This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/gPmEUalVuB6eVAVVqrP0qBCDWAE.roa File: gPmEUalVuB6eVAVVqrP0qBCDWAE.roa (raw, json) Hash identifier: wy9rFC3Usfti1EHVRQujDFUwUaTAwL8jdZZSfuGvgY4= Subject key identifier: 80:F9:84:51:A9:55:B8:1E:9E:54:05:55:AA:B3:F4:A8:10:83:58:01 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38E64B273BC14BCCB60DFE09802CBD Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/gPmEUalVuB6eVAVVqrP0qBCDWAE.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 109.122.1.0/24 maxlen: 24 109.122.15.0/24 maxlen: 24 109.122.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e6:4b:27:3b:c1:4b:cc:b6:0d:fe:09:80:2c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80f98451a955b81e9e540555aab3f4a810835801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:c1:d8:ad:de:fd:fa:2c:a6:dc:cf:39:ec: 79:18:7d:32:6c:d7:7d:37:25:2b:d8:0d:20:65:ba: da:b4:c8:54:26:d4:9f:05:b3:17:ff:21:3f:87:d5: 3e:13:2a:4e:38:a5:d3:43:b6:34:1c:51:15:6f:49: 49:47:22:c5:5d:b6:b6:4d:91:e7:c8:fd:c6:82:4d: e4:8b:84:4f:15:80:24:55:0d:9a:bd:ed:b7:66:37: d6:f3:0b:f0:57:32:b6:b1:4e:0f:c7:c0:77:e8:4c: 69:60:ed:15:f6:fe:ba:28:4e:79:d6:8b:10:91:06: 1f:fe:ad:00:a9:d5:cd:67:f9:d5:1e:48:ca:dc:c4: 6d:4a:b0:db:8d:de:cb:0d:ee:f2:19:18:59:67:7b: 99:39:b6:be:e4:c0:a5:5a:67:18:af:24:03:14:19: 3c:32:4e:57:c7:ab:5d:a8:47:fd:dc:9d:87:ee:45: b8:50:09:22:d8:6b:d1:a3:c1:16:61:b7:27:4c:97: 18:21:87:84:d5:56:10:96:08:b0:cc:35:33:fb:09: f9:32:67:59:23:3a:79:56:98:fc:82:4e:65:7a:fe: cb:5c:7c:59:21:29:6e:92:77:9b:1e:8f:fb:02:1b: b9:4d:12:9e:9d:07:fb:e0:29:0b:6d:70:7e:73:91: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F9:84:51:A9:55:B8:1E:9E:54:05:55:AA:B3:F4:A8:10:83:58:01 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/gPmEUalVuB6eVAVVqrP0qBCDWAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.1.0/24 109.122.15.0/24 109.122.20.0/24 Signature Algorithm: sha256WithRSAEncryption a1:16:1f:3a:2d:a7:9d:3f:b6:39:d0:a3:63:c5:d2:d8:ab:e4: 77:70:eb:6e:34:d2:a7:0b:b2:ab:d1:6f:ca:40:63:67:f4:da: a8:0a:59:c4:2d:dc:89:91:e2:95:02:54:bb:2a:7a:d4:0d:5a: 79:4f:bb:a8:28:71:04:a0:b0:62:63:8d:a7:8a:f6:9f:3d:28: 67:db:aa:b5:a6:f4:62:8d:2e:70:91:03:36:2e:4e:3e:6f:0c: c2:7c:78:c4:57:5f:41:b7:95:2d:d4:24:21:c7:6d:5b:08:60: 67:f5:e3:73:2e:30:26:ce:56:f0:52:46:6c:72:33:89:e6:0b: 65:3a:1f:5d:d9:a0:bf:87:b6:d7:e6:09:5a:93:10:a5:94:4f: f2:4f:8a:b5:08:9b:01:c3:c7:3c:f8:f4:42:1c:b1:58:33:d2: b3:f0:f3:26:f5:44:2a:f4:db:04:c5:ab:5a:eb:65:b5:b3:a8: 5f:72:41:f6:07:44:de:ce:2e:b4:ee:62:80:aa:90:c5:c5:5e: 90:6a:d1:49:01:9b:8a:60:a9:01:42:e4:58:1f:97:b4:41:cf: a9:ef:cf:4b:b8:35:cf:a3:36:66:e3:c1:38:6d:5a:dd:dc:08: c0:3a:fb:9d:aa:de:ec:4f:8a:68:88:24:3b:92:64:e9:07:45: 86:30:66:b7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OOZLJzvBS8y2Df4JgCy9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGY5ODQ1MWE5NTViODFlOWU1NDA1NTVhYWIzZjRhODEwODM1ODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslvB2K3e/fosptzPOex5GH0ybNd9 NyUr2A0gZbratMhUJtSfBbMX/yE/h9U+EypOOKXTQ7Y0HFEVb0lJRyLFXba2TZHn yP3Ggk3ki4RPFYAkVQ2ave23ZjfW8wvwVzK2sU4Px8B36ExpYO0V9v66KE551osQ kQYf/q0AqdXNZ/nVHkjK3MRtSrDbjd7LDe7yGRhZZ3uZOba+5MClWmcYryQDFBk8 Mk5Xx6tdqEf93J2H7kW4UAki2GvRo8EWYbcnTJcYIYeE1VYQlgiwzDUz+wn5MmdZ Izp5Vpj8gk5lev7LXHxZISluknebHo/7Ahu5TRKenQf74CkLbXB+c5F0QQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFID5hFGpVbgenlQFVaqz9KgQg1gBMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvZ1BtRVVhbFZ1QjZlVkFWVnFyUDBxQkNEV0FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXoBAwQA bXoPAwQAbXoUMA0GCSqGSIb3DQEBCwUAA4IBAQChFh86LaedP7Y50KNjxdLYq+R3 cOtuNNKnC7Kr0W/KQGNn9NqoClnELdyJkeKVAlS7KnrUDVp5T7uoKHEEoLBiY42n ivafPShn26q1pvRijS5wkQM2Lk4+bwzCfHjEV19Bt5Ut1CQhx21bCGBn9eNzLjAm zlbwUkZscjOJ5gtlOh9d2aC/h7bX5glakxCllE/yT4q1CJsBw8c8+PRCHLFYM9Kz 8PMm9UQq9NsExata62W1s6hfckH2B0Tezi607mKAqpDFxV6QatFJAZuKYKkBQuRY H5e0Qc+p789LuDXPozZm48E4bVrd3AjAOvudqt7sT4poiCQ7kmTpB0WGMGa3 -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:15 2026 by rpki-client