This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/dF60gNxJ2QPY3EXvQkLYP_IBJSc.roa File: dF60gNxJ2QPY3EXvQkLYP_IBJSc.roa (raw, json) Hash identifier: g+O/e3lWRvleCYWz2eHHiyieddwKXAutlY0MdSidsx4= Subject key identifier: 74:5E:B4:80:DC:49:D9:03:D8:DC:45:EF:42:42:D8:3F:F2:01:25:27 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EBFC5A2E694CFDDD34BE205DF6921 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/dF60gNxJ2QPY3EXvQkLYP_IBJSc.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20001 IP address blocks: 109.121.40.0/24 maxlen: 24 109.121.43.0/24 maxlen: 24 109.233.184.0/24 maxlen: 24 109.233.185.0/24 maxlen: 24 178.253.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bf:c5:a2:e6:94:cf:dd:d3:4b:e2:05:df:69:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=745eb480dc49d903d8dc45ef4242d83ff2012527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:a2:22:af:b3:1d:53:1a:33:29:6f:18:d6: 79:9b:20:e8:f9:6d:f8:10:50:21:88:2b:b2:14:0e: 4e:e6:a6:5a:63:d8:34:d7:de:7f:9b:3b:55:08:fa: 0f:b6:c4:6b:27:8f:8a:30:89:89:cf:eb:bc:1b:46: 6b:21:08:37:e7:78:0e:49:02:1a:eb:66:c4:26:1a: 09:c2:bc:5e:0a:0f:06:85:9b:e4:54:02:f6:74:15: fb:e8:c4:1e:b4:78:17:20:25:ea:34:be:d5:eb:4b: ac:68:24:f8:f6:1a:91:e3:d5:80:c0:a0:af:0b:5b: 2f:39:dc:db:27:f6:cc:1d:0a:73:72:ee:d3:cd:a8: 98:16:91:b3:30:aa:41:f0:a3:a8:b5:8e:3a:8c:ac: d2:25:94:77:86:72:6b:d6:a2:ce:9a:d1:1d:fe:9b: b9:90:57:eb:7a:7f:f8:5d:af:3d:8b:d3:3e:de:6c: 1d:bd:70:ff:28:38:ac:7b:ff:b3:94:4e:aa:b8:cd: 71:10:01:33:1c:34:50:c1:07:db:6c:4f:9b:68:94: cf:cc:ca:dd:d1:4a:44:69:6d:a6:29:1c:dd:e7:3d: 36:8f:92:40:a7:bc:08:15:9e:bb:b6:35:f9:d6:f4: e7:89:86:42:b2:ef:3a:62:d4:db:ef:8b:3f:11:4e: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5E:B4:80:DC:49:D9:03:D8:DC:45:EF:42:42:D8:3F:F2:01:25:27 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/dF60gNxJ2QPY3EXvQkLYP_IBJSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.40.0/24 109.121.43.0/24 109.233.184.0/23 178.253.237.0/24 Signature Algorithm: sha256WithRSAEncryption 41:4b:a7:cf:aa:71:47:4d:b9:84:e5:98:c2:e0:a1:ca:03:fd: 89:53:13:be:c3:8f:d5:29:c3:d3:34:dd:00:d3:2f:3d:7f:91: b3:21:a7:b3:6c:3c:cf:f4:a6:1c:89:ae:f1:f5:64:1f:b4:bb: ee:52:94:01:81:7c:a6:ea:18:e5:f7:77:27:a8:ee:03:0a:37: 7d:f2:19:92:60:1c:5e:77:6f:26:ab:15:d5:e9:99:33:99:e8: f2:51:8e:a4:41:19:6b:4d:88:94:6d:7f:b4:2c:9b:19:33:4e: a4:c6:73:7c:4b:22:0c:65:f1:fa:b4:b9:05:f4:fb:e7:c4:07: e6:66:51:dd:87:95:ef:31:5b:92:a4:de:01:5e:9e:ff:58:19: 92:06:8d:dc:b0:82:90:4c:22:9d:ed:4f:6f:1b:fa:9a:43:de: fd:52:c2:a0:03:41:e1:8b:12:5b:8f:bd:64:be:6c:cf:d4:cb: 1e:bd:bf:82:64:25:aa:fb:3a:f0:16:82:c2:b0:62:93:8b:23: f6:66:7a:05:f4:5d:a7:7a:68:6f:f6:e0:d4:11:d2:65:95:89: 1e:45:59:d7:a8:4a:2f:f3:cf:c5:57:ce:b8:b5:66:00:f5:18: 5f:a4:3f:f8:f2:63:ab:e3:b7:32:7c:03:37:9b:68:ce:e5:35: 73:3f:35:db -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5fr/FouaUz93TS+IF32khMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDVlYjQ4MGRjNDlkOTAzZDhkYzQ1ZWY0MjQyZDgzZmYyMDEyNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1WiIq+zHVMaMylvGNZ5myDo+W34 EFAhiCuyFA5O5qZaY9g0195/mztVCPoPtsRrJ4+KMImJz+u8G0ZrIQg353gOSQIa 62bEJhoJwrxeCg8GhZvkVAL2dBX76MQetHgXICXqNL7V60usaCT49hqR49WAwKCv C1svOdzbJ/bMHQpzcu7TzaiYFpGzMKpB8KOotY46jKzSJZR3hnJr1qLOmtEd/pu5 kFfren/4Xa89i9M+3mwdvXD/KDise/+zlE6quM1xEAEzHDRQwQfbbE+baJTPzMrd 0UpEaW2mKRzd5z02j5JAp7wIFZ67tjX51vTniYZCsu86YtTb74s/EU7IkwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHRetIDcSdkD2NxF70JC2D/yASUnMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvZEY2MGdOeEoyUVBZM0VYdlFrTFlQX0lCSlNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAbXkoAwQA bXkrAwQBbem4AwQAsv3tMA0GCSqGSIb3DQEBCwUAA4IBAQBBS6fPqnFHTbmE5ZjC 4KHKA/2JUxO+w4/VKcPTNN0A0y89f5GzIaezbDzP9KYcia7x9WQftLvuUpQBgXym 6hjl93cnqO4DCjd98hmSYBxed28mqxXV6ZkzmejyUY6kQRlrTYiUbX+0LJsZM06k xnN8SyIMZfH6tLkF9PvnxAfmZlHdh5XvMVuSpN4BXp7/WBmSBo3csIKQTCKd7U9v G/qaQ979UsKgA0HhixJbj71kvmzP1Msevb+CZCWq+zrwFoLCsGKTiyP2ZnoF9F2n emhv9uDUEdJllYkeRVnXqEov88/FV864tWYA9RhfpD/48mOr47cyfAM3m2jO5TVz PzXb -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:34 2026 by rpki-client