This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-H0rdtg_rVSIbeXcawlivLbxM7E.roa File: 1-H0rdtg_rVSIbeXcawlivLbxM7E.roa (raw, json) Hash identifier: qGYz/34be6F7t+K3G/PTat9RwW61zWS3xWo/Xxc3LFg= Subject key identifier: F8:7D:2B:76:D8:3F:AD:54:88:6D:E5:DC:6B:09:62:BC:B6:F1:33:B1 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019AF87776710DB6B9CD477B2BA803C19307 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-H0rdtg_rVSIbeXcawlivLbxM7E.roa Signing time: Sun 07 Dec 2025 10:59:29 +0000 ROA not before: Sun 07 Dec 2025 10:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140543 IP address blocks: 103.110.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:77:76:71:0d:b6:b9:cd:47:7b:2b:a8:03:c1:93:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 7 10:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f87d2b76d83fad54886de5dc6b0962bcb6f133b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:a6:d0:c9:c3:7a:fe:b3:75:ca:35:6e:98: a3:00:df:3a:b4:82:64:90:28:45:42:6d:03:a6:af: 0a:bd:22:b9:e6:ff:84:bd:93:1b:44:5a:ef:77:1f: 02:6e:44:56:20:a0:b0:22:94:d1:f5:b3:b7:9c:71: f8:53:6b:74:e4:55:aa:91:fd:85:e1:11:f9:c5:a3: 8b:e6:e9:6a:a9:87:bd:de:e7:bf:95:41:4a:77:e8: 86:98:13:8b:9d:74:56:13:6e:bd:3a:96:db:b6:3a: 9b:74:38:bb:4f:21:da:49:37:36:f6:ca:b2:9b:f0: 8d:c9:c1:51:e9:96:05:95:02:5d:3e:55:f7:e7:f7: 56:d1:8b:d6:bb:9e:e7:c7:13:2a:34:4e:41:91:7e: 14:9a:e4:e7:a6:88:02:2a:ac:48:ff:52:44:a4:9a: 2c:9a:15:0b:f4:f2:de:8d:ef:12:b3:dc:03:62:a2: fa:90:c4:33:bb:67:3f:f9:0d:5e:93:4a:ee:d5:76: ea:3c:c8:c6:21:6f:64:81:3d:79:33:9d:bd:1d:33: 6c:4a:9b:02:99:47:7d:08:be:cc:6f:99:cd:f7:b0: 22:56:a2:0b:1a:a9:d9:f8:f2:05:ef:36:7c:9c:60: fd:4f:6f:f9:66:92:07:3a:bf:33:31:dc:5b:4d:9d: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7D:2B:76:D8:3F:AD:54:88:6D:E5:DC:6B:09:62:BC:B6:F1:33:B1 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-H0rdtg_rVSIbeXcawlivLbxM7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.39.0/24 Signature Algorithm: sha256WithRSAEncryption 67:a1:51:ea:ec:a4:1b:a3:a1:9f:0f:6d:a2:38:f6:6c:0d:dc: b7:70:5b:fd:c7:cd:d1:fd:d2:f3:40:80:1a:b3:b5:0c:da:30: 93:c2:fd:54:35:e3:7d:64:69:4c:84:5a:cd:b2:28:37:18:df: dc:29:0c:6c:cf:99:34:06:4f:85:03:08:a5:23:69:7d:b3:0d: 2b:98:f1:dd:78:32:ae:2b:16:fd:8a:39:8b:10:a1:40:49:ae: 0e:bc:f6:83:e3:19:01:85:55:ff:69:fe:c8:94:4e:79:ad:50: aa:0a:e6:fd:ff:92:4d:46:b1:ed:f6:23:12:d1:70:be:8c:b4: 08:fd:e4:01:de:28:f0:c5:75:03:ae:b0:64:94:0d:ca:80:40: f6:e2:51:62:33:54:de:2a:4c:00:54:4b:99:ac:a2:be:10:c0: 33:88:95:33:67:72:cd:c0:db:98:00:68:54:ff:ad:ae:a6:e3: 7a:77:d9:61:ea:f8:ae:e2:da:44:97:fc:b1:1c:c0:55:8a:13: a8:45:32:42:9d:25:5b:b4:61:ca:73:ad:b3:47:d8:64:0b:36: d1:c4:06:83:ad:67:69:de:3f:e3:d9:55:fa:f0:15:cb:41:d0: bf:b9:25:f6:5a:bb:b1:b1:5a:33:bf:d5:0f:33:ad:cd:84:43: 2b:3f:37:a7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZr4d3ZxDba5zUd7K6gDwZMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjA3MTA1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODdkMmI3NmQ4M2ZhZDU0ODg2ZGU1ZGM2YjA5NjJiY2I2ZjEzM2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxKm0MnDev6zdco1bpijAN86tIJk kChFQm0Dpq8KvSK55v+EvZMbRFrvdx8CbkRWIKCwIpTR9bO3nHH4U2t05FWqkf2F 4RH5xaOL5ulqqYe93ue/lUFKd+iGmBOLnXRWE269OpbbtjqbdDi7TyHaSTc29sqy m/CNycFR6ZYFlQJdPlX35/dW0YvWu57nxxMqNE5BkX4UmuTnpogCKqxI/1JEpJos mhUL9PLeje8Ss9wDYqL6kMQzu2c/+Q1ek0ru1XbqPMjGIW9kgT15M529HTNsSpsC mUd9CL7Mb5nN97AiVqILGqnZ+PIF7zZ8nGD9T2/5ZpIHOr8zMdxbTZ2wgQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPh9K3bYP61UiG3l3GsJYry28TOxMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvMS1IMHJkdGdfclZTSWJlWGNhd2xpdkxieE03RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjYvNGIxOGZiLWQzZWQtNGIyNy05YmQwLWU1ODM5ZjQzZTU4 My8xL2ZhWFRMVnNKeVR3YlhqX0ZvcW9nMTBiOF90RS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGduJzAN BgkqhkiG9w0BAQsFAAOCAQEAZ6FR6uykG6Ohnw9tojj2bA3ct3Bb/cfN0f3S80CA GrO1DNowk8L9VDXjfWRpTIRazbIoNxjf3CkMbM+ZNAZPhQMIpSNpfbMNK5jx3Xgy risW/Yo5ixChQEmuDrz2g+MZAYVV/2n+yJROea1Qqgrm/f+STUax7fYjEtFwvoy0 CP3kAd4o8MV1A66wZJQNyoBA9uJRYjNU3ipMAFRLmayivhDAM4iVM2dyzcDbmABo VP+trqbjenfZYer4ruLaRJf8sRzAVYoTqEUyQp0lW7RhynOts0fYZAs20cQGg61n ad4/49lV+vAVy0HQv7kl9lq7sbFaM7/VDzOtzYRDKz83pw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:17:59 2025 by rpki-client