This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/tPXv3Y07TRkvNT0UwtYD75YWD-k.roa File: tPXv3Y07TRkvNT0UwtYD75YWD-k.roa (raw, json) Hash identifier: pCoCWxJ7IW/lTddC/6xdHqN7mJJ4tYVMe/aXvCWWKXY= Subject key identifier: B4:F5:EF:DD:8D:3B:4D:19:2F:35:3D:14:C2:D6:03:EF:96:16:0F:E9 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B07170C6AA8403E7A1EF169235746E909 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/tPXv3Y07TRkvNT0UwtYD75YWD-k.roa Signing time: Wed 10 Dec 2025 07:08:29 +0000 ROA not before: Wed 10 Dec 2025 07:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 109.122.58.0/24 maxlen: 24 109.122.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:17:0c:6a:a8:40:3e:7a:1e:f1:69:23:57:46:e9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Dec 10 07:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b4f5efdd8d3b4d192f353d14c2d603ef96160fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:6e:8f:f8:d9:32:27:e5:20:39:6a:a6:37: 84:86:24:c7:5f:cb:71:26:bf:28:f6:f1:74:79:90: f9:26:00:2f:ed:28:06:0f:e1:d6:90:7e:63:92:f9: 94:8b:91:98:fe:34:77:d2:c7:21:e3:9c:d9:d1:f6: 97:a0:a8:ae:44:d9:00:db:06:5e:84:c4:08:b0:0f: 55:02:95:b8:04:0e:d1:00:3b:81:cb:4e:7d:e3:e6: ef:43:2b:9f:49:ce:d2:86:bb:74:44:ce:d1:e1:36: f8:28:85:47:67:ee:02:6b:98:41:15:1e:00:3f:38: 3a:8e:59:4a:99:bd:bd:fc:be:66:79:be:d8:ae:95: af:dc:7e:5f:0a:60:1e:01:b0:94:be:65:b6:3b:ab: 39:88:ae:0e:9d:12:45:d0:2d:b4:08:3e:fc:35:5e: ae:06:af:c9:41:68:eb:8f:ac:23:c4:82:89:f1:b5: 5a:18:58:80:fb:ad:0e:41:7c:09:c4:65:79:e2:c6: cb:80:75:bc:bc:8d:f2:61:43:11:a8:7d:79:33:fd: 56:9f:52:3e:d1:7c:ab:52:36:c7:7c:80:56:d6:52: c4:f8:ca:e3:71:36:7b:c9:06:0d:3d:85:2c:0b:78: fc:60:7a:61:fd:af:b6:a7:89:f4:63:6a:6f:25:8e: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F5:EF:DD:8D:3B:4D:19:2F:35:3D:14:C2:D6:03:EF:96:16:0F:E9 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/tPXv3Y07TRkvNT0UwtYD75YWD-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.58.0/24 109.122.60.0/24 Signature Algorithm: sha256WithRSAEncryption 79:45:8f:75:cf:7b:0b:ff:86:d1:82:72:34:44:95:f4:74:38: b1:ea:aa:3f:3b:7d:f4:f8:e7:7c:cf:80:f7:58:82:ca:75:d8: 6f:07:c3:67:a6:fa:d7:c6:e7:d0:17:c2:82:32:95:ad:83:fe: 2d:d8:6f:3c:50:61:f0:05:bf:e5:fb:92:a6:94:1b:06:59:4f: df:8a:7e:6f:c5:d5:5b:09:51:22:f0:e2:09:00:b2:80:38:43: 43:6a:ae:52:80:13:d5:c8:04:d2:88:21:07:cc:23:8b:9c:fd: 2c:01:28:2b:72:af:8e:ca:fd:80:27:09:3d:a9:93:cf:fb:f2: c6:8a:42:38:de:4a:de:d0:f5:2c:b7:11:6f:37:ff:45:10:61: 01:51:23:68:98:6c:db:34:a6:0b:cf:72:fe:dd:da:00:73:8b: 13:62:a7:e3:04:e7:46:68:84:b0:3f:79:50:b4:09:45:03:e0: d4:cf:65:a1:38:4d:c1:33:2d:6d:dd:ae:ed:6e:17:21:ad:01: 8b:74:55:65:dc:b6:48:e4:32:11:3b:b0:a0:b5:23:a0:e0:8e: 7e:5c:65:fb:64:b2:d2:f5:8d:ba:9c:67:9d:c4:71:6b:be:6a: 65:13:11:cf:9d:65:61:8c:3d:e9:6b:18:b2:e9:8a:43:d9:f8: a7:cc:0a:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsHFwxqqEA+eh7xaSNXRukJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUxMjEwMDcwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGY1ZWZkZDhkM2I0ZDE5MmYzNTNkMTRjMmQ2MDNlZjk2MTYwZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHxuj/jZMiflIDlqpjeEhiTHX8tx Jr8o9vF0eZD5JgAv7SgGD+HWkH5jkvmUi5GY/jR30sch45zZ0faXoKiuRNkA2wZe hMQIsA9VApW4BA7RADuBy0594+bvQyufSc7Shrt0RM7R4Tb4KIVHZ+4Ca5hBFR4A Pzg6jllKmb29/L5meb7YrpWv3H5fCmAeAbCUvmW2O6s5iK4OnRJF0C20CD78NV6u Bq/JQWjrj6wjxIKJ8bVaGFiA+60OQXwJxGV54sbLgHW8vI3yYUMRqH15M/1Wn1I+ 0XyrUjbHfIBW1lLE+MrjcTZ7yQYNPYUsC3j8YHph/a+2p4n0Y2pvJY66dQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLT1792NO00ZLzU9FMLWA++WFg/pMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvdFBYdjNZMDdUUmt2TlQwVXd0WUQ3NVlXRC1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXo6AwQA bXo8MA0GCSqGSIb3DQEBCwUAA4IBAQB5RY91z3sL/4bRgnI0RJX0dDix6qo/O330 +Od8z4D3WILKddhvB8NnpvrXxufQF8KCMpWtg/4t2G88UGHwBb/l+5KmlBsGWU/f in5vxdVbCVEi8OIJALKAOENDaq5SgBPVyATSiCEHzCOLnP0sASgrcq+Oyv2AJwk9 qZPP+/LGikI43kre0PUstxFvN/9FEGEBUSNomGzbNKYLz3L+3doAc4sTYqfjBOdG aISwP3lQtAlFA+DUz2WhOE3BMy1t3a7tbhchrQGLdFVl3LZI5DIRO7CgtSOg4I5+ XGX7ZLLS9Y26nGedxHFrvmplExHPnWVhjD3paxiy6YpD2finzAqS -----END CERTIFICATE-----Generated at Wed Dec 10 18:02:54 2025 by rpki-client