This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/lX1Z7VJVHL2Btqa9OSR2j_W5ab0.roa File: lX1Z7VJVHL2Btqa9OSR2j_W5ab0.roa (raw, json) Hash identifier: xvNGFNidv1bMhY2UzHVCI87XTEPnytAR765b+Q4yrpM= Subject key identifier: 95:7D:59:ED:52:55:1C:BD:81:B6:A6:BD:39:24:76:8F:F5:B9:69:BD Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33 Certificate serial: 019B7A5A00C620285A71D3BFE4973B0901C0 Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/lX1Z7VJVHL2Btqa9OSR2j_W5ab0.roa Signing time: Thu 01 Jan 2026 16:17:57 +0000 ROA not before: Thu 01 Jan 2026 16:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50307 IP address blocks: 109.71.112.0/21 maxlen: 21 2a06:7c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:00:c6:20:28:5a:71:d3:bf:e4:97:3b:09:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33 Validity Not Before: Jan 1 16:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=957d59ed52551cbd81b6a6bd3924768ff5b969bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a5:b4:85:66:cd:2d:b9:9f:d4:85:08:28:e2: 16:28:d6:6e:40:75:df:88:70:98:82:90:a6:a9:05: 03:29:c6:20:1d:04:17:5d:51:5e:53:ec:09:f3:04: 5b:0b:11:ec:3b:9d:77:67:1e:07:60:c3:09:83:2c: 5a:2a:60:3b:82:fb:71:a7:3f:89:c9:3e:a3:59:7d: ba:cd:31:a4:2c:12:b8:0a:ac:b4:93:c5:dc:e2:46: 86:ab:0c:94:5f:8f:8d:1d:a1:e7:d5:d6:3d:2c:69: 61:69:2e:06:d5:26:a7:b5:54:70:90:03:87:5a:fd: fa:31:7f:79:c3:35:b8:ba:7f:3d:c2:eb:9c:8f:6e: c2:df:3d:6e:a1:f9:05:83:05:44:6f:16:1b:7c:8a: b6:48:c0:e9:f4:8f:20:17:43:4b:8b:64:7a:ca:df: 98:a9:79:58:d0:a5:16:b3:a3:de:5a:2b:30:0f:05: d2:f7:e5:08:79:3c:ed:e9:07:52:b8:14:fc:21:ae: 71:06:ec:1f:b7:74:a2:32:dc:21:ef:b0:35:d2:7c: 22:63:89:8e:05:ea:67:ee:a9:4d:e1:97:00:a0:d7: 3f:d3:70:87:4d:01:e6:72:61:57:8e:b6:25:c6:4b: ad:55:0a:c1:e7:bd:61:2d:0a:5c:b0:0a:2a:2c:81: d5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7D:59:ED:52:55:1C:BD:81:B6:A6:BD:39:24:76:8F:F5:B9:69:BD X509v3 Authority Key Identifier: keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/lX1Z7VJVHL2Btqa9OSR2j_W5ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.112.0/21 IPv6: 2a06:7c00::/29 Signature Algorithm: sha256WithRSAEncryption 0c:34:a6:0d:c2:2b:d1:e0:56:a8:6d:1d:b1:95:c2:5e:9a:af: 10:c9:29:a5:a3:15:4f:c5:a5:fc:86:5b:fd:19:6d:e1:68:4c: 7e:0a:d2:15:c3:15:6f:53:2f:e4:9b:24:44:79:76:1e:1e:04: 5a:91:30:c6:f7:77:e9:59:e5:31:0e:4e:d5:ba:b3:1b:29:12: bf:f4:ad:ee:c0:a3:8c:d1:27:90:9b:0c:03:bb:56:e6:10:6f: 21:66:b0:0c:a9:a1:d2:df:83:c3:c0:8e:8f:17:93:66:17:cf: 16:5d:53:af:82:2b:9f:b4:66:9c:b6:f9:79:b9:31:4b:8b:85: 6d:bb:ac:d7:c9:7d:50:6a:20:f2:b3:52:6f:f0:e2:b5:53:cc: 6f:76:18:4a:f1:ad:01:31:82:f9:a6:86:45:e6:46:6e:00:21: bd:ed:bb:cc:f6:46:77:3e:4f:2e:33:fd:96:f9:bf:61:0d:6e: 8e:88:22:4e:b7:38:5a:d8:dd:93:8a:fc:60:aa:25:42:28:da: 76:f4:16:eb:76:77:cb:3b:44:55:72:15:50:20:32:c5:c0:bc: 49:d5:69:e1:5d:28:a7:ee:9a:c2:7b:ff:6b:37:61:99:43:71: 0a:19:48:e7:6b:c5:cf:f4:1c:fa:2e:c1:a3:c9:3a:ab:4e:ea: bb:a6:12:e7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WgDGIChacdO/5Jc7CQHAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NThmMGE0NTNiMzJmZjNhMjFlNjZhMzFiNzRmZTQ5ZDhl NDZhMzMwHhcNMjYwMTAxMTYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTdkNTllZDUyNTUxY2JkODFiNmE2YmQzOTI0NzY4ZmY1Yjk2OWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16W0hWbNLbmf1IUIKOIWKNZuQHXf iHCYgpCmqQUDKcYgHQQXXVFeU+wJ8wRbCxHsO513Zx4HYMMJgyxaKmA7gvtxpz+J yT6jWX26zTGkLBK4Cqy0k8Xc4kaGqwyUX4+NHaHn1dY9LGlhaS4G1SantVRwkAOH Wv36MX95wzW4un89wuucj27C3z1uofkFgwVEbxYbfIq2SMDp9I8gF0NLi2R6yt+Y qXlY0KUWs6PeWiswDwXS9+UIeTzt6QdSuBT8Ia5xBuwft3SiMtwh77A10nwiY4mO Bepn7qlN4ZcAoNc/03CHTQHmcmFXjrYlxkutVQrB571hLQpcsAoqLIHVPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJV9We1SVRy9gbamvTkkdo/1uWm9MB8GA1UdIwQY MBaAFCRY8KRTsy/zoh5moxt0/knY5GozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQt ZWUzNzk1MThjNjg2LzEvbFgxWjdWSlZITDJCdHFhOU9TUjJqX1c1YWIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQtZWUzNzk1MThjNjg2 LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDbUdwMA0E AgACMAcDBQMqBnwAMA0GCSqGSIb3DQEBCwUAA4IBAQAMNKYNwivR4FaobR2xlcJe mq8QySmloxVPxaX8hlv9GW3haEx+CtIVwxVvUy/kmyREeXYeHgRakTDG93fpWeUx Dk7VurMbKRK/9K3uwKOM0SeQmwwDu1bmEG8hZrAMqaHS34PDwI6PF5NmF88WXVOv giuftGactvl5uTFLi4Vtu6zXyX1QaiDys1Jv8OK1U8xvdhhK8a0BMYL5poZF5kZu ACG97bvM9kZ3Pk8uM/2W+b9hDW6OiCJOtzha2N2TivxgqiVCKNp29BbrdnfLO0RV chVQIDLFwLxJ1WnhXSin7prCe/9rN2GZQ3EKGUjna8XP9Bz6LsGjyTqrTuq7phLn -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:51 2026 by rpki-client