This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/7advW9Q1gXiYaqYJWn5w12fN-e4.roa File: 7advW9Q1gXiYaqYJWn5w12fN-e4.roa (raw, json) Hash identifier: FoaDYtXo9/V2dT0ZBgOaq6p5ULr8dZ85humRN7GUitE= Subject key identifier: ED:A7:6F:5B:D4:35:81:78:98:6A:A6:09:5A:7E:70:D7:67:CD:F9:EE Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38E97D9F989ECBD593561700A53109 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/7advW9Q1gXiYaqYJWn5w12fN-e4.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57575 IP address blocks: 109.122.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e9:7d:9f:98:9e:cb:d5:93:56:17:00:a5:31:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eda76f5bd4358178986aa6095a7e70d767cdf9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:95:98:64:84:8e:6a:e4:4a:3f:8c:c9:b2:ee: 13:c5:65:65:7a:ed:1f:cb:c7:03:ec:af:19:e7:27: fc:8e:26:08:06:8f:15:e7:f6:d2:b6:0f:08:0e:22: 06:c4:2e:00:2a:b7:c9:cc:0b:a8:10:2d:83:6c:ba: ba:2a:03:ef:1d:d6:5b:38:bb:ef:2b:f8:9e:a4:34: d3:c5:d9:30:8f:4a:10:a9:b9:93:ec:87:3e:95:45: a8:9b:7f:72:33:e8:75:2d:63:d4:e4:f9:b9:f5:7b: 0d:80:20:fe:87:02:84:be:4c:25:bc:11:2e:4e:ce: bf:ff:27:66:f9:d6:1f:2c:65:46:8d:9a:a9:b1:4f: 9f:83:08:01:c8:75:ed:9d:c1:5f:7c:82:0f:a3:8e: eb:88:bc:1d:c7:8e:ab:c4:04:6a:a5:cd:93:73:20: 09:77:91:28:58:60:0e:c2:7d:92:8e:57:32:b9:43: 84:31:f8:5d:87:8b:d2:f3:4d:6c:34:f3:72:88:16: 15:4b:23:7c:40:e0:73:93:61:b4:cc:62:72:0a:e9: eb:bc:74:e8:c1:c5:17:d2:2a:ae:e9:93:f0:70:79: d9:5b:9c:8d:05:d7:b4:cb:b3:89:9a:1a:ec:0f:16: 44:1b:17:26:4c:b3:37:8f:03:24:45:f5:97:4e:1a: e4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A7:6F:5B:D4:35:81:78:98:6A:A6:09:5A:7E:70:D7:67:CD:F9:EE X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/7advW9Q1gXiYaqYJWn5w12fN-e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.11.0/24 Signature Algorithm: sha256WithRSAEncryption 03:d0:11:15:fc:8f:ca:6c:f6:4b:38:d2:9a:32:ed:27:f9:85: 5e:33:53:c4:0e:e9:22:cb:a3:12:ab:fe:25:2c:cc:70:25:e6: c3:5e:c7:fa:76:44:7d:e2:c2:38:73:5c:5a:cc:7a:85:2e:95: 02:4e:cd:6c:9c:61:21:ab:16:19:40:ac:ff:35:08:dc:a0:53: ab:ae:a5:12:ce:93:35:48:40:c4:65:e8:aa:40:c8:75:90:68: e3:88:ed:a0:a3:8b:9e:78:f5:ed:80:3e:e7:62:27:ac:49:bb: 32:2c:dd:d5:43:b2:e2:97:a2:f2:95:4d:87:e1:c1:96:2b:3a: e3:b1:a5:a7:96:bc:8d:2b:5e:e3:65:77:b2:58:2e:92:81:14: 6c:f0:9d:0d:44:d5:09:bb:4b:34:4f:3d:9e:36:8e:d4:e4:3b: a1:38:76:56:e8:67:72:42:43:82:53:ed:45:a8:62:8c:5c:34: e4:fb:73:ad:04:cb:8d:3e:a6:08:e8:2d:af:8d:23:2a:e6:16: f2:9d:dd:50:c9:b8:99:54:f4:60:97:c4:43:81:a4:61:6f:7a: 33:91:1a:52:d9:4d:5f:20:e4:61:50:36:e0:4b:e2:74:fc:36: fd:33:22:34:0c:92:c3:f8:34:6d:7a:68:3c:00:03:85:ed:1d: 0d:73:6d:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOl9n5iey9WTVhcApTEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGE3NmY1YmQ0MzU4MTc4OTg2YWE2MDk1YTdlNzBkNzY3Y2RmOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupWYZISOauRKP4zJsu4TxWVleu0f y8cD7K8Z5yf8jiYIBo8V5/bStg8IDiIGxC4AKrfJzAuoEC2DbLq6KgPvHdZbOLvv K/iepDTTxdkwj0oQqbmT7Ic+lUWom39yM+h1LWPU5Pm59XsNgCD+hwKEvkwlvBEu Ts6//ydm+dYfLGVGjZqpsU+fgwgByHXtncFffIIPo47riLwdx46rxARqpc2TcyAJ d5EoWGAOwn2SjlcyuUOEMfhdh4vS801sNPNyiBYVSyN8QOBzk2G0zGJyCunrvHTo wcUX0iqu6ZPwcHnZW5yNBde0y7OJmhrsDxZEGxcmTLM3jwMkRfWXThrkHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2nb1vUNYF4mGqmCVp+cNdnzfnuMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvN2Fkdlc5UTFnWGlZYXFZSlduNXcxMmZOLWU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoLMA0G CSqGSIb3DQEBCwUAA4IBAQAD0BEV/I/KbPZLONKaMu0n+YVeM1PEDukiy6MSq/4l LMxwJebDXsf6dkR94sI4c1xazHqFLpUCTs1snGEhqxYZQKz/NQjcoFOrrqUSzpM1 SEDEZeiqQMh1kGjjiO2go4ueePXtgD7nYiesSbsyLN3VQ7Lil6LylU2H4cGWKzrj saWnlryNK17jZXeyWC6SgRRs8J0NRNUJu0s0Tz2eNo7U5DuhOHZW6GdyQkOCU+1F qGKMXDTk+3OtBMuNPqYI6C2vjSMq5hbynd1QybiZVPRgl8RDgaRhb3ozkRpS2U1f IORhUDbgS+J0/Db9MyI0DJLD+DRtemg8AAOF7R0Nc21+ -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:16 2026 by rpki-client