This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/wMI5BXOT_BgN0uxpsGRRZRnKSkM.roa File: wMI5BXOT_BgN0uxpsGRRZRnKSkM.roa (raw, json) Hash identifier: Oxrdhr1ss/JbqLMgdIsQwdWtrWAJAiM83gHMKnZe/Lw= Subject key identifier: C0:C2:39:05:73:93:FC:18:0D:D2:EC:69:B0:64:51:65:19:CA:4A:43 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B7E38C2F79C57F3678874502B586EEC39 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/wMI5BXOT_BgN0uxpsGRRZRnKSkM.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62610 IP address blocks: 109.122.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c2:f7:9c:57:f3:67:88:74:50:2b:58:6e:ec:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0c239057393fc180dd2ec69b064516519ca4a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c6:5b:8c:cc:8f:14:bc:64:58:76:2e:0d:98: 72:2b:2e:1d:4a:b4:91:6e:74:0d:eb:1a:67:00:81: 0f:bb:e7:99:6b:5e:42:5c:69:bc:1f:c3:7d:4c:0b: 5b:13:0e:8d:8f:ce:9d:ff:01:0b:3e:34:b1:51:d4: 78:c4:5c:e5:9a:99:5a:d1:77:42:b5:da:d6:e6:c0: 55:2b:59:ab:fc:7b:15:03:f2:97:a6:9f:08:db:e7: c0:95:36:fd:aa:e9:df:57:40:e9:03:94:cc:58:a5: 47:19:17:ec:d3:69:a2:9f:29:03:73:03:02:77:c6: 05:3f:20:2c:b4:53:ce:48:47:5e:49:80:cf:db:34: 1a:42:d8:ab:82:7c:ad:bd:9c:03:94:87:cc:c3:af: 77:c1:c3:dc:ca:b4:0f:06:80:a3:e8:64:39:99:ca: 5b:5a:d2:b6:5d:5e:65:5a:01:87:ba:47:49:ec:cb: 90:09:1f:8d:e6:75:7f:8e:bd:64:31:88:8a:2e:85: 7b:c7:4d:4d:f0:00:8f:49:3c:dd:6f:a3:b8:4a:37: b2:0e:d1:5b:01:a3:1c:1c:8e:12:b4:7d:92:f1:06: 48:0d:89:79:57:c2:70:80:9f:6c:06:0e:6b:ec:22: b7:94:c4:6d:bd:4f:fc:f9:55:c8:d9:13:d2:11:73: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C2:39:05:73:93:FC:18:0D:D2:EC:69:B0:64:51:65:19:CA:4A:43 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/wMI5BXOT_BgN0uxpsGRRZRnKSkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.59.0/24 Signature Algorithm: sha256WithRSAEncryption 98:83:d6:4f:cb:8a:5d:ff:98:e7:56:50:2b:86:1c:8e:c7:a1: 5a:f5:bc:19:8a:66:76:31:05:f5:7e:9e:8d:27:64:7b:f7:40: 1a:da:cd:20:b1:ea:d4:f5:9a:ca:d9:87:0c:d0:b1:33:dd:e6: b3:b5:48:d4:d8:f6:ed:04:3e:1d:0a:c2:82:1b:c0:61:90:ab: 4f:98:b1:5e:83:24:0d:6e:a7:b7:18:45:04:c5:87:c9:29:fd: 7d:8b:0b:fa:64:e7:4c:db:5e:0c:3d:b6:58:6d:4a:f8:89:9d: 9a:12:57:a5:6d:6c:a2:2e:a8:eb:9d:68:ab:f2:bc:7e:9a:e7: 27:0a:67:84:12:60:64:14:d8:07:05:dc:01:a6:ea:33:8e:bf: 63:d4:d5:66:bc:2d:de:d5:7f:6f:b7:93:cf:2b:4e:61:b3:af: 07:80:e1:9a:b2:d4:b0:b3:96:1e:56:72:cd:d9:67:1e:35:61: a3:01:d6:0a:53:fc:33:bc:73:ab:35:d8:5b:1d:41:ca:b1:20: 0f:eb:ff:85:bf:44:e1:0f:e8:0c:45:3f:d9:23:98:cf:7f:cc: 93:e4:95:31:85:2f:09:f1:ae:b5:76:22:83:2b:68:24:d5:a6: ee:72:c3:a4:92:59:7f:e2:25:5f:a0:c7:3b:2d:8a:63:3c:73: b5:2f:4f:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OML3nFfzZ4h0UCtYbuw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGMyMzkwNTczOTNmYzE4MGRkMmVjNjliMDY0NTE2NTE5Y2E0YTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcZbjMyPFLxkWHYuDZhyKy4dSrSR bnQN6xpnAIEPu+eZa15CXGm8H8N9TAtbEw6Nj86d/wELPjSxUdR4xFzlmpla0XdC tdrW5sBVK1mr/HsVA/KXpp8I2+fAlTb9qunfV0DpA5TMWKVHGRfs02minykDcwMC d8YFPyAstFPOSEdeSYDP2zQaQtirgnytvZwDlIfMw693wcPcyrQPBoCj6GQ5mcpb WtK2XV5lWgGHukdJ7MuQCR+N5nV/jr1kMYiKLoV7x01N8ACPSTzdb6O4SjeyDtFb AaMcHI4StH2S8QZIDYl5V8JwgJ9sBg5r7CK3lMRtvU/8+VXI2RPSEXN2+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMDCOQVzk/wYDdLsabBkUWUZykpDMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvd01JNUJYT1RfQmdOMHV4cHNHUlJaUm5LU2tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo7MA0G CSqGSIb3DQEBCwUAA4IBAQCYg9ZPy4pd/5jnVlArhhyOx6Fa9bwZimZ2MQX1fp6N J2R790Aa2s0gserU9ZrK2YcM0LEz3eaztUjU2PbtBD4dCsKCG8BhkKtPmLFegyQN bqe3GEUExYfJKf19iwv6ZOdM214MPbZYbUr4iZ2aElelbWyiLqjrnWir8rx+mucn CmeEEmBkFNgHBdwBpuozjr9j1NVmvC3e1X9vt5PPK05hs68HgOGastSws5YeVnLN 2WceNWGjAdYKU/wzvHOrNdhbHUHKsSAP6/+Fv0ThD+gMRT/ZI5jPf8yT5JUxhS8J 8a61diKDK2gk1abucsOkkll/4iVfoMc7LYpjPHO1L0/d -----END CERTIFICATE-----Generated at Tue Jan 20 18:01:58 2026 by rpki-client