This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pur9KYokbPEoy90l64dX0cecyiY.roa File: Pur9KYokbPEoy90l64dX0cecyiY.roa (raw, json) Hash identifier: 4e5RuqT3gKAjOxYFe+c3nuMUJZer14YT/2WbDZCF9kk= Subject key identifier: 3E:EA:FD:29:8A:24:6C:F1:28:CB:DD:25:EB:87:57:D1:C7:9C:CA:26 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B83DADF1E98178D490AFCFE88CC792D8D Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pur9KYokbPEoy90l64dX0cecyiY.roa Signing time: Sat 03 Jan 2026 12:35:17 +0000 ROA not before: Sat 03 Jan 2026 12:35:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215152 IP address blocks: 109.121.37.0/24 maxlen: 24 178.253.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:83:da:df:1e:98:17:8d:49:0a:fc:fe:88:cc:79:2d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 3 12:35:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eeafd298a246cf128cbdd25eb8757d1c79cca26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:2b:60:ba:63:a0:c6:33:7b:a7:83:1a:1a: 33:83:e4:0e:46:f5:f9:b5:c6:c3:80:ff:12:ea:c2: c9:7c:f5:fb:1b:65:91:8f:e2:41:38:69:b5:66:45: 67:dd:68:ab:d1:ac:d0:fc:de:43:f0:7b:0d:c1:03: de:ca:77:7b:b7:7d:6d:da:45:62:cf:ad:6e:3c:3f: 7a:98:59:34:03:ba:b5:d7:df:a0:1e:df:42:00:10: 06:fa:5f:58:ed:c3:32:0a:ed:a5:32:ba:1f:b7:84: d7:40:91:08:47:65:5e:bc:61:f5:ad:cd:fb:7e:44: 15:9a:d8:69:8a:29:e0:f5:e4:a9:34:70:f4:3a:34: 79:9c:93:cf:98:6a:cc:74:c1:15:b8:46:f9:af:ec: c5:a3:f3:89:c4:3e:ff:64:72:8c:f8:4d:5a:8e:66: 0e:f1:98:dc:2e:51:c0:c3:9b:ce:2b:ed:33:ca:c9: cb:99:e8:eb:71:83:c9:09:2c:a5:74:f8:56:16:aa: f2:6d:08:39:1b:87:ed:f4:84:de:8d:e8:0f:95:f4: 38:c6:d5:48:48:08:02:50:50:09:43:cf:2e:34:7b: 93:02:39:d2:cd:cc:d0:69:e9:0a:9a:8b:d0:15:85: f5:c0:73:46:bb:b9:07:91:a8:d8:9b:10:af:5a:df: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EA:FD:29:8A:24:6C:F1:28:CB:DD:25:EB:87:57:D1:C7:9C:CA:26 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pur9KYokbPEoy90l64dX0cecyiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.37.0/24 178.253.229.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:89:97:9f:13:a8:ae:20:f9:ca:f8:59:42:70:cf:41:33:91: 0a:45:aa:aa:52:ab:30:db:a9:1d:f3:e7:10:46:33:da:09:d4: 3a:d3:59:b6:3c:7b:c8:c7:83:bc:05:6e:aa:a8:c2:5e:96:df: bd:84:be:79:5d:4a:b0:ac:46:72:04:eb:30:cc:d2:8c:f5:c5: d1:98:1d:8b:14:a6:5e:a6:9d:77:77:3d:f5:1b:53:d9:79:24: 3a:33:c2:13:ac:07:c3:f6:5f:ac:74:69:a0:8a:9d:31:f9:d8: e9:23:cd:ce:f0:df:e0:e6:a1:51:b3:23:f4:43:e9:a4:8c:53: e9:40:8a:1e:af:af:42:2d:3a:93:89:18:60:bf:30:13:e7:b8: 8f:56:2a:65:d2:d5:99:46:32:c2:e9:ff:4c:65:4a:e2:1c:d3: 15:6a:0b:e2:08:f2:37:09:31:ce:3e:a2:3d:5d:ad:12:71:db: c7:d7:0c:4a:5c:da:0f:fd:36:6c:93:80:15:0b:9c:85:b9:b5: f5:17:42:4a:64:df:9c:4f:6d:53:fc:07:27:52:3c:ba:cf:6b: e7:c9:b7:ac:7d:fb:28:bb:14:8e:c7:d5:32:ca:cc:d3:f8:01: 6d:dc:87:0f:f5:cb:cd:17:d7:ee:1c:c4:bf:5e:00:5d:45:fc: 99:f4:78:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuD2t8emBeNSQr8/ojMeS2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAzMTIzNTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWVhZmQyOThhMjQ2Y2YxMjhjYmRkMjVlYjg3NTdkMWM3OWNjYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaYrYLpjoMYze6eDGhozg+QORvX5 tcbDgP8S6sLJfPX7G2WRj+JBOGm1ZkVn3Wir0azQ/N5D8HsNwQPeynd7t31t2kVi z61uPD96mFk0A7q119+gHt9CABAG+l9Y7cMyCu2lMroft4TXQJEIR2VevGH1rc37 fkQVmthpiing9eSpNHD0OjR5nJPPmGrMdMEVuEb5r+zFo/OJxD7/ZHKM+E1ajmYO 8ZjcLlHAw5vOK+0zysnLmejrcYPJCSyldPhWFqrybQg5G4ft9ITejegPlfQ4xtVI SAgCUFAJQ88uNHuTAjnSzczQaekKmovQFYX1wHNGu7kHkajYmxCvWt/HTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD7q/SmKJGzxKMvdJeuHV9HHnMomMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvUHVyOUtZb2tiUEVveTkwbDY0ZFgwY2VjeWlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXklAwQA sv3lMA0GCSqGSIb3DQEBCwUAA4IBAQA6iZefE6iuIPnK+FlCcM9BM5EKRaqqUqsw 26kd8+cQRjPaCdQ601m2PHvIx4O8BW6qqMJelt+9hL55XUqwrEZyBOswzNKM9cXR mB2LFKZepp13dz31G1PZeSQ6M8ITrAfD9l+sdGmgip0x+djpI83O8N/g5qFRsyP0 Q+mkjFPpQIoer69CLTqTiRhgvzAT57iPVipl0tWZRjLC6f9MZUriHNMVagviCPI3 CTHOPqI9Xa0ScdvH1wxKXNoP/TZsk4AVC5yFubX1F0JKZN+cT21T/AcnUjy6z2vn ybesffsouxSOx9UyyszT+AFt3IcP9cvNF9fuHMS/XgBdRfyZ9HiJ -----END CERTIFICATE-----Generated at Sat Jan 10 22:50:51 2026 by rpki-client