This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/zFJ2rO7_Asjegbjq71suIglKQpY.roa File: zFJ2rO7_Asjegbjq71suIglKQpY.roa (raw, json) Hash identifier: axlfjYoT7ol2lTBbt06xsUGwsMIdmC+VQwb6IjYfiCo= Subject key identifier: CC:52:76:AC:EE:FF:02:C8:DE:81:B8:EA:EF:5B:2E:22:09:4A:42:96 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38EBD3D606EB799B05818910A060C1 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/zFJ2rO7_Asjegbjq71suIglKQpY.roa Signing time: Fri 02 Jan 2026 10:20:18 +0000 ROA not before: Fri 02 Jan 2026 10:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152179 IP address blocks: 109.122.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:eb:d3:d6:06:eb:79:9b:05:81:89:10:a0:60:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc5276aceeff02c8de81b8eaef5b2e22094a4296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1f:f4:c0:b4:2d:0b:31:9b:8b:27:8a:05:00: 96:4f:12:42:5b:74:11:a4:81:14:1f:8b:7d:9d:c8: 26:3f:7c:03:7b:a9:05:b8:4f:2d:ed:89:06:d3:8d: 83:a9:2f:5e:22:e5:02:7b:e8:89:56:8c:db:84:46: f8:b2:47:a5:1d:0f:8f:de:e6:9b:45:ee:93:d7:e0: de:fe:ea:61:3a:0c:be:bd:cf:3a:d1:c1:ff:08:31: cb:65:e2:7e:4b:9f:72:41:01:91:88:c2:3e:5c:de: 81:c7:e4:0f:6e:a7:c2:c0:c0:03:5b:52:fa:b5:28: bc:9d:5a:9a:dc:95:3c:47:e0:f2:10:38:08:45:7d: 1f:54:be:5f:8e:d7:c7:ab:6f:11:c4:8e:c8:aa:81: 3f:23:ff:df:0e:04:2d:71:74:73:cb:62:46:27:fa: e6:1e:84:e3:97:69:c3:af:cc:15:10:0b:4b:0f:4e: bb:0f:74:55:94:a9:81:2d:77:60:c8:f9:a6:03:af: 8f:c9:83:bf:1e:84:f6:13:b0:f2:79:26:01:05:50: ec:58:09:5e:bb:74:21:0f:ea:19:5d:c4:d7:c0:e4: ba:c0:1f:b5:6a:d6:0f:7b:ea:0d:80:d7:bc:92:1e: b0:f8:f9:ec:6f:99:c0:9c:bf:c3:89:d8:23:e3:f1: ea:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:52:76:AC:EE:FF:02:C8:DE:81:B8:EA:EF:5B:2E:22:09:4A:42:96 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/zFJ2rO7_Asjegbjq71suIglKQpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.5.0/24 Signature Algorithm: sha256WithRSAEncryption 99:ed:2e:39:7a:17:e0:5e:e6:03:e3:de:45:13:f0:64:c5:a7: 9b:6f:a4:a0:53:ac:00:2e:ba:b0:45:ca:eb:57:15:05:b9:66: 4b:a5:85:e4:f9:d3:45:3d:2b:5f:b6:fe:91:26:c3:50:82:0a: 01:59:eb:d9:07:c9:31:0a:16:b1:3f:63:b8:f4:08:f3:3f:ce: 94:39:23:58:8b:a0:cc:87:3a:50:ce:df:34:b5:bd:df:48:3a: 30:9b:4c:f3:4e:84:80:e7:1d:03:73:2e:54:ff:aa:94:70:1d: 5c:42:e0:b9:26:c9:27:89:8f:0b:cd:cb:02:19:a7:42:5b:81: 15:d2:51:12:b8:ef:9a:be:37:cb:af:7d:63:57:d8:c1:da:c0: 0c:cd:40:73:fb:76:7f:a5:55:16:ea:5f:3a:9e:93:c0:03:3f: 83:23:b8:ad:c8:de:59:1c:c2:49:3f:5e:b8:bb:6c:99:20:c1: 1c:94:0f:cc:5a:91:34:47:f6:4f:be:dc:be:c6:a3:12:f1:19: af:04:5b:b6:fa:9f:90:59:b6:d3:f6:60:36:b4:f9:0b:2b:5d: e1:8b:80:8f:15:13:90:37:63:c8:e9:19:5c:29:52:10:60:09: 3b:3d:63:e4:70:5a:4c:cc:6e:f5:65:e8:91:0d:56:a6:68:e3: 7c:3c:b4:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOvT1gbreZsFgYkQoGDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzUyNzZhY2VlZmYwMmM4ZGU4MWI4ZWFlZjViMmUyMjA5NGE0Mjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B/0wLQtCzGbiyeKBQCWTxJCW3QR pIEUH4t9ncgmP3wDe6kFuE8t7YkG042DqS9eIuUCe+iJVozbhEb4skelHQ+P3uab Re6T1+De/uphOgy+vc860cH/CDHLZeJ+S59yQQGRiMI+XN6Bx+QPbqfCwMADW1L6 tSi8nVqa3JU8R+DyEDgIRX0fVL5fjtfHq28RxI7IqoE/I//fDgQtcXRzy2JGJ/rm HoTjl2nDr8wVEAtLD067D3RVlKmBLXdgyPmmA6+PyYO/HoT2E7DyeSYBBVDsWAle u3QhD+oZXcTXwOS6wB+1atYPe+oNgNe8kh6w+Pnsb5nAnL/Didgj4/Hq4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxSdqzu/wLI3oG46u9bLiIJSkKWMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvekZKMnJPN19Bc2plZ2JqcTcxc3VJZ2xLUXBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoFMA0G CSqGSIb3DQEBCwUAA4IBAQCZ7S45ehfgXuYD495FE/Bkxaebb6SgU6wALrqwRcrr VxUFuWZLpYXk+dNFPStftv6RJsNQggoBWevZB8kxChaxP2O49AjzP86UOSNYi6DM hzpQzt80tb3fSDowm0zzToSA5x0Dcy5U/6qUcB1cQuC5JskniY8LzcsCGadCW4EV 0lESuO+avjfLr31jV9jB2sAMzUBz+3Z/pVUW6l86npPAAz+DI7ityN5ZHMJJP164 u2yZIMEclA/MWpE0R/ZPvty+xqMS8RmvBFu2+p+QWbbT9mA2tPkLK13hi4CPFROQ N2PI6RlcKVIQYAk7PWPkcFpMzG71ZeiRDVamaON8PLQh -----END CERTIFICATE-----Generated at Sun Jan 11 21:02:27 2026 by rpki-client