This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/hutlL6LVuoI5F8J-GDEW66ws8TE.roa File: hutlL6LVuoI5F8J-GDEW66ws8TE.roa (raw, json) Hash identifier: uX8lahfVe3cF9uJcgVI4EHS2xzpfBCeEh1HHhGB55P0= Subject key identifier: 86:EB:65:2F:A2:D5:BA:82:39:17:C2:7E:18:31:16:EB:AC:2C:F1:31 Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019AE3AF38741A467B6AB7E9C09AFA234C08 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/hutlL6LVuoI5F8J-GDEW66ws8TE.roa Signing time: Wed 03 Dec 2025 10:08:22 +0000 ROA not before: Wed 03 Dec 2025 10:08:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 103.110.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:af:38:74:1a:46:7b:6a:b7:e9:c0:9a:fa:23:4c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Dec 3 10:08:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=86eb652fa2d5ba823917c27e183116ebac2cf131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3c:86:43:56:9e:fa:b5:15:cd:90:e9:8f:ab: 58:13:7d:25:49:43:8f:e5:91:65:2c:2a:aa:20:af: 0d:9a:a3:52:99:5e:d2:70:e0:66:61:75:d1:aa:78: 65:79:70:c6:d1:af:3a:83:fe:3a:cf:16:b6:8c:fe: 3d:ab:f5:5c:e3:98:0e:21:ff:e6:a9:cd:5a:01:0f: 0a:5f:b1:47:c6:00:6f:9e:85:1a:bd:79:95:0a:16: c3:fb:bb:be:15:55:b2:da:cb:a0:db:d9:45:d6:3b: b2:7e:7a:2e:e1:82:47:08:65:55:54:80:02:0c:3b: 31:a1:3e:da:9c:b6:a2:ee:86:90:a2:64:2e:f5:14: cc:bc:7b:91:ed:0c:da:0b:50:be:58:a2:6e:ae:d6: 84:21:c3:74:53:72:cd:f8:76:62:c5:b2:e2:2a:54: 3a:45:52:2f:57:89:72:2b:9d:9c:3b:04:d7:a1:ca: 5b:85:33:c3:d1:12:a7:b1:a5:d7:1f:67:0c:f3:67: da:4d:55:e8:a4:39:45:24:d0:e1:86:e0:6b:ba:c3: 5d:fe:ea:9e:72:f2:61:c7:aa:82:90:01:88:17:4c: 7f:28:90:05:60:e0:e1:4e:02:67:2b:85:94:49:ae: a4:d3:69:f7:3e:91:73:a0:14:7d:7a:b3:00:b1:52: c4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EB:65:2F:A2:D5:BA:82:39:17:C2:7E:18:31:16:EB:AC:2C:F1:31 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/hutlL6LVuoI5F8J-GDEW66ws8TE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.67.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:41:3f:98:76:15:ba:df:ee:06:dd:45:87:65:ff:6a:a8:19: 44:4f:ac:d2:dc:a6:b5:84:bf:42:43:c6:5d:15:7a:db:37:28: a5:a1:a9:95:8c:91:43:a2:0c:e8:29:4b:24:8d:f6:ef:ee:e4: 77:49:47:db:19:7e:23:5d:3b:13:f1:bd:d6:57:e0:ca:7f:5f: 34:50:5e:01:aa:50:a6:94:1d:fd:be:cd:4e:22:68:d4:a6:60: c7:22:46:0e:55:9e:c8:a4:ad:37:61:91:d0:92:7c:af:a5:eb: e2:58:03:9f:d8:68:86:c3:56:08:26:95:df:8c:ec:02:00:30: 3a:7b:07:ba:35:a3:71:ea:b7:ce:36:46:9d:11:50:f6:1f:70: 92:bf:1d:44:2e:48:51:00:b2:8a:4c:81:b4:5a:b1:cf:73:82: 04:93:f7:87:99:f1:b5:d1:f4:41:28:17:d7:1c:ef:13:fe:85: 95:01:5e:4a:93:48:b2:1c:7a:0b:bd:d8:37:5d:e3:b3:2d:31: 2a:58:91:12:78:72:77:53:48:a5:c2:92:1c:5c:47:b8:83:91: d8:aa:2e:bf:29:46:a9:b5:17:f1:f6:ba:77:5f:f2:c3:a3:99: 01:dd:a8:7a:71:5e:2e:1f:22:41:4d:30:46:a9:ea:7f:c1:02: 3f:bf:dd:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrjrzh0GkZ7arfpwJr6I0wIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUxMjAzMTAwODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmViNjUyZmEyZDViYTgyMzkxN2MyN2UxODMxMTZlYmFjMmNmMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jyGQ1ae+rUVzZDpj6tYE30lSUOP 5ZFlLCqqIK8NmqNSmV7ScOBmYXXRqnhleXDG0a86g/46zxa2jP49q/Vc45gOIf/m qc1aAQ8KX7FHxgBvnoUavXmVChbD+7u+FVWy2sug29lF1juyfnou4YJHCGVVVIAC DDsxoT7anLai7oaQomQu9RTMvHuR7QzaC1C+WKJurtaEIcN0U3LN+HZixbLiKlQ6 RVIvV4lyK52cOwTXocpbhTPD0RKnsaXXH2cM82faTVXopDlFJNDhhuBrusNd/uqe cvJhx6qCkAGIF0x/KJAFYODhTgJnK4WUSa6k02n3PpFzoBR9erMAsVLETwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIbrZS+i1bqCORfCfhgxFuusLPExMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvaHV0bEw2TFZ1b0k1RjhKLUdERVc2NndzOFRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ25DMA0G CSqGSIb3DQEBCwUAA4IBAQCfQT+YdhW63+4G3UWHZf9qqBlET6zS3Ka1hL9CQ8Zd FXrbNyiloamVjJFDogzoKUskjfbv7uR3SUfbGX4jXTsT8b3WV+DKf180UF4BqlCm lB39vs1OImjUpmDHIkYOVZ7IpK03YZHQknyvpeviWAOf2GiGw1YIJpXfjOwCADA6 ewe6NaNx6rfONkadEVD2H3CSvx1ELkhRALKKTIG0WrHPc4IEk/eHmfG10fRBKBfX HO8T/oWVAV5Kk0iyHHoLvdg3XeOzLTEqWJESeHJ3U0ilwpIcXEe4g5HYqi6/KUap tRfx9rp3X/LDo5kB3ah6cV4uHyJBTTBGqep/wQI/v90g -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:31 2025 by rpki-client