This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/A47ejH-QND_4p5ZynnjdFhGZbf4.roa File: A47ejH-QND_4p5ZynnjdFhGZbf4.roa (raw, json) Hash identifier: +HcmD5EzZ2PGTv159HFtwSPGyMK2+fjDllHmAYnxw3I= Subject key identifier: 03:8E:DE:8C:7F:90:34:3F:F8:A7:96:72:9E:78:DD:16:11:99:6D:FE Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637 Certificate serial: 019B7E38EC2A3C1A20411CF53794A752DFC8 Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/A47ejH-QND_4p5ZynnjdFhGZbf4.roa Signing time: Fri 02 Jan 2026 10:20:18 +0000 ROA not before: Fri 02 Jan 2026 10:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200366 IP address blocks: 31.193.190.0/24 maxlen: 24 103.76.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ec:2a:3c:1a:20:41:1c:f5:37:94:a7:52:df:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637 Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=038ede8c7f90343ff8a796729e78dd1611996dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:71:0f:79:5f:6b:b4:b3:15:5b:3f:74:62:b3: 00:ab:95:dc:3c:45:29:a1:9a:29:47:69:5f:9c:8a: 90:b6:ed:96:d8:1f:95:ed:b0:4c:e3:e5:ad:cd:57: 6d:9a:e6:bf:11:8d:47:bb:55:50:90:10:71:69:6f: 8d:42:78:61:3a:07:b4:ea:43:b0:bc:e1:c1:d9:cc: f8:25:ca:02:f2:a2:ac:1c:ee:a7:dc:e3:23:e1:2b: d3:e9:62:7f:e9:b3:c6:65:d9:1b:76:f5:90:e1:40: 8f:23:c3:04:5d:50:01:73:34:6d:1e:52:93:47:4a: 7f:f2:b1:a8:9f:a8:1a:01:68:70:f2:f4:b1:d4:31: b1:0c:37:81:a8:99:14:c8:03:a2:c2:3c:70:dc:6e: fb:e9:12:fa:a0:ae:22:c2:c3:7c:c8:65:28:9d:27: 08:37:57:fc:54:b0:05:f9:26:38:a6:22:74:ee:bb: 38:dc:d5:7a:e5:d1:ec:43:bc:c4:b7:c7:11:43:b5: ec:62:fb:4d:72:8e:d9:04:83:df:4f:3e:56:86:40: 24:05:73:f6:45:8b:21:42:c5:57:39:c5:87:c2:ca: 3a:eb:21:70:8e:bf:12:37:07:b1:1d:44:d0:f4:e4: 5b:ff:1e:4b:3d:ca:f1:ea:b9:59:0e:f9:b6:8a:3c: eb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8E:DE:8C:7F:90:34:3F:F8:A7:96:72:9E:78:DD:16:11:99:6D:FE X509v3 Authority Key Identifier: keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/A47ejH-QND_4p5ZynnjdFhGZbf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.190.0/24 103.76.166.0/23 Signature Algorithm: sha256WithRSAEncryption 10:38:03:9f:a0:e7:7a:b9:f0:d4:ca:39:73:4f:39:d3:b2:f3: 6c:17:e3:2a:68:88:3f:13:b9:ec:9d:ea:90:e2:ec:82:38:6a: 0d:a4:75:52:59:e8:7e:b2:10:90:85:88:80:8a:23:21:f1:ed: 92:93:af:e9:aa:39:28:81:57:c3:02:9e:5f:47:61:7b:1c:ea: 27:b5:39:68:74:38:81:e5:5b:6c:e4:ea:da:e0:31:4f:7c:2f: 80:c4:a3:5a:ae:7e:3f:2c:f8:b2:e9:d6:b1:bc:8e:d7:f3:30: 29:b0:50:30:c2:4a:0f:0a:68:56:8e:0f:d4:28:5b:1b:b9:cb: 93:ff:2e:04:93:6f:d5:c1:ca:aa:37:29:43:5e:29:b0:af:88: 18:f8:c7:c0:07:bb:ea:af:ef:46:99:f6:1e:0a:5c:01:ce:0f: 83:b9:10:e3:5c:b6:5c:33:d5:e5:ec:c0:7d:1d:5e:0d:92:ee: 14:ef:58:86:79:77:af:c2:46:47:6a:e7:dc:2f:e3:64:ef:53: 3e:56:39:e4:8a:2b:ea:db:da:dd:6e:40:97:b2:0d:e9:29:97: f1:d3:b6:b7:31:c4:28:eb:f2:c5:e1:b3:28:ef:53:4f:2b:32: 73:eb:88:d5:73:4b:37:73:62:d9:fb:37:8d:cc:84:19:68:fe: 31:c3:f1:4f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OOwqPBogQRz1N5SnUt/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTMyZmE0OTU2NGE1NzZhNjE0M2U0NWY4MTU2NjhmMjAw ZDc2MzcwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzhlZGU4YzdmOTAzNDNmZjhhNzk2NzI5ZTc4ZGQxNjExOTk2ZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03EPeV9rtLMVWz90YrMAq5XcPEUp oZopR2lfnIqQtu2W2B+V7bBM4+WtzVdtmua/EY1Hu1VQkBBxaW+NQnhhOge06kOw vOHB2cz4JcoC8qKsHO6n3OMj4SvT6WJ/6bPGZdkbdvWQ4UCPI8MEXVABczRtHlKT R0p/8rGon6gaAWhw8vSx1DGxDDeBqJkUyAOiwjxw3G776RL6oK4iwsN8yGUonScI N1f8VLAF+SY4piJ07rs43NV65dHsQ7zEt8cRQ7XsYvtNco7ZBIPfTz5WhkAkBXP2 RYshQsVXOcWHwso66yFwjr8SNwexHUTQ9ORb/x5LPcrx6rlZDvm2ijzrYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAOO3ox/kDQ/+KeWcp543RYRmW3+MB8GA1UdIwQY MBaAFKSTL6SVZKV2phQ+RfgVZo8gDXY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2Et YzdjMzI2ZDdhMzY0LzEvQTQ3ZWpILVFORF80cDVaeW5uamRGaEdaYmY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2EtYzdjMzI2ZDdhMzY0 LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH8G+AwQB Z0ymMA0GCSqGSIb3DQEBCwUAA4IBAQAQOAOfoOd6ufDUyjlzTznTsvNsF+MqaIg/ E7nsneqQ4uyCOGoNpHVSWeh+shCQhYiAiiMh8e2Sk6/pqjkogVfDAp5fR2F7HOon tTlodDiB5Vts5Ora4DFPfC+AxKNarn4/LPiy6daxvI7X8zApsFAwwkoPCmhWjg/U KFsbucuT/y4Ek2/VwcqqNylDXimwr4gY+MfAB7vqr+9GmfYeClwBzg+DuRDjXLZc M9Xl7MB9HV4Nku4U71iGeXevwkZHaufcL+Nk71M+Vjnkiivq29rdbkCXsg3pKZfx 07a3McQo6/LF4bMo71NPKzJz64jVc0s3c2LZ+zeNzIQZaP4xw/FP -----END CERTIFICATE-----Generated at Thu Jan 8 11:03:12 2026 by rpki-client