This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1fc8ASWJRxLRoCal6StMdhQwBGE.roa File: 1fc8ASWJRxLRoCal6StMdhQwBGE.roa (raw, json) Hash identifier: jEhx6q6GEe+JXYkb/doZ1ZurgJ/DGDeA7OX2BlUlIoM= Subject key identifier: D5:F7:3C:01:25:89:47:12:D1:A0:26:A5:E9:2B:4C:76:14:30:04:61 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EDE55A6FE95CCCD14B7370ABC1C61 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1fc8ASWJRxLRoCal6StMdhQwBGE.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401322 IP address blocks: 109.121.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:de:55:a6:fe:95:cc:cd:14:b7:37:0a:bc:1c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5f73c0125894712d1a026a5e92b4c7614300461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:7a:47:64:c0:d3:32:b0:8f:35:9d:94:a5: c6:7c:d1:24:46:80:0f:fa:06:53:a7:17:56:7f:6c: 78:4a:7b:cf:e7:78:2d:50:05:e4:4f:29:df:f9:70: f7:a6:7f:0f:a4:9f:62:7e:b4:ec:a8:3c:d0:7a:f9: ce:43:f6:30:53:96:45:a5:f8:fb:99:f7:31:f4:58: d7:d7:74:c8:cd:d9:a7:af:f1:ba:e6:81:d2:c3:45: c5:63:88:38:da:73:98:91:c0:4b:19:fd:01:fd:e2: de:72:63:1e:6f:2a:04:56:2f:dd:2e:fd:40:fc:f0: db:74:13:55:a3:15:c5:41:00:57:21:a3:f4:9c:4d: 89:25:37:4d:31:4a:d6:00:b5:6d:9c:c5:af:b0:1a: d6:9a:a7:8b:fa:e7:a4:8c:97:49:64:3e:7f:3d:25: 2d:f1:70:7e:87:60:6a:16:e4:f5:ed:42:48:42:9b: 60:93:2a:76:90:31:9e:c9:f6:75:72:53:ba:a7:85: bf:30:2d:16:40:99:02:38:35:e5:ff:61:27:39:f3: 92:60:87:33:05:90:4a:ea:b5:af:69:24:6a:63:fa: 09:72:dd:93:ac:6d:7d:3e:33:9e:ca:14:58:8d:d0: 50:db:60:c9:fa:72:57:d2:7b:cc:49:73:ec:dc:ca: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F7:3C:01:25:89:47:12:D1:A0:26:A5:E9:2B:4C:76:14:30:04:61 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1fc8ASWJRxLRoCal6StMdhQwBGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.39.0/24 Signature Algorithm: sha256WithRSAEncryption 81:33:6a:c6:39:5a:de:01:7c:77:76:f2:f0:41:ef:13:e7:08: 1f:52:79:3a:94:0d:07:03:6d:50:e4:e5:18:ba:4d:cc:da:16: 61:d5:3e:60:fd:95:10:2d:25:8d:9b:4e:b8:10:d1:78:89:25: 57:f0:38:fb:26:e8:91:29:b2:a7:7a:78:2a:95:d3:9f:cc:cf: 3e:dd:1f:67:7e:4e:9f:af:8c:88:c4:b1:ee:bc:bb:d1:54:cd: 72:1a:38:87:01:9e:6b:39:5f:77:5a:79:7d:0a:21:29:ed:58: 38:da:7e:a5:a9:c1:6b:59:32:9a:fe:82:51:20:09:6c:e7:6f: 9c:e8:b7:4b:47:d1:c1:75:58:31:66:44:8f:12:c1:07:8d:7a: 95:e9:ff:8d:62:15:ec:f2:86:7a:9a:4d:f9:cc:af:da:6a:16: 64:95:b6:f1:7b:6d:15:df:c7:7a:d8:d5:b7:fb:54:0e:91:5d: 71:b1:d9:05:ec:f6:7a:ad:59:00:48:66:51:53:7d:e9:8c:10: 61:41:1e:ef:27:ed:07:28:46:11:e4:c3:a8:10:53:4c:27:98: 11:2a:4f:e1:52:cf:f5:0f:28:cf:85:8a:29:7e:40:a9:cc:03: f1:1e:5e:77:0e:d6:a1:2b:aa:96:e5:d6:15:d5:92:37:c5:f1: 97:79:bf:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ft5Vpv6VzM0UtzcKvBxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWY3M2MwMTI1ODk0NzEyZDFhMDI2YTVlOTJiNGM3NjE0MzAwNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJJ6R2TA0zKwjzWdlKXGfNEkRoAP +gZTpxdWf2x4SnvP53gtUAXkTynf+XD3pn8PpJ9ifrTsqDzQevnOQ/YwU5ZFpfj7 mfcx9FjX13TIzdmnr/G65oHSw0XFY4g42nOYkcBLGf0B/eLecmMebyoEVi/dLv1A /PDbdBNVoxXFQQBXIaP0nE2JJTdNMUrWALVtnMWvsBrWmqeL+uekjJdJZD5/PSUt 8XB+h2BqFuT17UJIQptgkyp2kDGeyfZ1clO6p4W/MC0WQJkCODXl/2EnOfOSYIcz BZBK6rWvaSRqY/oJct2TrG19PjOeyhRYjdBQ22DJ+nJX0nvMSXPs3Mr3eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNX3PAEliUcS0aAmpekrTHYUMARhMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvMWZjOEFTV0pSeExSb0NhbDZTdE1kaFF3QkdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXknMA0G CSqGSIb3DQEBCwUAA4IBAQCBM2rGOVreAXx3dvLwQe8T5wgfUnk6lA0HA21Q5OUY uk3M2hZh1T5g/ZUQLSWNm064ENF4iSVX8Dj7JuiRKbKnengqldOfzM8+3R9nfk6f r4yIxLHuvLvRVM1yGjiHAZ5rOV93Wnl9CiEp7Vg42n6lqcFrWTKa/oJRIAls52+c 6LdLR9HBdVgxZkSPEsEHjXqV6f+NYhXs8oZ6mk35zK/aahZklbbxe20V38d62NW3 +1QOkV1xsdkF7PZ6rVkASGZRU33pjBBhQR7vJ+0HKEYR5MOoEFNMJ5gRKk/hUs/1 DyjPhYopfkCpzAPxHl53DtahK6qW5dYV1ZI3xfGXeb9Q -----END CERTIFICATE-----Generated at Mon Jan 19 13:52:56 2026 by rpki-client