This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/aMKPfWvTlLDPi2UABXCQiVXp0_Y.roa File: aMKPfWvTlLDPi2UABXCQiVXp0_Y.roa (raw, json) Hash identifier: 57BVVM6dMtz869I1DKOjA7tVLbn7b1HOMzwyn32Jp/k= Subject key identifier: 68:C2:8F:7D:6B:D3:94:B0:CF:8B:65:00:05:70:90:89:55:E9:D3:F6 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38EC9F9B7F564F8A1982AD102EAAB5 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/aMKPfWvTlLDPi2UABXCQiVXp0_Y.roa Signing time: Fri 02 Jan 2026 10:20:18 +0000 ROA not before: Fri 02 Jan 2026 10:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200017 IP address blocks: 109.122.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ec:9f:9b:7f:56:4f:8a:19:82:ad:10:2e:aa:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68c28f7d6bd394b0cf8b65000570908955e9d3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:45:10:4c:28:84:4a:b7:f1:f1:90:e6:e1: 74:7b:46:2a:64:ba:88:d0:69:92:31:2a:c3:f6:0d: 71:2a:02:4e:2e:26:1b:b5:8f:1f:71:ac:3e:e8:6f: a9:79:e5:2d:64:2a:da:d7:db:c0:ed:f3:c4:94:29: 99:60:a3:9e:26:27:ad:80:b7:a8:05:0a:6b:0b:77: 90:4e:fa:21:dd:76:23:6e:fe:62:ad:c0:0d:0c:96: 7d:d7:10:4d:4b:10:4d:89:65:0a:c3:d7:45:ce:a8: 21:71:d6:c3:e0:ee:1e:d3:91:ba:16:23:7d:eb:15: 67:b6:98:f9:89:6e:ee:0d:48:93:ac:fe:be:95:bf: 6d:e9:1c:48:81:ce:40:2f:f2:17:a7:01:63:14:ef: d5:3a:96:1d:9b:57:03:3f:fe:c2:c5:bb:c2:49:c0: bc:18:15:52:ee:23:c7:c2:ea:35:3a:96:40:95:05: 89:ca:f3:45:3d:9b:8e:23:c0:d1:d8:2e:31:76:13: 9d:19:80:db:00:2f:fb:46:d2:be:97:51:bb:65:8f: 57:c0:09:f0:3d:96:b3:b8:1c:9a:17:bd:01:e0:ef: 51:31:71:7e:fe:68:65:81:88:38:f9:53:84:a2:36: 34:b8:b0:2b:1b:bd:4b:f1:7c:cd:38:13:48:29:bb: ac:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C2:8F:7D:6B:D3:94:B0:CF:8B:65:00:05:70:90:89:55:E9:D3:F6 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/aMKPfWvTlLDPi2UABXCQiVXp0_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.25.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:f1:c0:dc:40:ae:81:33:e5:90:32:07:45:50:1f:4d:2d:da: b4:db:00:2a:a1:cb:7d:ff:ae:3d:26:f6:d3:35:90:ee:d1:76: 7d:3c:99:ff:25:55:cb:42:91:62:7c:77:87:d4:2a:5f:00:3e: c6:4d:f5:86:63:5b:f0:f5:c5:d5:8f:2e:c8:7d:11:76:d9:9d: 44:1c:e2:ad:09:b0:a7:74:2b:25:87:c2:63:fa:63:86:50:a4: 40:5f:7d:a9:75:a2:4a:f8:23:44:d2:3b:e2:56:60:83:9b:86: 39:29:f9:d6:57:9e:a9:88:a0:4f:93:b7:40:ba:90:05:1c:6f: a8:c1:b6:11:90:02:c0:d5:74:6f:db:43:4d:21:f9:2f:ef:c6: 0d:79:ad:88:db:94:f8:f4:d4:fd:45:8c:18:11:01:b4:8c:d2: 7b:40:11:cf:98:8c:18:8c:3a:bf:09:ab:23:04:72:de:a8:bb: 6d:1b:6f:4a:27:f4:fb:ee:91:71:fc:49:27:34:cf:d5:2c:8d: 7d:8c:28:1a:f5:60:89:64:37:af:d5:92:46:0c:b4:4c:16:d0: 28:a7:d5:0e:78:9d:62:c0:36:7b:0e:8d:b3:56:f7:f7:79:d5: 04:bd:48:4e:f7:0b:5e:9e:45:68:b2:8d:3d:4b:50:c1:34:64: a3:45:93:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOyfm39WT4oZgq0QLqq1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGMyOGY3ZDZiZDM5NGIwY2Y4YjY1MDAwNTcwOTA4OTU1ZTlkM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NJFEEwohEq38fGQ5uF0e0YqZLqI 0GmSMSrD9g1xKgJOLiYbtY8fcaw+6G+peeUtZCra19vA7fPElCmZYKOeJietgLeo BQprC3eQTvoh3XYjbv5ircANDJZ91xBNSxBNiWUKw9dFzqghcdbD4O4e05G6FiN9 6xVntpj5iW7uDUiTrP6+lb9t6RxIgc5AL/IXpwFjFO/VOpYdm1cDP/7CxbvCScC8 GBVS7iPHwuo1OpZAlQWJyvNFPZuOI8DR2C4xdhOdGYDbAC/7RtK+l1G7ZY9XwAnw PZazuByaF70B4O9RMXF+/mhlgYg4+VOEojY0uLArG71L8XzNOBNIKbuscwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjCj31r05Swz4tlAAVwkIlV6dP2MB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvYU1LUGZXdlRsTERQaTJVQUJYQ1FpVlhwMF9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoZMA0G CSqGSIb3DQEBCwUAA4IBAQAa8cDcQK6BM+WQMgdFUB9NLdq02wAqoct9/649JvbT NZDu0XZ9PJn/JVXLQpFifHeH1CpfAD7GTfWGY1vw9cXVjy7IfRF22Z1EHOKtCbCn dCslh8Jj+mOGUKRAX32pdaJK+CNE0jviVmCDm4Y5KfnWV56piKBPk7dAupAFHG+o wbYRkALA1XRv20NNIfkv78YNea2I25T49NT9RYwYEQG0jNJ7QBHPmIwYjDq/Casj BHLeqLttG29KJ/T77pFx/EknNM/VLI19jCga9WCJZDev1ZJGDLRMFtAop9UOeJ1i wDZ7Do2zVvf3edUEvUhO9wtenkVoso09S1DBNGSjRZOs -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:05 2026 by rpki-client