This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WsZbmoCTYVN3fglbJzb-5cl3SFQ.roa File: WsZbmoCTYVN3fglbJzb-5cl3SFQ.roa (raw, json) Hash identifier: jhgzGo4DLPJNgOly2sbxcPWf8Gv3Z/fIzUlFRBksM+w= Subject key identifier: 5A:C6:5B:9A:80:93:61:53:77:7E:09:5B:27:36:FE:E5:C9:77:48:54 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ECBA00D234FB6138AD24F26D0660C Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WsZbmoCTYVN3fglbJzb-5cl3SFQ.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 109.121.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cb:a0:0d:23:4f:b6:13:8a:d2:4f:26:d0:66:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ac65b9a80936153777e095b2736fee5c9774854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:66:f5:a9:03:33:25:28:0b:a0:1c:ff:98: 8a:3f:4a:75:c4:97:1e:e7:41:c3:a2:82:1d:63:c9: e9:68:ff:f9:e2:58:d0:f8:c1:ba:24:19:4f:e5:d1: 2d:83:a7:3c:5d:66:7f:3c:b1:c7:b7:81:40:2d:72: c6:05:b8:5a:23:28:b2:25:21:5c:83:d3:3c:b2:7e: 80:f2:45:2e:c4:fb:7e:d8:a3:94:9b:ca:01:72:66: fd:7e:02:2a:23:e2:ad:a6:bd:d6:ea:55:38:1b:6f: 38:3f:fa:c1:cd:7a:c5:4d:9b:28:14:05:6a:0d:ec: bd:f4:74:f1:9a:13:db:a2:de:ef:31:7a:1f:ea:05: b2:cc:af:28:e5:9d:2d:6f:f5:6e:92:f6:c1:dc:d2: bc:a6:96:91:22:53:0c:30:64:44:61:7d:d4:ba:8c: a6:f2:e4:2e:0a:e2:31:c1:8d:e8:14:18:af:ad:d8: e4:f3:39:b4:af:bc:06:8b:f0:3f:99:24:be:30:67: ba:ae:85:8d:7c:82:3f:9e:97:6c:d2:76:85:6e:fa: 72:bd:a6:d4:d1:df:9c:40:54:e9:a9:69:02:7f:dc: 17:bf:bf:31:c1:89:8e:92:bd:62:51:d2:33:57:45: a9:d3:49:60:14:ad:bb:44:35:50:99:45:88:4c:8d: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C6:5B:9A:80:93:61:53:77:7E:09:5B:27:36:FE:E5:C9:77:48:54 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WsZbmoCTYVN3fglbJzb-5cl3SFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.44.0/24 Signature Algorithm: sha256WithRSAEncryption 38:0a:7c:5c:c2:07:e9:ed:9a:39:37:7e:07:c2:e9:ce:ac:49: 71:9f:7d:fe:e1:c0:56:a5:a6:ca:85:02:e8:77:90:b9:f5:7a: a6:58:14:35:1d:c4:f2:2a:a3:e1:2f:df:27:10:b0:ab:4c:4f: 63:e4:14:2b:d2:ed:e0:9c:28:84:5f:45:97:b4:5e:73:18:44: 34:bd:7b:36:d6:14:5d:85:0a:3d:da:99:86:e0:00:11:8a:ee: 88:79:5b:06:94:7e:d3:d5:8c:50:86:87:4c:1a:ad:d5:29:dd: dd:37:a4:5a:ee:02:d7:5e:08:91:7f:13:7d:b2:33:9f:5f:6e: 26:1d:0b:9a:83:17:eb:70:e0:a7:8c:82:a9:3d:c0:1f:53:3f: d4:cb:a8:52:cf:f0:a6:89:25:ee:7e:72:39:e0:f8:fb:a1:59: a8:ae:5c:ea:47:f2:c6:08:ab:59:d1:44:2b:d7:32:24:ba:a6: 56:cb:64:d2:3b:d3:0e:3b:fa:65:d2:75:0b:0e:28:46:37:c3: 75:8c:1b:c7:b0:ee:5a:d9:d6:94:82:81:59:92:ca:6a:83:6d: 1e:7a:02:d1:49:8d:fc:63:22:54:b4:cc:c5:1e:6c:44:ad:9c: e7:a6:a3:99:56:c3:44:a2:e0:bb:b2:82:47:de:7c:7f:cf:e5: a8:fe:4b:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsugDSNPthOK0k8m0GYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWM2NWI5YTgwOTM2MTUzNzc3ZTA5NWIyNzM2ZmVlNWM5Nzc0ODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNhm9akDMyUoC6Ac/5iKP0p1xJce 50HDooIdY8npaP/54ljQ+MG6JBlP5dEtg6c8XWZ/PLHHt4FALXLGBbhaIyiyJSFc g9M8sn6A8kUuxPt+2KOUm8oBcmb9fgIqI+Ktpr3W6lU4G284P/rBzXrFTZsoFAVq Dey99HTxmhPbot7vMXof6gWyzK8o5Z0tb/VukvbB3NK8ppaRIlMMMGREYX3Uuoym 8uQuCuIxwY3oFBivrdjk8zm0r7wGi/A/mSS+MGe6roWNfII/npds0naFbvpyvabU 0d+cQFTpqWkCf9wXv78xwYmOkr1iUdIzV0Wp00lgFK27RDVQmUWITI3A4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrGW5qAk2FTd34JWyc2/uXJd0hUMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvV3NaYm1vQ1RZVk4zZmdsYkp6Yi01Y2wzU0ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXksMA0G CSqGSIb3DQEBCwUAA4IBAQA4Cnxcwgfp7Zo5N34HwunOrElxn33+4cBWpabKhQLo d5C59XqmWBQ1HcTyKqPhL98nELCrTE9j5BQr0u3gnCiEX0WXtF5zGEQ0vXs21hRd hQo92pmG4AARiu6IeVsGlH7T1YxQhodMGq3VKd3dN6Ra7gLXXgiRfxN9sjOfX24m HQuagxfrcOCnjIKpPcAfUz/Uy6hSz/CmiSXufnI54Pj7oVmorlzqR/LGCKtZ0UQr 1zIkuqZWy2TSO9MOO/pl0nULDihGN8N1jBvHsO5a2daUgoFZkspqg20eegLRSY38 YyJUtMzFHmxErZznpqOZVsNEouC7soJH3nx/z+Wo/kuP -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:03 2026 by rpki-client