This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ZVEWuO8vTkhYlgAxEUaEcfperi4.roa File: ZVEWuO8vTkhYlgAxEUaEcfperi4.roa (raw, json) Hash identifier: EcaVfVBsUxnWjymJwx/UBAMgjBU918j/k2sTiFawV9k= Subject key identifier: 65:51:16:B8:EF:2F:4E:48:58:96:00:31:11:46:84:71:FA:5E:AE:2E Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019B7C806FC039B9F80A650AA26D7066626E Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ZVEWuO8vTkhYlgAxEUaEcfperi4.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60949 IP address blocks: 109.105.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6f:c0:39:b9:f8:0a:65:0a:a2:6d:70:66:62:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=655116b8ef2f4e485896003111468471fa5eae2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:19:56:89:bb:2d:f5:f3:12:f3:e4:a4:df:a1: 3e:40:e5:15:c4:8a:c5:24:b4:a5:2f:6e:a5:cc:ce: 05:32:a6:e9:60:1a:2f:f9:ed:7b:65:db:68:8f:37: 0d:f9:b4:55:ca:b8:4a:76:03:a6:8c:da:fa:7e:a3: 24:56:f4:0a:4c:43:79:cf:cb:99:04:33:0e:7b:51: 9b:e1:57:bd:ea:3b:09:ec:a3:ea:5c:22:90:64:d2: ea:81:1f:20:70:38:38:aa:e4:d9:be:d8:98:34:c8: fc:93:e3:95:5b:47:14:b6:af:1a:c0:79:dd:c6:48: 82:17:d2:fa:59:b6:2a:39:ea:07:01:a6:09:b5:23: a5:d1:93:ba:58:93:d7:ff:0a:c5:70:08:95:a8:d3: 97:7b:a9:04:1a:6c:08:f6:ea:fa:1d:09:a6:df:73: 71:09:d3:87:8e:28:c3:e1:7b:6f:86:dd:16:f5:93: 6b:da:fa:9d:73:92:90:a6:5b:b4:9e:ef:c6:a4:8e: 40:8f:1a:58:69:04:21:06:84:54:c8:51:80:3b:67: ec:28:37:61:7b:1e:43:64:9b:f6:b0:aa:bc:4a:1d: 8c:d8:4b:aa:d4:cc:98:9e:69:c5:ee:75:45:99:4b: 55:65:0c:ae:55:a3:c6:2a:ab:13:60:62:d1:88:66: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:51:16:B8:EF:2F:4E:48:58:96:00:31:11:46:84:71:FA:5E:AE:2E X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ZVEWuO8vTkhYlgAxEUaEcfperi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.105.199.0/24 Signature Algorithm: sha256WithRSAEncryption 15:61:21:95:2f:9b:a3:1e:3f:c4:39:81:11:a0:b0:e8:e1:b3: fc:2b:9d:40:1b:ec:64:5f:25:1c:dd:6b:b1:cb:48:a9:eb:90: 15:4e:2d:91:56:7b:6c:ca:91:16:ec:1e:e3:7e:22:ea:a3:ea: 4f:ab:39:9e:8b:eb:3c:60:42:8b:83:58:a0:88:55:af:0c:4b: ac:26:4f:cd:6d:68:aa:9b:34:c6:09:3b:b6:03:69:bd:c9:79: f8:c5:01:f5:8e:9b:5c:b2:ed:2a:96:25:6e:ce:94:a3:77:0e: d5:02:1b:d1:35:8b:cc:2c:ec:be:92:68:f9:da:04:fd:fd:72: 1d:b6:73:3f:11:a1:88:71:f1:16:ae:55:d3:c6:e7:c2:e2:5c: 4f:13:56:45:ea:79:4a:da:14:23:f4:2f:02:c5:46:17:94:5a: bb:18:7b:48:33:3c:aa:33:4e:3f:ce:34:d7:6d:dc:39:10:0d: 29:03:46:23:88:46:ad:73:ab:06:c4:bb:ca:f2:10:91:63:98: 20:22:7f:cf:d3:9f:e8:bc:a5:25:a4:b6:7d:f4:ec:cc:5d:bf: 1f:ec:d0:cb:58:fb:b2:01:81:31:ac:a3:b4:4c:58:47:c4:78: 32:42:ee:a0:f0:4c:1b:e5:d8:9c:48:47:ba:f8:04:ef:aa:f8: e4:aa:3c:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gG/AObn4CmUKom1wZmJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTUxMTZiOGVmMmY0ZTQ4NTg5NjAwMzExMTQ2ODQ3MWZhNWVhZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BlWibst9fMS8+Sk36E+QOUVxIrF JLSlL26lzM4FMqbpYBov+e17ZdtojzcN+bRVyrhKdgOmjNr6fqMkVvQKTEN5z8uZ BDMOe1Gb4Ve96jsJ7KPqXCKQZNLqgR8gcDg4quTZvtiYNMj8k+OVW0cUtq8awHnd xkiCF9L6WbYqOeoHAaYJtSOl0ZO6WJPX/wrFcAiVqNOXe6kEGmwI9ur6HQmm33Nx CdOHjijD4Xtvht0W9ZNr2vqdc5KQplu0nu/GpI5AjxpYaQQhBoRUyFGAO2fsKDdh ex5DZJv2sKq8Sh2M2Euq1MyYnmnF7nVFmUtVZQyuVaPGKqsTYGLRiGblfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGVRFrjvL05IWJYAMRFGhHH6Xq4uMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvWlZFV3VPOHZUa2hZbGdBeEVVYUVjZnBlcmk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWnHMA0G CSqGSIb3DQEBCwUAA4IBAQAVYSGVL5ujHj/EOYERoLDo4bP8K51AG+xkXyUc3Wux y0ip65AVTi2RVntsypEW7B7jfiLqo+pPqzmei+s8YEKLg1igiFWvDEusJk/NbWiq mzTGCTu2A2m9yXn4xQH1jptcsu0qliVuzpSjdw7VAhvRNYvMLOy+kmj52gT9/XId tnM/EaGIcfEWrlXTxufC4lxPE1ZF6nlK2hQj9C8CxUYXlFq7GHtIMzyqM04/zjTX bdw5EA0pA0YjiEatc6sGxLvK8hCRY5ggIn/P05/ovKUlpLZ99OzMXb8f7NDLWPuy AYExrKO0TFhHxHgyQu6g8Ewb5dicSEe6+ATvqvjkqjw8 -----END CERTIFICATE-----Generated at Wed Jan 21 19:00:20 2026 by rpki-client