This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/aDwNxvOxNZIF-20f3xmNIPjOCRk.roa File: aDwNxvOxNZIF-20f3xmNIPjOCRk.roa (raw, json) Hash identifier: o189CI4SpM4PLngzhztaOi0IDDAMJJ7NdbQ/3H4mWJs= Subject key identifier: 68:3C:0D:C6:F3:B1:35:92:05:FB:6D:1F:DF:19:8D:20:F8:CE:09:19 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019A6F20958C9D7BBF677DD5E63A1B5BF742 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/aDwNxvOxNZIF-20f3xmNIPjOCRk.roa Signing time: Mon 10 Nov 2025 18:56:37 +0000 ROA not before: Mon 10 Nov 2025 18:56:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215286 IP address blocks: 109.122.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6f:20:95:8c:9d:7b:bf:67:7d:d5:e6:3a:1b:5b:f7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Nov 10 18:56:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=683c0dc6f3b1359205fb6d1fdf198d20f8ce0919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:28:54:23:66:08:05:6f:d8:f0:d2:ed:d2: 0c:66:0c:9c:e0:05:6d:eb:f7:8f:85:ef:02:63:eb: 7a:4a:04:d2:3a:89:f3:5a:28:5f:e9:e0:50:46:9f: 1c:15:9f:c2:7b:b9:89:a4:f1:36:68:3b:4b:ec:db: 9d:7b:22:32:d6:de:07:ee:b1:2b:09:70:8e:62:0c: 6e:41:87:de:99:59:6f:83:00:ca:c8:10:b4:99:e5: 4a:81:e3:f6:ac:d0:6f:c5:28:29:fa:8c:68:2b:1b: 97:a8:cf:58:1c:27:2a:0e:1c:c3:db:c4:41:08:12: 34:32:fa:77:10:9e:28:e2:07:33:c2:d3:a6:50:c0: aa:5c:7c:cf:28:ac:7d:76:f4:66:56:78:75:a8:46: d7:e5:a1:96:ff:c0:94:82:3a:e4:04:f5:20:56:cc: a5:83:94:f8:ce:64:c3:5f:b7:f6:86:98:01:b5:c1: 69:ed:7a:90:99:e1:57:3b:6b:a3:f8:a0:38:e0:7f: 8e:14:d3:18:0e:01:37:a2:58:77:3e:37:bd:6d:25: 61:ea:d4:f8:e6:ef:15:06:11:41:05:c3:29:95:c1: 61:2b:35:4c:78:82:e5:8d:e3:7f:f7:64:63:35:91: cf:9b:b3:3c:00:90:52:3f:ec:75:2d:9c:ac:c9:f1: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3C:0D:C6:F3:B1:35:92:05:FB:6D:1F:DF:19:8D:20:F8:CE:09:19 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/aDwNxvOxNZIF-20f3xmNIPjOCRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.18.0/24 Signature Algorithm: sha256WithRSAEncryption 00:ca:dc:a1:6c:72:1c:82:57:05:23:38:81:2e:45:60:f9:2d: 75:6c:40:87:de:31:b5:2d:43:b3:50:44:ea:c6:2e:f9:45:80: 6e:cf:ac:c7:41:39:78:f4:2b:53:e8:b2:5b:9d:f2:3a:2d:d4: 65:6e:53:8d:16:b3:fa:04:be:c9:36:ea:67:a2:f7:01:71:39: b5:06:e9:05:6d:6a:63:02:26:48:ef:24:27:0d:5e:ec:37:5b: bc:22:79:6b:c9:f8:cc:e6:e5:3f:58:56:ed:50:f6:3d:5b:c4: d1:e9:64:55:7b:98:85:ab:85:2c:b3:44:b5:d9:f7:8d:6b:bb: 78:de:6e:b0:da:bb:d1:1c:fe:6a:39:cb:09:ac:69:1f:c8:fd: a0:d8:77:bc:1c:3f:86:3d:2b:74:12:17:f6:64:95:da:6c:68: 3e:3f:bf:66:21:26:4d:d0:ea:f0:f6:3c:9b:31:57:fe:54:bd: 00:fe:3f:e9:c8:07:32:20:f0:da:23:4e:8e:c3:a9:4d:cd:39: a4:40:d3:f7:7f:cd:a6:bb:92:68:9a:c2:cb:6c:49:7e:1f:08: 12:34:03:66:f5:e4:7e:9d:36:b9:a7:13:a0:89:aa:1a:55:ea: 17:6a:c8:89:27:72:43:06:22:a5:44:eb:22:f8:c2:20:dc:a7: ce:e3:ef:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpvIJWMnXu/Z33V5jobW/dCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjUxMTEwMTg1NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODNjMGRjNmYzYjEzNTkyMDVmYjZkMWZkZjE5OGQyMGY4Y2UwOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweIoVCNmCAVv2PDS7dIMZgyc4AVt 6/ePhe8CY+t6SgTSOonzWihf6eBQRp8cFZ/Ce7mJpPE2aDtL7NudeyIy1t4H7rEr CXCOYgxuQYfemVlvgwDKyBC0meVKgeP2rNBvxSgp+oxoKxuXqM9YHCcqDhzD28RB CBI0Mvp3EJ4o4gczwtOmUMCqXHzPKKx9dvRmVnh1qEbX5aGW/8CUgjrkBPUgVsyl g5T4zmTDX7f2hpgBtcFp7XqQmeFXO2uj+KA44H+OFNMYDgE3olh3Pje9bSVh6tT4 5u8VBhFBBcMplcFhKzVMeILljeN/92RjNZHPm7M8AJBSP+x1LZysyfGptwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGg8DcbzsTWSBfttH98ZjSD4zgkZMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvYUR3Tnh2T3hOWklGLTIwZjN4bU5JUGpPQ1JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoSMA0G CSqGSIb3DQEBCwUAA4IBAQAAytyhbHIcglcFIziBLkVg+S11bECH3jG1LUOzUETq xi75RYBuz6zHQTl49CtT6LJbnfI6LdRlblONFrP6BL7JNupnovcBcTm1BukFbWpj AiZI7yQnDV7sN1u8InlryfjM5uU/WFbtUPY9W8TR6WRVe5iFq4Uss0S12feNa7t4 3m6w2rvRHP5qOcsJrGkfyP2g2He8HD+GPSt0Ehf2ZJXabGg+P79mISZN0Orw9jyb MVf+VL0A/j/pyAcyIPDaI06Ow6lNzTmkQNP3f82mu5JomsLLbEl+HwgSNANm9eR+ nTa5pxOgiaoaVeoXasiJJ3JDBiKlROsi+MIg3KfO4+/N -----END CERTIFICATE-----Generated at Sun Nov 23 13:54:47 2025 by rpki-client