This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Uf97m6kYdOXrlHNRhRLKJ5_P1k4.roa File: Uf97m6kYdOXrlHNRhRLKJ5_P1k4.roa (raw, json) Hash identifier: G6Mo4Fb6Yxuyx2Ff+8yi06BQ3oSfvk91WpYQtAwtKvc= Subject key identifier: 51:FF:7B:9B:A9:18:74:E5:EB:94:73:51:85:12:CA:27:9F:CF:D6:4E Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B0D4E3D19AEA58A5192CE261934B20995 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Uf97m6kYdOXrlHNRhRLKJ5_P1k4.roa Signing time: Thu 11 Dec 2025 12:06:29 +0000 ROA not before: Thu 11 Dec 2025 12:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26042 IP address blocks: 109.122.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:4e:3d:19:ae:a5:8a:51:92:ce:26:19:34:b2:09:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Dec 11 12:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=51ff7b9ba91874e5eb9473518512ca279fcfd64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:b1:7f:fc:d5:1b:b6:81:11:31:82:e4:c4: 23:aa:c0:47:32:aa:46:ae:23:96:1a:ba:ec:fe:68: 8d:f9:b5:d8:f6:a3:04:db:c7:a6:f9:71:7c:17:f3: a6:db:7e:17:82:7d:8e:56:64:9b:f8:cf:0c:87:84: e6:39:85:ea:ca:81:71:6a:2a:0f:64:8a:35:29:17: 90:31:ae:94:d7:12:a7:0c:99:8e:2c:b0:08:73:ec: ae:5c:1c:b4:1a:d3:73:0f:07:18:bb:45:0f:13:07: 3f:99:78:89:9f:35:ff:68:43:4e:3e:71:09:b0:68: e0:f8:1f:20:93:9e:b9:85:14:7c:5e:4c:24:ea:f1: 71:56:55:dd:c5:d6:4a:80:a1:93:91:88:64:fd:10: 1a:c4:bb:7b:bc:f9:c8:59:ac:43:d1:16:d8:42:5d: 51:ee:d8:fa:1d:c8:57:58:38:f7:53:51:e9:4f:51: 01:89:ec:11:60:f4:d8:68:68:45:f8:79:10:ef:6d: 6b:ef:1d:d3:8f:81:34:14:cd:67:ad:dc:3b:46:b5: c2:04:01:fa:b3:00:13:99:d7:b4:b5:bb:80:97:44: 96:c8:c5:61:9b:d3:59:73:cc:15:08:3e:cd:1d:8c: f2:ef:af:0c:b6:87:2d:d4:8e:e2:e1:12:ab:f1:37: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FF:7B:9B:A9:18:74:E5:EB:94:73:51:85:12:CA:27:9F:CF:D6:4E X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Uf97m6kYdOXrlHNRhRLKJ5_P1k4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.60.0/24 Signature Algorithm: sha256WithRSAEncryption 19:4d:7a:0d:b1:2b:5d:fd:ab:82:8f:23:3e:f4:b8:92:aa:f3: 8f:80:44:96:cb:c7:27:a3:9c:7a:44:47:31:9b:80:8b:1a:2b: d3:da:8b:57:4d:02:79:83:d3:2d:90:66:bc:7a:ff:85:d3:55: 84:0d:a0:9c:0c:ae:9b:90:1c:a5:a8:3c:ca:24:e7:f7:01:9b: bf:89:62:0c:f9:fb:40:61:6d:c5:31:06:08:48:be:e0:ee:9c: c5:60:52:ff:b3:68:d3:cb:e0:8b:87:e9:e9:d0:5f:51:92:f9: 6a:36:3d:b4:9e:6b:6a:23:08:99:56:78:25:2f:e3:f0:9b:7e: 03:42:dc:2c:6f:66:7f:d3:58:35:a9:1c:36:0a:79:23:8b:a0: f2:a3:e0:ab:ed:da:7d:16:af:19:34:92:bf:6f:e9:02:02:af: 98:d4:71:42:2a:83:1b:76:6b:cb:a8:7c:d1:1c:b4:68:07:dc: fc:84:b7:8a:15:92:98:42:e4:56:27:5f:8b:9a:83:2a:89:56: 40:e8:e5:9a:cd:05:c4:53:1b:69:96:cc:19:3d:9f:ba:d0:17: 4c:c8:e4:64:40:de:29:d1:1f:80:94:db:d0:39:5d:75:af:ea: b6:eb:bd:43:88:7a:0c:4f:0d:ab:95:d1:6c:bc:3e:e2:84:ab: 14:9a:34:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsNTj0ZrqWKUZLOJhk0sgmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUxMjExMTIwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWZmN2I5YmE5MTg3NGU1ZWI5NDczNTE4NTEyY2EyNzlmY2ZkNjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0exf/zVG7aBETGC5MQjqsBHMqpG riOWGrrs/miN+bXY9qME28em+XF8F/Om234Xgn2OVmSb+M8Mh4TmOYXqyoFxaioP ZIo1KReQMa6U1xKnDJmOLLAIc+yuXBy0GtNzDwcYu0UPEwc/mXiJnzX/aENOPnEJ sGjg+B8gk565hRR8Xkwk6vFxVlXdxdZKgKGTkYhk/RAaxLt7vPnIWaxD0RbYQl1R 7tj6HchXWDj3U1HpT1EBiewRYPTYaGhF+HkQ721r7x3Tj4E0FM1nrdw7RrXCBAH6 swATmde0tbuAl0SWyMVhm9NZc8wVCD7NHYzy768Mtoct1I7i4RKr8TeixwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFH/e5upGHTl65RzUYUSyiefz9ZOMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvVWY5N202a1lkT1hybEhOUmhSTEtKNV9QMWs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo8MA0G CSqGSIb3DQEBCwUAA4IBAQAZTXoNsStd/auCjyM+9LiSqvOPgESWy8cno5x6REcx m4CLGivT2otXTQJ5g9MtkGa8ev+F01WEDaCcDK6bkBylqDzKJOf3AZu/iWIM+ftA YW3FMQYISL7g7pzFYFL/s2jTy+CLh+np0F9RkvlqNj20nmtqIwiZVnglL+Pwm34D Qtwsb2Z/01g1qRw2Cnkji6Dyo+Cr7dp9Fq8ZNJK/b+kCAq+Y1HFCKoMbdmvLqHzR HLRoB9z8hLeKFZKYQuRWJ1+LmoMqiVZA6OWazQXEUxtplswZPZ+60BdMyORkQN4p 0R+AlNvQOV11r+q2671DiHoMTw2rldFsvD7ihKsUmjTM -----END CERTIFICATE-----Generated at Sat Dec 13 22:12:15 2025 by rpki-client