This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/35BWjWX3vl_Eu9j6Ng4YXL8Zd8E.roa File: 35BWjWX3vl_Eu9j6Ng4YXL8Zd8E.roa (raw, json) Hash identifier: hhtBCCALaEtAzuv9wR2gDDrGfwiivcRLiNBhN0vQ31g= Subject key identifier: DF:90:56:8D:65:F7:BE:5F:C4:BB:D8:FA:36:0E:18:5C:BF:19:77:C1 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D2C90DB6FC73702BAF71206F9F044 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/35BWjWX3vl_Eu9j6Ng4YXL8Zd8E.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210734 IP address blocks: 109.61.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2c:90:db:6f:c7:37:02:ba:f7:12:06:f9:f0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df90568d65f7be5fc4bbd8fa360e185cbf1977c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c1:96:ef:8d:99:5b:f9:09:b7:de:04:c4:60: 78:7d:f1:b2:86:fb:5c:ed:d1:ec:40:0a:cd:e5:0a: 1c:78:02:eb:9d:63:4e:33:c6:c8:b5:65:0a:cb:2a: 0a:41:bd:1e:94:d8:d5:56:28:11:a6:df:36:04:9d: b0:3d:38:13:29:9b:72:0f:3c:ee:57:c4:e4:b0:1e: dc:2b:e3:c8:d1:4f:8c:42:b4:cd:40:67:59:6c:ca: 33:1e:58:92:8e:32:5e:fa:cc:19:31:0d:30:18:e4: ff:16:de:4c:a8:82:9a:b3:bd:11:09:6a:30:7a:78: 77:f4:23:df:4d:b3:63:ad:b9:ad:a9:8d:18:b2:0f: fd:05:66:25:8b:f6:0d:61:9e:19:88:86:7c:4f:10: 23:47:eb:1a:7c:78:64:45:64:54:06:64:3b:1b:46: 01:b6:58:56:22:29:7f:81:da:83:66:45:34:ea:19: 25:cd:84:bb:10:e5:8d:a9:00:c8:4a:76:52:86:47: d1:a4:a5:a7:25:40:65:55:2a:fa:c2:1c:09:b2:6f: 0f:2e:a6:0c:6c:58:e6:c2:39:30:a3:6c:de:b9:72: 54:d8:8a:74:f8:07:e5:01:24:9c:c6:71:0b:d0:3e: f7:24:3c:da:e5:8e:9a:b1:03:7a:4d:36:02:a9:35: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:90:56:8D:65:F7:BE:5F:C4:BB:D8:FA:36:0E:18:5C:BF:19:77:C1 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/35BWjWX3vl_Eu9j6Ng4YXL8Zd8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.61.111.0/24 Signature Algorithm: sha256WithRSAEncryption 32:57:6d:1b:07:f1:32:e3:9b:a3:90:48:5c:9d:a1:dc:b9:90: 16:e3:46:36:30:2f:c2:52:c3:2d:80:15:71:1e:5d:8a:10:66: 2b:67:bb:27:c8:12:ba:bf:5e:61:9b:54:70:d0:54:8c:8b:16: 40:44:4b:b3:b1:8f:63:c9:9c:26:59:0c:db:22:3b:8a:04:92: 59:54:c3:bc:9a:14:e7:b2:16:38:45:e1:a3:55:c9:f0:63:83: 03:e9:c8:22:f6:b2:66:b8:77:cc:d9:d3:41:66:10:9d:ff:00: 10:6e:c0:d1:6e:d3:29:cd:a6:39:66:c9:73:7d:cd:e3:ce:72: 26:38:14:59:34:b5:d7:d6:ec:0b:3a:32:0b:90:41:0d:e1:c0: 3b:4c:cd:02:24:29:93:a7:d4:61:5c:3f:d4:17:87:1d:83:21: 66:36:eb:49:0e:88:06:5a:5e:c3:d2:1f:8e:8c:c2:be:43:ca: 94:6d:2c:a8:cb:c2:a4:d9:1f:c9:5b:51:fd:f2:26:b0:d2:b3: 4f:9c:53:9f:24:4f:e7:78:e6:42:f1:b7:39:27:b1:fa:94:71: d5:3b:a1:24:72:dc:be:ea:90:31:06:9b:e1:35:97:92:08:ae: b5:2b:ea:2d:d7:7f:99:38:94:20:3e:cf:c8:8b:46:f9:c1:0d: a2:31:97:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XSyQ22/HNwK69xIG+fBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjkwNTY4ZDY1ZjdiZTVmYzRiYmQ4ZmEzNjBlMTg1Y2JmMTk3N2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cGW742ZW/kJt94ExGB4ffGyhvtc 7dHsQArN5QoceALrnWNOM8bItWUKyyoKQb0elNjVVigRpt82BJ2wPTgTKZtyDzzu V8TksB7cK+PI0U+MQrTNQGdZbMozHliSjjJe+swZMQ0wGOT/Ft5MqIKas70RCWow enh39CPfTbNjrbmtqY0Ysg/9BWYli/YNYZ4ZiIZ8TxAjR+safHhkRWRUBmQ7G0YB tlhWIil/gdqDZkU06hklzYS7EOWNqQDISnZShkfRpKWnJUBlVSr6whwJsm8PLqYM bFjmwjkwo2zeuXJU2Ip0+AflASScxnEL0D73JDza5Y6asQN6TTYCqTU2UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+QVo1l975fxLvY+jYOGFy/GXfBMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMzVCV2pXWDN2bF9FdTlqNk5nNFlYTDhaZDhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbT1vMA0G CSqGSIb3DQEBCwUAA4IBAQAyV20bB/Ey45ujkEhcnaHcuZAW40Y2MC/CUsMtgBVx Hl2KEGYrZ7snyBK6v15hm1Rw0FSMixZAREuzsY9jyZwmWQzbIjuKBJJZVMO8mhTn shY4ReGjVcnwY4MD6cgi9rJmuHfM2dNBZhCd/wAQbsDRbtMpzaY5Zslzfc3jznIm OBRZNLXX1uwLOjILkEEN4cA7TM0CJCmTp9RhXD/UF4cdgyFmNutJDogGWl7D0h+O jMK+Q8qUbSyoy8Kk2R/JW1H98iaw0rNPnFOfJE/neOZC8bc5J7H6lHHVO6Ekcty+ 6pAxBpvhNZeSCK61K+ot13+ZOJQgPs/Ii0b5wQ2iMZf8 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:45 2026 by rpki-client