This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/0S1p6i0Cw3qVWxZGiLbWP8XnpU0.roa File: 0S1p6i0Cw3qVWxZGiLbWP8XnpU0.roa (raw, json) Hash identifier: 4FhowhSJ5qi8dCHQSc2oLoPhWB0tu8x+SmhucQmQc60= Subject key identifier: D1:2D:69:EA:2D:02:C3:7A:95:5B:16:46:88:B6:D6:3F:C5:E7:A5:4D Certificate issuer: /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf Certificate serial: 019B76EB9E54891539631C3DD1E9EE8A322F Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/0S1p6i0Cw3qVWxZGiLbWP8XnpU0.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206034 IP address blocks: 109.94.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9e:54:89:15:39:63:1c:3d:d1:e9:ee:8a:32:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d12d69ea2d02c37a955b164688b6d63fc5e7a54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:e3:36:34:0e:d1:6c:80:3c:4c:f1:f0:b9: 28:43:09:63:51:45:11:a9:b6:d3:65:01:37:4b:f7: 59:cd:82:4f:14:2a:90:d8:a8:d3:9d:3f:97:b4:c5: 18:57:13:64:66:cc:5a:58:01:94:a9:d3:79:1d:06: 86:52:7c:fa:b1:e0:cf:84:f7:21:03:90:63:c5:5c: 80:8a:51:59:12:65:e3:29:9d:60:04:6b:eb:ee:01: 58:bc:98:2b:8f:c3:66:0d:ce:ff:62:1f:4c:1f:39: e7:3f:d0:5d:15:79:d2:b2:d1:95:f7:40:fd:44:96: 04:bf:de:7e:eb:75:59:62:5a:22:53:da:ac:c8:2a: c0:cd:92:e3:d9:f9:e1:0b:39:b0:cb:62:98:9b:35: 90:ad:c1:24:a9:9a:30:cd:95:e6:ff:af:77:67:84: 21:27:50:b0:b4:45:d6:ea:51:55:26:87:25:7c:dd: 6d:91:96:43:90:80:7e:c4:31:f0:47:8b:ae:03:3b: d6:29:e9:c6:cb:4b:75:0a:82:67:45:3d:e7:b9:e5: 27:e1:10:63:b1:0a:61:6a:99:6e:d1:b9:e1:66:56: 6a:e6:a2:cd:a5:69:fe:54:5c:db:9d:3b:1f:3f:ef: ac:8d:6c:4e:13:88:9a:a3:08:e5:0d:8f:a0:26:b7: 02:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2D:69:EA:2D:02:C3:7A:95:5B:16:46:88:B6:D6:3F:C5:E7:A5:4D X509v3 Authority Key Identifier: keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/0S1p6i0Cw3qVWxZGiLbWP8XnpU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.94.109.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:97:11:74:1b:ab:2c:60:94:d4:cf:59:3a:c7:cf:c8:35:a5: e1:f2:01:58:ff:04:de:cd:e1:97:f8:64:7a:a7:c2:6d:cf:e8: 30:9b:ad:2a:06:01:48:49:7d:55:31:82:c0:ec:c4:46:1f:41: a4:66:7d:bd:3d:4c:c5:11:58:bd:89:09:67:5b:9f:ce:2a:fe: 7c:82:1c:fb:52:3a:d1:04:88:4f:af:1c:6c:42:a9:de:4e:4c: 06:7f:37:93:c5:5f:5c:e6:29:07:fa:1c:42:23:21:d6:88:f2: 07:5d:55:e3:ad:66:d4:74:58:70:d2:da:af:39:3f:c3:dd:87: ca:3c:d3:1b:3a:00:d2:5b:b4:99:48:b2:a9:06:eb:cc:95:82: c4:62:08:d9:b2:f5:ad:b2:6f:97:c2:0f:74:c6:1f:04:a4:d3: 79:86:5d:90:8b:90:47:af:5e:a8:61:79:86:cd:4c:c9:ee:bf: d1:53:5c:fe:33:5e:f3:bb:0b:cb:f3:7d:25:65:fc:dd:60:ae: 74:2e:26:b9:84:d1:ca:ee:1d:b9:3c:b8:0a:b0:34:60:2f:97: 38:c8:35:96:51:da:cc:5a:e0:8a:4e:7d:b8:ea:a7:13:fc:80: 32:36:19:b6:d4:4c:d3:74:84:06:56:51:9a:32:1e:a0:65:ea: 99:c0:8f:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2655UiRU5Yxw90enuijIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjBhZTY2NmE2ODJiNDI0ZjZjOTk0YWIyZTAxNGRjM2M2 NGZiY2YwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTJkNjllYTJkMDJjMzdhOTU1YjE2NDY4OGI2ZDYzZmM1ZTdhNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUXjNjQO0WyAPEzx8LkoQwljUUUR qbbTZQE3S/dZzYJPFCqQ2KjTnT+XtMUYVxNkZsxaWAGUqdN5HQaGUnz6seDPhPch A5BjxVyAilFZEmXjKZ1gBGvr7gFYvJgrj8NmDc7/Yh9MHznnP9BdFXnSstGV90D9 RJYEv95+63VZYloiU9qsyCrAzZLj2fnhCzmwy2KYmzWQrcEkqZowzZXm/693Z4Qh J1CwtEXW6lFVJoclfN1tkZZDkIB+xDHwR4uuAzvWKenGy0t1CoJnRT3nueUn4RBj sQphaplu0bnhZlZq5qLNpWn+VFzbnTsfP++sjWxOE4iaowjlDY+gJrcC6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNEtaeotAsN6lVsWRoi21j/F56VNMB8GA1UdIwQY MBaAFBlgrmZqaCtCT2yZSrLgFNw8ZPvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUt NTIzZDIwOTI1ZGFkLzEvMFMxcDZpMEN3M3FWV3haR2lMYldQOFhucFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUtNTIzZDIwOTI1ZGFk LzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbV5tMA0G CSqGSIb3DQEBCwUAA4IBAQCMlxF0G6ssYJTUz1k6x8/INaXh8gFY/wTezeGX+GR6 p8Jtz+gwm60qBgFISX1VMYLA7MRGH0GkZn29PUzFEVi9iQlnW5/OKv58ghz7UjrR BIhPrxxsQqneTkwGfzeTxV9c5ikH+hxCIyHWiPIHXVXjrWbUdFhw0tqvOT/D3YfK PNMbOgDSW7SZSLKpBuvMlYLEYgjZsvWtsm+Xwg90xh8EpNN5hl2Qi5BHr16oYXmG zUzJ7r/RU1z+M17zuwvL830lZfzdYK50Lia5hNHK7h25PLgKsDRgL5c4yDWWUdrM WuCKTn246qcT/IAyNhm21EzTdIQGVlGaMh6gZeqZwI+L -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:34 2026 by rpki-client