This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ufeaEv-3eKHSc6JjPhYxwQeX60M.roa File: ufeaEv-3eKHSc6JjPhYxwQeX60M.roa (raw, json) Hash identifier: 0mZCXU4Xdtb89TKVYgFQCqLe0BNeQgmbzRQEWsmGEqI= Subject key identifier: B9:F7:9A:12:FF:B7:78:A1:D2:73:A2:63:3E:16:31:C1:07:97:EB:43 Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019B77C71BCF9DFF70B573A15E148D48370B Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ufeaEv-3eKHSc6JjPhYxwQeX60M.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 103.110.65.0/24 maxlen: 24 103.110.66.0/24 maxlen: 24 103.146.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1b:cf:9d:ff:70:b5:73:a1:5e:14:8d:48:37:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9f79a12ffb778a1d273a2633e1631c10797eb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:95:6e:c1:9f:40:08:fc:19:b6:14:8e:bf:44: f5:64:8d:58:4c:4f:57:5b:24:27:fe:c7:6e:46:8d: c3:7d:8d:b5:40:92:f9:fc:b9:68:45:4a:bf:7f:f4: 01:02:48:98:d5:5d:57:b9:16:80:9a:48:e2:46:ad: c5:3c:4b:50:4d:97:d2:99:58:4a:35:4b:73:a1:24: 05:0b:21:17:54:59:27:b8:9d:77:c9:97:f8:3c:6d: ce:dc:de:d9:6b:dc:62:16:1f:02:8d:67:02:e4:1f: 56:4d:02:f0:f7:70:22:dc:02:84:c6:88:c9:1b:93: ea:a8:b2:c5:32:15:34:01:ff:a9:b8:f4:a6:33:be: 52:f3:74:13:c8:08:67:0c:3c:b8:cc:94:dd:3b:23: 5d:5c:a4:54:ff:73:1b:b7:9f:b1:c7:9a:a9:ab:50: 35:83:ee:0f:1a:38:d2:26:e1:33:0b:29:c2:b2:c0: 1c:4e:b5:d0:88:3d:24:67:ae:bf:bd:ce:4a:3b:9b: 6d:31:f4:05:4c:0c:9b:a5:33:25:da:0d:aa:18:11: 34:21:9b:8a:a1:4b:e2:57:f5:77:19:36:ec:40:ec: eb:46:f6:7a:c3:d2:d6:80:b6:bb:92:71:18:bd:6f: b1:72:03:9e:91:c5:1e:ba:a0:2b:07:ba:7b:22:ec: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F7:9A:12:FF:B7:78:A1:D2:73:A2:63:3E:16:31:C1:07:97:EB:43 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ufeaEv-3eKHSc6JjPhYxwQeX60M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.65.0-103.110.66.255 103.146.119.0/24 Signature Algorithm: sha256WithRSAEncryption 21:aa:90:a4:d1:8f:4e:60:81:fd:fa:67:8e:9a:ae:e8:66:e1: e7:2a:ba:f9:d4:6c:4c:f1:4f:09:8d:db:65:92:84:26:38:d6: d7:e2:1e:41:75:2a:79:10:aa:32:d3:3f:a1:87:8e:60:a2:d3: e5:f9:f8:c3:dd:3e:26:0f:d3:36:39:64:89:23:ff:00:cc:92: f6:78:da:e3:d4:2b:e6:49:f6:d4:f2:1b:83:f8:2d:45:90:f2: 08:85:44:86:56:f4:73:9c:ef:d7:ba:a9:df:50:f7:90:7e:48: a2:09:57:8b:e6:dc:df:85:06:d6:bf:53:e3:3a:8d:b6:01:ab: 91:4a:a9:db:8c:81:72:1e:b3:c3:1c:df:f9:b9:7a:11:ea:27: 64:43:61:72:b2:f1:91:9a:24:48:25:f6:3f:36:fa:6b:25:d0: ea:8d:9a:30:8c:7e:2e:9b:49:bb:c6:06:6a:ee:d7:8f:64:87: cd:ad:f0:98:7a:57:4f:31:23:c6:81:c4:79:ea:60:47:00:c0: b3:ef:72:21:aa:bc:e8:4f:8c:27:bb:c6:3d:4c:84:5b:21:3e: af:11:3f:78:6f:f0:d0:5b:a3:dd:80:f2:7b:2b:64:25:bd:88: 7e:82:ab:3e:2d:3d:01:ed:09:c0:08:77:28:00:14:43:b5:66: f4:6d:6b:7f -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3xxvPnf9wtXOhXhSNSDcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWY3OWExMmZmYjc3OGExZDI3M2EyNjMzZTE2MzFjMTA3OTdlYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZVuwZ9ACPwZthSOv0T1ZI1YTE9X WyQn/sduRo3DfY21QJL5/LloRUq/f/QBAkiY1V1XuRaAmkjiRq3FPEtQTZfSmVhK NUtzoSQFCyEXVFknuJ13yZf4PG3O3N7Za9xiFh8CjWcC5B9WTQLw93Ai3AKExojJ G5PqqLLFMhU0Af+puPSmM75S83QTyAhnDDy4zJTdOyNdXKRU/3Mbt5+xx5qpq1A1 g+4PGjjSJuEzCynCssAcTrXQiD0kZ66/vc5KO5ttMfQFTAybpTMl2g2qGBE0IZuK oUviV/V3GTbsQOzrRvZ6w9LWgLa7knEYvW+xcgOekcUeuqArB7p7IuwRbwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLn3mhL/t3ih0nOiYz4WMcEHl+tDMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvdWZlYUV2LTNlS0hTYzZKalBoWXh3UWVYNjBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABnbkED BABnbkIDBABnkncwDQYJKoZIhvcNAQELBQADggEBACGqkKTRj05ggf36Z46aruhm 4ecquvnUbEzxTwmN22WShCY41tfiHkF1KnkQqjLTP6GHjmCi0+X5+MPdPiYP0zY5 ZIkj/wDMkvZ42uPUK+ZJ9tTyG4P4LUWQ8giFRIZW9HOc79e6qd9Q95B+SKIJV4vm 3N+FBta/U+M6jbYBq5FKqduMgXIes8Mc3/m5ehHqJ2RDYXKy8ZGaJEgl9j82+msl 0OqNmjCMfi6bSbvGBmru149kh82t8Jh6V08xI8aBxHnqYEcAwLPvciGqvOhPjCe7 xj1MhFshPq8RP3hv8NBbo92A8nsrZCW9iH6Cqz4tPQHtCcAIdygAFEO1ZvRta38= -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:20 2026 by rpki-client