This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/RVyFmUMrcdMGmgT1iOUV4jCTaX8.roa File: RVyFmUMrcdMGmgT1iOUV4jCTaX8.roa (raw, json) Hash identifier: B5x76w0pUehowAWLXKMV8mrxORQyJdlIjML4li9tJXw= Subject key identifier: 45:5C:85:99:43:2B:71:D3:06:9A:04:F5:88:E5:15:E2:30:93:69:7F Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38EEA56B8DF9A98856C3F2A6117FA0 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/RVyFmUMrcdMGmgT1iOUV4jCTaX8.roa Signing time: Fri 02 Jan 2026 10:20:18 +0000 ROA not before: Fri 02 Jan 2026 10:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206766 IP address blocks: 109.122.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ee:a5:6b:8d:f9:a9:88:56:c3:f2:a6:11:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=455c8599432b71d3069a04f588e515e23093697f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:05:01:d4:f3:a3:3e:ff:25:cd:c0:f6:cc:28: 89:29:1a:7b:be:6b:43:ee:73:55:c9:24:7b:40:eb: 36:ba:c8:ac:ff:97:8b:e7:f5:28:0d:3c:89:95:47: c1:3a:14:a0:19:75:82:64:71:96:cc:8c:49:47:70: e7:cf:a9:c9:14:98:a8:12:84:c7:9a:fd:4d:bf:6e: d5:4c:21:15:6f:5a:98:b2:7d:e5:1d:ac:9b:50:d0: 23:a0:36:7c:8b:91:7c:93:c9:f3:a6:79:0e:8b:6c: 18:a0:24:fa:59:1f:c7:8e:80:42:b6:3d:b2:1d:3e: b0:1d:79:ef:19:a7:ea:e9:fa:bb:14:44:07:3f:b0: 21:a7:e5:80:9a:93:df:db:ce:7c:6f:4e:43:ff:87: e7:c4:88:c5:dc:cf:c7:fd:81:ee:cf:32:27:44:7f: 05:4a:e2:9b:be:35:05:a6:a5:e8:17:60:c3:1b:24: a0:97:28:cc:d0:a8:f4:35:00:ac:e5:e9:fb:21:fb: 5b:75:d8:c8:1b:8a:08:5e:17:71:8d:22:09:44:b4: f4:e3:d6:1c:cc:f6:36:a5:b6:8f:db:be:d6:a7:87: 46:f7:83:aa:75:52:d7:dd:42:2d:82:64:bd:f3:82: 1b:78:a1:70:ca:45:c9:0d:43:4c:81:1a:f9:60:0f: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5C:85:99:43:2B:71:D3:06:9A:04:F5:88:E5:15:E2:30:93:69:7F X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/RVyFmUMrcdMGmgT1iOUV4jCTaX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.2.0/24 Signature Algorithm: sha256WithRSAEncryption 72:4e:cb:20:22:e7:3b:a3:45:bc:07:45:ce:a1:f2:88:e4:af: 1b:2e:e2:b9:77:ff:84:d9:37:a4:96:25:2a:1f:83:92:35:72: c6:69:b4:b6:4d:87:14:6a:20:e9:78:0b:8a:80:d7:60:9d:bb: 32:55:32:15:08:70:fa:42:ce:85:82:20:c8:fc:7a:2c:a4:a7: b3:5e:4e:34:18:77:6a:64:21:7d:02:78:a3:55:a4:57:65:13: 8c:9c:89:76:cf:6a:ff:d1:bd:9e:9f:5a:77:e8:98:51:d1:06: a2:cd:ae:a6:8c:3e:15:4f:af:f5:22:91:17:c8:35:44:ef:53: 52:63:9a:0e:93:30:11:ef:b2:3d:0f:1f:22:54:ee:f0:c8:5b: 80:11:5f:02:05:d8:f1:25:2c:02:27:2b:c9:c9:ff:72:48:cf: f9:15:f7:7e:c6:dc:a5:b5:d0:c5:5f:c3:6c:a6:72:bf:38:0b: f4:c3:0e:c2:1c:e9:17:5f:c6:2c:65:89:61:75:33:27:58:42: 51:23:04:7a:27:3c:af:5a:a3:dd:42:de:5a:c0:64:2b:14:3e: 49:a5:fe:5d:5b:4b:7f:4d:84:fe:27:cd:fe:3b:7a:6d:7c:31: f6:cd:23:c4:1c:9c:ca:c0:c4:1f:15:68:84:a9:50:58:71:c4: 24:7c:95:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OO6la435qYhWw/KmEX+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTVjODU5OTQzMmI3MWQzMDY5YTA0ZjU4OGU1MTVlMjMwOTM2OTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgUB1POjPv8lzcD2zCiJKRp7vmtD 7nNVySR7QOs2usis/5eL5/UoDTyJlUfBOhSgGXWCZHGWzIxJR3Dnz6nJFJioEoTH mv1Nv27VTCEVb1qYsn3lHaybUNAjoDZ8i5F8k8nzpnkOi2wYoCT6WR/HjoBCtj2y HT6wHXnvGafq6fq7FEQHP7Ahp+WAmpPf2858b05D/4fnxIjF3M/H/YHuzzInRH8F SuKbvjUFpqXoF2DDGySglyjM0Kj0NQCs5en7IftbddjIG4oIXhdxjSIJRLT049Yc zPY2pbaP277Wp4dG94OqdVLX3UItgmS984IbeKFwykXJDUNMgRr5YA9slQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEVchZlDK3HTBpoE9YjlFeIwk2l/MB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvUlZ5Rm1VTXJjZE1HbWdUMWlPVVY0akNUYVg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoCMA0G CSqGSIb3DQEBCwUAA4IBAQByTssgIuc7o0W8B0XOofKI5K8bLuK5d/+E2TekliUq H4OSNXLGabS2TYcUaiDpeAuKgNdgnbsyVTIVCHD6Qs6FgiDI/HospKezXk40GHdq ZCF9AnijVaRXZROMnIl2z2r/0b2en1p36JhR0Qaiza6mjD4VT6/1IpEXyDVE71NS Y5oOkzAR77I9Dx8iVO7wyFuAEV8CBdjxJSwCJyvJyf9ySM/5Ffd+xtyltdDFX8Ns pnK/OAv0ww7CHOkXX8YsZYlhdTMnWEJRIwR6JzyvWqPdQt5awGQrFD5Jpf5dW0t/ TYT+J83+O3ptfDH2zSPEHJzKwMQfFWiEqVBYccQkfJXI -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:04 2026 by rpki-client