This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1tDO2kZf8pr-8iZADbEzqQLQaR0.roa File: 1tDO2kZf8pr-8iZADbEzqQLQaR0.roa (raw, json) Hash identifier: gMrFJw8Q0bmNo850HuhdmmUsKGihc8vZODk4pNnk1n4= Subject key identifier: D6:D0:CE:DA:46:5F:F2:9A:FE:F2:26:40:0D:B1:33:A9:02:D0:69:1D Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019B77C71E57EC40A2DBA10FF8FE49BFC654 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1tDO2kZf8pr-8iZADbEzqQLQaR0.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214794 IP address blocks: 103.146.118.0/24 maxlen: 24 195.226.88.0/24 maxlen: 24 195.226.89.0/24 maxlen: 24 195.226.90.0/24 maxlen: 24 195.226.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1e:57:ec:40:a2:db:a1:0f:f8:fe:49:bf:c6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6d0ceda465ff29afef226400db133a902d0691d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:26:c8:b2:52:79:4b:75:57:a0:cf:8c:48: 49:5f:31:b0:e6:14:19:1e:8c:73:ae:7b:f1:c5:c2: 6f:cb:9f:f2:57:6c:4f:19:7a:85:7c:9b:7f:9e:6f: 9a:4a:03:8a:d0:55:f6:91:10:aa:af:28:8f:f1:70: e0:54:d9:8d:d3:2c:80:fd:fc:9f:a9:5c:ab:49:d9: 25:f4:e5:17:0d:89:e4:9b:29:fb:b2:d9:52:10:3a: a0:d3:a0:d7:df:f4:d9:f7:f7:ba:a2:f2:8c:ca:89: cb:5e:55:20:2d:66:67:c0:b5:43:e0:48:b2:c1:19: f1:28:db:b3:14:f7:75:9a:b3:f6:fb:5a:07:2b:e2: 84:90:e5:15:c8:c2:29:a2:d5:21:b0:39:11:dd:fb: 42:a8:a7:83:0d:39:fa:1a:44:a9:3e:08:20:32:66: bc:c8:50:8c:09:c4:31:1b:86:85:6d:44:7f:c4:7c: 89:95:eb:ed:dd:c5:53:19:e5:2f:b9:1a:21:67:ea: 0c:31:a5:be:41:48:22:8d:1b:6d:fd:b5:f9:94:d7: aa:32:45:27:40:b0:39:a4:d5:f4:38:9f:10:cd:62: 3d:d5:18:00:93:fd:3f:b2:26:1a:88:c4:fe:10:5c: e8:5a:f0:96:fc:9a:a3:35:50:bc:dc:d0:a0:5c:6c: 7b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D0:CE:DA:46:5F:F2:9A:FE:F2:26:40:0D:B1:33:A9:02:D0:69:1D X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1tDO2kZf8pr-8iZADbEzqQLQaR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.118.0/24 195.226.88.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:1f:c0:58:4d:e2:6b:81:70:ea:71:f8:ad:c1:c0:b0:7b:a7: 80:4a:a4:02:bd:58:5c:83:04:0a:49:2f:57:b6:50:e9:bc:5c: fb:75:74:e0:e6:b6:54:70:a4:d7:49:3c:25:94:cc:8a:fc:be: d6:e3:fc:90:1e:38:53:66:cf:e0:f9:32:71:93:b1:07:9d:d0: 1b:de:6f:ef:4f:b0:9d:4f:56:fa:97:1c:99:5e:b4:a9:45:2c: c2:4f:50:98:cb:d8:a1:23:35:39:13:37:89:de:60:9f:94:41: 58:55:d7:97:f8:4c:75:81:db:23:90:1f:31:d6:85:a0:40:49: e0:4e:ea:a8:08:f3:9c:82:81:11:cd:48:0a:3d:52:65:2c:7f: ec:fb:88:10:0a:5b:51:d4:68:7e:bc:e6:6c:de:ae:37:a7:9b: fe:87:5b:67:87:f4:26:49:5c:5a:85:b1:9a:91:7d:b0:b0:da: 47:31:ec:69:d2:fa:ed:2f:66:9e:ff:d4:7c:bc:b1:d6:92:bd: 25:15:a0:f2:5e:1a:85:7d:b4:a7:1e:79:fb:09:5d:1c:b4:c5: 81:9f:03:79:83:52:e6:30:7d:d5:98:24:3f:92:f7:b0:b3:67: 37:75:47:c2:f6:11:09:ad:50:87:04:09:a9:d2:f7:87:f0:b5: cd:7f:6d:a4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xx5X7ECi26EP+P5Jv8ZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmQwY2VkYTQ2NWZmMjlhZmVmMjI2NDAwZGIxMzNhOTAyZDA2OTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDQmyLJSeUt1V6DPjEhJXzGw5hQZ HoxzrnvxxcJvy5/yV2xPGXqFfJt/nm+aSgOK0FX2kRCqryiP8XDgVNmN0yyA/fyf qVyrSdkl9OUXDYnkmyn7stlSEDqg06DX3/TZ9/e6ovKMyonLXlUgLWZnwLVD4Eiy wRnxKNuzFPd1mrP2+1oHK+KEkOUVyMIpotUhsDkR3ftCqKeDDTn6GkSpPgggMma8 yFCMCcQxG4aFbUR/xHyJlevt3cVTGeUvuRohZ+oMMaW+QUgijRtt/bX5lNeqMkUn QLA5pNX0OJ8QzWI91RgAk/0/siYaiMT+EFzoWvCW/JqjNVC83NCgXGx7OQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNbQztpGX/Ka/vImQA2xM6kC0GkdMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMXRETzJrWmY4cHItOGlaQURiRXpxUUxRYVIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ5J2AwQC w+JYMA0GCSqGSIb3DQEBCwUAA4IBAQCOH8BYTeJrgXDqcfitwcCwe6eASqQCvVhc gwQKSS9XtlDpvFz7dXTg5rZUcKTXSTwllMyK/L7W4/yQHjhTZs/g+TJxk7EHndAb 3m/vT7CdT1b6lxyZXrSpRSzCT1CYy9ihIzU5EzeJ3mCflEFYVdeX+Ex1gdsjkB8x 1oWgQEngTuqoCPOcgoERzUgKPVJlLH/s+4gQCltR1Gh+vOZs3q43p5v+h1tnh/Qm SVxahbGakX2wsNpHMexp0vrtL2ae/9R8vLHWkr0lFaDyXhqFfbSnHnn7CV0ctMWB nwN5g1LmMH3VmCQ/kvews2c3dUfC9hEJrVCHBAmp0veH8LXNf22k -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:34 2026 by rpki-client