This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/UFvB0Tc190qtj97rPOudo4x4Ufk.roa File: UFvB0Tc190qtj97rPOudo4x4Ufk.roa (raw, json) Hash identifier: UHZ5zsoBmqO7K+yRjMWtS7W/fVZEuz/7DrEiXM+yjAY= Subject key identifier: 50:5B:C1:D1:37:35:F7:4A:AD:8F:DE:EB:3C:EB:9D:A3:8C:78:51:F9 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38F1081ACE95A80301A0AFDC105664 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/UFvB0Tc190qtj97rPOudo4x4Ufk.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214259 IP address blocks: 109.122.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f1:08:1a:ce:95:a8:03:01:a0:af:dc:10:56:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=505bc1d13735f74aad8fdeeb3ceb9da38c7851f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:6c:f4:37:89:0d:76:62:69:a0:0b:2f:e5: ba:03:df:df:8f:9e:87:38:4b:3e:b7:8a:2d:41:ac: be:27:12:d9:92:a5:00:35:b7:ee:27:ad:7a:f5:2a: 51:67:4d:29:fb:7b:68:ee:71:52:06:a1:5f:6e:b3: 49:1b:67:f5:79:ed:fd:5b:36:11:2c:bf:1c:3b:8f: f9:8c:72:9e:44:bc:7a:80:90:45:9b:87:1c:a4:8c: f0:37:be:41:d4:12:f9:d1:77:af:a4:41:7c:38:6a: 30:fa:77:44:52:63:75:ba:87:6d:f6:16:d2:24:d1: 8a:58:44:74:7b:75:81:08:99:35:57:33:32:95:f6: 4c:40:3c:46:89:ca:a8:fe:1f:bd:1a:c1:19:c7:67: 8e:d1:f4:0e:8a:77:cd:57:c2:bc:19:dd:de:0e:d1: db:9b:f8:6a:f4:11:8b:c1:54:eb:28:f9:7a:a1:9a: c4:18:42:de:44:78:97:7c:69:cc:32:fe:f5:97:a1: b8:61:02:46:5d:58:f6:51:7d:6d:65:dd:4d:b5:07: 38:82:88:cb:73:18:f7:5a:bc:25:3a:56:de:ab:42: c2:8d:2b:50:c4:ee:19:de:49:01:82:95:57:c2:03: ae:a3:9d:db:e5:83:89:a2:d7:89:d5:3f:2c:be:c1: 0a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5B:C1:D1:37:35:F7:4A:AD:8F:DE:EB:3C:EB:9D:A3:8C:78:51:F9 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/UFvB0Tc190qtj97rPOudo4x4Ufk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.13.0/24 Signature Algorithm: sha256WithRSAEncryption 49:35:b2:ec:bf:42:b0:6f:2f:80:62:24:1f:1e:c8:07:e5:5f: ad:c1:b9:3d:6a:32:5b:73:0f:a6:8b:46:71:ae:4e:01:6a:e8: c3:f2:dd:46:b4:20:ab:50:7d:93:d2:20:e9:e6:1c:c7:83:fa: 8c:e8:08:1b:0d:37:17:d1:98:48:24:e9:94:55:9c:cf:4e:71: 2c:75:74:81:da:d9:65:99:6a:0e:92:76:d4:2c:79:1c:42:c1: 0e:ce:3a:f7:73:f3:e7:64:80:be:ab:b8:18:1b:30:93:de:34: 91:13:e0:12:62:32:7b:ff:c3:8f:83:36:16:43:8e:b0:b5:ed: 71:b1:ce:c4:0a:0a:3c:ae:38:98:f3:f2:46:9a:3b:01:26:ad: 68:11:f0:3b:74:a8:db:0a:65:54:85:94:74:fc:70:68:39:f6: bc:6a:fe:ed:f6:80:76:ce:4c:e6:3a:5b:51:e4:78:c5:76:f2: ac:1f:02:db:e7:31:74:66:e1:1e:c7:5c:11:ee:1a:c2:8c:04: bf:9a:6d:d5:2c:0c:1a:2c:14:40:10:48:3e:38:c4:c9:08:79: 89:65:ce:66:76:84:f8:5c:0c:6b:f8:8a:9a:64:80:00:e6:df: d6:e3:8e:21:50:73:84:65:56:7d:b3:ae:a1:2b:1e:38:89:18: ad:ab:1c:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OPEIGs6VqAMBoK/cEFZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDViYzFkMTM3MzVmNzRhYWQ4ZmRlZWIzY2ViOWRhMzhjNzg1MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkxs9DeJDXZiaaALL+W6A9/fj56H OEs+t4otQay+JxLZkqUANbfuJ6169SpRZ00p+3to7nFSBqFfbrNJG2f1ee39WzYR LL8cO4/5jHKeRLx6gJBFm4ccpIzwN75B1BL50XevpEF8OGow+ndEUmN1uodt9hbS JNGKWER0e3WBCJk1VzMylfZMQDxGicqo/h+9GsEZx2eO0fQOinfNV8K8Gd3eDtHb m/hq9BGLwVTrKPl6oZrEGELeRHiXfGnMMv71l6G4YQJGXVj2UX1tZd1NtQc4gojL cxj3WrwlOlbeq0LCjStQxO4Z3kkBgpVXwgOuo53b5YOJoteJ1T8svsEK2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFBbwdE3NfdKrY/e6zzrnaOMeFH5MB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvVUZ2QjBUYzE5MHF0ajk3clBPdWRvNHg0VWZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoNMA0G CSqGSIb3DQEBCwUAA4IBAQBJNbLsv0Kwby+AYiQfHsgH5V+twbk9ajJbcw+mi0Zx rk4BaujD8t1GtCCrUH2T0iDp5hzHg/qM6AgbDTcX0ZhIJOmUVZzPTnEsdXSB2tll mWoOknbULHkcQsEOzjr3c/PnZIC+q7gYGzCT3jSRE+ASYjJ7/8OPgzYWQ46wte1x sc7ECgo8rjiY8/JGmjsBJq1oEfA7dKjbCmVUhZR0/HBoOfa8av7t9oB2zkzmOltR 5HjFdvKsHwLb5zF0ZuEex1wR7hrCjAS/mm3VLAwaLBRAEEg+OMTJCHmJZc5mdoT4 XAxr+IqaZIAA5t/W444hUHOEZVZ9s66hKx44iRitqxxi -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:54 2026 by rpki-client