This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/0vZuYLCbNVk4gJe1vHDDOPTaVWs.roa File: 0vZuYLCbNVk4gJe1vHDDOPTaVWs.roa (raw, json) Hash identifier: RxRxRFEG69/+uLHGaB5ePuq2mid8hj8Cb7atxKoYNlI= Subject key identifier: D2:F6:6E:60:B0:9B:35:59:38:80:97:B5:BC:70:C3:38:F4:DA:55:6B Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B1E7D5810FB3E171F25841DE2AF42D5E5 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/0vZuYLCbNVk4gJe1vHDDOPTaVWs.roa Signing time: Sun 14 Dec 2025 20:11:29 +0000 ROA not before: Sun 14 Dec 2025 20:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213724 IP address blocks: 109.122.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:7d:58:10:fb:3e:17:1f:25:84:1d:e2:af:42:d5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Dec 14 20:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d2f66e60b09b3559388097b5bc70c338f4da556b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:ed:e1:38:4d:af:f5:1f:6b:83:36:ae:c5: b5:f9:65:a7:74:26:05:5c:3b:53:f5:bf:3e:ab:10: fe:ab:c6:9a:5f:68:66:d6:53:fb:85:22:7c:fb:97: 40:c2:39:db:fa:34:ac:a2:7a:7f:c0:b8:b5:79:85: 6b:cc:71:1f:87:19:24:e2:b7:69:b0:61:63:fc:c9: 0a:cf:c2:69:e8:1b:e9:0f:7e:16:cc:05:75:32:b8: 52:ba:eb:9c:1d:e9:05:80:59:aa:94:e7:ba:9c:82: 48:00:5a:35:cd:0f:29:84:74:cc:bc:75:50:b5:64: 7a:ee:4c:49:51:3b:36:bb:71:ed:db:1b:a6:fe:c0: a7:53:08:9d:6d:16:41:50:34:db:b4:fb:aa:be:3c: 0f:48:ab:d3:9d:f3:53:13:f3:bf:45:42:fa:be:ec: 1a:9c:30:5e:ee:1d:ca:60:88:cc:60:26:e9:20:d4: 41:88:7a:29:02:ad:da:ab:7a:55:61:01:d1:d6:46: ce:dd:57:45:28:28:57:a7:62:57:c9:e3:3b:38:b1: a5:1b:1e:05:ed:8e:5d:c5:af:14:4a:c4:bd:5b:f9: 33:46:92:b1:2f:85:e0:cd:a3:61:d0:3d:cf:d2:6b: ad:c9:49:82:b1:55:f9:af:54:06:a8:67:70:4f:1a: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F6:6E:60:B0:9B:35:59:38:80:97:B5:BC:70:C3:38:F4:DA:55:6B X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/0vZuYLCbNVk4gJe1vHDDOPTaVWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.4.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:a4:2b:91:86:22:3e:24:bf:04:33:9c:a3:f1:59:09:69:b0: 99:c7:86:ff:fb:fd:86:49:4e:15:d1:b6:04:de:5f:04:31:09: 0a:7d:e2:8b:e9:97:5e:06:e2:93:96:aa:f1:a0:10:23:40:d0: bf:68:42:0d:ad:fa:f6:95:f9:a6:73:1c:f5:f8:7e:1b:5f:d8: 3b:8a:6f:79:db:0f:2d:26:19:17:19:02:70:14:46:bf:eb:9e: e2:61:3a:a9:ae:f9:bf:70:56:da:c2:06:2f:73:a6:06:80:02: 9b:ef:d0:19:64:6c:bd:dd:65:cd:00:40:e9:e6:87:ed:bb:02: 1d:70:b9:50:5a:71:00:2a:23:22:c6:32:90:6c:a0:c7:63:aa: 11:dd:53:8f:00:79:af:f1:51:c5:7d:38:b0:9a:9e:6e:43:62: 18:a4:50:cc:14:20:5c:e4:ae:9e:7c:98:1c:21:fc:7f:f3:dd: 10:52:4d:1f:f5:77:86:ab:14:4f:e1:db:b0:ed:ce:bc:64:48: 8f:f0:c2:f1:80:58:05:e7:4c:03:8a:2f:3f:2c:c9:41:8e:ba: 47:97:5f:eb:6a:c2:88:b6:b0:d3:df:47:1c:0b:9f:33:ed:e6: 2c:2c:b3:54:01:b5:65:b5:86:3a:7e:25:0e:5b:02:02:c8:02: e1:e5:a3:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsefVgQ+z4XHyWEHeKvQtXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjUxMjE0MjAxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmY2NmU2MGIwOWIzNTU5Mzg4MDk3YjViYzcwYzMzOGY0ZGE1NTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDLt4ThNr/Ufa4M2rsW1+WWndCYF XDtT9b8+qxD+q8aaX2hm1lP7hSJ8+5dAwjnb+jSsonp/wLi1eYVrzHEfhxkk4rdp sGFj/MkKz8Jp6BvpD34WzAV1MrhSuuucHekFgFmqlOe6nIJIAFo1zQ8phHTMvHVQ tWR67kxJUTs2u3Ht2xum/sCnUwidbRZBUDTbtPuqvjwPSKvTnfNTE/O/RUL6vuwa nDBe7h3KYIjMYCbpINRBiHopAq3aq3pVYQHR1kbO3VdFKChXp2JXyeM7OLGlGx4F 7Y5dxa8USsS9W/kzRpKxL4XgzaNh0D3P0mutyUmCsVX5r1QGqGdwTxrQHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNL2bmCwmzVZOICXtbxwwzj02lVrMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvMHZadVlMQ2JOVms0Z0plMXZIRERPUFRhVldzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoEMA0G CSqGSIb3DQEBCwUAA4IBAQA9pCuRhiI+JL8EM5yj8VkJabCZx4b/+/2GSU4V0bYE 3l8EMQkKfeKL6ZdeBuKTlqrxoBAjQNC/aEINrfr2lfmmcxz1+H4bX9g7im952w8t JhkXGQJwFEa/657iYTqprvm/cFbawgYvc6YGgAKb79AZZGy93WXNAEDp5oftuwId cLlQWnEAKiMixjKQbKDHY6oR3VOPAHmv8VHFfTiwmp5uQ2IYpFDMFCBc5K6efJgc Ifx/890QUk0f9XeGqxRP4duw7c68ZEiP8MLxgFgF50wDii8/LMlBjrpHl1/rasKI trDT30ccC58z7eYsLLNUAbVltYY6fiUOWwICyALh5aOV -----END CERTIFICATE-----Generated at Tue Dec 16 12:15:51 2025 by rpki-client