This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/mH0FJ23Xhvhl7yPzg_J0QLsXN6c.roa File: mH0FJ23Xhvhl7yPzg_J0QLsXN6c.roa (raw, json) Hash identifier: bc3Tff2F8YDhVYuMIKbuPGvXcTjpv3hF+6MXk1AVTa4= Subject key identifier: 98:7D:05:27:6D:D7:86:F8:65:EF:23:F3:83:F2:74:40:BB:17:37:A7 Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2 Certificate serial: 019B77C6E1672941A6C54FA35718BEE77E3D Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/mH0FJ23Xhvhl7yPzg_J0QLsXN6c.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29067 IP address blocks: 109.70.104.0/22 maxlen: 24 109.70.105.0/24 maxlen: 24 109.70.108.0/24 maxlen: 24 109.70.109.0/24 maxlen: 24 109.70.111.0/24 maxlen: 24 185.159.140.0/24 maxlen: 24 185.159.141.0/24 maxlen: 24 193.29.220.0/24 maxlen: 24 195.47.253.0/24 maxlen: 24 2001:67c:258::/48 maxlen: 48 2001:4130::/32 maxlen: 48 2001:4130:20::/48 maxlen: 48 2001:4130:b0::/48 maxlen: 48 2001:4130:cd::/48 maxlen: 48 2001:4130:ce::/48 maxlen: 48 2001:4130:141::/48 maxlen: 48 2001:4130:50f1::/48 maxlen: 48 2001:4130:50f2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e1:67:29:41:a6:c5:4f:a3:57:18:be:e7:7e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=987d05276dd786f865ef23f383f27440bb1737a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:2a:2c:fd:4a:a6:68:e7:c4:f9:47:7b:58: 2c:dd:24:79:ab:2d:55:34:3e:0e:5c:a3:78:96:39: 2f:b6:9d:25:97:91:9e:d7:46:e9:76:1c:73:c4:d5: b4:c1:a4:23:ad:7d:f3:ad:8c:da:49:74:6d:27:b0: c4:b1:64:ea:78:f3:dd:09:b6:d1:ba:b0:8e:e8:da: 4e:98:dc:95:fa:66:76:db:ef:af:2b:be:34:f3:97: 17:0a:58:59:dd:8b:ab:23:74:4f:19:44:9e:ca:49: c1:b1:70:76:92:73:76:b1:a5:93:77:24:ca:84:48: 08:a0:22:8f:75:33:bd:9b:1c:39:3e:da:9a:79:5c: b7:ba:b9:73:cc:c5:22:2b:da:57:d5:fa:d8:fb:80: 1a:4d:44:8c:df:42:f3:fc:9b:25:3c:f1:40:e9:10: 65:a6:de:33:c7:c9:5e:21:30:14:54:c2:f8:58:40: c0:8f:9b:00:18:66:6d:ae:61:e3:95:51:2c:e4:8c: 53:4d:ae:d9:47:bc:ab:dc:5e:98:70:5b:c7:97:28: f8:6a:bd:a7:d5:b4:11:41:29:1c:80:34:b8:56:d4: 22:af:39:58:e9:bf:23:8f:50:78:ed:d4:f9:8a:a4: 79:88:7e:02:a4:24:38:e0:30:b3:6a:eb:fa:33:52: 34:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7D:05:27:6D:D7:86:F8:65:EF:23:F3:83:F2:74:40:BB:17:37:A7 X509v3 Authority Key Identifier: keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/mH0FJ23Xhvhl7yPzg_J0QLsXN6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.70.104.0-109.70.109.255 109.70.111.0/24 185.159.140.0/23 193.29.220.0/24 195.47.253.0/24 IPv6: 