This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CmjKOgEilPd8teNPBg7dyJB7I4o.roa File: CmjKOgEilPd8teNPBg7dyJB7I4o.roa (raw, json) Hash identifier: HD4J8FV3sNHpbTHa8618mgjNyb2S/tYkocwBA0IKOlU= Subject key identifier: 0A:68:CA:3A:01:22:94:F7:7C:B5:E3:4F:06:0E:DD:C8:90:7B:23:8A Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019ADE33333D798C3C1AFC622FE03B3DA252 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CmjKOgEilPd8teNPBg7dyJB7I4o.roa Signing time: Tue 02 Dec 2025 08:34:48 +0000 ROA not before: Tue 02 Dec 2025 08:34:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63023 IP address blocks: 103.114.41.0/24 maxlen: 24 2a13:18c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:33:33:3d:79:8c:3c:1a:fc:62:2f:e0:3b:3d:a2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 2 08:34:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0a68ca3a012294f77cb5e34f060eddc8907b238a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:1e:d6:09:e5:84:14:45:65:f3:2e:b1:9e: d6:03:f1:2a:09:f8:d2:ba:4e:26:00:d4:49:62:f1: e2:44:c7:37:0c:b4:74:f5:04:09:d0:82:9a:ec:61: 76:2f:e9:8a:73:cd:e0:d4:8f:fd:a2:6e:10:08:01: 8e:5c:89:3d:0e:05:b4:d2:9e:7a:25:f3:e3:13:09: 6b:aa:49:23:3b:4b:d5:d6:4c:b4:88:7f:86:16:76: da:87:6f:c1:c2:af:18:3b:bd:6e:2d:95:a0:c5:26: 30:d0:a2:69:e1:51:1f:e4:40:d8:80:5c:f5:4a:72: 99:71:13:d7:1e:1c:41:3a:54:5e:25:93:40:a0:f8: 90:92:55:1e:f0:42:02:1b:fe:a6:0d:f0:49:a8:37: 08:83:4b:80:2f:29:8f:0b:e2:ca:1f:6c:7b:c0:c9: b2:79:ed:7f:af:a6:90:36:79:ff:ed:8f:ca:a5:5e: 7e:2c:4f:a6:e2:9e:5d:05:54:cc:01:8f:c9:82:1e: a4:3a:55:60:68:df:33:f2:3e:c2:af:cb:4e:84:67: 73:d8:62:a1:73:be:8a:ea:d3:99:16:d4:79:6b:de: be:0d:0f:c7:40:d6:b8:85:5a:26:6a:6f:31:c5:f0: ff:35:b8:b5:2a:c0:c8:f8:82:11:d6:4a:82:1c:f8: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:68:CA:3A:01:22:94:F7:7C:B5:E3:4F:06:0E:DD:C8:90:7B:23:8A X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CmjKOgEilPd8teNPBg7dyJB7I4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.114.41.0/24 IPv6: 2a13:18c2::/32 Signature Algorithm: sha256WithRSAEncryption 22:78:6b:b9:39:a5:53:af:a2:9e:04:25:f1:e3:4a:10:32:7d: b8:b4:74:ac:65:fb:33:27:bb:3c:a4:04:b5:1b:c8:05:3d:53: d7:9d:5e:33:78:6d:0c:a4:76:6d:84:16:52:e0:56:d1:f0:bd: a9:18:85:f9:eb:2f:f7:e7:5e:3b:0a:66:92:76:a8:2c:69:8c: 44:ec:e9:49:24:c0:ed:b7:87:e4:fa:1d:cd:9d:9b:50:6a:bf: 29:c8:61:4f:79:a9:c8:af:a1:db:08:10:78:51:a8:d9:a9:29: 13:1f:50:52:ab:a2:7a:24:12:28:c0:64:20:71:81:ac:a6:f9: 52:06:66:81:ec:25:25:9f:4e:67:16:30:d2:18:ed:3e:cd:7b: d9:18:39:66:a0:67:81:46:f9:31:7b:f4:56:79:af:be:dd:0b: 5b:02:42:06:c0:6f:f3:c8:68:94:4f:25:93:65:e7:86:3d:16: ec:23:c5:32:bd:9a:21:92:16:b6:02:78:f2:d1:71:0a:47:f3: 22:28:d5:ae:28:7c:b6:f8:b4:57:99:82:ca:2b:1a:82:04:1a: 47:8f:c6:ef:df:0f:96:2e:31:c3:e7:34:78:a8:98:43:59:c4: 14:08:70:fa:31:c7:cc:b3:ed:5c:6a:eb:cf:5c:ae:23:bc:41: b1:6c:51:cb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZreMzM9eYw8GvxiL+A7PaJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjAyMDgzNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTY4Y2EzYTAxMjI5NGY3N2NiNWUzNGYwNjBlZGRjODkwN2IyMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp68e1gnlhBRFZfMusZ7WA/EqCfjS uk4mANRJYvHiRMc3DLR09QQJ0IKa7GF2L+mKc83g1I/9om4QCAGOXIk9DgW00p56 JfPjEwlrqkkjO0vV1ky0iH+GFnbah2/Bwq8YO71uLZWgxSYw0KJp4VEf5EDYgFz1 SnKZcRPXHhxBOlReJZNAoPiQklUe8EICG/6mDfBJqDcIg0uALymPC+LKH2x7wMmy ee1/r6aQNnn/7Y/KpV5+LE+m4p5dBVTMAY/Jgh6kOlVgaN8z8j7Cr8tOhGdz2GKh c76K6tOZFtR5a96+DQ/HQNa4hVomam8xxfD/Nbi1KsDI+IIR1kqCHPgntwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFApoyjoBIpT3fLXjTwYO3ciQeyOKMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvQ21qS09nRWlsUGQ4dGVOUEJnN2R5SkI3STRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAZ3IpMA0E AgACMAcDBQAqExjCMA0GCSqGSIb3DQEBCwUAA4IBAQAieGu5OaVTr6KeBCXx40oQ Mn24tHSsZfszJ7s8pAS1G8gFPVPXnV4zeG0MpHZthBZS4FbR8L2pGIX56y/35147 CmaSdqgsaYxE7OlJJMDtt4fk+h3NnZtQar8pyGFPeanIr6HbCBB4UajZqSkTH1BS q6J6JBIowGQgcYGspvlSBmaB7CUln05nFjDSGO0+zXvZGDlmoGeBRvkxe/RWea++ 3QtbAkIGwG/zyGiUTyWTZeeGPRbsI8UyvZohkha2Anjy0XEKR/MiKNWuKHy2+LRX mYLKKxqCBBpHj8bv3w+WLjHD5zR4qJhDWcQUCHD6McfMs+1cauvPXK4jvEGxbFHL -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:04 2025 by rpki-client