This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/00NtTHtqV7oIUy6mGI0zos9O-Cw.roa File: 00NtTHtqV7oIUy6mGI0zos9O-Cw.roa (raw, json) Hash identifier: MNnoAaICa4zJeZsw0wmmpMvtX1o9ZLdWyx4bvDzq/ds= Subject key identifier: D3:43:6D:4C:7B:6A:57:BA:08:53:2E:A6:18:8D:33:A2:CF:4E:F8:2C Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EC658AF20C05958FE57B2AAD6DC7C Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/00NtTHtqV7oIUy6mGI0zos9O-Cw.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 109.121.32.0/24 maxlen: 24 109.121.35.0/24 maxlen: 24 109.121.41.0/24 maxlen: 24 109.121.46.0/24 maxlen: 24 212.69.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c6:58:af:20:c0:59:58:fe:57:b2:aa:d6:dc:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3436d4c7b6a57ba08532ea6188d33a2cf4ef82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d1:ae:ec:0e:a3:51:bb:ea:75:66:75:82:ee: 80:30:61:90:94:40:4d:7b:02:7a:48:a9:1e:c8:6f: 73:ca:78:01:09:f5:bb:ae:5d:88:40:f5:2c:5d:d0: 02:40:15:a2:7b:9a:d7:45:08:1a:9e:4f:a6:cf:c5: 88:3d:a5:37:e5:10:dc:be:03:38:1d:9b:74:d5:f5: 91:7f:02:47:27:3d:b0:03:c7:28:41:05:d8:39:81: d8:4f:25:4a:a8:75:63:62:19:d0:7d:f7:63:8f:30: cd:b8:03:85:4f:7f:04:7c:1b:31:cc:f6:d5:00:8a: 21:f6:ce:50:2b:06:9e:0c:fa:95:e8:32:d6:d6:5d: 97:b5:2a:1b:f3:92:a2:23:db:34:bc:40:07:de:9d: bc:02:3b:1d:60:98:d7:7a:f7:cf:98:15:a2:76:9c: ce:2d:2b:53:cc:07:38:33:89:d8:c7:42:50:f7:a0: 14:94:3c:2c:99:3e:9b:f9:2f:ee:22:40:9d:72:1a: af:87:02:d2:71:0a:6c:24:4c:b4:56:c2:00:fc:59: f8:94:8a:fc:48:0c:97:3e:b5:b9:a5:99:42:96:94: bf:cc:61:ab:b4:2f:4f:2a:b3:70:a6:bb:e6:8d:0c: 2a:41:38:41:2a:4c:95:81:97:e6:8b:4f:41:60:f4: 4c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:43:6D:4C:7B:6A:57:BA:08:53:2E:A6:18:8D:33:A2:CF:4E:F8:2C X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/00NtTHtqV7oIUy6mGI0zos9O-Cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.32.0/24 109.121.35.0/24 109.121.41.0/24 109.121.46.0/24 212.69.10.0/24 Signature Algorithm: sha256WithRSAEncryption 42:53:9e:95:55:b1:82:37:26:9c:52:cf:8d:36:3a:a6:3a:bc: 26:cf:26:4a:43:dd:ec:df:11:48:0b:45:40:47:f9:ce:f0:59: ed:07:6c:6a:37:f7:73:e0:7b:a8:4e:18:61:99:47:64:cb:87: 67:6d:a5:a2:2d:25:79:6d:6e:94:d9:d7:e2:8a:83:67:a5:12: 70:5d:64:5f:a1:d9:62:e4:1d:75:63:ea:ec:e2:69:9f:39:44: af:ab:41:68:87:3b:55:c6:c6:15:ff:48:5d:ac:27:5b:9b:bf: 7d:1b:05:8c:19:81:70:9b:fb:90:26:a2:30:ed:b2:0a:ec:43: 19:05:c2:49:be:6d:26:01:6b:7d:43:12:62:0c:21:09:ee:5f: d6:03:f2:d9:6a:ac:bb:6a:a3:f5:1d:c9:db:0e:6c:50:10:30: b7:b7:d2:d5:4b:61:03:73:91:ef:ab:4f:03:e3:09:ba:be:69: 4d:2e:87:0a:9e:dc:3a:82:bd:e7:4b:53:92:c4:43:75:cd:7f: fd:3a:3a:1f:37:a1:30:33:2b:ce:92:a1:26:7c:86:b4:31:c2: 92:c5:47:a5:07:a5:1c:65:24:60:c5:27:01:77:0a:bd:6a:29: cd:d7:2b:28:1d:7b:33:ea:d7:70:33:68:94:78:bf:b7:ff:a5: e1:74:52:74 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5fsZYryDAWVj+V7Kq1tx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzQzNmQ0YzdiNmE1N2JhMDg1MzJlYTYxODhkMzNhMmNmNGVmODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tGu7A6jUbvqdWZ1gu6AMGGQlEBN ewJ6SKkeyG9zyngBCfW7rl2IQPUsXdACQBWie5rXRQgank+mz8WIPaU35RDcvgM4 HZt01fWRfwJHJz2wA8coQQXYOYHYTyVKqHVjYhnQffdjjzDNuAOFT38EfBsxzPbV AIoh9s5QKwaeDPqV6DLW1l2XtSob85KiI9s0vEAH3p28AjsdYJjXevfPmBWidpzO LStTzAc4M4nYx0JQ96AUlDwsmT6b+S/uIkCdchqvhwLScQpsJEy0VsIA/Fn4lIr8 SAyXPrW5pZlClpS/zGGrtC9PKrNwprvmjQwqQThBKkyVgZfmi09BYPRMhQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNNDbUx7ale6CFMuphiNM6LPTvgsMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvMDBOdFRIdHFWN29JVXk2bUdJMHpvczlPLUN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAbXkgAwQA bXkjAwQAbXkpAwQAbXkuAwQA1EUKMA0GCSqGSIb3DQEBCwUAA4IBAQBCU56VVbGC NyacUs+NNjqmOrwmzyZKQ93s3xFIC0VAR/nO8FntB2xqN/dz4HuoThhhmUdky4dn baWiLSV5bW6U2dfiioNnpRJwXWRfodli5B11Y+rs4mmfOUSvq0FohztVxsYV/0hd rCdbm799GwWMGYFwm/uQJqIw7bIK7EMZBcJJvm0mAWt9QxJiDCEJ7l/WA/LZaqy7 aqP1HcnbDmxQEDC3t9LVS2EDc5Hvq08D4wm6vmlNLocKntw6gr3nS1OSxEN1zX/9 OjofN6EwMyvOkqEmfIa0McKSxUelB6UcZSRgxScBdwq9ainN1ysoHXsz6tdwM2iU eL+3/6XhdFJ0 -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:15 2026 by rpki-client