This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/kjG5xGX2JTEBxkrCRJKC0CX7EUI.roa File: kjG5xGX2JTEBxkrCRJKC0CX7EUI.roa (raw, json) Hash identifier: jjwubWcF1kZV2QS3P4ZMqwmzWBwQTkl6mblFp/JLPUg= Subject key identifier: 92:31:B9:C4:65:F6:25:31:01:C6:4A:C2:44:92:82:D0:25:FB:11:42 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38ED795C14B21FBDF3B1CCB60766FC Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/kjG5xGX2JTEBxkrCRJKC0CX7EUI.roa Signing time: Fri 02 Jan 2026 10:20:18 +0000 ROA not before: Fri 02 Jan 2026 10:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203345 IP address blocks: 109.122.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ed:79:5c:14:b2:1f:bd:f3:b1:cc:b6:07:66:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9231b9c465f6253101c64ac2449282d025fb1142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b4:18:7b:9f:54:17:7d:27:30:7e:79:40:fa: 28:9c:79:fc:15:6c:75:2e:39:ae:30:f2:8c:43:46: 8c:10:39:da:51:23:f3:2e:d1:e2:5a:28:bf:40:d1: 61:30:2b:b5:94:d3:49:e4:17:86:4b:02:8b:da:08: b1:0a:ef:9f:2e:14:67:2a:59:ab:8d:e8:cd:cd:b0: 5f:fd:9f:38:0d:97:e4:c7:99:64:47:d1:b1:5c:90: cc:85:3f:52:42:98:32:30:63:fb:20:06:8a:6a:20: 38:c9:15:a7:03:00:2d:3b:9a:b8:05:26:3b:d6:7f: 77:01:8c:b7:36:a9:5f:81:71:a9:30:bf:6b:43:b5: e1:2e:1f:b7:cd:4e:44:e6:ba:ee:54:64:cf:fe:91: fd:fe:a0:81:70:5a:cf:20:da:32:2f:ea:5b:1c:b7: 43:b0:76:7a:df:20:82:82:cd:c4:bf:9f:b4:74:b6: d1:fa:cd:28:91:06:a7:a3:f3:cd:3d:60:57:5f:db: 8a:59:f1:67:e0:d0:74:f3:50:64:bc:b7:8f:79:11: 07:2a:d0:f5:ab:f4:d2:b0:7d:61:10:7c:7f:65:99: f2:4b:36:a3:78:91:d4:ee:1d:82:4c:cf:6e:17:4a: 8e:65:33:68:fc:25:3e:c3:eb:6b:5c:0b:f1:3c:d1: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:31:B9:C4:65:F6:25:31:01:C6:4A:C2:44:92:82:D0:25:FB:11:42 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/kjG5xGX2JTEBxkrCRJKC0CX7EUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.8.0/24 Signature Algorithm: sha256WithRSAEncryption 08:b9:de:ce:d2:c3:16:9f:c0:fd:cf:ac:80:72:55:3d:e3:d6: e0:eb:7c:bf:73:ff:08:2f:03:f3:81:3a:8a:25:55:6f:82:ab: 79:15:8e:a1:05:17:3c:02:d5:cb:88:fe:0b:77:ce:83:63:1a: aa:c6:d8:3e:27:1d:1d:54:40:81:b2:de:86:c1:fe:3f:94:ff: a4:d4:76:ad:55:05:2d:84:2f:65:d0:99:0b:17:65:8b:87:f2: 38:0f:12:20:7c:c5:5e:90:2f:5b:75:2c:68:79:a2:f9:54:79: a2:e7:28:82:f8:39:4d:7a:3d:99:58:25:88:f4:75:6c:63:a6: fc:fd:3e:07:1c:0c:de:e5:ea:9e:d1:c4:1a:35:ec:88:50:48: 9b:08:65:89:8f:dc:b6:d3:1a:8c:11:24:40:e6:c3:b7:92:9b: a1:c7:e3:c7:cb:fc:87:c7:bf:c3:a4:23:e5:35:f2:ca:19:3a: a1:43:67:5f:85:d8:de:a6:8c:08:bf:02:cd:7e:06:2e:04:12: 42:39:df:57:f9:24:ab:7a:be:f6:93:96:20:4a:64:df:55:28: 29:d6:e0:87:e6:2e:50:b4:dd:e0:90:4b:24:ff:2a:9c:67:8e: 07:97:15:a0:37:0e:9d:af:9b:07:e1:f7:aa:a8:b1:22:17:e8: 83:bd:4c:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OO15XBSyH73zscy2B2b8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjMxYjljNDY1ZjYyNTMxMDFjNjRhYzI0NDkyODJkMDI1ZmIxMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LQYe59UF30nMH55QPoonHn8FWx1 LjmuMPKMQ0aMEDnaUSPzLtHiWii/QNFhMCu1lNNJ5BeGSwKL2gixCu+fLhRnKlmr jejNzbBf/Z84DZfkx5lkR9GxXJDMhT9SQpgyMGP7IAaKaiA4yRWnAwAtO5q4BSY7 1n93AYy3NqlfgXGpML9rQ7XhLh+3zU5E5rruVGTP/pH9/qCBcFrPINoyL+pbHLdD sHZ63yCCgs3Ev5+0dLbR+s0okQano/PNPWBXX9uKWfFn4NB081BkvLePeREHKtD1 q/TSsH1hEHx/ZZnySzajeJHU7h2CTM9uF0qOZTNo/CU+w+trXAvxPNEZgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJIxucRl9iUxAcZKwkSSgtAl+xFCMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEva2pHNXhHWDJKVEVCeGtyQ1JKS0MwQ1g3RVVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoIMA0G CSqGSIb3DQEBCwUAA4IBAQAIud7O0sMWn8D9z6yAclU949bg63y/c/8ILwPzgTqK JVVvgqt5FY6hBRc8AtXLiP4Ld86DYxqqxtg+Jx0dVECBst6Gwf4/lP+k1HatVQUt hC9l0JkLF2WLh/I4DxIgfMVekC9bdSxoeaL5VHmi5yiC+DlNej2ZWCWI9HVsY6b8 /T4HHAze5eqe0cQaNeyIUEibCGWJj9y20xqMESRA5sO3kpuhx+PHy/yHx7/DpCPl NfLKGTqhQ2dfhdjepowIvwLNfgYuBBJCOd9X+SSrer72k5YgSmTfVSgp1uCH5i5Q tN3gkEsk/yqcZ44HlxWgNw6dr5sH4feqqLEiF+iDvUzK -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:16 2026 by rpki-client