This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/x35GXwr827gx4hEnGJ2bRHcV9Vg.roa File: x35GXwr827gx4hEnGJ2bRHcV9Vg.roa (raw, json) Hash identifier: rqAS/oSCwYnjmTLBofIRlPP7AoMLq/VDZwvCpc5XP7U= Subject key identifier: C7:7E:46:5F:0A:FC:DB:B8:31:E2:11:27:18:9D:9B:44:77:15:F5:58 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EDF69C52AD1BC8583D2F52A82610A Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/x35GXwr827gx4hEnGJ2bRHcV9Vg.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 109.121.36.0/24 maxlen: 24 109.121.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:df:69:c5:2a:d1:bc:85:83:d2:f5:2a:82:61:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c77e465f0afcdbb831e21127189d9b447715f558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:de:54:15:8f:a6:ed:62:86:2f:31:e1:31: 7f:83:4d:46:f8:de:3f:30:1a:64:42:42:a0:91:83: 97:a5:34:76:b8:64:50:cd:50:4a:da:84:42:c5:a6: b3:b1:2d:c7:ee:8e:e1:8f:54:19:10:e1:b5:ee:69: d9:36:3f:75:23:65:cc:9d:c7:98:71:77:b4:44:96: 5c:bf:28:3d:8e:94:cb:97:15:2f:24:df:7c:94:80: c2:43:78:27:70:58:2e:d9:3b:fd:39:15:5e:ed:a0: 61:8e:d9:5d:c4:db:aa:87:6c:19:0b:8c:8d:14:4c: 93:f7:9c:0b:b9:76:69:a8:9d:bc:f2:48:21:91:01: 89:ba:b4:6c:41:1f:59:27:b6:b3:55:ad:ed:01:2e: aa:11:44:c3:0f:52:a7:5b:91:6e:00:aa:59:db:b7: d2:e8:cf:47:d5:98:05:b8:dc:1e:bb:7e:41:3e:b5: 75:b6:f3:18:21:1d:14:64:0f:55:8e:98:ad:0d:08: 60:c8:0b:9d:1e:09:2c:6a:fa:3b:a7:38:31:bc:4e: 2b:2c:c8:0e:d9:f6:37:a6:9b:fc:6c:df:5e:d0:f1: b6:c6:53:ad:1f:77:4f:bd:c1:73:30:8d:88:7d:38: 2e:38:7f:88:20:07:92:67:a7:0a:af:cd:11:3d:1f: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7E:46:5F:0A:FC:DB:B8:31:E2:11:27:18:9D:9B:44:77:15:F5:58 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/x35GXwr827gx4hEnGJ2bRHcV9Vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.36.0/24 109.121.38.0/24 Signature Algorithm: sha256WithRSAEncryption 37:4a:1c:a5:6b:8f:04:9b:9e:66:3e:b7:96:58:69:41:e6:45: b0:c1:d3:6f:dd:fc:ae:b9:8c:d8:f2:a6:e7:00:7b:45:e6:08: 8b:d2:56:d4:fe:96:98:77:b2:11:4b:13:d1:48:5d:3f:ce:57: a2:b6:7b:5c:4d:fa:ea:ba:37:97:ea:dc:b0:01:94:1e:e1:f5: e8:c6:37:30:46:ee:ba:ed:63:0a:b4:ee:a5:ac:8e:4a:33:72: 9c:b4:b7:fa:4a:4f:a5:7b:ea:1d:64:72:26:a2:07:bb:29:da: 10:af:59:ea:a3:0a:64:90:aa:8c:0c:1a:fb:3c:01:cb:51:22: 0f:50:92:11:04:cc:fb:e8:0a:c9:9c:a5:bb:7e:43:a7:68:3b: d8:5d:12:85:d6:81:1a:1b:b9:2f:af:74:8c:99:31:a8:00:94: 20:0d:29:35:59:a2:ca:28:74:2c:29:40:26:aa:f5:ea:2b:62: 97:bb:5e:aa:87:61:71:1c:33:2c:2e:fe:56:47:90:b1:e4:ee: df:27:95:8c:b2:2e:0e:fd:ff:33:a1:15:bc:a3:f9:17:d8:ca: 69:32:77:33:ad:69:0d:b8:4c:8e:47:11:75:56:6d:27:63:67: e8:f4:12:dd:c4:24:ef:a0:9b:29:e3:11:53:ad:dd:da:75:d0: 26:21:94:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ft9pxSrRvIWD0vUqgmEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzdlNDY1ZjBhZmNkYmI4MzFlMjExMjcxODlkOWI0NDc3MTVmNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXneVBWPpu1ihi8x4TF/g01G+N4/ MBpkQkKgkYOXpTR2uGRQzVBK2oRCxaazsS3H7o7hj1QZEOG17mnZNj91I2XMnceY cXe0RJZcvyg9jpTLlxUvJN98lIDCQ3gncFgu2Tv9ORVe7aBhjtldxNuqh2wZC4yN FEyT95wLuXZpqJ288kghkQGJurRsQR9ZJ7azVa3tAS6qEUTDD1KnW5FuAKpZ27fS 6M9H1ZgFuNweu35BPrV1tvMYIR0UZA9VjpitDQhgyAudHgksavo7pzgxvE4rLMgO 2fY3ppv8bN9e0PG2xlOtH3dPvcFzMI2IfTguOH+IIAeSZ6cKr80RPR8PSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMd+Rl8K/Nu4MeIRJxidm0R3FfVYMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEveDM1R1h3cjgyN2d4NGhFbkdKMmJSSGNWOVZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXkkAwQA bXkmMA0GCSqGSIb3DQEBCwUAA4IBAQA3Shyla48Em55mPreWWGlB5kWwwdNv3fyu uYzY8qbnAHtF5giL0lbU/paYd7IRSxPRSF0/zleitntcTfrqujeX6tywAZQe4fXo xjcwRu667WMKtO6lrI5KM3KctLf6Sk+le+odZHImoge7KdoQr1nqowpkkKqMDBr7 PAHLUSIPUJIRBMz76ArJnKW7fkOnaDvYXRKF1oEaG7kvr3SMmTGoAJQgDSk1WaLK KHQsKUAmqvXqK2KXu16qh2FxHDMsLv5WR5Cx5O7fJ5WMsi4O/f8zoRW8o/kX2Mpp MnczrWkNuEyORxF1Vm0nY2fo9BLdxCTvoJsp4xFTrd3addAmIZSz -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:15 2026 by rpki-client