2001:67c:258::/48 2001:4130::/32 Signature Algorithm: sha256WithRSAEncryption 1c:d5:a9:1d:4a:89:0f:12:25:da:31:f6:6d:16:29:ac:80:fb: aa:fb:15:07:0f:49:56:8d:4f:8c:a4:a8:e6:36:50:99:5c:ea: c0:41:69:45:92:fc:f8:dd:fa:9e:d9:6c:e1:5f:d6:27:5b:d6: e7:1e:a1:57:a7:76:68:8e:13:ea:bd:3a:e2:4a:12:9f:26:36: de:3c:f7:41:12:6c:7d:21:ba:8c:8f:35:03:b5:32:aa:9d:ec: 1c:2a:d8:ee:80:45:ae:e9:3c:11:01:78:07:31:01:9b:46:d5: c5:89:87:0e:e9:5f:37:f1:35:21:f0:5f:a7:4e:92:38:16:f9: 5d:ec:50:a1:b6:3f:ab:63:f3:b8:00:26:00:16:4d:57:f9:6f: a0:c8:4f:b2:0a:ec:44:57:df:25:f9:58:d0:71:be:53:fa:52: 95:bd:b6:38:d4:c8:85:73:76:30:25:97:da:f1:89:99:a7:cf: ef:3d:6d:7d:19:f6:4d:84:d9:53:0f:e4:2e:0a:52:72:46:e5: c7:3a:6e:78:91:8c:01:b7:ee:42:80:64:8c:ed:84:86:e6:a8: d7:8d:36:ee:d9:71:d5:6e:aa:b5:13:ff:2d:0d:07:a4:a5:c6: 7a:42:53:07:46:3e:5b:42:3e:19:0d:96:c1:f4:e4:bf:a7:3a: 2b:5f:a6:eb -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt3xuFnKUGmxU+jVxi+5349MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzZiMmI4YWZhNjAzNmQyYzhlODMxNzczNmZhYWE3MmQ4 MGM0ZjIwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODdkMDUyNzZkZDc4NmY4NjVlZjIzZjM4M2YyNzQ0MGJiMTczN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjgqLP1KpmjnxPlHe1gs3SR5qy1V ND4OXKN4ljkvtp0ll5Ge10bpdhxzxNW0waQjrX3zrYzaSXRtJ7DEsWTqePPdCbbR urCO6NpOmNyV+mZ22++vK74085cXClhZ3YurI3RPGUSeyknBsXB2knN2saWTdyTK hEgIoCKPdTO9mxw5PtqaeVy3urlzzMUiK9pX1frY+4AaTUSM30Lz/JslPPFA6RBl pt4zx8leITAUVML4WEDAj5sAGGZtrmHjlVEs5IxTTa7ZR7yr3F6YcFvHlyj4ar2n 1bQRQSkcgDS4VtQirzlY6b8jj1B47dT5iqR5iH4CpCQ44DCzauv6M1I0owIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJh9BSdt14b4Ze8j84PydEC7FzenMB8GA1UdIwQY MBaAFCI2srivpgNtLI6DF3NvqqctgMTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMt OGI1ZWY0MWQ4YzI1LzEvbUgwRkoyM1hodmhsN3lQemdfSjBRTHNYTjZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMtOGI1ZWY0MWQ4YzI1 LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAsBAIAATAmMAwDBANtRmgD BAFtRmwDBABtRm8DBAG5n4wDBADBHdwDBADDL/0wFgQCAAIwEAMHACABBnwCWAMF ACABQTAwDQYJKoZIhvcNAQELBQADggEBABzVqR1KiQ8SJdox9m0WKayA+6r7FQcP SVaNT4ykqOY2UJlc6sBBaUWS/Pjd+p7ZbOFf1idb1uceoVendmiOE+q9OuJKEp8m Nt4890ESbH0huoyPNQO1Mqqd7Bwq2O6ARa7pPBEBeAcxAZtG1cWJhw7pXzfxNSHw X6dOkjgW+V3sUKG2P6tj87gAJgAWTVf5b6DIT7IK7ERX3yX5WNBxvlP6UpW9tjjU yIVzdjAll9rxiZmnz+89bX0Z9k2E2VMP5C4KUnJG5cc6bniRjAG37kKAZIzthIbm qNeNNu7ZcdVuqrUT/y0NB6SlxnpCUwdGPltCPhkNlsH05L+nOitfpus= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:23 2026 by rpki-client