This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_h3vNCQPps9J_-MUmDMc6mAy72w.roa File: _h3vNCQPps9J_-MUmDMc6mAy72w.roa (raw, json) Hash identifier: owrkiLGZeu8y0DaXkDODh+uhgbkB3BshRKheGrB91Vc= Subject key identifier: FE:1D:EF:34:24:0F:A6:CF:49:FF:E3:14:98:33:1C:EA:60:32:EF:6C Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38E7DD4FF224632085A6B9D06470DD Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_h3vNCQPps9J_-MUmDMc6mAy72w.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31715 IP address blocks: 109.122.9.0/24 maxlen: 24 109.122.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e7:dd:4f:f2:24:63:20:85:a6:b9:d0:64:70:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe1def34240fa6cf49ffe31498331cea6032ef6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:89:5b:ef:1d:78:ac:ff:5b:e3:b2:63:4d: 8c:15:5a:63:71:c0:ff:65:f9:df:e1:ca:15:a1:d3: 94:a7:c7:fa:01:5c:20:9d:a8:53:89:77:85:12:ac: 57:47:ed:da:a6:19:58:c8:34:1d:cc:64:45:3e:7f: 7d:97:35:68:fe:e2:b1:e2:f3:2a:aa:92:91:0b:cb: e7:35:9f:86:b2:96:cb:3d:54:61:ae:fb:2d:c4:f3: 2f:1e:c0:ab:0f:a4:fb:93:6e:02:74:a0:c3:aa:b2: ce:70:e8:77:58:6a:8a:71:a7:9e:92:9f:02:11:eb: b7:e6:d8:4e:df:ac:9f:6f:4a:fc:65:a8:2c:fb:51: 74:37:bd:20:9d:28:0c:83:8e:dd:59:82:76:8d:f0: c8:b0:d3:55:f2:79:5b:13:4c:62:b4:aa:fd:1e:1f: 8c:0b:bb:7b:01:39:4c:69:d2:37:af:a2:67:bb:b4: f6:c6:24:59:44:de:42:f1:e2:30:74:d9:fa:cf:e6: d6:99:d4:3d:03:08:b2:58:a5:2f:58:77:f3:99:38: 73:62:53:a6:c9:f8:7c:52:e0:12:81:40:b1:9c:d7: 24:0e:cd:e8:ae:d0:d1:75:0f:9c:12:53:5a:15:c8: f0:88:05:7b:e9:18:5a:7a:27:4f:9e:5e:42:63:d6: 47:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1D:EF:34:24:0F:A6:CF:49:FF:E3:14:98:33:1C:EA:60:32:EF:6C X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_h3vNCQPps9J_-MUmDMc6mAy72w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.9.0/24 109.122.14.0/24 Signature Algorithm: sha256WithRSAEncryption 41:95:34:e9:a3:71:e5:cd:67:03:e1:b2:be:6a:a7:55:4d:07: a5:b0:04:e9:73:9a:c2:fc:1d:fe:6f:a2:bf:e3:23:dd:5b:b0: 91:da:86:67:0e:fc:5c:51:c8:d7:0d:bf:97:72:17:c1:a6:2e: f8:65:5c:ab:17:ce:8b:89:75:13:c5:ae:9a:e6:84:6e:4a:90: 71:83:8b:f4:3f:03:e1:ca:94:4b:3a:af:54:ef:5f:1a:99:ad: d1:a0:c5:0f:cf:ba:5b:80:be:d3:20:c6:78:e0:29:b2:a5:83: 67:c4:d9:51:25:59:63:34:6b:9a:ea:f1:c1:a2:be:d7:69:68: 25:2c:8e:7e:5d:22:c4:f9:99:60:5a:18:26:e3:da:37:35:c6: 18:cb:bc:50:19:e7:ed:6e:85:a9:50:76:fe:cc:6e:8f:34:e1: f2:59:da:d1:2d:0e:75:4e:69:0f:e6:74:12:2b:3d:08:91:e9: 1e:9e:34:ce:10:76:60:a2:3d:f6:c7:3b:6a:1b:96:df:5e:a7: 74:5d:9f:ab:bf:a3:8f:89:ac:9f:ce:11:ef:50:d2:98:87:ae: a4:8d:16:c6:32:15:ed:59:2e:f5:54:09:49:9f:81:3e:11:7b: c9:8b:e4:ab:48:af:ba:b9:b1:2f:8d:25:6c:07:51:86:31:4b: 6d:c2:01:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OOfdT/IkYyCFprnQZHDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTFkZWYzNDI0MGZhNmNmNDlmZmUzMTQ5ODMzMWNlYTYwMzJlZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaSJW+8deKz/W+OyY02MFVpjccD/ Zfnf4coVodOUp8f6AVwgnahTiXeFEqxXR+3aphlYyDQdzGRFPn99lzVo/uKx4vMq qpKRC8vnNZ+GspbLPVRhrvstxPMvHsCrD6T7k24CdKDDqrLOcOh3WGqKcaeekp8C Eeu35thO36yfb0r8Zags+1F0N70gnSgMg47dWYJ2jfDIsNNV8nlbE0xitKr9Hh+M C7t7ATlMadI3r6Jnu7T2xiRZRN5C8eIwdNn6z+bWmdQ9AwiyWKUvWHfzmThzYlOm yfh8UuASgUCxnNckDs3ortDRdQ+cElNaFcjwiAV76RhaeidPnl5CY9ZH9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP4d7zQkD6bPSf/jFJgzHOpgMu9sMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvX2gzdk5DUVBwczlKXy1NVW1ETWM2bUF5NzJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXoJAwQA bXoOMA0GCSqGSIb3DQEBCwUAA4IBAQBBlTTpo3HlzWcD4bK+aqdVTQelsATpc5rC /B3+b6K/4yPdW7CR2oZnDvxcUcjXDb+XchfBpi74ZVyrF86LiXUTxa6a5oRuSpBx g4v0PwPhypRLOq9U718ama3RoMUPz7pbgL7TIMZ44CmypYNnxNlRJVljNGua6vHB or7XaWglLI5+XSLE+ZlgWhgm49o3NcYYy7xQGeftboWpUHb+zG6PNOHyWdrRLQ51 TmkP5nQSKz0IkekenjTOEHZgoj32xztqG5bfXqd0XZ+rv6OPiayfzhHvUNKYh66k jRbGMhXtWS71VAlJn4E+EXvJi+SrSK+6ubEvjSVsB1GGMUttwgHF -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:15 2026 by rpki-client