This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/11abjUECt78CI4jG-uBZrzou2to.roa File: 11abjUECt78CI4jG-uBZrzou2to.roa (raw, json) Hash identifier: 1RiuteOkDQKooCQrx3e6Wy4U2IWOs71FVYA/JTBz8O8= Subject key identifier: D7:56:9B:8D:41:02:B7:BF:02:23:88:C6:FA:E0:59:AF:3A:2E:DA:DA Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019A826A058E39B6F7B43B50415F28310505 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/11abjUECt78CI4jG-uBZrzou2to.roa Signing time: Fri 14 Nov 2025 12:49:37 +0000 ROA not before: Fri 14 Nov 2025 12:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 262287 IP address blocks: 109.122.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:6a:05:8e:39:b6:f7:b4:3b:50:41:5f:28:31:05:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Nov 14 12:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d7569b8d4102b7bf022388c6fae059af3a2edada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a0:cf:d5:40:27:72:57:24:84:c5:4c:e7:01: 6c:ff:99:03:06:b0:13:54:9a:63:37:48:ae:51:fc: fd:1d:e7:d6:08:95:4e:4b:10:32:c3:47:0e:73:2b: 57:cb:d0:ac:1c:a3:23:55:5c:f1:3f:06:09:ba:3a: 5f:b3:b8:54:15:cd:c0:67:c7:67:2f:93:a9:b7:55: 45:c4:f8:93:db:3e:12:1f:42:1e:0d:e6:83:7a:3a: f8:a7:b6:9f:28:13:2e:84:6f:3f:c5:ac:b3:0e:02: fa:e7:5b:43:88:69:85:ac:ed:d5:97:0d:6e:eb:95: bf:f1:16:d9:d4:11:c9:69:fa:ce:1b:73:e5:86:ff: 5b:93:38:f7:40:e9:3c:03:58:cf:e1:2b:de:ef:27: ef:a3:b1:4b:71:46:40:87:c9:74:12:56:c1:1c:7b: 0b:b8:61:2d:5c:db:18:5b:aa:52:6a:59:1b:c7:1e: fb:b5:ab:f5:3c:75:0b:95:46:57:7d:1e:a3:ec:aa: 67:01:d0:da:57:62:46:e3:50:73:71:8c:be:5e:bb: 12:b0:a9:db:d9:14:fd:e3:69:c2:d2:4a:6c:a9:1d: 42:a4:2f:a9:dc:96:33:42:c7:92:4e:7b:7d:95:2d: 0c:87:ce:58:ff:62:44:f5:3d:a0:af:ab:be:22:a4: 02:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:56:9B:8D:41:02:B7:BF:02:23:88:C6:FA:E0:59:AF:3A:2E:DA:DA X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/11abjUECt78CI4jG-uBZrzou2to.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.61.0/24 Signature Algorithm: sha256WithRSAEncryption 42:d1:8c:eb:55:c5:44:be:38:e6:20:39:c3:46:00:ff:a8:b2: 60:16:79:78:09:1c:6f:eb:29:af:7e:c1:ca:7d:f4:2a:7c:c5: bc:df:0e:58:e9:9f:1e:c8:3c:15:7f:cc:d3:2e:1c:dc:57:53: ed:97:a6:59:7a:39:81:0c:97:ad:b1:63:c7:81:6a:6d:be:a0: 1b:89:c0:13:79:3d:09:2c:49:d6:24:65:e1:f6:a2:49:9f:94: ee:90:cc:f4:ad:c5:c7:ab:97:a6:3c:6b:44:ba:e1:c6:a5:a8: df:d8:be:94:71:22:e8:c1:a1:6a:ca:cd:0d:c0:86:20:c2:87: 7f:79:bc:f6:8f:e5:19:d0:a2:57:9a:6e:87:fc:50:6a:74:13: 46:6d:0f:77:2c:8b:0a:3f:03:5d:cf:90:5a:8d:24:2b:c9:12: d2:c8:a0:8f:74:cc:04:74:21:26:3d:5c:ca:cc:8d:03:6d:2e: 98:82:43:e0:d3:e7:0b:e9:d9:9e:c2:3e:85:3a:c3:28:13:54: 02:fc:1b:25:ab:29:6d:62:9b:8e:d2:62:f9:48:1c:df:a0:c8: 0e:21:30:00:c4:ee:d0:98:e7:66:2e:5a:20:32:7a:70:77:a0: 19:5a:a7:90:63:dc:e3:e4:92:cb:6b:8d:82:a0:c1:c2:74:f7: 82:d0:ba:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqCagWOObb3tDtQQV8oMQUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUxMTE0MTI0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzU2OWI4ZDQxMDJiN2JmMDIyMzg4YzZmYWUwNTlhZjNhMmVkYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aDP1UAnclckhMVM5wFs/5kDBrAT VJpjN0iuUfz9HefWCJVOSxAyw0cOcytXy9CsHKMjVVzxPwYJujpfs7hUFc3AZ8dn L5Opt1VFxPiT2z4SH0IeDeaDejr4p7afKBMuhG8/xayzDgL651tDiGmFrO3Vlw1u 65W/8RbZ1BHJafrOG3Plhv9bkzj3QOk8A1jP4Sve7yfvo7FLcUZAh8l0ElbBHHsL uGEtXNsYW6pSalkbxx77tav1PHULlUZXfR6j7KpnAdDaV2JG41BzcYy+XrsSsKnb 2RT942nC0kpsqR1CpC+p3JYzQseSTnt9lS0Mh85Y/2JE9T2gr6u+IqQCrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdWm41BAre/AiOIxvrgWa86LtraMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvMTFhYmpVRUN0NzhDSTRqRy11Qlpyem91MnRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo9MA0G CSqGSIb3DQEBCwUAA4IBAQBC0YzrVcVEvjjmIDnDRgD/qLJgFnl4CRxv6ymvfsHK ffQqfMW83w5Y6Z8eyDwVf8zTLhzcV1Ptl6ZZejmBDJetsWPHgWptvqAbicATeT0J LEnWJGXh9qJJn5TukMz0rcXHq5emPGtEuuHGpajf2L6UcSLowaFqys0NwIYgwod/ ebz2j+UZ0KJXmm6H/FBqdBNGbQ93LIsKPwNdz5BajSQryRLSyKCPdMwEdCEmPVzK zI0DbS6YgkPg0+cL6dmewj6FOsMoE1QC/BslqyltYpuO0mL5SBzfoMgOITAAxO7Q mOdmLlogMnpwd6AZWqeQY9zj5JLLa42CoMHCdPeC0Lq7 -----END CERTIFICATE-----Generated at Fri Dec 5 12:04:55 2025 by rpki-client