This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mdzTY6jcozt0xbNgHjHZWfpa-hY.roa File: mdzTY6jcozt0xbNgHjHZWfpa-hY.roa (raw, json) Hash identifier: bJet3HirhO2Xg5gru0a52NrQ2IaIAwW6Pz084cBaNSU= Subject key identifier: 99:DC:D3:63:A8:DC:A3:3B:74:C5:B3:60:1E:31:D9:59:FA:5A:FA:16 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B41136A7C3CEE2CBF5448671FB004D89C Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mdzTY6jcozt0xbNgHjHZWfpa-hY.roa Signing time: Sun 21 Dec 2025 13:22:29 +0000 ROA not before: Sun 21 Dec 2025 13:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63023 IP address blocks: 103.114.41.0/24 maxlen: 24 2a0f:e6c4::/32 maxlen: 32 2a13:18c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:13:6a:7c:3c:ee:2c:bf:54:48:67:1f:b0:04:d8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 21 13:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=99dcd363a8dca33b74c5b3601e31d959fa5afa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:bc:fb:db:42:e9:69:9e:fd:60:a9:a7:e6: 00:93:f6:7c:30:0e:84:02:a6:26:81:89:49:84:f7: 95:d9:fd:af:19:8d:1f:10:bd:62:b4:6d:ac:94:8d: 3c:16:9a:1c:6f:43:b7:ad:69:5b:29:47:c2:f1:d2: 2d:36:9c:85:f0:28:f5:14:ac:e9:c0:c0:90:06:94: 5c:3a:30:a3:26:f0:f1:da:2b:dc:1b:58:12:4e:c9: 21:17:8e:52:ea:b7:11:de:8a:f2:36:b9:5d:d6:ef: e3:9b:4e:b5:d2:b8:57:1a:68:3f:e2:be:10:23:67: d1:90:22:2a:da:94:d4:81:6f:12:8a:2b:c5:85:3d: 0f:ee:9a:12:7d:c6:89:53:48:3b:e6:6b:17:c3:06: 7a:cc:f4:02:6d:09:c2:d4:8a:43:f0:74:e6:fa:16: 4f:e0:32:48:58:c8:ef:c5:28:0f:68:e6:ba:c0:b2: fd:7c:01:61:e0:51:ed:bc:2e:97:c8:58:f9:77:a0: 3e:43:ed:90:b0:93:72:6b:ea:ac:58:29:a2:f1:5e: f8:84:34:5a:47:f7:76:87:26:13:3c:9f:5b:37:18: 7d:1f:10:16:b6:7d:44:ae:f7:62:6e:71:19:81:c3: 55:a5:b3:98:3f:8e:71:8e:e4:15:09:1d:92:e7:5f: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DC:D3:63:A8:DC:A3:3B:74:C5:B3:60:1E:31:D9:59:FA:5A:FA:16 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mdzTY6jcozt0xbNgHjHZWfpa-hY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.114.41.0/24 IPv6: 2a0f:e6c4::/32 2a13:18c2::/32 Signature Algorithm: sha256WithRSAEncryption 80:61:c3:0f:f5:f6:cc:bc:35:56:0c:7d:a0:bb:5c:2b:11:0f: 40:ae:2b:52:8b:8d:4c:0a:86:88:84:5c:59:ac:56:4e:ea:3b: fa:e0:fc:1d:a1:6a:4b:e0:ac:e1:db:2d:f9:56:00:73:00:21: fc:d1:df:33:dd:d9:ae:2a:cc:76:c3:a4:7f:ce:5b:8c:ca:39: 00:c8:91:ca:3c:a8:44:c0:54:42:08:ed:29:20:f5:22:86:9b: 42:f0:7c:59:b2:56:56:e4:97:01:13:3d:15:4a:d6:85:72:d6: 44:03:ee:59:be:e9:3f:2e:75:bd:65:65:07:60:a4:4b:d7:8d: 9e:89:6f:cc:ca:b0:ef:04:7b:69:c3:72:3a:90:9d:b9:f1:75: c1:c3:92:90:eb:6d:8c:d7:b0:7f:a2:f1:41:57:c0:e3:a5:31: 4e:11:d2:4e:e3:99:78:23:a8:42:ab:a5:9b:51:bd:2a:b1:59: c0:e0:51:87:07:22:ef:e0:c7:54:9c:92:4a:b1:2b:11:a9:38: ba:63:08:04:bf:ef:7d:5a:aa:22:7e:7a:de:5b:3c:a1:24:2e: dd:4f:71:6e:e4:54:d3:dd:52:9b:e2:24:f5:1c:53:6b:a9:9b: fc:92:69:62:a9:dd:b4:45:a8:03:18:dd:5c:27:91:76:ab:9c: eb:73:31:24 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZtBE2p8PO4sv1RIZx+wBNicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjIxMTMyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWRjZDM2M2E4ZGNhMzNiNzRjNWIzNjAxZTMxZDk1OWZhNWFmYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nq8+9tC6Wme/WCpp+YAk/Z8MA6E AqYmgYlJhPeV2f2vGY0fEL1itG2slI08Fpocb0O3rWlbKUfC8dItNpyF8Cj1FKzp wMCQBpRcOjCjJvDx2ivcG1gSTskhF45S6rcR3oryNrld1u/jm0610rhXGmg/4r4Q I2fRkCIq2pTUgW8SiivFhT0P7poSfcaJU0g75msXwwZ6zPQCbQnC1IpD8HTm+hZP 4DJIWMjvxSgPaOa6wLL9fAFh4FHtvC6XyFj5d6A+Q+2QsJNya+qsWCmi8V74hDRa R/d2hyYTPJ9bNxh9HxAWtn1ErvdibnEZgcNVpbOYP45xjuQVCR2S519eoQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFJnc02Oo3KM7dMWzYB4x2Vn6WvoWMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvbWR6VFk2amNvenQweGJOZ0hqSFpXZnBhLWhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAZ3IpMBQE AgACMA4DBQAqD+bEAwUAKhMYwjANBgkqhkiG9w0BAQsFAAOCAQEAgGHDD/X2zLw1 Vgx9oLtcKxEPQK4rUouNTAqGiIRcWaxWTuo7+uD8HaFqS+Cs4dst+VYAcwAh/NHf M93ZrirMdsOkf85bjMo5AMiRyjyoRMBUQgjtKSD1IoabQvB8WbJWVuSXARM9FUrW hXLWRAPuWb7pPy51vWVlB2CkS9eNnolvzMqw7wR7acNyOpCdufF1wcOSkOttjNew f6LxQVfA46UxThHSTuOZeCOoQqulm1G9KrFZwOBRhwci7+DHVJySSrErEak4umMI BL/vfVqqIn563ls8oSQu3U9xbuRU091Sm+Ik9RxTa6mb/JJpYqndtEWoAxjdXCeR dquc63MxJA== -----END CERTIFICATE-----Generated at Sun Dec 28 09:40:22 2025 by rpki-client