This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/wLzBl1TIo7EO7s1obxvC0i1YAfw.roa File: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (raw, json) Hash identifier: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo= Subject key identifier: C0:BC:C1:97:54:C8:A3:B1:0E:EE:CD:68:6F:1B:C2:D2:2D:58:01:FC Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019B7F1575AB28ED99B3B3071116C175BA73 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/wLzBl1TIo7EO7s1obxvC0i1YAfw.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 103.102.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:75:ab:28:ed:99:b3:b3:07:11:16:c1:75:ba:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0bcc19754c8a3b10eeecd686f1bc2d22d5801fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:c8:fc:2b:44:ba:a6:7c:c1:4e:15:8c:f3: 2b:81:56:c4:4f:a5:44:c7:7e:26:7a:4c:a2:79:7c: 8d:b9:e4:e4:99:ed:93:a9:98:f8:32:05:45:70:6c: 31:98:8c:49:3c:4a:27:29:de:f6:f7:86:e3:30:95: 4d:ff:53:79:8d:88:cb:e2:54:94:62:47:73:cf:3e: 62:27:f8:d2:6b:cb:4e:68:e7:c8:10:16:08:07:a6: 6b:a8:6d:54:20:09:dd:b3:2e:ef:6c:03:74:eb:29: e4:d4:56:0a:32:de:b7:52:12:28:b0:75:55:ef:03: 9e:8d:70:d5:26:28:f4:22:6d:ce:b0:7f:78:16:d8: d7:6c:91:50:35:10:d7:a6:73:24:ed:f3:1b:d1:81: 41:6e:40:1e:a7:f3:d0:06:da:27:85:67:0e:ab:d4: 4d:47:05:c8:3a:4f:6e:85:fb:7a:bf:36:5b:d2:85: e4:f4:5e:53:04:e2:41:ce:f6:42:77:c9:dc:1b:e8: d7:a0:c3:36:7c:3d:92:1b:c1:e3:14:1b:71:52:af: 80:01:20:52:66:3e:c9:84:16:36:2c:4f:e2:f3:91: 19:1b:8d:73:56:bb:1f:2d:9d:22:46:5b:08:34:75: ee:78:74:ee:5e:8d:24:a1:66:85:6d:bd:23:83:49: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BC:C1:97:54:C8:A3:B1:0E:EE:CD:68:6F:1B:C2:D2:2D:58:01:FC X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/wLzBl1TIo7EO7s1obxvC0i1YAfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.228.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:8e:ef:a8:09:df:fc:55:b0:97:f5:19:c3:dd:05:a0:4d:e1: eb:d6:05:e9:25:7d:fc:4d:78:f3:eb:15:4e:5b:8a:57:93:73: 88:db:3a:be:e2:04:c5:36:1c:71:a0:0c:73:e6:2e:d3:9d:e8: 68:00:f1:74:51:a5:21:80:c6:c4:db:67:33:df:b9:b3:20:0c: 8f:de:9d:06:a4:52:3f:50:85:19:c0:50:4b:43:e9:b0:65:72: 6d:90:75:78:d4:3a:f9:50:91:28:59:7c:df:0f:9f:5d:63:e4: d3:8e:0c:b0:17:c8:39:c7:8a:51:6e:a7:97:64:4c:06:24:d6: e7:8e:31:73:12:c8:8f:4d:54:77:36:ef:6c:8e:35:ed:69:b0: e3:db:e8:5b:fa:c7:ab:f2:c2:5f:0d:96:81:7c:0b:78:5c:7d: d6:1f:3f:4b:ca:64:9c:3f:58:60:6c:2e:cf:e2:66:fd:1e:33: ca:7d:49:c3:e5:c1:5f:56:d7:42:5a:32:74:2f:2d:a7:c5:01: 93:30:6e:b1:c7:bf:58:9b:49:15:e5:d9:ee:41:99:6a:aa:c5: ce:56:e2:27:93:2e:8b:df:e9:39:e5:61:ed:db:e1:c2:b7:78: 03:e2:62:4b:f1:60:8a:de:e6:3d:82:57:10:45:31:de:a3:86: 19:a1:3b:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXWrKO2Zs7MHERbBdbpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGJjYzE5NzU0YzhhM2IxMGVlZWNkNjg2ZjFiYzJkMjJkNTgwMWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOPI/CtEuqZ8wU4VjPMrgVbET6VE x34mekyieXyNueTkme2TqZj4MgVFcGwxmIxJPEonKd7294bjMJVN/1N5jYjL4lSU Ykdzzz5iJ/jSa8tOaOfIEBYIB6ZrqG1UIAndsy7vbAN06ynk1FYKMt63UhIosHVV 7wOejXDVJij0Im3OsH94FtjXbJFQNRDXpnMk7fMb0YFBbkAep/PQBtonhWcOq9RN RwXIOk9uhft6vzZb0oXk9F5TBOJBzvZCd8ncG+jXoMM2fD2SG8HjFBtxUq+AASBS Zj7JhBY2LE/i85EZG41zVrsfLZ0iRlsINHXueHTuXo0koWaFbb0jg0mk9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMC8wZdUyKOxDu7NaG8bwtItWAH8MB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvd0x6QmwxVElvN0VPN3Mxb2J4dkMwaTFZQWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2bkMA0G CSqGSIb3DQEBCwUAA4IBAQCcju+oCd/8VbCX9RnD3QWgTeHr1gXpJX38TXjz6xVO W4pXk3OI2zq+4gTFNhxxoAxz5i7TnehoAPF0UaUhgMbE22cz37mzIAyP3p0GpFI/ UIUZwFBLQ+mwZXJtkHV41Dr5UJEoWXzfD59dY+TTjgywF8g5x4pRbqeXZEwGJNbn jjFzEsiPTVR3Nu9sjjXtabDj2+hb+ser8sJfDZaBfAt4XH3WHz9LymScP1hgbC7P 4mb9HjPKfUnD5cFfVtdCWjJ0Ly2nxQGTMG6xx79Ym0kV5dnuQZlqqsXOVuInky6L 3+k55WHt2+HCt3gD4mJL8WCK3uY9glcQRTHeo4YZoTvA -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:25 2026 by rpki-client