This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/tC-b6IQd4OxeBqwQltE1LdnBJC4.roa File: tC-b6IQd4OxeBqwQltE1LdnBJC4.roa (raw, json) Hash identifier: AocMoBNp7M2vwYc02BFuNOw7CZOWAq978bZ1sAC3jXQ= Subject key identifier: B4:2F:9B:E8:84:1D:E0:EC:5E:06:AC:10:96:D1:35:2D:D9:C1:24:2E Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38F3E3B61EDF262FCF55B3E29036C8 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/tC-b6IQd4OxeBqwQltE1LdnBJC4.roa Signing time: Fri 02 Jan 2026 10:20:20 +0000 ROA not before: Fri 02 Jan 2026 10:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215567 IP address blocks: 109.122.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f3:e3:b6:1e:df:26:2f:cf:55:b3:e2:90:36:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b42f9be8841de0ec5e06ac1096d1352dd9c1242e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:d6:e0:23:96:de:24:3b:1e:a8:5e:ca:a5: f8:a6:b4:6e:aa:27:fd:b7:e8:2d:8d:2d:f4:3c:47: 52:93:c3:99:84:1e:1f:10:52:74:e5:28:bc:24:10: 39:a6:17:e5:82:e3:19:5a:b4:36:89:9a:ad:f6:cc: 2d:fc:2b:df:9e:d6:50:c1:ac:8c:ec:72:cc:74:a5: 99:64:d6:4a:ae:d5:01:fb:9a:ca:70:c4:44:c5:58: e5:09:e2:4d:d8:79:d4:b5:b3:96:63:08:2e:aa:14: c0:58:82:83:e6:84:85:40:12:4a:5d:ce:ea:4a:cc: a3:24:3f:8b:e4:c5:a5:0c:96:44:e1:3d:32:5e:f3: b4:d5:94:33:aa:61:7b:2b:4c:84:20:0c:5b:4c:df: 06:92:9d:73:55:32:a2:01:6e:62:b1:89:56:a7:ee: b6:04:ad:bb:b8:73:7b:ff:9d:52:0d:e3:18:fa:89: 27:08:08:47:e7:4d:57:1e:23:d6:90:1a:90:d7:71: ca:6b:a5:ed:6d:2b:32:08:79:21:27:49:6d:1b:c0: 47:d1:fc:49:13:c6:61:de:5c:64:a7:d2:79:61:51: 09:97:b8:99:e0:8a:39:9c:ed:71:f3:68:bc:6a:2a: cb:aa:f3:d4:a4:b4:0e:07:d2:d0:7b:e9:47:66:33: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2F:9B:E8:84:1D:E0:EC:5E:06:AC:10:96:D1:35:2D:D9:C1:24:2E X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/tC-b6IQd4OxeBqwQltE1LdnBJC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.6.0/24 Signature Algorithm: sha256WithRSAEncryption a4:e6:d3:88:36:30:72:c9:a2:47:c9:4e:12:b0:be:e9:df:7c: 3a:47:5a:99:e7:0a:e8:6e:f3:8b:fb:34:65:b6:a2:fc:c0:c8: 53:78:4c:d8:9e:94:3d:a5:db:e1:d0:a0:da:a8:18:7e:38:f3: 4e:2b:46:68:87:6f:b9:77:c0:25:62:76:ed:61:8b:e8:4e:9f: ec:48:ec:25:d9:aa:88:f5:71:cf:ab:d8:48:d8:0c:c7:82:c1: 9a:24:31:29:65:10:52:8e:2c:e3:37:9a:b2:e2:41:6c:cb:19: ac:62:33:7f:3c:44:95:a4:67:86:0d:2d:67:1a:7b:b7:25:b6: 82:79:1e:4f:4e:d9:51:fe:f7:93:b4:9f:43:0a:02:9b:80:13: 12:f1:00:5c:95:85:aa:4c:a3:bc:f7:0f:2c:b5:46:2a:92:fc: d7:20:c1:2e:6e:23:1b:34:98:25:22:60:39:71:a2:45:25:78: d8:ed:76:70:11:75:80:ca:d1:cf:f6:c3:cd:1c:75:cd:58:f7: 36:03:3d:0b:61:7a:f4:74:55:83:2d:ae:fe:4c:80:2c:42:a7: 60:21:aa:e1:d3:92:1e:86:71:14:47:ad:0f:86:66:db:db:87: b7:b4:a1:5e:4d:94:3b:f9:44:68:3d:cf:2a:01:55:74:0f:7c: d5:dc:37:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OPPjth7fJi/PVbPikDbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDJmOWJlODg0MWRlMGVjNWUwNmFjMTA5NmQxMzUyZGQ5YzEyNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIPW4COW3iQ7HqheyqX4prRuqif9 t+gtjS30PEdSk8OZhB4fEFJ05Si8JBA5phflguMZWrQ2iZqt9swt/CvfntZQwayM 7HLMdKWZZNZKrtUB+5rKcMRExVjlCeJN2HnUtbOWYwguqhTAWIKD5oSFQBJKXc7q SsyjJD+L5MWlDJZE4T0yXvO01ZQzqmF7K0yEIAxbTN8Gkp1zVTKiAW5isYlWp+62 BK27uHN7/51SDeMY+oknCAhH501XHiPWkBqQ13HKa6XtbSsyCHkhJ0ltG8BH0fxJ E8Zh3lxkp9J5YVEJl7iZ4Io5nO1x82i8airLqvPUpLQOB9LQe+lHZjM29wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLQvm+iEHeDsXgasEJbRNS3ZwSQuMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvdEMtYjZJUWQ0T3hlQnF3UWx0RTFMZG5CSkM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoGMA0G CSqGSIb3DQEBCwUAA4IBAQCk5tOINjByyaJHyU4SsL7p33w6R1qZ5wrobvOL+zRl tqL8wMhTeEzYnpQ9pdvh0KDaqBh+OPNOK0Zoh2+5d8AlYnbtYYvoTp/sSOwl2aqI 9XHPq9hI2AzHgsGaJDEpZRBSjizjN5qy4kFsyxmsYjN/PESVpGeGDS1nGnu3JbaC eR5PTtlR/veTtJ9DCgKbgBMS8QBclYWqTKO89w8stUYqkvzXIMEubiMbNJglImA5 caJFJXjY7XZwEXWAytHP9sPNHHXNWPc2Az0LYXr0dFWDLa7+TIAsQqdgIarh05Ie hnEUR60Phmbb24e3tKFeTZQ7+URoPc8qAVV0D3zV3Dei -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:17 2026 by rpki-client