This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/cpHuJJY8mhmaGPZw_OaTNbkNxdQ.roa File: cpHuJJY8mhmaGPZw_OaTNbkNxdQ.roa (raw, json) Hash identifier: UR08Hy/azzQ+483DEHzJsxzgFkrpBPCwomIM+T0eyWk= Subject key identifier: 72:91:EE:24:96:3C:9A:19:9A:18:F6:70:FC:E6:93:35:B9:0D:C5:D4 Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44 Certificate serial: 019B76EB9EBFD58FAAE2BBA18A783CED0581 Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/cpHuJJY8mhmaGPZw_OaTNbkNxdQ.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214785 IP address blocks: 103.55.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9e:bf:d5:8f:aa:e2:bb:a1:8a:78:3c:ed:05:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7291ee24963c9a199a18f670fce69335b90dc5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:46:d5:1a:11:ff:9e:f1:92:99:40:05:69: e4:e0:5a:b5:9b:73:d3:aa:de:ba:70:6b:01:a4:58: 3a:6f:b0:8b:a5:04:8a:4a:33:da:07:e1:8d:c8:55: df:ea:f8:69:94:31:61:77:7b:4b:08:56:1b:ce:61: 79:be:69:8b:39:53:68:12:db:e2:9f:97:d9:5f:67: e9:37:d8:ba:1c:f6:8d:a5:eb:e6:9d:b9:e1:fd:32: 80:f0:4d:86:df:69:59:36:21:74:60:8d:28:37:74: 03:82:12:61:74:64:55:95:5d:e6:22:fd:54:2e:ee: 54:b2:eb:ec:6d:32:09:4d:66:c0:ed:84:94:c9:3d: 4d:ae:5c:82:16:ab:21:59:78:71:0c:82:2a:da:19: ae:ee:22:42:87:d7:7c:d9:42:ac:5c:46:ce:d1:f7: 9c:29:e2:b1:e8:80:d6:08:15:6b:d8:ea:93:b1:41: 48:f7:f4:bf:ad:1c:c4:4f:39:ee:83:40:58:05:28: a8:98:05:d1:07:2a:73:80:94:aa:31:3e:77:9d:74: c0:16:4f:51:12:49:5e:c1:ae:a2:74:97:06:64:20: ea:c2:de:e9:73:c0:24:57:8f:fa:80:0b:41:da:87: 0f:94:0f:11:03:75:6b:a9:39:51:6d:2c:ac:30:4d: 19:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:91:EE:24:96:3C:9A:19:9A:18:F6:70:FC:E6:93:35:B9:0D:C5:D4 X509v3 Authority Key Identifier: keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/cpHuJJY8mhmaGPZw_OaTNbkNxdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.164.0/24 Signature Algorithm: sha256WithRSAEncryption 78:fb:a9:08:e4:5f:57:82:b2:2c:10:96:0f:8b:e2:88:ab:34: a2:ae:14:01:d4:89:6e:33:05:d4:02:ba:d6:56:52:76:55:7d: df:83:9c:8a:9a:0a:99:a4:05:8a:46:08:c5:b3:0a:21:0e:83: 33:4e:b6:e1:c3:ed:17:65:5d:e1:0c:fe:14:79:be:f7:e7:cd: 3c:99:e6:a1:0d:cc:41:3e:b9:43:e2:f3:96:c5:ff:ed:b6:d8: 8d:4f:6c:a2:74:00:e1:38:b7:ca:72:70:ba:7f:82:61:94:1c: 15:ca:ae:67:6a:85:b0:ed:5d:19:fd:b5:d6:18:37:b0:3a:e6: e3:13:7b:fc:a6:20:e3:ce:51:fc:6a:45:ae:23:e8:99:c2:4e: 9a:38:b0:dc:26:72:14:1d:7f:cd:31:e1:a3:e2:53:2e:ec:a3: 5b:75:b2:3b:e7:31:dd:f9:d5:7a:f4:49:ec:93:46:51:a0:90: 25:14:29:c6:8b:41:72:6b:66:36:11:69:e5:62:e8:a9:f6:b6: ff:0d:34:4e:04:9e:49:89:07:36:79:11:55:c2:8b:92:d6:0c: 1d:b7:45:fc:8c:ee:3c:ff:f6:27:7f:61:31:3c:41:7d:23:36: 6a:b6:87:e7:4d:f2:9f:5f:f4:30:41:b6:66:5e:96:95:ad:de: 96:a9:db:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2656/1Y+q4ruhing87QWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTJkMDRhYjBjMzdhNDczYjFmYzgxYTM2OWZjOWFkNWQ5 ZmZkNDQwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjkxZWUyNDk2M2M5YTE5OWExOGY2NzBmY2U2OTMzNWI5MGRjNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8ZG1RoR/57xkplABWnk4Fq1m3PT qt66cGsBpFg6b7CLpQSKSjPaB+GNyFXf6vhplDFhd3tLCFYbzmF5vmmLOVNoEtvi n5fZX2fpN9i6HPaNpevmnbnh/TKA8E2G32lZNiF0YI0oN3QDghJhdGRVlV3mIv1U Lu5UsuvsbTIJTWbA7YSUyT1NrlyCFqshWXhxDIIq2hmu7iJCh9d82UKsXEbO0fec KeKx6IDWCBVr2OqTsUFI9/S/rRzETznug0BYBSiomAXRBypzgJSqMT53nXTAFk9R Eklewa6idJcGZCDqwt7pc8AkV4/6gAtB2ocPlA8RA3VrqTlRbSysME0Z1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKR7iSWPJoZmhj2cPzmkzW5DcXUMB8GA1UdIwQY MBaAFGkS0Eqww3pHOx/IGjafya1dn/1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQt ZjIxYjRmMTFmYWYwLzEvY3BIdUpKWThtaG1hR1Bad19PYVROYmtOeGRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQtZjIxYjRmMTFmYWYw LzEvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzekMA0G CSqGSIb3DQEBCwUAA4IBAQB4+6kI5F9XgrIsEJYPi+KIqzSirhQB1IluMwXUArrW VlJ2VX3fg5yKmgqZpAWKRgjFswohDoMzTrbhw+0XZV3hDP4Ueb735808meahDcxB PrlD4vOWxf/tttiNT2yidADhOLfKcnC6f4JhlBwVyq5naoWw7V0Z/bXWGDewOubj E3v8piDjzlH8akWuI+iZwk6aOLDcJnIUHX/NMeGj4lMu7KNbdbI75zHd+dV69Ens k0ZRoJAlFCnGi0Fya2Y2EWnlYuip9rb/DTROBJ5JiQc2eRFVwouS1gwdt0X8jO48 //Ynf2ExPEF9IzZqtofnTfKfX/QwQbZmXpaVrd6WqdtB -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:31 2026 by rpki-client