This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oB7FjIwS3AZibNmzkFu0lwGJfsY.roa File: oB7FjIwS3AZibNmzkFu0lwGJfsY.roa (raw, json) Hash identifier: QcrgEvl1bZLNexVLp96i6V/lzl3zk2SPQhTrXRM81/Q= Subject key identifier: A0:1E:C5:8C:8C:12:DC:06:62:6C:D9:B3:90:5B:B4:97:01:89:7E:C6 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ECFDE48516251A657D3BAECE1D9EB Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oB7FjIwS3AZibNmzkFu0lwGJfsY.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135402 IP address blocks: 109.121.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cf:de:48:51:62:51:a6:57:d3:ba:ec:e1:d9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a01ec58c8c12dc06626cd9b3905bb49701897ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:70:38:06:fc:bf:9f:be:db:8c:a8:7b:c8: 3c:60:58:81:b6:fb:96:2b:2e:d1:2c:51:40:72:4e: 88:4d:8c:0b:18:0a:77:ff:6c:18:7d:98:d9:fa:10: 99:b9:10:41:5d:80:ec:84:7b:54:4d:bf:5b:18:2a: cb:f6:4b:74:bd:3c:31:fc:07:8f:10:25:66:49:93: bd:95:90:ae:25:54:ae:09:29:b9:f4:96:50:b9:83: c6:b9:fb:c7:52:b8:d3:46:a2:2d:3c:e6:eb:bd:a5: 46:49:8a:6c:06:2b:a6:ae:96:76:e1:c4:f9:a5:38: ff:dc:ee:41:a5:34:39:a9:a7:2d:f3:c6:78:0c:05: 07:3e:56:ad:07:23:c1:33:17:a2:df:07:c3:47:b8: 5f:bb:b3:89:3d:96:95:80:33:4f:16:bb:61:b9:7b: 40:c9:c3:50:db:27:6d:37:08:ac:5b:33:d2:aa:b6: bf:2c:89:56:9f:5c:47:9f:e5:d9:37:1f:d7:9b:e4: e1:8e:73:f8:85:88:e2:02:92:67:fa:cb:99:60:59: 7c:3f:92:60:34:4c:c0:28:8b:82:67:1f:ec:c7:0c: 9a:2e:5d:e9:18:0a:48:e9:71:2a:05:d9:db:38:6d: 20:dc:b1:b5:1a:dd:91:f5:92:c3:de:fb:65:04:36: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1E:C5:8C:8C:12:DC:06:62:6C:D9:B3:90:5B:B4:97:01:89:7E:C6 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oB7FjIwS3AZibNmzkFu0lwGJfsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.47.0/24 Signature Algorithm: sha256WithRSAEncryption 93:99:8a:d1:72:a6:e0:ae:96:23:8d:7a:8a:c6:84:d9:bb:70: fa:75:3c:05:6f:ef:0f:d3:e5:93:67:ec:ad:ad:20:d3:eb:66: c3:70:8d:c5:36:62:57:d1:57:3e:d2:91:d1:dd:ab:b8:b3:90: 0a:c4:cd:b5:f8:a2:d9:dd:fb:37:3b:78:29:78:f9:5c:34:f4: 13:3f:3b:c9:19:c1:98:58:13:3c:7b:f9:df:ae:94:9e:c9:9d: 23:ad:c2:77:22:80:42:0f:fc:03:00:40:ac:72:e3:aa:97:eb: ce:7a:8c:e8:04:35:57:14:a1:70:2e:11:35:e8:bc:00:0a:b7: 71:35:38:17:2e:ed:2d:2c:06:e6:9c:c6:a0:d1:6e:b1:9d:75: eb:13:77:80:74:b1:3c:86:a2:da:da:43:56:81:bc:07:d6:5f: 7b:72:9a:8f:de:43:49:e4:50:89:8c:51:6f:3e:e9:ef:41:6e: eb:cf:bd:c9:4f:ad:dd:d8:94:3f:ee:b8:b4:ad:c7:09:0b:87: 18:a6:30:8c:bd:db:15:61:67:b0:c3:e6:55:69:2e:d9:6b:5e: 17:5c:82:04:e1:63:8a:3d:8a:24:ec:dd:d1:4c:59:98:e7:8a: 5a:3e:68:1b:6a:78:82:92:98:11:9a:2f:15:d1:3e:4f:6d:34: bc:78:9b:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fs/eSFFiUaZX07rs4dnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDFlYzU4YzhjMTJkYzA2NjI2Y2Q5YjM5MDViYjQ5NzAxODk3ZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvRwOAb8v5++24yoe8g8YFiBtvuW Ky7RLFFAck6ITYwLGAp3/2wYfZjZ+hCZuRBBXYDshHtUTb9bGCrL9kt0vTwx/AeP ECVmSZO9lZCuJVSuCSm59JZQuYPGufvHUrjTRqItPObrvaVGSYpsBiumrpZ24cT5 pTj/3O5BpTQ5qact88Z4DAUHPlatByPBMxei3wfDR7hfu7OJPZaVgDNPFrthuXtA ycNQ2ydtNwisWzPSqra/LIlWn1xHn+XZNx/Xm+ThjnP4hYjiApJn+suZYFl8P5Jg NEzAKIuCZx/sxwyaLl3pGApI6XEqBdnbOG0g3LG1Gt2R9ZLD3vtlBDa+dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKAexYyMEtwGYmzZs5BbtJcBiX7GMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvb0I3RmpJd1MzQVppYk5temtGdTBsd0dKZnNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXkvMA0G CSqGSIb3DQEBCwUAA4IBAQCTmYrRcqbgrpYjjXqKxoTZu3D6dTwFb+8P0+WTZ+yt rSDT62bDcI3FNmJX0Vc+0pHR3au4s5AKxM21+KLZ3fs3O3gpePlcNPQTPzvJGcGY WBM8e/nfrpSeyZ0jrcJ3IoBCD/wDAECscuOql+vOeozoBDVXFKFwLhE16LwACrdx NTgXLu0tLAbmnMag0W6xnXXrE3eAdLE8hqLa2kNWgbwH1l97cpqP3kNJ5FCJjFFv PunvQW7rz73JT63d2JQ/7ri0rccJC4cYpjCMvdsVYWeww+ZVaS7Za14XXIIE4WOK PYok7N3RTFmY54paPmgbaniCkpgRmi8V0T5PbTS8eJts -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:02 2026 by rpki-client