This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/tsos8eFPeooULoppkyeNfVcA8Jk.roa File: tsos8eFPeooULoppkyeNfVcA8Jk.roa (raw, json) Hash identifier: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk= Subject key identifier: B6:CA:2C:F1:E1:4F:7A:8A:14:2E:8A:69:93:27:8D:7D:57:00:F0:99 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019B7F1576CEDA3C8267A541954A5D8225EF Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/tsos8eFPeooULoppkyeNfVcA8Jk.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62563 IP address blocks: 103.102.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:76:ce:da:3c:82:67:a5:41:95:4a:5d:82:25:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6ca2cf1e14f7a8a142e8a6993278d7d5700f099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:74:3f:30:4b:50:dc:70:a3:f6:c7:87:d1: ea:3f:f9:b4:19:35:89:21:67:ea:71:da:d0:57:34: 16:52:1b:6f:c5:ba:d1:43:74:fb:cb:f7:3b:51:22: 51:64:22:84:ab:77:6b:9f:8c:45:58:a6:6a:d8:cf: cc:fd:16:aa:4b:df:61:e3:a2:62:9d:47:99:01:81: ee:67:24:fe:8b:78:db:47:5e:d0:22:0b:d5:51:97: 86:b8:c6:7f:4c:24:6d:4b:9d:67:25:45:a9:82:b1: 65:de:21:0e:77:69:6e:f9:a0:34:95:38:bf:8b:dc: da:62:b9:93:d3:63:0f:5c:75:6c:90:fe:23:40:a7: 0e:48:b6:08:e0:f2:23:cf:46:5b:2f:22:7c:0e:66: 94:48:8e:9f:87:17:2f:18:dd:d0:f8:62:25:7f:58: 5b:7b:28:54:0a:2d:a8:3c:10:6b:40:72:46:8f:88: 35:02:29:84:3d:5c:3b:5c:3e:04:88:95:49:92:23: 1e:fd:1e:87:f2:de:74:5a:f7:d6:bd:35:f2:ed:f0: d0:e8:0a:8b:6d:30:b1:6c:6e:c0:0f:cb:30:79:15: af:24:4d:1b:6b:22:29:83:65:c0:87:9b:37:16:cc: 5f:52:59:68:ea:7c:79:3c:53:3e:0f:88:4d:05:27: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CA:2C:F1:E1:4F:7A:8A:14:2E:8A:69:93:27:8D:7D:57:00:F0:99 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/tsos8eFPeooULoppkyeNfVcA8Jk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.230.0/24 Signature Algorithm: sha256WithRSAEncryption 05:a7:7b:63:e8:4b:2f:b8:3d:cf:11:c8:4c:2f:82:30:a4:07: 30:3d:76:dd:79:07:57:da:59:57:42:84:6c:58:79:b5:93:83: c1:c8:c5:e1:ec:8a:83:69:f1:42:fd:2a:ba:a7:1b:39:de:b2: 8a:15:34:a2:56:98:c1:84:ad:91:15:c5:b6:bf:ce:96:6a:5d: ba:49:4a:c9:21:af:ab:0f:7b:8a:a3:99:9a:a3:24:d8:0c:b9: a6:03:fc:f8:ce:b3:6d:0d:61:12:20:55:72:f0:bb:6e:e8:ae: 2b:16:75:85:40:f9:b4:e2:ad:83:5f:16:ce:1f:c2:73:1f:32: 00:0b:eb:d8:9d:db:c9:1d:30:24:27:7c:d3:83:62:8f:86:25: 1d:de:2b:ae:c3:a0:74:14:a4:c3:3e:83:65:94:5f:22:e9:3d: 98:5b:a5:c8:0e:35:9b:92:a1:00:e4:33:9b:09:28:f3:43:39: 19:ed:e3:ed:37:6c:43:d5:2c:d2:e1:9b:a8:87:7e:17:65:d4: 81:35:80:28:4a:c2:71:b7:5d:af:09:27:78:3d:51:60:bd:70: 97:76:e4:73:ed:2a:2f:2e:28:f4:8a:0b:98:25:e5:54:1c:b7: 94:b4:29:14:5f:f9:3b:ac:22:ec:88:9e:fb:d2:23:f7:ff:fe: a1:e7:f4:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXbO2jyCZ6VBlUpdgiXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmNhMmNmMWUxNGY3YThhMTQyZThhNjk5MzI3OGQ3ZDU3MDBmMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsol0PzBLUNxwo/bHh9HqP/m0GTWJ IWfqcdrQVzQWUhtvxbrRQ3T7y/c7USJRZCKEq3drn4xFWKZq2M/M/RaqS99h46Ji nUeZAYHuZyT+i3jbR17QIgvVUZeGuMZ/TCRtS51nJUWpgrFl3iEOd2lu+aA0lTi/ i9zaYrmT02MPXHVskP4jQKcOSLYI4PIjz0ZbLyJ8DmaUSI6fhxcvGN3Q+GIlf1hb eyhUCi2oPBBrQHJGj4g1AimEPVw7XD4EiJVJkiMe/R6H8t50WvfWvTXy7fDQ6AqL bTCxbG7AD8sweRWvJE0bayIpg2XAh5s3FsxfUllo6nx5PFM+D4hNBSfgZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLbKLPHhT3qKFC6KaZMnjX1XAPCZMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvdHNvczhlRlBlb29VTG9wcGt5ZU5mVmNBOEprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2bmMA0G CSqGSIb3DQEBCwUAA4IBAQAFp3tj6EsvuD3PEchML4IwpAcwPXbdeQdX2llXQoRs WHm1k4PByMXh7IqDafFC/Sq6pxs53rKKFTSiVpjBhK2RFcW2v86Wal26SUrJIa+r D3uKo5maoyTYDLmmA/z4zrNtDWESIFVy8Ltu6K4rFnWFQPm04q2DXxbOH8JzHzIA C+vYndvJHTAkJ3zTg2KPhiUd3iuuw6B0FKTDPoNllF8i6T2YW6XIDjWbkqEA5DOb CSjzQzkZ7ePtN2xD1SzS4Zuoh34XZdSBNYAoSsJxt12vCSd4PVFgvXCXduRz7Sov Lij0iguYJeVUHLeUtCkUX/k7rCLsiJ770iP3//6h5/Rd -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:29 2026 by rpki-client