This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/BNEdKqvO3YgacDdBRVi0zWTjVbU.roa File: BNEdKqvO3YgacDdBRVi0zWTjVbU.roa (raw, json) Hash identifier: 7mYwj1eazfAnYP8wwalVPPFca8R6oCiuFo3rTRNvF7o= Subject key identifier: 04:D1:1D:2A:AB:CE:DD:88:1A:70:37:41:45:58:B4:CD:64:E3:55:B5 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C8057E71C033642608BE428458C6050 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/BNEdKqvO3YgacDdBRVi0zWTjVbU.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49392 IP address blocks: 103.145.20.0/24 maxlen: 24 194.165.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:57:e7:1c:03:36:42:60:8b:e4:28:45:8c:60:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04d11d2aabcedd881a7037414558b4cd64e355b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b0:fd:74:e3:8d:a0:b7:43:10:28:fe:ce:82: 78:11:da:82:ed:71:9c:00:ee:c6:f8:fb:ba:bd:4b: 3d:0b:2b:17:83:16:ef:4b:40:f5:47:d8:fd:ea:4b: 62:8a:42:c9:fd:71:b6:e5:f0:e6:08:3f:c5:31:2c: 16:7d:8a:53:5b:d4:70:ca:a1:1c:00:7c:6d:2a:db: 33:97:b7:6d:ae:b2:ac:6d:58:0b:ef:70:3a:25:5b: e9:8a:5a:71:dc:23:12:44:09:56:8e:90:ad:04:d8: 12:a0:a2:28:53:d8:9a:0d:1a:6e:b1:0f:10:50:16: 1a:85:c0:06:a2:c4:18:ce:d2:4b:0d:1e:e6:42:10: 9a:09:e7:4a:2a:2c:1b:c1:40:22:e2:bd:8f:3b:9c: 93:23:03:6d:11:93:43:e9:06:e3:0f:3e:87:5d:9e: d3:e2:9b:7d:55:a9:43:b4:b9:3b:9e:35:45:a4:ae: 2f:8d:92:72:81:bc:cb:3b:a5:e5:0b:fb:44:3c:86: 71:ea:6c:4b:94:17:89:36:89:95:45:1c:dd:1a:d3: 9e:a5:0c:31:3a:3a:1f:48:63:59:ac:fd:c2:29:e0: 33:89:34:12:72:c5:b0:66:14:fd:89:9c:50:77:b2: a2:a6:b8:9d:46:15:6c:30:36:ec:60:b0:f4:99:6e: fb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D1:1D:2A:AB:CE:DD:88:1A:70:37:41:45:58:B4:CD:64:E3:55:B5 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/BNEdKqvO3YgacDdBRVi0zWTjVbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.20.0/24 194.165.3.0/24 Signature Algorithm: sha256WithRSAEncryption 49:7e:f4:40:5f:11:f7:fd:b0:26:54:32:2b:c8:71:74:e3:03: b5:24:59:93:3e:af:84:af:9d:3d:a6:70:d1:51:79:10:b3:a8: a8:3c:20:68:25:26:07:e4:fe:e3:47:07:bb:d3:a5:ad:74:21: d1:06:4c:bb:df:00:49:e0:8a:2b:dd:e0:15:8c:bc:08:c6:3b: 00:3e:a6:69:09:85:06:d9:3d:e8:1f:e8:6b:d3:5b:25:81:aa: 2c:d7:49:6e:31:b2:79:8e:49:59:23:e9:4d:dd:94:22:3d:21: 38:e9:b2:96:3f:ae:69:9d:67:e3:50:ad:1f:78:1a:50:a1:65: a3:99:e4:b7:97:14:64:e2:b9:5f:61:8b:02:cd:e6:29:65:d3: 8b:f2:f4:c4:9b:a2:c2:94:72:7f:58:15:ed:4b:fa:63:32:4c: 1b:16:29:68:36:91:c6:5c:d9:14:d8:a0:9c:50:1e:dd:04:72: 47:52:78:bc:67:59:37:3e:fb:78:fa:bd:92:f2:46:84:95:07: 26:20:7f:6f:6e:ed:a1:1a:77:6d:ba:7d:3d:39:fc:c7:8e:21: ca:1d:77:3a:8c:ce:14:96:83:e9:9f:f7:4b:b0:6f:68:ab:0d: 87:37:48:3a:9c:ba:bd:27:41:6b:58:04:6a:2b:73:c8:87:f4: 15:0e:f9:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gFfnHAM2QmCL5ChFjGBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGQxMWQyYWFiY2VkZDg4MWE3MDM3NDE0NTU4YjRjZDY0ZTM1NWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbD9dOONoLdDECj+zoJ4EdqC7XGc AO7G+Pu6vUs9CysXgxbvS0D1R9j96ktiikLJ/XG25fDmCD/FMSwWfYpTW9RwyqEc AHxtKtszl7dtrrKsbVgL73A6JVvpilpx3CMSRAlWjpCtBNgSoKIoU9iaDRpusQ8Q UBYahcAGosQYztJLDR7mQhCaCedKKiwbwUAi4r2PO5yTIwNtEZND6QbjDz6HXZ7T 4pt9ValDtLk7njVFpK4vjZJygbzLO6XlC/tEPIZx6mxLlBeJNomVRRzdGtOepQwx OjofSGNZrP3CKeAziTQScsWwZhT9iZxQd7KipridRhVsMDbsYLD0mW778wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFATRHSqrzt2IGnA3QUVYtM1k41W1MB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvQk5FZEtxdk8zWWdhY0RkQlJWaTB6V1RqVmJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ5EUAwQA wqUDMA0GCSqGSIb3DQEBCwUAA4IBAQBJfvRAXxH3/bAmVDIryHF04wO1JFmTPq+E r509pnDRUXkQs6ioPCBoJSYH5P7jRwe706WtdCHRBky73wBJ4Ior3eAVjLwIxjsA PqZpCYUG2T3oH+hr01slgaos10luMbJ5jklZI+lN3ZQiPSE46bKWP65pnWfjUK0f eBpQoWWjmeS3lxRk4rlfYYsCzeYpZdOL8vTEm6LClHJ/WBXtS/pjMkwbFiloNpHG XNkU2KCcUB7dBHJHUni8Z1k3Pvt4+r2S8kaElQcmIH9vbu2hGndtun09OfzHjiHK HXc6jM4UloPpn/dLsG9oqw2HN0g6nLq9J0FrWARqK3PIh/QVDvlK -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:18 2026 by rpki-client