This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/cI-L7pef_AdHI_QGBFTE5PiVJ0U.roa File: cI-L7pef_AdHI_QGBFTE5PiVJ0U.roa (raw, json) Hash identifier: jgu+5sRPCpckA/cZ1yBuc9ZXcWSw0y0C+/Lk+J+5CkI= Subject key identifier: 70:8F:8B:EE:97:9F:FC:07:47:23:F4:06:04:54:C4:E4:F8:95:27:45 Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019B77C71C7E8D585048554B1B14403C8DF6 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/cI-L7pef_AdHI_QGBFTE5PiVJ0U.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61400 IP address blocks: 103.31.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1c:7e:8d:58:50:48:55:4b:1b:14:40:3c:8d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=708f8bee979ffc074723f4060454c4e4f8952745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c0:3d:37:42:e0:49:f3:15:66:f2:07:af:49: 53:e2:e5:86:04:3e:cf:1e:52:72:48:be:ad:74:f5: 87:70:cb:86:a1:83:0f:8a:e0:25:a2:4d:cb:c6:33: 26:28:94:db:96:3d:d4:3b:04:7b:6b:da:5b:cc:de: 92:e0:ff:13:a0:4e:94:c0:c5:e9:ad:a2:50:90:7a: 09:dd:03:c8:ea:ce:3c:e9:9a:80:13:9e:d9:d8:37: 44:6d:a5:25:82:a8:82:5a:ad:ab:52:c6:01:eb:9a: 8e:13:51:55:c7:8d:e7:1f:05:3e:2f:56:cb:2a:22: 12:06:d0:1e:56:ac:eb:f9:85:75:f9:ee:ca:96:51: 6d:81:89:15:18:26:0b:b5:6e:d8:cc:24:aa:57:12: f3:66:34:8c:3d:50:89:cd:3f:e1:4b:30:6b:2c:3b: c9:fa:bc:24:aa:97:82:55:f9:cf:ad:b6:b3:cb:94: a7:2c:02:12:16:8a:c8:77:8a:c0:15:f3:00:86:4c: 64:8c:1a:08:7f:e5:b8:4d:60:e9:9a:e2:72:21:b7: 06:87:99:5a:d1:32:0d:65:49:46:48:90:5d:cd:ad: de:a7:d9:cb:88:33:29:f0:29:a3:dd:af:25:4b:59: 16:44:8e:45:24:c5:90:49:cf:46:74:6e:50:7e:53: 78:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8F:8B:EE:97:9F:FC:07:47:23:F4:06:04:54:C4:E4:F8:95:27:45 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/cI-L7pef_AdHI_QGBFTE5PiVJ0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.78.0/24 Signature Algorithm: sha256WithRSAEncryption b9:1a:01:1e:66:7f:5e:db:ad:56:81:ec:13:c7:e5:f3:ad:8c: cf:c6:68:72:30:cc:59:36:da:7a:cf:98:46:68:93:56:c4:5f: 96:bb:41:7b:da:5f:d2:3d:33:62:af:83:e8:77:0f:52:4d:b6: 0b:6f:f9:08:5d:1a:b2:cc:f3:4f:41:0a:2f:65:db:45:f2:58: 11:b6:6e:b6:8d:bc:9e:7d:34:06:86:e2:30:b8:b4:4f:8e:9e: f5:8d:6d:a1:ee:03:a2:d0:b4:46:af:1e:c4:05:85:80:72:0f: 36:12:de:1f:6f:40:bc:a2:7c:08:0f:f1:e1:5b:93:96:36:10: ac:69:a7:06:b5:0c:00:9b:77:67:3b:77:3a:37:44:93:14:ae: 1a:c1:63:c7:15:c3:f9:38:d1:07:a2:2d:cb:2d:96:08:8c:5b: f1:b5:43:bb:bd:00:51:7c:18:77:80:83:c0:b5:ed:f1:d2:71: 62:64:4e:b5:39:56:e9:8f:0c:11:54:18:a2:24:fe:8b:85:c9: 7d:c3:5c:1f:55:1a:b4:49:8c:b7:78:8b:92:2f:12:79:fe:f1: f3:60:89:23:1f:b8:4a:b2:6c:e4:10:bd:7b:b4:b7:32:97:0c: d8:42:8f:10:59:89:58:9a:a2:c2:1a:9c:d8:33:09:49:3e:2a: a0:c3:ed:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxx+jVhQSFVLGxRAPI32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDhmOGJlZTk3OWZmYzA3NDcyM2Y0MDYwNDU0YzRlNGY4OTUyNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18A9N0LgSfMVZvIHr0lT4uWGBD7P HlJySL6tdPWHcMuGoYMPiuAlok3LxjMmKJTblj3UOwR7a9pbzN6S4P8ToE6UwMXp raJQkHoJ3QPI6s486ZqAE57Z2DdEbaUlgqiCWq2rUsYB65qOE1FVx43nHwU+L1bL KiISBtAeVqzr+YV1+e7KllFtgYkVGCYLtW7YzCSqVxLzZjSMPVCJzT/hSzBrLDvJ +rwkqpeCVfnPrbazy5SnLAISForId4rAFfMAhkxkjBoIf+W4TWDpmuJyIbcGh5la 0TINZUlGSJBdza3ep9nLiDMp8Cmj3a8lS1kWRI5FJMWQSc9GdG5QflN4AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHCPi+6Xn/wHRyP0BgRUxOT4lSdFMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvY0ktTDdwZWZfQWRISV9RR0JGVEU1UGlWSjBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx9OMA0G CSqGSIb3DQEBCwUAA4IBAQC5GgEeZn9e261WgewTx+XzrYzPxmhyMMxZNtp6z5hG aJNWxF+Wu0F72l/SPTNir4Podw9STbYLb/kIXRqyzPNPQQovZdtF8lgRtm62jbye fTQGhuIwuLRPjp71jW2h7gOi0LRGrx7EBYWAcg82Et4fb0C8onwID/HhW5OWNhCs aacGtQwAm3dnO3c6N0STFK4awWPHFcP5ONEHoi3LLZYIjFvxtUO7vQBRfBh3gIPA te3x0nFiZE61OVbpjwwRVBiiJP6Lhcl9w1wfVRq0SYy3eIuSLxJ5/vHzYIkjH7hK smzkEL17tLcylwzYQo8QWYlYmqLCGpzYMwlJPiqgw+1Z -----END CERTIFICATE-----Generated at Sun Jan 25 20:28:55 2026 by rpki-client