This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q5l5VTUk3KjgPGI34oux7kbuK9A.roa File: q5l5VTUk3KjgPGI34oux7kbuK9A.roa (raw, json) Hash identifier: CbFfTY4H2xFiN9cQiZYwzmV1dgd1aPiixe1wf0KbWV8= Subject key identifier: AB:99:79:55:35:24:DC:A8:E0:3C:62:37:E2:8B:B1:EE:46:EE:2B:D0 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC860950219DA9C6CDFE9C8ABF70F7B Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q5l5VTUk3KjgPGI34oux7kbuK9A.roa Signing time: Thu 01 Jan 2026 18:18:30 +0000 ROA not before: Thu 01 Jan 2026 18:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209179 IP address blocks: 103.63.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:60:95:02:19:da:9c:6c:df:e9:c8:ab:f7:0f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab9979553524dca8e03c6237e28bb1ee46ee2bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:7f:41:77:e2:76:35:50:7b:dd:f9:cb:fb: 32:00:71:e8:53:22:ee:b8:16:91:e8:f9:5d:bc:79: 67:c6:05:21:8d:d1:44:1c:93:f2:fe:b7:bf:fc:57: d9:8b:1d:5c:79:2d:0c:53:52:d8:25:6f:15:54:77: 40:59:71:3c:57:43:79:be:cd:76:e1:ac:d4:0c:ef: 1c:e1:61:3f:63:74:19:a2:d9:e2:5f:8b:5d:9e:dd: d4:d7:ee:0d:d4:65:3c:82:c2:f7:1b:df:f4:d8:de: 42:5b:88:71:67:95:e3:1e:f3:8b:84:5c:93:62:4b: 95:d2:23:02:0d:8f:14:e5:90:7f:fd:a0:15:a5:9d: 55:dc:42:bf:6e:d7:a0:d3:97:ca:76:1c:e5:26:20: db:16:be:01:15:cf:f9:ea:8f:8e:54:d6:5a:20:74: a3:bd:8e:23:38:29:fb:6d:3c:57:8c:cc:c2:b4:36: 23:56:28:d8:6f:58:37:d6:84:1e:ea:df:91:74:ec: f2:ff:af:16:ba:8e:95:00:d3:fa:1f:28:5c:3e:de: 46:2f:bb:c6:4b:fb:ef:28:1a:a5:55:fb:98:81:ce: 75:bb:2a:d2:c4:f3:b9:34:6e:29:0e:c4:04:be:ec: aa:ea:a6:94:a8:ee:b0:19:ee:2f:ca:b1:77:3f:b7: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:79:55:35:24:DC:A8:E0:3C:62:37:E2:8B:B1:EE:46:EE:2B:D0 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q5l5VTUk3KjgPGI34oux7kbuK9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.63.29.0/24 Signature Algorithm: sha256WithRSAEncryption a7:64:49:6b:88:70:1a:54:a8:4c:90:7c:dc:c5:49:f0:c9:88: d8:65:65:33:e9:de:76:5a:77:ad:cf:99:ad:91:d7:33:ce:aa: be:de:ea:54:c2:d8:06:65:44:d1:17:9c:2f:a2:bd:ca:1f:6c: c9:6a:09:f3:14:d7:fb:38:04:76:25:90:ba:8a:dc:19:b8:80: 92:c0:5d:11:59:33:3a:5c:df:ef:89:fd:42:26:54:dd:a7:8b: 32:48:c6:15:6f:fb:9c:1a:e4:25:88:67:4d:b5:87:3c:7b:ef: 85:34:b3:60:b2:77:c8:54:d9:20:f6:54:2c:1a:58:e1:1e:89: a6:14:fc:74:9c:29:95:0f:42:4f:4e:f5:80:1a:89:15:3d:c4: ec:a9:c3:8b:ad:ad:74:80:7f:8a:9f:9e:ed:33:9e:27:01:2a: 9d:ca:0b:f1:a1:3c:83:38:a5:0a:ca:8a:08:07:8f:78:f7:bc: b1:93:85:aa:79:d3:51:90:80:8e:df:d0:14:3a:97:ce:40:51: ea:92:3e:1f:21:99:b8:79:d0:5a:f4:c4:af:58:d0:54:5e:c1: ce:20:32:e2:6e:f2:43:80:05:f2:27:7a:34:22:98:bc:dc:7d: e0:07:19:d8:57:96:7d:b5:3a:59:d4:34:25:4f:7f:af:ed:3b: 21:2f:c4:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGCVAhnanGzf6cir9w97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjk5Nzk1NTM1MjRkY2E4ZTAzYzYyMzdlMjhiYjFlZTQ2ZWUyYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsx/QXfidjVQe935y/syAHHoUyLu uBaR6PldvHlnxgUhjdFEHJPy/re//FfZix1ceS0MU1LYJW8VVHdAWXE8V0N5vs12 4azUDO8c4WE/Y3QZotniX4tdnt3U1+4N1GU8gsL3G9/02N5CW4hxZ5XjHvOLhFyT YkuV0iMCDY8U5ZB//aAVpZ1V3EK/bteg05fKdhzlJiDbFr4BFc/56o+OVNZaIHSj vY4jOCn7bTxXjMzCtDYjVijYb1g31oQe6t+RdOzy/68Wuo6VANP6HyhcPt5GL7vG S/vvKBqlVfuYgc51uyrSxPO5NG4pDsQEvuyq6qaUqO6wGe4vyrF3P7f8NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuZeVU1JNyo4DxiN+KLse5G7ivQMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvcTVsNVZUVWszS2pnUEdJMzRvdXg3a2J1SzlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZz8dMA0G CSqGSIb3DQEBCwUAA4IBAQCnZElriHAaVKhMkHzcxUnwyYjYZWUz6d52Wnetz5mt kdczzqq+3upUwtgGZUTRF5wvor3KH2zJagnzFNf7OAR2JZC6itwZuICSwF0RWTM6 XN/vif1CJlTdp4sySMYVb/ucGuQliGdNtYc8e++FNLNgsnfIVNkg9lQsGljhHomm FPx0nCmVD0JPTvWAGokVPcTsqcOLra10gH+Kn57tM54nASqdygvxoTyDOKUKyooI B49497yxk4WqedNRkICO39AUOpfOQFHqkj4fIZm4edBa9MSvWNBUXsHOIDLibvJD gAXyJ3o0Ipi83H3gBxnYV5Z9tTpZ1DQlT3+v7TshL8Sk -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:37 2026 by rpki-client