This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1NXMczi3cVWZBaqJzR8XmgAQ7EE.roa File: 1NXMczi3cVWZBaqJzR8XmgAQ7EE.roa (raw, json) Hash identifier: PUYAUxvAYD9UHs1EVXFUdYAPOKP1odaEHngSOYEkNH4= Subject key identifier: D4:D5:CC:73:38:B7:71:55:99:05:AA:89:CD:1F:17:9A:00:10:EC:41 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EC2E40A6E7E53B280363F06E07866 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1NXMczi3cVWZBaqJzR8XmgAQ7EE.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22516 IP address blocks: 109.121.40.0/24 maxlen: 24 109.121.43.0/24 maxlen: 24 109.233.184.0/24 maxlen: 24 109.233.185.0/24 maxlen: 24 178.253.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c2:e4:0a:6e:7e:53:b2:80:36:3f:06:e0:78:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4d5cc7338b771559905aa89cd1f179a0010ec41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:bd:18:b8:8b:08:0b:35:dc:24:8e:02:a1: 5e:fe:36:39:7f:77:36:07:31:a8:33:4f:13:da:ff: 0f:20:de:f6:87:75:64:55:15:9d:9d:17:e1:90:96: 1e:4e:44:cb:86:c7:ea:fc:e2:44:0b:d9:7e:39:96: 29:d0:6b:ae:9d:1e:07:7b:3c:a3:37:22:66:df:d6: fc:1a:e4:15:82:2b:6d:cd:cc:87:4a:78:79:7f:53: da:7e:a1:6d:26:49:97:e7:b3:fe:f6:1c:fa:e1:19: 2d:20:c6:f3:16:05:71:6f:8b:18:e7:76:9c:0f:1f: 70:44:55:a4:11:6b:69:fe:73:fe:bc:56:87:df:4d: ae:7b:d4:e2:1c:6b:34:7e:1d:1d:2b:e5:34:32:cc: 6a:b9:62:69:4e:eb:99:ee:ba:f2:2b:4c:b6:86:25: e0:62:8b:7c:28:49:3a:75:54:20:05:30:95:47:62: d4:03:23:75:cb:7f:8d:99:63:e0:ea:5f:a5:ec:dc: 14:6c:16:e3:b6:3b:3c:ac:a5:47:5b:65:65:35:47: de:9e:2d:d5:96:64:98:58:82:12:d6:38:e0:1a:ed: e0:b0:e5:57:c8:37:28:44:8e:ef:36:94:ab:5c:1e: c1:f0:e4:e5:1f:bf:90:1a:55:3a:cc:7a:24:c1:fb: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D5:CC:73:38:B7:71:55:99:05:AA:89:CD:1F:17:9A:00:10:EC:41 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1NXMczi3cVWZBaqJzR8XmgAQ7EE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.40.0/24 109.121.43.0/24 109.233.184.0/23 178.253.237.0/24 Signature Algorithm: sha256WithRSAEncryption 61:90:61:c6:4f:20:5b:ed:08:4b:92:cd:ab:d9:f5:ea:02:35: 15:29:96:6b:f3:4e:b3:95:49:96:8c:a4:e2:c6:a1:85:dd:cd: 57:1e:3a:a7:d9:a3:2a:f9:45:b0:ea:59:34:ed:b5:76:4a:38: 98:22:43:56:eb:6f:9b:b1:4c:4f:f3:2e:2c:24:8c:98:bf:55: 20:3a:18:f6:3f:33:ec:ac:be:e4:0c:06:4d:cc:5d:d9:53:37: 9f:e4:a6:00:b3:56:80:8f:39:77:c9:a1:fa:73:75:f5:0b:15: 64:e0:a5:b5:7a:dc:c5:bd:29:56:45:53:80:7b:34:43:3c:e3: 8c:5f:fd:aa:a3:b5:0f:75:a5:6c:91:64:a0:46:d5:24:c1:cf: 42:fa:72:69:f5:bd:26:7c:2e:e8:e7:c6:ef:71:e9:f2:ef:e7: e6:18:b7:72:fa:dc:1d:ce:4e:cc:33:bd:8f:1b:e8:e3:65:e9: 17:41:c6:91:f3:ca:27:4f:a1:90:c5:86:d8:e5:55:87:ec:28: 56:31:c5:3d:cb:9e:84:f4:42:17:80:0f:5c:bb:6f:24:df:14: f1:ba:4f:8e:e3:ca:a0:38:95:8c:80:ea:32:27:87:78:ac:2b: ae:d5:39:72:82:07:02:9c:90:a4:f2:ef:bb:f8:db:bc:bc:c8: 72:8b:05:9b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5fsLkCm5+U7KANj8G4HhmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGQ1Y2M3MzM4Yjc3MTU1OTkwNWFhODljZDFmMTc5YTAwMTBlYzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTm9GLiLCAs13CSOAqFe/jY5f3c2 BzGoM08T2v8PIN72h3VkVRWdnRfhkJYeTkTLhsfq/OJEC9l+OZYp0GuunR4Hezyj NyJm39b8GuQVgittzcyHSnh5f1PafqFtJkmX57P+9hz64RktIMbzFgVxb4sY53ac Dx9wRFWkEWtp/nP+vFaH302ue9TiHGs0fh0dK+U0MsxquWJpTuuZ7rryK0y2hiXg Yot8KEk6dVQgBTCVR2LUAyN1y3+NmWPg6l+l7NwUbBbjtjs8rKVHW2VlNUfeni3V lmSYWIIS1jjgGu3gsOVXyDcoRI7vNpSrXB7B8OTlH7+QGlU6zHokwftMUQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNTVzHM4t3FVmQWqic0fF5oAEOxBMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvMU5YTWN6aTNjVldaQmFxSnpSOFhtZ0FRN0VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAbXkoAwQA bXkrAwQBbem4AwQAsv3tMA0GCSqGSIb3DQEBCwUAA4IBAQBhkGHGTyBb7QhLks2r 2fXqAjUVKZZr806zlUmWjKTixqGF3c1XHjqn2aMq+UWw6lk07bV2SjiYIkNW62+b sUxP8y4sJIyYv1UgOhj2PzPsrL7kDAZNzF3ZUzef5KYAs1aAjzl3yaH6c3X1CxVk 4KW1etzFvSlWRVOAezRDPOOMX/2qo7UPdaVskWSgRtUkwc9C+nJp9b0mfC7o58bv ceny7+fmGLdy+twdzk7MM72PG+jjZekXQcaR88onT6GQxYbY5VWH7ChWMcU9y56E 9EIXgA9cu28k3xTxuk+O48qgOJWMgOoyJ4d4rCuu1TlyggcCnJCk8u+7+Nu8vMhy iwWb -----END CERTIFICATE-----Generated at Mon Jan 19 13:55:15 2026 by rpki-client