This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dVo8kUx3Q7vvzsTlj_a32IpPNuw.roa File: dVo8kUx3Q7vvzsTlj_a32IpPNuw.roa (raw, json) Hash identifier: QPd63Nn7Z4jp7apJmHXiGCjg/sK89Bkij6OaivkI0j4= Subject key identifier: 75:5A:3C:91:4C:77:43:BB:EF:CE:C4:E5:8F:F6:B7:D8:8A:4F:36:EC Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38F21BA76976A2A77E195DC9159B1C Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dVo8kUx3Q7vvzsTlj_a32IpPNuw.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214661 IP address blocks: 109.122.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f2:1b:a7:69:76:a2:a7:7e:19:5d:c9:15:9b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=755a3c914c7743bbefcec4e58ff6b7d88a4f36ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:17:68:74:60:31:6d:56:1c:6a:bd:5e:28:e0: 9c:93:a3:16:b7:21:6d:bb:d9:98:4a:1d:49:ec:69: 65:da:5b:fb:b2:24:ea:b5:db:6e:62:a9:b3:85:91: 27:28:c1:9f:39:9c:16:e5:4c:bf:8c:22:5a:47:14: 3f:3d:2e:c3:bd:10:17:50:75:83:05:87:e9:46:b2: 7e:05:e4:fc:e3:cf:1d:5e:c7:f8:16:1b:f1:36:17: 6d:8f:f2:bf:04:5a:e1:dd:45:a4:2f:f3:9f:25:fa: 57:6e:e1:2c:9f:b9:fb:14:ec:15:b2:3c:c6:34:92: 63:b0:e1:40:81:b2:01:c7:7d:be:d4:58:4d:f7:69: 8c:08:12:52:85:b6:8f:b3:2c:5c:27:2f:5a:67:0b: 35:b2:36:df:66:33:2c:f6:9a:84:65:b0:f8:04:5f: 70:13:f1:2d:a4:c4:7c:eb:b2:5d:64:80:11:e4:c0: 0d:29:98:6c:25:19:e1:c5:d7:01:f7:65:01:99:b3: 80:89:47:2c:97:75:58:78:1f:49:1d:16:56:3b:a9: de:ed:4d:3e:64:5e:65:43:a9:73:f1:3e:4c:83:72: 87:46:7e:1b:54:a6:6c:a3:af:d0:8c:ab:52:b7:3d: 10:73:9c:98:13:83:24:0c:eb:c7:95:a3:05:4e:60: dc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5A:3C:91:4C:77:43:BB:EF:CE:C4:E5:8F:F6:B7:D8:8A:4F:36:EC X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dVo8kUx3Q7vvzsTlj_a32IpPNuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.3.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:8b:d2:2a:a9:98:cb:76:7d:00:c6:13:36:75:07:4f:ce:6e: 33:da:cc:40:46:2f:7d:c6:4d:ce:1b:13:ff:d4:91:b9:78:e5: 53:31:1d:07:0a:ed:4c:79:2f:78:c1:73:9d:2c:f9:07:fe:6e: 79:5e:72:c5:4b:71:2e:61:87:5d:32:49:d4:e6:b5:8b:ba:b1: 20:4a:8b:5d:b2:ab:be:5b:27:79:6a:53:e6:80:b6:18:96:76: 0a:e4:cf:b7:70:37:c4:b7:16:43:0a:04:03:ca:36:29:d7:2e: 94:5b:5c:43:61:dd:6f:4d:02:a8:34:97:9e:94:5e:e5:12:d5: 9d:ab:72:05:16:7e:70:b2:f8:42:12:e8:f0:24:46:3a:6a:70: 41:cf:1a:bd:f9:b8:9d:07:a3:a1:9d:34:22:73:2e:63:ae:47: 65:2d:79:84:40:1b:45:23:6e:09:5a:8b:f1:cf:46:f1:f0:cb: 87:d9:20:22:92:34:6c:fb:86:27:d0:cb:2b:66:ef:ba:27:34: d5:f6:6f:83:2d:a2:a6:6e:aa:4d:5f:56:8d:a6:57:bf:9d:1f: d5:b8:b8:1b:15:8d:c1:d0:86:62:44:fe:a6:a5:b5:f2:f1:f5: 23:5c:b6:de:c7:c4:65:93:7b:e1:c4:09:bb:34:19:5a:65:f0: 2a:e1:1e:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OPIbp2l2oqd+GV3JFZscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTVhM2M5MTRjNzc0M2JiZWZjZWM0ZTU4ZmY2YjdkODhhNGYzNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hdodGAxbVYcar1eKOCck6MWtyFt u9mYSh1J7Gll2lv7siTqtdtuYqmzhZEnKMGfOZwW5Uy/jCJaRxQ/PS7DvRAXUHWD BYfpRrJ+BeT8488dXsf4FhvxNhdtj/K/BFrh3UWkL/OfJfpXbuEsn7n7FOwVsjzG NJJjsOFAgbIBx32+1FhN92mMCBJShbaPsyxcJy9aZws1sjbfZjMs9pqEZbD4BF9w E/EtpMR867JdZIAR5MANKZhsJRnhxdcB92UBmbOAiUcsl3VYeB9JHRZWO6ne7U0+ ZF5lQ6lz8T5Mg3KHRn4bVKZso6/QjKtStz0Qc5yYE4MkDOvHlaMFTmDc3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHVaPJFMd0O7787E5Y/2t9iKTzbsMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvZFZvOGtVeDNRN3Z2enNUbGpfYTMySXBQTnV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoDMA0G CSqGSIb3DQEBCwUAA4IBAQBri9IqqZjLdn0AxhM2dQdPzm4z2sxARi99xk3OGxP/ 1JG5eOVTMR0HCu1MeS94wXOdLPkH/m55XnLFS3EuYYddMknU5rWLurEgSotdsqu+ Wyd5alPmgLYYlnYK5M+3cDfEtxZDCgQDyjYp1y6UW1xDYd1vTQKoNJeelF7lEtWd q3IFFn5wsvhCEujwJEY6anBBzxq9+bidB6OhnTQicy5jrkdlLXmEQBtFI24JWovx z0bx8MuH2SAikjRs+4Yn0MsrZu+6JzTV9m+DLaKmbqpNX1aNple/nR/VuLgbFY3B 0IZiRP6mpbXy8fUjXLbex8Rlk3vhxAm7NBlaZfAq4R75 -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:56 2026 by rpki-client