This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/1u7uPOJVNOfZO80PuY7EGiYITc0.roa File: 1u7uPOJVNOfZO80PuY7EGiYITc0.roa (raw, json) Hash identifier: 12CXkEDFsvax5AmWCubdi36wmAfodfTZYpwZtM28y3A= Subject key identifier: D6:EE:EE:3C:E2:55:34:E7:D9:3B:CD:0F:B9:8E:C4:1A:26:08:4D:CD Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B04385610F0A83E9A1732BF8C3B763DB8 Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/1u7uPOJVNOfZO80PuY7EGiYITc0.roa Signing time: Tue 09 Dec 2025 17:45:59 +0000 ROA not before: Tue 09 Dec 2025 17:45:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216139 IP address blocks: 109.120.141.0/24 maxlen: 24 109.120.154.0/24 maxlen: 24 176.98.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:38:56:10:f0:a8:3e:9a:17:32:bf:8c:3b:76:3d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Dec 9 17:45:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d6eeee3ce25534e7d93bcd0fb98ec41a26084dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7c:a2:53:10:0c:84:91:dd:c6:5b:ec:d4:8f: 60:c1:bc:1d:75:f3:01:f6:52:71:39:84:11:ed:26: d6:65:d3:c5:5f:df:a1:75:16:b5:f9:6b:20:70:d1: f6:90:f2:2f:70:87:f4:86:5d:d1:8c:df:25:03:83: 1b:6f:43:ce:20:28:55:71:c0:08:b1:f4:19:fb:5b: a0:29:d4:54:e5:c9:37:bb:ad:4e:21:bc:9e:00:a2: bd:65:42:35:93:3a:37:29:f6:73:8b:bc:a6:fa:f6: 4c:68:ec:2e:76:a5:91:f8:bd:eb:da:c6:f1:56:4a: f3:d5:31:df:f8:d9:df:6c:4e:69:66:01:d9:06:69: 5e:a8:5b:bc:43:5e:56:d1:2a:57:c6:dd:4d:fc:c9: 07:40:e6:e1:33:52:16:81:b1:9e:6a:01:65:bf:c4: 05:f3:d4:8c:3e:76:55:11:cb:1e:ee:cd:8b:6c:00: a9:7f:2f:21:86:6e:34:a1:d0:31:df:f9:47:8e:fa: 0c:d1:a6:14:11:67:ba:de:12:4d:d5:4b:a1:40:df: db:7f:1e:dc:e3:0c:8b:21:83:a7:d4:a9:a1:c3:0b: ef:b2:6b:04:a7:ec:e3:9b:e6:60:60:2b:cc:3a:9d: 4d:05:3c:1c:a4:df:fc:fe:cf:de:d8:4e:aa:35:3c: e2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EE:EE:3C:E2:55:34:E7:D9:3B:CD:0F:B9:8E:C4:1A:26:08:4D:CD X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/1u7uPOJVNOfZO80PuY7EGiYITc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.120.141.0/24 109.120.154.0/24 176.98.184.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:35:11:16:f6:e8:51:a7:dd:b4:19:2d:00:cb:31:6c:44:c0: 14:2b:f5:1b:38:de:62:6d:bf:86:63:9b:dd:86:ff:e7:08:8e: 14:9b:81:fd:cb:39:8c:b8:9c:8d:49:7e:97:c5:f8:10:eb:6d: b3:21:fb:fd:d9:53:88:27:62:bd:15:98:81:8b:6b:32:2f:ba: 35:14:b2:e0:37:3c:98:44:53:5d:2b:07:24:73:34:3e:2b:49: 37:da:fd:b8:9b:e5:b3:00:fb:03:54:70:67:70:0a:ef:53:b8: 99:59:29:cd:5b:4c:c2:71:26:ce:a9:a7:b6:b4:5f:65:8c:51: 9c:7d:32:fe:19:73:4d:8e:79:35:0b:e6:90:ac:87:73:fd:10: a3:6c:42:4e:e1:66:52:4b:7b:b8:2e:ee:ca:16:70:b0:83:65: 53:98:e3:02:ec:48:79:9c:e0:9c:b4:58:67:83:4b:42:3f:52: b9:f3:14:61:92:a5:a4:bb:60:f7:3a:ee:4e:97:19:b7:b0:7d: 96:8e:3a:3d:8f:ab:66:db:4a:d3:b5:29:26:53:23:08:9b:28: 43:d7:85:d5:38:66:2f:79:72:8a:da:41:ca:84:4a:0c:51:9e: b8:fe:8e:8e:8a:23:59:8b:2d:bb:11:23:93:27:6b:d9:e9:67: b9:2d:a1:e5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsEOFYQ8Kg+mhcyv4w7dj24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjUxMjA5MTc0NTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmVlZWUzY2UyNTUzNGU3ZDkzYmNkMGZiOThlYzQxYTI2MDg0ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43yiUxAMhJHdxlvs1I9gwbwddfMB 9lJxOYQR7SbWZdPFX9+hdRa1+WsgcNH2kPIvcIf0hl3RjN8lA4Mbb0POIChVccAI sfQZ+1ugKdRU5ck3u61OIbyeAKK9ZUI1kzo3KfZzi7ym+vZMaOwudqWR+L3r2sbx Vkrz1THf+NnfbE5pZgHZBmleqFu8Q15W0SpXxt1N/MkHQObhM1IWgbGeagFlv8QF 89SMPnZVEcse7s2LbACpfy8hhm40odAx3/lHjvoM0aYUEWe63hJN1UuhQN/bfx7c 4wyLIYOn1KmhwwvvsmsEp+zjm+ZgYCvMOp1NBTwcpN/8/s/e2E6qNTzi0QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNbu7jziVTTn2TvND7mOxBomCE3NMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvMXU3dVBPSlZOT2ZaTzgwUHVZN0VHaVlJVGMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXiNAwQA bXiaAwQAsGK4MA0GCSqGSIb3DQEBCwUAA4IBAQCMNREW9uhRp920GS0AyzFsRMAU K/UbON5ibb+GY5vdhv/nCI4Um4H9yzmMuJyNSX6XxfgQ622zIfv92VOIJ2K9FZiB i2syL7o1FLLgNzyYRFNdKwckczQ+K0k32v24m+WzAPsDVHBncArvU7iZWSnNW0zC cSbOqae2tF9ljFGcfTL+GXNNjnk1C+aQrIdz/RCjbEJO4WZSS3u4Lu7KFnCwg2VT mOMC7Eh5nOCctFhng0tCP1K58xRhkqWku2D3Ou5Olxm3sH2Wjjo9j6tm20rTtSkm UyMImyhD14XVOGYveXKK2kHKhEoMUZ64/o6OiiNZiy27ESOTJ2vZ6We5LaHl -----END CERTIFICATE-----Generated at Wed Dec 10 08:18:58 2025 by rpki-client