This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/kVs7uuyJHYaGru380Tu_3rRogfA.roa File: kVs7uuyJHYaGru380Tu_3rRogfA.roa (raw, json) Hash identifier: 1du2IUyYkDkTIO4ZHvZrQOUjaCnvuMGb5gEnIcD843c= Subject key identifier: 91:5B:3B:BA:EC:89:1D:86:86:AE:ED:FC:D1:3B:BF:DE:B4:68:81:F0 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38E6B6FB06EDFAF3C779934870F998 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/kVs7uuyJHYaGru380Tu_3rRogfA.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22439 IP address blocks: 109.122.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e6:b6:fb:06:ed:fa:f3:c7:79:93:48:70:f9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=915b3bbaec891d8686aeedfcd13bbfdeb46881f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:87:80:7a:fb:7b:5b:7d:ba:b4:0b:99:3f: 77:2a:43:fa:43:eb:07:e4:d8:98:cc:9b:a4:69:ac: 3d:07:f2:85:f1:ff:a6:14:69:d7:ae:1f:e3:02:d9: 5a:86:62:ec:39:ef:f7:2d:fe:0e:5c:09:45:43:bd: b8:98:f8:bc:87:4d:bf:f6:39:3a:5b:4d:0c:5e:61: 13:8a:81:02:41:83:e0:ed:fb:c2:d2:45:01:98:aa: da:ac:7b:64:4a:8f:99:6a:07:e5:ad:52:e6:bc:8f: 6b:07:70:14:a3:b7:ee:6d:2e:fd:55:cf:6b:23:1b: 47:b5:81:9e:a6:f4:c3:15:04:47:be:63:37:d3:00: 7a:0c:58:2a:8f:e6:fe:34:60:7a:c1:b2:3a:55:86: 8f:d2:53:de:8f:2b:fe:09:8e:87:6a:6a:25:8e:5f: c3:c3:04:a5:f7:b5:55:d8:94:4e:4f:1b:0b:e1:6d: 64:32:88:38:b4:71:5e:6f:c0:cd:5d:57:ae:ff:08: 2a:31:18:a2:0d:74:00:78:1e:65:08:eb:81:06:2c: fa:a0:b8:ef:50:e5:cf:95:eb:9f:c5:d0:a1:cb:21: 41:30:df:a1:ce:bc:16:02:3c:5c:56:ab:05:b5:d6: d6:94:7e:ba:e5:46:85:9f:98:88:ef:16:49:09:9d: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5B:3B:BA:EC:89:1D:86:86:AE:ED:FC:D1:3B:BF:DE:B4:68:81:F0 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/kVs7uuyJHYaGru380Tu_3rRogfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.18.0/24 Signature Algorithm: sha256WithRSAEncryption 52:6c:3f:b3:10:f3:21:1d:84:08:0b:f9:8d:5c:75:8f:df:8e: 16:4c:74:0c:86:43:4a:43:41:4e:ba:64:9e:9d:e3:81:38:b8: 74:af:89:b0:b7:7b:cc:1d:f7:64:4d:6a:61:1e:5f:0b:2d:04: 2d:da:b6:73:e8:df:1b:58:97:11:e3:1b:b6:10:5e:6c:28:73: 19:04:1f:b7:ff:61:cd:f8:52:26:36:e4:cd:f8:c7:a6:ca:f2: 8c:f9:2d:84:be:44:61:8e:f6:9d:ba:c5:02:60:d0:01:97:e6: 69:7b:70:44:6f:28:94:6b:1f:78:07:76:6a:62:85:9a:81:d5: bc:41:a2:3a:6d:7f:c1:1e:60:5b:cd:e3:17:79:e2:08:6f:68: 3c:59:b4:a9:8e:dc:24:d3:0e:64:c4:e3:c8:d6:9a:06:6c:44: c3:42:19:76:e2:9d:26:17:6d:47:18:ab:a5:66:19:b7:d4:82: 63:8b:1c:a0:d2:4b:e2:f8:36:02:79:bd:7a:90:8a:13:bf:41: 2a:45:e4:7f:33:eb:97:94:99:20:40:eb:35:5e:47:90:c3:fe: ed:ed:ec:4e:96:b7:4c:30:a7:a2:1b:ee:91:2f:88:6c:8b:9a: 0b:8e:82:fc:f4:ea:fc:e4:cc:34:73:29:a3:6e:ce:19:73:b7: 75:af:77:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOa2+wbt+vPHeZNIcPmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTViM2JiYWVjODkxZDg2ODZhZWVkZmNkMTNiYmZkZWI0Njg4MWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomCHgHr7e1t9urQLmT93KkP6Q+sH 5NiYzJukaaw9B/KF8f+mFGnXrh/jAtlahmLsOe/3Lf4OXAlFQ724mPi8h02/9jk6 W00MXmETioECQYPg7fvC0kUBmKrarHtkSo+ZagflrVLmvI9rB3AUo7fubS79Vc9r IxtHtYGepvTDFQRHvmM30wB6DFgqj+b+NGB6wbI6VYaP0lPejyv+CY6Hamoljl/D wwSl97VV2JROTxsL4W1kMog4tHFeb8DNXVeu/wgqMRiiDXQAeB5lCOuBBiz6oLjv UOXPleufxdChyyFBMN+hzrwWAjxcVqsFtdbWlH665UaFn5iI7xZJCZ0fmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFbO7rsiR2Ghq7t/NE7v960aIHwMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEva1ZzN3V1eUpIWWFHcnUzODBUdV8zclJvZ2ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoSMA0G CSqGSIb3DQEBCwUAA4IBAQBSbD+zEPMhHYQIC/mNXHWP344WTHQMhkNKQ0FOumSe neOBOLh0r4mwt3vMHfdkTWphHl8LLQQt2rZz6N8bWJcR4xu2EF5sKHMZBB+3/2HN +FImNuTN+MemyvKM+S2EvkRhjvadusUCYNABl+Zpe3BEbyiUax94B3ZqYoWagdW8 QaI6bX/BHmBbzeMXeeIIb2g8WbSpjtwk0w5kxOPI1poGbETDQhl24p0mF21HGKul Zhm31IJjixyg0kvi+DYCeb16kIoTv0EqReR/M+uXlJkgQOs1XkeQw/7t7exOlrdM MKeiG+6RL4hsi5oLjoL89Or85Mw0cymjbs4Zc7d1r3cS -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:14 2026 by rpki-client