This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/tVKsAN2rTN42zUGNS6XPmpZYmYI.roa File: tVKsAN2rTN42zUGNS6XPmpZYmYI.roa (raw, json) Hash identifier: hdI/aplbbGIaTBD4tkGNasfJop68VutRTr3fAJnKpNE= Subject key identifier: B5:52:AC:00:DD:AB:4C:DE:36:CD:41:8D:4B:A5:CF:9A:96:58:99:82 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B1285FD26E777D79A2FC6E15A7E4062AF Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/tVKsAN2rTN42zUGNS6XPmpZYmYI.roa Signing time: Fri 12 Dec 2025 12:25:29 +0000 ROA not before: Fri 12 Dec 2025 12:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59432 IP address blocks: 109.122.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:85:fd:26:e7:77:d7:9a:2f:c6:e1:5a:7e:40:62:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Dec 12 12:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b552ac00ddab4cde36cd418d4ba5cf9a96589982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c9:c2:ea:ff:08:01:d5:25:72:91:b7:36:bc: 4a:7d:df:0c:89:6e:a5:f8:48:05:48:a5:ab:99:d6: 55:36:0e:18:1e:c9:a8:d8:d0:fd:2e:43:70:76:aa: 3e:12:ad:6f:c5:b0:bd:1b:b3:49:49:d6:d1:78:b2: 2a:73:c7:39:3d:4a:44:ad:05:7e:69:e6:de:03:00: d6:a3:4e:5a:86:bf:e1:92:20:8c:a7:24:9a:fc:c1: 95:d2:84:cc:a7:43:99:63:81:56:23:84:f9:ec:c0: 86:b7:49:60:63:1a:22:a2:96:d4:32:d3:26:7b:e7: 66:70:01:0a:1a:39:17:5e:a6:b0:67:81:c9:5b:2a: db:85:84:84:1a:66:e4:23:5e:dd:52:9b:ce:ad:17: b8:c7:a0:10:63:3b:6d:ec:ce:4e:cc:ef:7b:6e:f8: cc:14:a6:a5:f1:4b:b7:0d:da:a9:f0:63:32:a4:83: e2:4e:ce:21:c4:f8:e7:e4:6e:69:0f:9f:37:f8:c2: 4b:3d:4d:ef:ea:09:3b:ca:d1:92:de:9b:3a:8d:4b: f2:63:86:c0:9d:04:4e:88:d6:85:8e:30:cb:81:e0: 1e:6c:8c:8b:84:8a:86:c8:a2:8b:9a:a7:ce:84:5e: 6d:50:3d:6e:68:d6:21:74:bd:52:0d:31:69:2f:3f: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:52:AC:00:DD:AB:4C:DE:36:CD:41:8D:4B:A5:CF:9A:96:58:99:82 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/tVKsAN2rTN42zUGNS6XPmpZYmYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.58.0/24 Signature Algorithm: sha256WithRSAEncryption 68:65:55:fe:f6:30:99:7d:5e:3a:b1:59:b0:cf:d8:00:88:65: 34:5b:04:72:7f:57:a4:00:f5:1a:78:0d:73:ff:df:bb:36:f7: ed:f9:3d:4f:7a:69:c7:3c:d1:b7:8c:73:39:b6:69:d9:c0:48: b6:38:77:69:43:63:72:af:15:5e:c9:09:e6:fd:a3:37:39:5a: e9:5c:81:e1:84:66:81:95:e8:68:3e:4a:24:12:ad:36:c0:1b: ef:df:0f:c2:62:ec:db:36:e7:fe:83:25:48:88:08:38:4d:a2: 81:23:c5:bd:d5:52:a1:38:b6:ed:8a:e7:ab:f4:60:41:c8:7c: 95:11:9c:1e:31:2d:07:4f:0b:9b:44:0a:01:11:fb:12:90:11: 41:87:17:de:25:9f:0c:db:45:75:23:fa:37:89:64:16:69:c6: 43:cc:c1:44:7a:2f:41:d6:45:9b:4e:cf:4c:20:f6:7c:f3:07: 8f:73:ab:28:3e:d6:a8:dc:47:9d:b0:0c:96:f8:77:26:66:e8: 7a:03:c5:ea:91:ec:69:55:96:5c:f2:7f:c3:aa:0e:74:6d:3f: 3c:85:0b:19:95:a2:2e:ed:4f:30:54:f9:8f:63:f0:f7:cd:20: 3c:de:51:f7:00:c4:29:af:22:fc:95:d8:a3:63:27:85:d6:4a: 5b:9b:27:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsShf0m53fXmi/G4Vp+QGKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUxMjEyMTIyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTUyYWMwMGRkYWI0Y2RlMzZjZDQxOGQ0YmE1Y2Y5YTk2NTg5OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicnC6v8IAdUlcpG3NrxKfd8MiW6l +EgFSKWrmdZVNg4YHsmo2ND9LkNwdqo+Eq1vxbC9G7NJSdbReLIqc8c5PUpErQV+ aebeAwDWo05ahr/hkiCMpySa/MGV0oTMp0OZY4FWI4T57MCGt0lgYxoiopbUMtMm e+dmcAEKGjkXXqawZ4HJWyrbhYSEGmbkI17dUpvOrRe4x6AQYztt7M5OzO97bvjM FKal8Uu3Ddqp8GMypIPiTs4hxPjn5G5pD583+MJLPU3v6gk7ytGS3ps6jUvyY4bA nQROiNaFjjDLgeAebIyLhIqGyKKLmqfOhF5tUD1uaNYhdL1SDTFpLz8QJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLVSrADdq0zeNs1BjUulz5qWWJmCMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvdFZLc0FOMnJUTjQyelVHTlM2WFBtcFpZbVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo6MA0G CSqGSIb3DQEBCwUAA4IBAQBoZVX+9jCZfV46sVmwz9gAiGU0WwRyf1ekAPUaeA1z /9+7Nvft+T1PemnHPNG3jHM5tmnZwEi2OHdpQ2NyrxVeyQnm/aM3OVrpXIHhhGaB lehoPkokEq02wBvv3w/CYuzbNuf+gyVIiAg4TaKBI8W91VKhOLbtiuer9GBByHyV EZweMS0HTwubRAoBEfsSkBFBhxfeJZ8M20V1I/o3iWQWacZDzMFEei9B1kWbTs9M IPZ88wePc6soPtao3EedsAyW+HcmZuh6A8XqkexpVZZc8n/Dqg50bT88hQsZlaIu 7U8wVPmPY/D3zSA83lH3AMQpryL8ldijYyeF1kpbmyek -----END CERTIFICATE-----Generated at Wed Dec 17 20:45:22 2025 by rpki-client