This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Rm9mWfDKB6zdT8U-iXAnuqaoSdU.roa File: Rm9mWfDKB6zdT8U-iXAnuqaoSdU.roa (raw, json) Hash identifier: FVHa/SO1wCVHpTj2RqWNfItym8/9tHY5zwKb8DECJl4= Subject key identifier: 46:6F:66:59:F0:CA:07:AC:DD:4F:C5:3E:89:70:27:BA:A6:A8:49:D5 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38EA11ADC2ED40871C684FFB1A779A Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Rm9mWfDKB6zdT8U-iXAnuqaoSdU.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57974 IP address blocks: 109.122.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ea:11:ad:c2:ed:40:87:1c:68:4f:fb:1a:77:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=466f6659f0ca07acdd4fc53e897027baa6a849d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:8c:c1:33:f7:b9:00:11:c8:e4:da:30:26: 30:bd:d7:1b:c6:38:52:f6:7b:72:ef:ec:fa:b0:b1: 5d:9f:62:78:03:bf:83:8e:65:ac:6e:ad:64:41:db: 43:f5:c2:c8:aa:b3:27:57:bd:0e:16:36:bb:29:16: 2d:0f:a2:5a:e0:f8:c7:c8:cb:e0:82:f9:56:00:e4: b4:30:5c:94:da:63:a4:d3:a7:09:5e:9c:81:b4:84: 60:59:f2:84:13:3f:a4:bb:12:63:c5:3d:be:3a:d3: a8:82:89:5b:bc:38:87:79:f2:e3:83:c0:a3:f2:93: d0:5d:18:a3:24:53:5c:61:ce:a8:0a:1c:6e:47:49: f3:68:60:46:b0:6a:ec:ee:a2:aa:28:72:d2:5a:15: 53:62:bf:52:e7:b5:cd:d9:35:f6:cb:8e:5a:f7:48: 2a:c3:b6:ef:aa:f2:53:1c:a9:4c:b8:bd:01:ee:b2: ac:9f:05:8a:e1:ec:07:5c:3c:a9:b1:fd:a3:e4:36: cf:a1:24:59:89:36:0f:59:74:14:16:1d:4c:65:cc: 8b:a4:2a:21:d2:0b:80:a2:e4:4b:e4:1c:fb:1b:f1: 8e:4f:58:78:31:76:e7:0d:80:b0:6b:0f:d4:e1:d0: c2:31:7c:9f:23:fa:9a:16:ae:95:43:d6:37:ba:52: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6F:66:59:F0:CA:07:AC:DD:4F:C5:3E:89:70:27:BA:A6:A8:49:D5 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Rm9mWfDKB6zdT8U-iXAnuqaoSdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.21.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:95:f6:61:11:70:10:92:d4:23:3b:49:f5:a8:2d:46:7b:f6: 11:4f:56:0f:80:f3:ca:4d:e3:cd:18:74:71:f1:68:9c:3c:f6: c3:96:13:d6:77:6a:61:c5:d2:15:6a:70:57:fb:46:5c:7a:25: 87:f3:2e:d6:bf:2f:90:d4:2b:4b:bd:49:3e:06:b0:61:d1:b8: cc:da:c5:0a:e0:a3:87:9d:86:90:0d:05:c9:6f:fa:ea:1f:a6: bf:53:c0:27:54:e1:99:3a:05:61:28:28:8f:90:e2:b5:4e:c6: ef:3b:59:76:95:95:fc:00:11:70:f1:fe:15:73:cd:d5:d3:fa: a6:f1:35:56:1b:38:1f:38:be:8e:cd:1c:3b:9f:6c:8c:ae:ef: c6:ba:95:02:28:dc:2f:96:2f:60:ab:7b:a3:bd:ff:cf:ee:6c: fa:f3:d0:96:48:75:80:66:2a:1d:84:b6:33:ca:0b:7b:9c:78: 8a:41:28:e4:76:22:70:f2:1b:ec:32:49:48:77:56:63:52:62: 7a:22:eb:69:43:49:2f:17:e1:f6:db:2b:4d:42:f6:e7:29:60: a6:aa:83:bd:76:bc:3f:69:f6:12:7c:37:35:8b:c5:08:6d:e9: bf:e5:03:02:de:0e:cf:43:3c:0a:ee:80:43:b6:d1:87:78:e3: 35:41:5f:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOoRrcLtQIccaE/7GneaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjZmNjY1OWYwY2EwN2FjZGQ0ZmM1M2U4OTcwMjdiYWE2YTg0OWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/SMwTP3uQARyOTaMCYwvdcbxjhS 9nty7+z6sLFdn2J4A7+DjmWsbq1kQdtD9cLIqrMnV70OFja7KRYtD6Ja4PjHyMvg gvlWAOS0MFyU2mOk06cJXpyBtIRgWfKEEz+kuxJjxT2+OtOogolbvDiHefLjg8Cj 8pPQXRijJFNcYc6oChxuR0nzaGBGsGrs7qKqKHLSWhVTYr9S57XN2TX2y45a90gq w7bvqvJTHKlMuL0B7rKsnwWK4ewHXDypsf2j5DbPoSRZiTYPWXQUFh1MZcyLpCoh 0guAouRL5Bz7G/GOT1h4MXbnDYCwaw/U4dDCMXyfI/qaFq6VQ9Y3ulKauQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEZvZlnwyges3U/FPolwJ7qmqEnVMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvUm05bVdmREtCNnpkVDhVLWlYQW51cWFvU2RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoVMA0G CSqGSIb3DQEBCwUAA4IBAQA8lfZhEXAQktQjO0n1qC1Ge/YRT1YPgPPKTePNGHRx 8WicPPbDlhPWd2phxdIVanBX+0ZceiWH8y7Wvy+Q1CtLvUk+BrBh0bjM2sUK4KOH nYaQDQXJb/rqH6a/U8AnVOGZOgVhKCiPkOK1TsbvO1l2lZX8ABFw8f4Vc83V0/qm 8TVWGzgfOL6OzRw7n2yMru/GupUCKNwvli9gq3ujvf/P7mz689CWSHWAZiodhLYz ygt7nHiKQSjkdiJw8hvsMklId1ZjUmJ6IutpQ0kvF+H22ytNQvbnKWCmqoO9drw/ afYSfDc1i8UIbem/5QMC3g7PQzwK7oBDttGHeOM1QV9U -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:05 2026 by rpki-client