This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa File: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (raw, json) Hash identifier: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE= Subject key identifier: 10:95:1F:27:A9:D7:27:12:25:2D:6A:45:1F:9C:64:BA:3D:28:4E:3D Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019B7F1577057748D3B49B816EAAFAAC5261 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210456 IP address blocks: 103.102.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:77:05:77:48:d3:b4:9b:81:6e:aa:fa:ac:52:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10951f27a9d72712252d6a451f9c64ba3d284e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:bc:eb:86:a8:8a:96:0e:fc:fb:00:58:de: db:47:5a:a8:16:c9:cf:1f:fd:de:b9:be:d6:6b:1e: a3:97:71:dc:2d:1a:a3:7b:10:fa:54:e0:a2:d1:92: 40:3b:3d:6b:62:ed:f9:84:a2:e2:cb:b3:45:87:98: 25:03:86:ce:95:c4:fb:6e:9d:c2:df:9b:78:ab:02: 76:dd:44:56:ac:4b:2b:e4:d8:92:1c:4d:43:09:c2: 3a:e5:0a:d0:ca:57:ca:9c:90:ce:51:0d:77:ce:54: 80:91:94:97:28:82:dd:48:85:54:fc:57:f8:c1:d9: 03:85:e8:22:f9:83:ab:07:f8:e8:36:eb:40:53:a2: 5f:c1:49:e3:91:0a:f1:5c:47:21:09:d4:08:9e:ac: ba:dc:36:4d:7b:15:3c:59:cf:f8:44:51:fa:11:09: 76:df:27:80:1e:d9:21:8b:14:fb:b1:15:d2:e3:7e: d7:b8:39:5b:c7:5e:4c:ca:e8:28:5a:3e:d6:57:96: 72:47:54:63:6c:53:cb:99:38:43:df:cc:08:a4:a8: 2b:af:0a:62:5e:24:e8:0e:98:38:d6:4c:cf:09:5f: 09:f2:3f:23:76:8f:68:e1:a1:9a:4e:b8:f8:1a:97: 51:9a:ff:bb:34:9f:d8:4f:39:02:49:e1:04:19:30: 85:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:95:1F:27:A9:D7:27:12:25:2D:6A:45:1F:9C:64:BA:3D:28:4E:3D X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.231.0/24 Signature Algorithm: sha256WithRSAEncryption 50:18:83:c0:cf:84:bb:08:8b:6d:15:72:49:0c:f5:0e:d2:f0: 89:50:05:fe:b5:08:fb:79:65:ff:03:c6:11:a4:9d:1e:e8:2b: 61:25:87:cc:3b:30:ac:58:f5:b1:9b:e0:d2:4f:17:31:65:62: 96:ff:80:d4:84:7e:ee:af:ee:36:1f:79:24:a0:0e:d2:31:4f: 13:69:be:6e:1f:0d:39:04:56:db:01:3f:ed:26:45:03:fc:9c: a7:6a:50:8a:19:70:f5:51:6a:e1:d3:c9:0b:ec:ef:90:0d:c8: 63:60:0e:f5:8f:2e:a7:cd:0d:1a:58:c8:12:de:26:2a:c3:b3: 3c:d7:2d:a7:49:e5:61:9f:fb:2d:2a:a0:85:87:af:60:c4:3d: 01:0d:24:19:a5:c5:2b:21:ae:1b:06:c9:4e:41:cd:67:5e:ac: 66:93:63:47:f1:e9:d4:7a:6b:b3:8a:15:0e:9e:f3:57:50:2d: a4:89:bd:35:12:87:1d:d8:ad:72:74:2d:97:f5:b3:5f:fa:a4: 0d:96:45:d1:a6:dc:4a:63:8a:4c:38:f6:97:ec:c0:0a:30:5b: dc:4c:6a:6f:b4:1b:20:a6:4d:e7:da:2b:2c:f3:84:e3:13:ce: 7a:81:48:72:0e:b1:6e:96:c7:32:8e:01:33:35:4e:a3:a0:e1: 7b:bc:21:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXcFd0jTtJuBbqr6rFJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDk1MWYyN2E5ZDcyNzEyMjUyZDZhNDUxZjljNjRiYTNkMjg0ZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr96864aoipYO/PsAWN7bR1qoFsnP H/3eub7Wax6jl3HcLRqjexD6VOCi0ZJAOz1rYu35hKLiy7NFh5glA4bOlcT7bp3C 35t4qwJ23URWrEsr5NiSHE1DCcI65QrQylfKnJDOUQ13zlSAkZSXKILdSIVU/Ff4 wdkDhegi+YOrB/joNutAU6JfwUnjkQrxXEchCdQInqy63DZNexU8Wc/4RFH6EQl2 3yeAHtkhixT7sRXS437XuDlbx15MyugoWj7WV5ZyR1RjbFPLmThD38wIpKgrrwpi XiToDpg41kzPCV8J8j8jdo9o4aGaTrj4GpdRmv+7NJ/YTzkCSeEEGTCFtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCVHyep1ycSJS1qRR+cZLo9KE49MB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvRUpVZko2blhKeElsTFdwRkg1eGt1ajBvVGowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2bnMA0G CSqGSIb3DQEBCwUAA4IBAQBQGIPAz4S7CIttFXJJDPUO0vCJUAX+tQj7eWX/A8YR pJ0e6CthJYfMOzCsWPWxm+DSTxcxZWKW/4DUhH7ur+42H3kkoA7SMU8Tab5uHw05 BFbbAT/tJkUD/JynalCKGXD1UWrh08kL7O+QDchjYA71jy6nzQ0aWMgS3iYqw7M8 1y2nSeVhn/stKqCFh69gxD0BDSQZpcUrIa4bBslOQc1nXqxmk2NH8enUemuzihUO nvNXUC2kib01Eocd2K1ydC2X9bNf+qQNlkXRptxKY4pMOPaX7MAKMFvcTGpvtBsg pk3n2iss84TjE856gUhyDrFulscyjgEzNU6joOF7vCGk -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:36 2026 by rpki-client