoXspXRnOcYxsmQG0QyVEualIrpr 11taS5N6dV5cW6mm5g99nGx0GaF/7pwh4+CalmCcolbTDVRgM3sodIQL0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBHbiQJeEU1rTOs8F3SNM4i4eq7MB8GA1UdIwQY MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt ZmMzN2ZiMGNkNDNiLzEvb0VkdUpBbDRSVFd0TTZ6d1hkSTB6aUxoNnJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZzVSMA0G CSqGSIb3DQEBCwUAA4IBAQAAeHpTx3Ck82v6P5+ZelkGofHcPWm8hGPyxkF1iOMt VHrn9eW2M1ZmTKg56x78YHoxAkVNsgyp2A4RyvWxaS6QLgZe9IgILHGls2/PPUf5 zIaJpevTDhRh+IXHcFSb0IAEr1+P1R29gGil9akcaLmDOyy0lzKKSNDJr8Rjc/76 IW4pgTWI1WLpRb/t73VAgz5T7p39AY+//7JJ5H440wPeUnZ75I7F3xJfMRX0/XcL QX8jmdwp3oGPCqu6gOkFQGs3uU/JZpcF/xoEMoYUBc7g0iR5Illt+UqU1BS8rejN /124M5C0T80GfkBnQoLnZ0C4yactCv6RsppK7vLywa+W -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:49 2026 by rpki-client