This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/KDJCV2KWqxqP4itFZc0vnyWHg-M.roa File: KDJCV2KWqxqP4itFZc0vnyWHg-M.roa (raw, json) Hash identifier: ZdQlom/XrmZVTovIG/Wu0KyZZPE8vYBX2PPuyHGQT0o= Subject key identifier: 28:32:42:57:62:96:AB:1A:8F:E2:2B:45:65:CD:2F:9F:25:87:83:E3 Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019B77C71B0F8515A6456ED2066674BABEFD Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/KDJCV2KWqxqP4itFZc0vnyWHg-M.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20326 IP address blocks: 103.110.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1b:0f:85:15:a6:45:6e:d2:06:66:74:ba:be:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=283242576296ab1a8fe22b4565cd2f9f258783e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:b0:5e:aa:f3:da:6f:26:84:c1:54:18:d7: 28:10:4c:34:c9:b8:a7:1e:d6:20:c2:a8:b6:ad:20: a2:6f:ec:64:a3:45:4a:de:fe:20:9f:1d:73:33:0c: 67:7e:f8:07:0d:f1:4e:92:d4:aa:e7:56:c8:4e:36: 40:83:03:7e:75:5d:60:85:aa:82:ca:98:49:82:23: e6:54:20:5e:bf:0e:fb:a5:c3:b9:46:96:71:fd:01: 65:e7:bf:54:b7:4f:51:5c:40:f2:67:5c:11:c7:dd: eb:70:97:0f:68:72:b2:ac:18:02:19:ed:03:2e:3e: 77:22:5f:22:04:c5:38:a4:c0:71:e9:52:4e:b4:92: a3:83:df:b0:6c:38:15:21:24:45:25:cf:2b:4f:34: 17:44:ac:af:dd:a0:0f:23:f8:cb:0a:57:ef:4b:c6: ed:bb:bc:9b:6d:19:d9:bb:27:30:ec:6c:09:8d:c8: 7a:a2:0d:6d:17:09:97:ee:92:6a:a4:2a:ca:97:74: 78:35:00:58:bb:5d:62:76:02:b1:b2:aa:fa:cc:7b: b1:bb:7b:03:73:15:e8:3c:26:42:be:95:13:b1:35: fc:05:af:8b:97:17:bd:50:b0:ac:11:bf:f8:60:18: 3f:da:a8:04:20:20:6b:08:28:f8:c0:c0:25:50:28: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:32:42:57:62:96:AB:1A:8F:E2:2B:45:65:CD:2F:9F:25:87:83:E3 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/KDJCV2KWqxqP4itFZc0vnyWHg-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.64.0/24 Signature Algorithm: sha256WithRSAEncryption a8:52:b8:12:c8:2c:f9:9c:e9:a8:30:8b:1c:70:08:17:f9:8b: e7:16:c0:ae:f3:e8:23:d0:a7:b6:4e:e6:2b:59:a3:6e:32:db: 67:bc:07:9d:98:fd:59:28:a4:7e:1e:18:ee:2d:ff:50:41:3c: 63:73:86:27:8c:36:83:f2:67:49:6d:5e:47:40:d4:e2:6e:d6: a9:22:33:1e:47:9c:89:11:f1:49:ac:47:c0:e9:c2:99:18:f9: e3:50:59:b8:17:5b:9c:55:df:10:a8:12:82:0f:5d:00:ee:99: 82:d2:22:43:01:b4:d0:3c:ff:f1:fb:c9:9e:fc:c3:5a:9d:b3: 23:4b:bd:b7:2a:41:7d:f2:64:9d:ae:ab:1a:89:8e:a9:c7:db: e9:2f:95:d5:11:bf:85:4f:1a:86:c6:fa:4c:dd:15:e1:65:2e: 14:a5:5c:7b:1d:92:07:06:43:87:4a:1e:ba:4b:83:23:af:50: 71:db:fb:4f:d8:68:6f:36:81:4a:2e:bd:65:f6:c9:0f:da:a2: c8:79:6a:2b:fb:8f:2c:d8:5e:4e:a6:3a:43:a2:ec:d2:75:63: bc:2b:d1:6a:cd:3b:ac:fc:13:7f:74:85:24:4d:19:d9:28:72: c6:c2:73:6d:63:83:75:ee:74:c9:1b:4c:99:07:f0:73:be:fb: fd:fd:4f:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxsPhRWmRW7SBmZ0ur79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODMyNDI1NzYyOTZhYjFhOGZlMjJiNDU2NWNkMmY5ZjI1ODc4M2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoESwXqrz2m8mhMFUGNcoEEw0ybin HtYgwqi2rSCib+xko0VK3v4gnx1zMwxnfvgHDfFOktSq51bITjZAgwN+dV1ghaqC yphJgiPmVCBevw77pcO5RpZx/QFl579Ut09RXEDyZ1wRx93rcJcPaHKyrBgCGe0D Lj53Il8iBMU4pMBx6VJOtJKjg9+wbDgVISRFJc8rTzQXRKyv3aAPI/jLClfvS8bt u7ybbRnZuycw7GwJjch6og1tFwmX7pJqpCrKl3R4NQBYu11idgKxsqr6zHuxu3sD cxXoPCZCvpUTsTX8Ba+Llxe9ULCsEb/4YBg/2qgEICBrCCj4wMAlUCjsDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCgyQldilqsaj+IrRWXNL58lh4PjMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvS0RKQ1YyS1dxeHFQNGl0RlpjMHZueVdIZy1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ25AMA0G CSqGSIb3DQEBCwUAA4IBAQCoUrgSyCz5nOmoMIsccAgX+YvnFsCu8+gj0Ke2TuYr WaNuMttnvAedmP1ZKKR+HhjuLf9QQTxjc4YnjDaD8mdJbV5HQNTibtapIjMeR5yJ EfFJrEfA6cKZGPnjUFm4F1ucVd8QqBKCD10A7pmC0iJDAbTQPP/x+8me/MNanbMj S723KkF98mSdrqsaiY6px9vpL5XVEb+FTxqGxvpM3RXhZS4UpVx7HZIHBkOHSh66 S4Mjr1Bx2/tP2GhvNoFKLr1l9skP2qLIeWor+48s2F5OpjpDouzSdWO8K9FqzTus /BN/dIUkTRnZKHLGwnNtY4N17nTJG0yZB/Bzvvv9/U8C -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:04 2026 by rpki-client