This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/7yxoT95iFU73_iJozdOqdk1sseg.roa File: 7yxoT95iFU73_iJozdOqdk1sseg.roa (raw, json) Hash identifier: L0aa7PJFqA/c8959wjqUIfnGtCz7l54PcNOu3l8FJ7o= Subject key identifier: EF:2C:68:4F:DE:62:15:4E:F7:FE:22:68:CD:D3:AA:76:4D:6C:B1:E8 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6A406D58610C4D41B39E774C69047 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/7yxoT95iFU73_iJozdOqdk1sseg.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57707 IP address blocks: 109.248.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a4:06:d5:86:10:c4:d4:1b:39:e7:74:c6:90:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef2c684fde62154ef7fe2268cdd3aa764d6cb1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:ef:ea:56:1b:a2:bf:f1:c4:41:00:19:1a: fc:05:25:cd:02:27:65:b4:b4:e5:cd:bd:7e:e0:24: 03:d4:07:fa:41:a5:fd:9e:a7:84:c6:00:e0:75:35: 4d:f6:06:d2:a9:76:7b:27:47:62:26:89:92:6f:b3: d6:78:f0:ec:36:38:9a:ec:5e:0d:35:fd:39:0c:ab: dd:5d:d3:3f:e3:9c:87:60:12:2d:8b:d2:d5:3d:b3: 2e:18:e4:e9:f7:3f:f3:c4:90:20:45:c0:70:bf:14: 92:53:81:2c:5b:aa:0e:cc:4b:50:e4:ce:99:53:92: 29:08:5e:ba:49:1a:99:96:2e:4c:f1:52:0f:f0:91: 7f:22:33:66:e7:0c:f0:42:66:18:65:0c:32:4a:1a: 8f:cd:3d:7d:eb:44:31:5b:4b:eb:4f:1e:da:44:36: 47:8e:f0:ec:9e:8f:0d:96:35:d4:8a:f3:36:a5:a7: 8a:a1:07:db:5d:02:2b:e2:7f:4b:3d:ad:c3:35:93: 68:d0:1f:35:f8:3c:3f:68:3d:19:11:1b:24:bf:6c: 77:dd:ff:2b:ac:09:61:67:b5:b4:ba:8a:35:2e:48: b5:2d:df:64:26:73:bb:c7:b2:ce:2a:4b:fe:a6:9d: fd:83:ac:2b:11:02:24:85:d3:c2:93:a2:48:bf:a9: 6a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2C:68:4F:DE:62:15:4E:F7:FE:22:68:CD:D3:AA:76:4D:6C:B1:E8 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/7yxoT95iFU73_iJozdOqdk1sseg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.248.251.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:46:89:69:33:e2:12:a1:c9:da:e8:5d:f5:5f:fc:cf:78:08: 0f:7a:b6:af:c5:9b:f3:a0:0a:63:89:21:21:8a:b1:77:c9:e3: d2:45:c1:2e:4a:28:b4:50:b1:61:ea:fb:07:5d:d3:3d:ef:d8: 55:3b:21:11:a8:fb:ef:77:d6:40:8c:89:04:5c:c4:c7:a3:e1: 05:66:7b:b8:1e:36:f4:2a:a3:52:b6:1f:5c:f2:45:f4:5f:15: bc:c3:87:ac:04:5d:2f:c9:74:a5:90:6f:6c:d0:01:c7:1f:dc: 0e:f7:5a:0e:8c:97:9b:f1:b2:1b:1b:b2:de:41:76:e9:a9:c8: 6a:97:96:6d:90:7a:fd:82:dc:c8:5a:16:b2:d7:b1:f8:e3:5e: c0:79:ff:0f:da:3f:33:06:f0:b0:39:6a:4b:db:09:e4:26:c5: cb:7b:fa:db:49:45:c3:2f:33:8f:13:56:e6:bb:2e:43:f3:c8: d0:bd:28:78:6f:6f:43:29:58:a5:97:ef:f3:05:a9:d3:d1:c4: 22:6b:55:50:20:94:da:8c:c7:26:db:7c:b5:36:ed:5e:c1:cf: e2:7e:05:28:2f:37:84:23:85:a8:34:a9:4e:82:d9:0b:56:71: bf:22:74:e9:4f:51:d1:08:cf:8b:65:9e:2e:77:2e:fa:d2:b4: da:2c:de:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqQG1YYQxNQbOed0xpBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjJjNjg0ZmRlNjIxNTRlZjdmZTIyNjhjZGQzYWE3NjRkNmNiMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXnv6lYbor/xxEEAGRr8BSXNAidl tLTlzb1+4CQD1Af6QaX9nqeExgDgdTVN9gbSqXZ7J0diJomSb7PWePDsNjia7F4N Nf05DKvdXdM/45yHYBIti9LVPbMuGOTp9z/zxJAgRcBwvxSSU4EsW6oOzEtQ5M6Z U5IpCF66SRqZli5M8VIP8JF/IjNm5wzwQmYYZQwyShqPzT1960QxW0vrTx7aRDZH jvDsno8NljXUivM2paeKoQfbXQIr4n9LPa3DNZNo0B81+Dw/aD0ZERskv2x33f8r rAlhZ7W0uoo1Lki1Ld9kJnO7x7LOKkv+pp39g6wrEQIkhdPCk6JIv6lqGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO8saE/eYhVO9/4iaM3TqnZNbLHoMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvN3l4b1Q5NWlGVTczX2lKb3pkT3FkazFzc2VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbfj7MA0G CSqGSIb3DQEBCwUAA4IBAQAORolpM+ISocna6F31X/zPeAgPeravxZvzoApjiSEh irF3yePSRcEuSii0ULFh6vsHXdM979hVOyERqPvvd9ZAjIkEXMTHo+EFZnu4Hjb0 KqNSth9c8kX0XxW8w4esBF0vyXSlkG9s0AHHH9wO91oOjJeb8bIbG7LeQXbpqchq l5ZtkHr9gtzIWhay17H4417Aef8P2j8zBvCwOWpL2wnkJsXLe/rbSUXDLzOPE1bm uy5D88jQvSh4b29DKVill+/zBanT0cQia1VQIJTajMcm23y1Nu1ewc/ifgUoLzeE I4WoNKlOgtkLVnG/InTpT1HRCM+LZZ4udy760rTaLN7b -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:39 2026 by rpki-client