This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/OEQtUxhCqgRKgsQijA1Rf1Wanvc.roa File: OEQtUxhCqgRKgsQijA1Rf1Wanvc.roa (raw, json) Hash identifier: ujBvPhT5RvPyeoGycZQuLI7qxEY9F3PhaV8bJw3z0uc= Subject key identifier: 38:44:2D:53:18:42:AA:04:4A:82:C4:22:8C:0D:51:7F:55:9A:9E:F7 Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873 Certificate serial: 019B78A2AEA16419ED3D4735BEE3DAC9BDCC Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/OEQtUxhCqgRKgsQijA1Rf1Wanvc.roa Signing time: Thu 01 Jan 2026 08:18:06 +0000 ROA not before: Thu 01 Jan 2026 08:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201746 IP address blocks: 103.226.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ae:a1:64:19:ed:3d:47:35:be:e3:da:c9:bd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873 Validity Not Before: Jan 1 08:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38442d531842aa044a82c4228c0d517f559a9ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:17:be:57:dc:74:70:71:64:0d:f4:fe:e8: a1:3d:5c:f9:f2:67:94:b9:62:e3:4b:70:5d:c0:15: 6f:be:77:1d:ea:8f:47:df:eb:42:b6:8f:60:82:b5: ef:7f:de:4e:02:76:de:93:85:8a:fc:8b:7f:1d:05: e2:16:95:83:f1:38:48:ec:fd:94:e8:05:d1:8f:4a: c9:20:75:61:5d:1c:2e:0b:8a:0f:31:c6:04:ba:fe: d6:57:7b:64:85:80:9e:66:af:d7:5c:5b:7c:d7:21: 21:c1:2f:91:c4:24:0d:55:34:d6:8d:56:c6:1e:89: c9:b6:7a:a8:96:d1:22:80:71:6d:9f:ef:66:14:e5: 30:8b:d7:29:52:c1:30:f0:32:6f:86:4e:e6:1d:db: 6d:4a:06:1b:0e:b5:ec:b7:53:68:d7:6a:09:7d:75: bb:58:39:a3:e5:b5:0d:00:70:46:cb:35:09:b9:3d: 19:e9:73:a7:ec:dc:e3:97:72:e8:63:7b:26:92:21: 4c:55:cb:11:84:54:17:dc:49:6a:8c:f0:8e:d0:fa: 02:2a:39:7b:3e:61:9a:e9:02:f3:63:84:ed:16:1f: b5:ab:ef:3b:d5:b2:a6:c5:ec:3c:28:d6:27:8b:1b: ec:14:27:5f:fb:94:67:62:91:10:fe:84:95:1e:af: a6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:44:2D:53:18:42:AA:04:4A:82:C4:22:8C:0D:51:7F:55:9A:9E:F7 X509v3 Authority Key Identifier: keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/OEQtUxhCqgRKgsQijA1Rf1Wanvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.226.194.0/23 Signature Algorithm: sha256WithRSAEncryption 53:69:ea:ac:73:f6:12:42:86:fe:cf:93:b1:10:98:6f:3b:5d: 60:33:1d:7e:d9:05:25:6b:98:f8:4f:c8:e0:5d:84:ec:b9:f6: f4:c7:4b:32:9c:82:27:c3:5b:95:53:e6:a9:c9:e1:85:d6:e9: d0:06:83:76:c6:cb:cd:b6:89:1a:8a:5b:ce:65:10:6f:57:c7: e9:7e:f5:f0:57:f7:46:09:5d:e4:89:21:84:cd:44:45:97:03: a8:d1:72:9e:fe:d3:cc:5a:1d:e2:ce:6d:08:83:be:5c:5a:e4: 40:12:18:f9:2b:d1:b2:f5:80:ea:93:3c:d4:5b:59:ee:8a:21: 09:83:7c:2d:1d:a2:2e:7a:aa:09:ab:1c:62:a9:49:e6:b5:63: fb:fd:a4:a9:e8:5f:3a:0c:c7:18:3d:1b:5a:53:03:a6:6b:67: 70:fd:ac:d3:86:7a:8d:d4:51:85:be:71:3e:28:97:c1:00:73: 0d:14:ff:17:3c:8b:1b:3c:11:a3:aa:14:96:93:c7:89:1b:06: 40:af:42:e1:01:79:4f:19:9a:54:e5:d8:ca:f2:ff:65:b2:31: af:3f:0b:6a:67:f5:41:96:b9:46:d9:d2:e0:60:70:d6:a3:8c: db:90:12:ed:a5:03:cd:df:7d:41:ab:aa:a7:a2:ce:2b:6b:88: c1:71:d6:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oq6hZBntPUc1vuPayb3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjU3ZGQ1MmM3NWZjZTM5ZmZlMjkxNTQ2OWQ5ZTY1NmRi Y2I4NzMwHhcNMjYwMTAxMDgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODQ0MmQ1MzE4NDJhYTA0NGE4MmM0MjI4YzBkNTE3ZjU1OWE5ZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMcXvlfcdHBxZA30/uihPVz58meU uWLjS3BdwBVvvncd6o9H3+tCto9ggrXvf95OAnbek4WK/It/HQXiFpWD8ThI7P2U 6AXRj0rJIHVhXRwuC4oPMcYEuv7WV3tkhYCeZq/XXFt81yEhwS+RxCQNVTTWjVbG HonJtnqoltEigHFtn+9mFOUwi9cpUsEw8DJvhk7mHdttSgYbDrXst1No12oJfXW7 WDmj5bUNAHBGyzUJuT0Z6XOn7Nzjl3LoY3smkiFMVcsRhFQX3ElqjPCO0PoCKjl7 PmGa6QLzY4TtFh+1q+871bKmxew8KNYnixvsFCdf+5RnYpEQ/oSVHq+mOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhELVMYQqoESoLEIowNUX9Vmp73MB8GA1UdIwQY MBaAFHr1fdUsdfzjn/4pFUadnmVtvLhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYt YzI1MzQwOTZjNjBkLzEvT0VRdFV4aENxZ1JLZ3NRaWpBMVJmMVdhbnZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYtYzI1MzQwOTZjNjBk LzEvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+LCMA0G CSqGSIb3DQEBCwUAA4IBAQBTaeqsc/YSQob+z5OxEJhvO11gMx1+2QUla5j4T8jg XYTsufb0x0synIInw1uVU+apyeGF1unQBoN2xsvNtokailvOZRBvV8fpfvXwV/dG CV3kiSGEzURFlwOo0XKe/tPMWh3izm0Ig75cWuRAEhj5K9Gy9YDqkzzUW1nuiiEJ g3wtHaIueqoJqxxiqUnmtWP7/aSp6F86DMcYPRtaUwOma2dw/azThnqN1FGFvnE+ KJfBAHMNFP8XPIsbPBGjqhSWk8eJGwZAr0LhAXlPGZpU5djK8v9lsjGvPwtqZ/VB lrlG2dLgYHDWo4zbkBLtpQPN331Bq6qnos4ra4jBcdYE -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:32 2026 by rpki-client