This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/mtFjCXi6B1lVrIwoLZRGnHtawsY.roa File: mtFjCXi6B1lVrIwoLZRGnHtawsY.roa (raw, json) Hash identifier: AvY2AQMCjix08RE4/U4WL/kf92YbkwF1pj4+XzimXp4= Subject key identifier: 9A:D1:63:09:78:BA:07:59:55:AC:8C:28:2D:94:46:9C:7B:5A:C2:C6 Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019ADF547FB2FB80F29CF965989D832124A7 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/mtFjCXi6B1lVrIwoLZRGnHtawsY.roa Signing time: Tue 02 Dec 2025 13:50:48 +0000 ROA not before: Tue 02 Dec 2025 13:50:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26383 IP address blocks: 103.110.65.0/24 maxlen: 24 103.110.66.0/24 maxlen: 24 103.146.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:54:7f:b2:fb:80:f2:9c:f9:65:98:9d:83:21:24:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Dec 2 13:50:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ad1630978ba075955ac8c282d94469c7b5ac2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:cd:0f:87:9d:c6:a9:86:ea:f9:0d:89:e6: b0:7d:e1:f5:99:d1:7e:b3:d6:08:64:2b:44:96:4b: 19:5e:ac:c3:6b:5a:38:73:37:71:16:db:3d:8c:80: d9:bf:88:4a:88:fd:e4:25:2f:c9:20:20:33:e6:14: 57:3f:43:89:06:66:21:4c:4a:39:4c:70:65:c1:49: 11:87:01:63:7e:1d:9b:86:e6:9b:95:ab:24:cf:17: d3:33:e5:13:81:7f:ae:ce:84:a0:6b:73:10:f3:54: 32:48:6b:46:9e:62:b8:cb:2d:84:8e:87:b3:80:b7: e3:cf:4c:3a:1d:11:a4:12:0e:23:5c:75:f7:60:34: ca:46:b7:df:50:bb:a2:29:48:45:e2:3c:23:90:34: fd:34:4d:98:be:4c:7e:5a:49:61:0a:b5:25:b6:8d: 80:ac:56:e5:96:af:15:c6:a4:15:1a:a9:b7:63:c5: 5f:39:3d:89:e2:8c:b3:4d:e7:3b:d2:7a:68:46:ef: 50:89:13:0e:79:47:94:f0:9f:ce:63:e0:27:b1:41: 9a:5e:a8:7b:f1:3d:a7:01:e9:ea:8b:70:10:6e:fc: c0:4e:56:07:f5:f3:21:d7:b5:cd:2f:d6:7e:7e:15: 05:b8:7b:29:9a:89:d8:67:04:0f:58:87:1e:19:4e: 14:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D1:63:09:78:BA:07:59:55:AC:8C:28:2D:94:46:9C:7B:5A:C2:C6 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/mtFjCXi6B1lVrIwoLZRGnHtawsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.65.0-103.110.66.255 103.146.119.0/24 Signature Algorithm: sha256WithRSAEncryption 22:d2:32:50:41:e9:cb:17:6e:b6:67:aa:a1:8b:e6:3f:0c:d8: a5:1d:a3:12:90:fa:60:13:32:fa:f4:b9:97:4e:72:06:4d:64: ca:9a:cf:90:37:d1:46:eb:5a:28:25:f0:40:1c:47:e9:21:26: e8:24:93:a0:be:71:99:62:0a:a4:6d:b0:a8:53:dc:2b:7d:8c: 42:ec:b0:17:ba:2b:c8:cc:8a:64:be:81:52:14:93:1a:77:5f: 09:b5:5f:80:a9:20:91:f3:63:47:67:86:31:34:c0:56:5f:83: c9:21:ed:25:51:b9:74:f5:8b:1b:32:9c:a0:47:d6:bc:c7:5c: 00:2a:89:d7:15:f1:6e:73:a9:d7:be:3b:1c:67:5e:a9:91:82: c4:5a:9d:3b:3f:77:25:44:26:bb:7e:41:b6:58:41:ac:aa:29: d3:fd:f4:14:c1:b6:80:0e:66:e7:5b:ec:88:f0:f7:22:dd:7d: ff:9d:60:17:10:77:38:08:9b:c6:6a:a1:e4:0d:ad:3e:99:c5: c0:cf:fe:42:40:fd:f9:92:28:d8:49:82:2e:04:58:a0:0a:a8: d1:6d:03:5f:7b:5c:68:a8:af:be:54:9b:d9:97:9d:7c:64:48: ab:73:4e:ea:2d:b3:84:52:71:2c:8b:97:eb:eb:f4:fc:34:f5: 32:68:77:75 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZrfVH+y+4DynPllmJ2DISSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUxMjAyMTM1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWQxNjMwOTc4YmEwNzU5NTVhYzhjMjgyZDk0NDY5YzdiNWFjMmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYLND4edxqmG6vkNieawfeH1mdF+ s9YIZCtElksZXqzDa1o4czdxFts9jIDZv4hKiP3kJS/JICAz5hRXP0OJBmYhTEo5 THBlwUkRhwFjfh2bhuablaskzxfTM+UTgX+uzoSga3MQ81QySGtGnmK4yy2Ejoez gLfjz0w6HRGkEg4jXHX3YDTKRrffULuiKUhF4jwjkDT9NE2Yvkx+WklhCrUlto2A rFbllq8VxqQVGqm3Y8VfOT2J4oyzTec70npoRu9QiRMOeUeU8J/OY+AnsUGaXqh7 8T2nAenqi3AQbvzATlYH9fMh17XNL9Z+fhUFuHspmonYZwQPWIceGU4UHQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJrRYwl4ugdZVayMKC2URpx7WsLGMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvbXRGakNYaTZCMWxWckl3b0xaUkduSHRhd3NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABnbkED BABnbkIDBABnkncwDQYJKoZIhvcNAQELBQADggEBACLSMlBB6csXbrZnqqGL5j8M 2KUdoxKQ+mATMvr0uZdOcgZNZMqaz5A30UbrWigl8EAcR+khJugkk6C+cZliCqRt sKhT3Ct9jELssBe6K8jMimS+gVIUkxp3Xwm1X4CpIJHzY0dnhjE0wFZfg8kh7SVR uXT1ixsynKBH1rzHXAAqidcV8W5zqde+OxxnXqmRgsRanTs/dyVEJrt+QbZYQayq KdP99BTBtoAOZudb7Ijw9yLdff+dYBcQdzgIm8ZqoeQNrT6ZxcDP/kJA/fmSKNhJ gi4EWKAKqNFtA197XGior75Um9mXnXxkSKtzTuots4RScSyLl+vr9Pw09TJod3U= -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:12 2025 by rpki-client