This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/b4bnSjrxkGqwlr0zkoxcOijmFkc.roa File: b4bnSjrxkGqwlr0zkoxcOijmFkc.roa (raw, json) Hash identifier: fQuLS072q+zjmBm2EgGlUmemoEePNKD15HIZM6Eyfw4= Subject key identifier: 6F:86:E7:4A:3A:F1:90:6A:B0:96:BD:33:92:8C:5C:3A:28:E6:16:47 Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019B7EA638FCDB02730F66EE9DA2798C9862 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/b4bnSjrxkGqwlr0zkoxcOijmFkc.roa Signing time: Fri 02 Jan 2026 12:19:41 +0000 ROA not before: Fri 02 Jan 2026 12:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56110 IP address blocks: 103.118.16.0/24 maxlen: 24 103.118.17.0/24 maxlen: 24 103.138.188.0/24 maxlen: 24 103.138.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:38:fc:db:02:73:0f:66:ee:9d:a2:79:8c:98:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Jan 2 12:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f86e74a3af1906ab096bd33928c5c3a28e61647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:49:c6:7d:35:14:31:30:21:70:29:f0:45: 23:12:4b:50:27:71:5c:91:52:e9:02:9c:3b:09:5f: 01:cd:30:b9:be:a2:e0:71:6a:9a:b3:bf:3a:cf:52: 00:67:91:27:8e:f4:52:b7:8d:41:f3:d1:4f:3d:8e: f6:50:4c:d1:26:10:ca:cb:f2:31:77:7f:e7:0e:dd: c3:91:88:e7:69:67:7b:b8:d8:6b:cf:77:0d:82:2e: c6:0a:8a:14:40:01:1b:26:2c:0a:42:ae:1c:a1:79: bd:31:99:db:37:32:fd:5b:4d:a5:3d:f0:b8:32:e7: 1a:d0:73:93:90:2c:04:95:62:1e:92:8e:29:c2:20: 1b:c5:1f:1e:5c:1e:b7:cf:ce:11:61:f3:fd:21:3b: 90:62:82:cc:55:6f:e6:d8:61:fc:db:dd:b9:09:bb: e4:7f:ca:99:e4:b5:22:61:32:79:6d:66:84:58:7c: cc:2b:58:6e:31:38:69:92:ea:c2:08:6f:c2:0d:11: c9:a7:92:76:00:17:df:f5:bb:b8:e0:3e:c6:d9:f7: c3:63:75:02:22:bf:cb:e9:3b:88:0b:6d:8c:de:18: 98:8c:c5:da:26:20:04:e2:19:b2:0f:5c:1d:e6:26: 5c:a1:4d:f1:5c:81:04:b8:52:3f:67:7c:92:63:21: be:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:86:E7:4A:3A:F1:90:6A:B0:96:BD:33:92:8C:5C:3A:28:E6:16:47 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/b4bnSjrxkGqwlr0zkoxcOijmFkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.16.0/23 103.138.188.0/23 Signature Algorithm: sha256WithRSAEncryption 50:19:a1:0a:8d:e4:f3:66:e5:91:ea:b5:5b:05:7f:e4:00:bf: af:ce:fb:8d:e9:91:73:51:35:f2:4c:7a:ea:73:cd:41:29:58: d3:97:34:24:48:16:77:84:0c:a2:88:5b:1f:42:48:23:b7:8b: 9d:ea:93:45:22:8a:aa:0d:b0:e0:80:67:80:3e:1c:f3:c1:13: 96:46:4e:07:7f:3b:7d:6f:89:61:ee:1e:9d:0b:42:27:58:6e: b5:91:2e:4a:f6:25:4e:9c:bf:cc:c5:e8:62:a5:ad:d4:7e:24: 83:ac:2b:72:e1:8c:57:15:92:87:97:cc:97:fd:6e:8b:8a:9a: 69:00:f2:42:1a:c3:56:d2:6c:76:87:cb:72:6f:11:e8:6a:08: 66:b3:2e:3a:b0:a1:f9:d9:a6:12:f8:46:2e:9a:de:f2:6f:0d: 28:e7:fc:0a:4e:e4:42:6d:5f:07:b7:f1:68:ee:7a:f7:12:b6: 1f:31:a5:bc:da:76:ab:0d:bb:0f:8b:f9:47:84:14:29:78:b0: 4a:0d:e9:03:45:5a:c1:52:bd:9c:90:17:1d:62:42:f5:97:4b: 01:72:82:8d:5f:ce:7d:36:32:06:32:c1:12:c9:e9:0f:a6:92: 64:60:10:45:dd:b1:80:b5:87:e1:84:3a:84:9f:6e:13:63:e4: 65:4c:41:ef -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pjj82wJzD2bunaJ5jJhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwMTAyMTIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Zjg2ZTc0YTNhZjE5MDZhYjA5NmJkMzM5MjhjNWMzYTI4ZTYxNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcNJxn01FDEwIXAp8EUjEktQJ3Fc kVLpApw7CV8BzTC5vqLgcWqas786z1IAZ5EnjvRSt41B89FPPY72UEzRJhDKy/Ix d3/nDt3DkYjnaWd7uNhrz3cNgi7GCooUQAEbJiwKQq4coXm9MZnbNzL9W02lPfC4 Muca0HOTkCwElWIeko4pwiAbxR8eXB63z84RYfP9ITuQYoLMVW/m2GH82925Cbvk f8qZ5LUiYTJ5bWaEWHzMK1huMThpkurCCG/CDRHJp5J2ABff9bu44D7G2ffDY3UC Ir/L6TuIC22M3hiYjMXaJiAE4hmyD1wd5iZcoU3xXIEEuFI/Z3ySYyG+swIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG+G50o68ZBqsJa9M5KMXDoo5hZHMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvYjRiblNqcnhrR3F3bHIwemtveGNPaWptRmtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBZ3YQAwQB Z4q8MA0GCSqGSIb3DQEBCwUAA4IBAQBQGaEKjeTzZuWR6rVbBX/kAL+vzvuN6ZFz UTXyTHrqc81BKVjTlzQkSBZ3hAyiiFsfQkgjt4ud6pNFIoqqDbDggGeAPhzzwROW Rk4Hfzt9b4lh7h6dC0InWG61kS5K9iVOnL/Mxehipa3UfiSDrCty4YxXFZKHl8yX /W6LipppAPJCGsNW0mx2h8tybxHoaghmsy46sKH52aYS+EYumt7ybw0o5/wKTuRC bV8Ht/Fo7nr3ErYfMaW82narDbsPi/lHhBQpeLBKDekDRVrBUr2ckBcdYkL1l0sB coKNX859NjIGMsESyekPppJkYBBF3bGAtYfhhDqEn24TY+RlTEHv -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:39 2026 by rpki-client