This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zYvDyKy0vUjdTc1ddu1UGZtGizw.roa File: zYvDyKy0vUjdTc1ddu1UGZtGizw.roa (raw, json) Hash identifier: 6PiTtTtGNeW8G5O2SdL1arlpTJIFJYlune4Tv9Dz93E= Subject key identifier: CD:8B:C3:C8:AC:B4:BD:48:DD:4D:CD:5D:76:ED:54:19:9B:46:8B:3C Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019BE181FA21CB6C2B1FA9F02EBFFFD3762A Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zYvDyKy0vUjdTc1ddu1UGZtGizw.roa Signing time: Wed 21 Jan 2026 17:02:30 +0000 ROA not before: Wed 21 Jan 2026 17:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36137 IP address blocks: 103.17.202.0/24 maxlen: 24 103.17.203.0/24 maxlen: 24 103.86.36.0/23 maxlen: 24 103.124.156.0/23 maxlen: 24 110.34.32.0/24 maxlen: 24 110.34.37.0/24 maxlen: 24 110.34.38.0/24 maxlen: 24 116.204.166.0/24 maxlen: 24 192.144.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:81:fa:21:cb:6c:2b:1f:a9:f0:2e:bf:ff:d3:76:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Jan 21 17:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd8bc3c8acb4bd48dd4dcd5d76ed54199b468b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:ac:b1:0e:29:25:a1:30:a7:84:f1:2c:d7: c9:0e:fc:18:b1:be:33:ad:ba:6e:b8:a8:22:71:bf: be:b5:7e:2b:b0:16:08:67:e6:9e:41:94:bd:14:16: 53:8a:84:73:d5:f8:f7:b8:58:ce:e5:29:47:3e:6e: c9:96:c3:35:8f:1d:cd:67:cc:ea:48:29:a4:4b:8d: 2f:53:c8:52:3a:ad:cd:cb:f9:01:91:a3:6b:df:c9: 18:40:aa:08:21:ab:0c:fe:cf:4d:cf:b5:14:7d:88: 91:7a:35:53:2b:53:5e:e2:96:e7:e6:39:90:43:21: 1a:1b:09:f0:a8:49:3f:ec:a6:a5:05:22:f0:74:0f: 8e:f1:62:49:03:36:2c:c3:17:43:77:28:e8:6d:42: f9:37:3b:c0:a8:71:b1:a2:d8:fc:21:19:1a:8b:62: 07:bd:ec:5f:f9:d6:63:49:26:42:b1:17:c9:c6:78: 85:b6:1c:00:65:5b:71:c1:68:ec:22:94:47:68:9f: f4:8b:87:3b:62:0f:78:e7:dd:6a:d9:a6:f3:20:38: 4b:4b:23:ee:63:15:24:b3:0f:99:ac:2e:4c:d3:f7: d1:23:1f:b2:f6:33:ec:bb:96:3c:bf:6b:84:5a:19: db:06:0e:68:e1:16:45:20:6d:47:22:b0:e6:9f:6b: c7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8B:C3:C8:AC:B4:BD:48:DD:4D:CD:5D:76:ED:54:19:9B:46:8B:3C X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zYvDyKy0vUjdTc1ddu1UGZtGizw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.202.0/23 103.86.36.0/23 103.124.156.0/23 110.34.32.0/24 110.34.37.0-110.34.38.255 116.204.166.0/24 192.144.78.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:fc:f2:ad:76:0c:74:2e:ce:71:64:2f:20:7c:5c:c1:1f:d7: 46:9c:89:4f:6c:50:2d:88:fe:7a:20:93:6b:e3:3f:62:7a:44: fd:b8:02:54:28:48:92:5b:f7:f7:fa:4b:41:9b:e9:c3:50:f1: c1:54:41:40:9c:68:12:76:64:78:b5:64:2e:de:e3:26:26:12: e1:72:ac:71:1b:59:4b:da:52:1f:f5:8a:1a:01:c4:3f:7d:32: 74:29:00:7c:7d:15:3d:28:50:f8:b0:b9:10:40:c3:f2:57:e9: 23:9a:b8:65:7e:71:cf:20:13:03:24:5e:13:71:38:b6:eb:c5: 88:e2:d5:05:32:2a:5d:23:58:94:52:c3:4d:8d:3c:7f:8e:db: ea:06:2f:00:f9:a3:e7:28:df:73:11:f2:fc:63:c2:3f:3a:9e: 9e:c4:a4:74:b2:47:96:e1:14:eb:77:f1:55:2e:34:94:89:b8: a2:c7:63:a0:7d:9b:c9:db:a9:2b:52:e4:1d:06:74:89:03:42: 32:74:47:41:5e:f5:78:19:c7:e8:fb:fa:5c:00:39:db:c0:f4: 6f:f4:e8:58:87:40:b1:ca:11:dd:50:86:40:21:25:ad:a2:8c: 4b:bd:03:4c:b1:36:b4:de:76:6e:f5:18:6a:0b:40:ce:f0:69: fd:a6:e9:8c -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZvhgfohy2wrH6nwLr//03YqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMTIxMTcwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDhiYzNjOGFjYjRiZDQ4ZGQ0ZGNkNWQ3NmVkNTQxOTliNDY4YjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu2ssQ4pJaEwp4TxLNfJDvwYsb4z rbpuuKgicb++tX4rsBYIZ+aeQZS9FBZTioRz1fj3uFjO5SlHPm7JlsM1jx3NZ8zq SCmkS40vU8hSOq3Ny/kBkaNr38kYQKoIIasM/s9Nz7UUfYiRejVTK1Ne4pbn5jmQ QyEaGwnwqEk/7KalBSLwdA+O8WJJAzYswxdDdyjobUL5NzvAqHGxotj8IRkai2IH vexf+dZjSSZCsRfJxniFthwAZVtxwWjsIpRHaJ/0i4c7Yg94591q2abzIDhLSyPu YxUksw+ZrC5M0/fRIx+y9jPsu5Y8v2uEWhnbBg5o4RZFIG1HIrDmn2vHhQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFM2Lw8istL1I3U3NXXbtVBmbRos8MB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEvell2RHlLeTB2VWpkVGMxZGR1MVVHWnRHaXp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQBZxHKAwQB Z1YkAwQBZ3ycAwQAbiIgMAwDBABuIiUDBABuIiYDBAB0zKYDBAHAkE4wDQYJKoZI hvcNAQELBQADggEBAJ388q12DHQuznFkLyB8XMEf10aciU9sUC2I/nogk2vjP2J6 RP24AlQoSJJb9/f6S0Gb6cNQ8cFUQUCcaBJ2ZHi1ZC7e4yYmEuFyrHEbWUvaUh/1 ihoBxD99MnQpAHx9FT0oUPiwuRBAw/JX6SOauGV+cc8gEwMkXhNxOLbrxYji1QUy Kl0jWJRSw02NPH+O2+oGLwD5o+co33MR8vxjwj86np7EpHSyR5bhFOt38VUuNJSJ uKLHY6B9m8nbqStS5B0GdIkDQjJ0R0Fe9XgZx+j7+lwAOdvA9G/06FiHQLHKEd1Q hkAhJa2ijEu9A0yxNrTedm71GGoLQM7waf2m6Yw= -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:14 2026 by rpki-client