This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/IGrzDBTp7WeP7TiBE_F5uUv9_o4.roa File: IGrzDBTp7WeP7TiBE_F5uUv9_o4.roa (raw, json) Hash identifier: BP1wezzsyhWU23ICMkBjQqvAxLHe4ED89SFQ2RP2Mlw= Subject key identifier: 20:6A:F3:0C:14:E9:ED:67:8F:ED:38:81:13:F1:79:B9:4B:FD:FE:8E Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b Certificate serial: 019B797E455AB138B3ABD4E6BC9995F34992 Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/IGrzDBTp7WeP7TiBE_F5uUv9_o4.roa Signing time: Thu 01 Jan 2026 12:17:57 +0000 ROA not before: Thu 01 Jan 2026 12:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198213 IP address blocks: 109.202.120.0/24 maxlen: 24 109.202.121.0/24 maxlen: 24 109.202.122.0/24 maxlen: 24 109.202.123.0/24 maxlen: 24 109.202.125.0/24 maxlen: 24 109.202.127.0/24 maxlen: 24 2a03:e180::/32 maxlen: 32 2a03:e181::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:45:5a:b1:38:b3:ab:d4:e6:bc:99:95:f3:49:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b Validity Not Before: Jan 1 12:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=206af30c14e9ed678fed388113f179b94bfdfe8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:8a:56:6d:63:9c:cd:64:4d:09:77:93:d1: 6e:56:5c:93:f3:c5:f1:c4:d8:7d:aa:1e:0c:28:58: d8:6a:1a:9d:b7:5d:5a:67:d3:eb:fe:90:c0:b8:d9: 21:47:03:cc:1a:5d:f7:ab:ab:41:86:fd:39:b9:18: 6d:35:a5:8d:a8:f3:c9:14:b2:01:00:19:b3:a7:b0: e6:37:ae:16:72:03:35:e5:58:58:8a:cf:49:2a:16: 21:05:d0:e7:b9:e6:c4:15:5e:d8:f1:4e:6f:e6:72: 6c:72:25:27:61:7f:f9:ab:06:ac:eb:e6:4f:73:2e: 40:1f:d0:22:31:31:db:73:b1:67:86:4c:69:51:39: 30:02:9b:20:12:2b:78:c0:51:3e:ff:c6:b1:1e:53: f3:23:8e:9c:53:ea:4f:85:3d:d1:2c:ac:ef:84:c7: 26:d6:56:ee:af:77:8a:c8:f8:d2:a1:58:aa:87:aa: fe:c4:f8:f9:55:01:dd:aa:2a:59:23:e5:c9:f3:72: 48:c4:bf:b6:3f:8f:b6:ac:d1:0d:ab:82:9a:05:28: da:06:a0:c6:2b:66:b9:f7:63:06:85:90:ea:3a:e9: 17:07:0e:82:dc:fc:16:ed:48:67:8d:9d:bd:93:30: 9e:45:4f:ad:89:56:14:19:c4:d0:95:38:bc:8e:10: f6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6A:F3:0C:14:E9:ED:67:8F:ED:38:81:13:F1:79:B9:4B:FD:FE:8E X509v3 Authority Key Identifier: keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/IGrzDBTp7WeP7TiBE_F5uUv9_o4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.202.120.0/22 109.202.125.0/24 109.202.127.0/24 IPv6: 2a03:e180::/31 Signature Algorithm: sha256WithRSAEncryption 8f:f8:74:ed:6f:5b:f4:45:ee:e8:b6:14:3d:36:8f:ad:0a:dc: b0:98:b0:72:21:22:5f:1e:9a:e0:0d:49:32:7f:69:c6:da:a3: 00:1c:ae:0a:36:ec:20:35:dd:88:d1:dd:93:d0:06:70:08:b3: 74:5f:f8:72:49:7e:bc:ee:d6:3a:fd:8c:a8:08:c4:30:56:e8: 44:e6:b0:cc:a4:0b:63:b7:6c:e0:80:71:5f:fd:9b:41:63:28: cc:ff:5d:03:65:a0:4d:61:e2:7a:ce:86:e1:cb:e6:9f:7a:6c: c8:d7:7d:3f:a2:7f:d5:7b:e7:5f:20:51:45:b1:80:cd:e7:c5: f7:ad:e5:4d:81:0d:9d:be:79:36:96:7f:be:83:d4:9f:1b:85: 2f:e5:06:20:2d:7f:ee:72:95:79:d9:e1:03:69:4c:a6:9f:38: b2:22:ed:68:31:97:1c:58:06:d4:ea:c8:d4:e3:a0:bf:e9:38: 6e:1f:b0:71:6b:fe:99:c5:aa:23:aa:0e:f1:97:e0:e0:43:e4: 4a:65:c7:1f:3a:7a:1c:4f:c8:9b:a7:73:a1:11:35:42:40:b2: e1:0a:b0:94:6d:9c:a8:c6:15:1c:eb:87:5e:f0:de:57:78:62: 68:17:b4:5e:7b:a0:db:66:f3:ee:5d:ee:3b:29:db:89:68:c5: fd:ca:c4:7b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fkVasTizq9TmvJmV80mSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0N2Y3MDhjMzRhNWU3MWRhZjNkMmU1NGI5OWFiNzRmMDY5 ZWY4MGIwHhcNMjYwMTAxMTIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDZhZjMwYzE0ZTllZDY3OGZlZDM4ODExM2YxNzliOTRiZmRmZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PKKVm1jnM1kTQl3k9FuVlyT88Xx xNh9qh4MKFjYahqdt11aZ9Pr/pDAuNkhRwPMGl33q6tBhv05uRhtNaWNqPPJFLIB ABmzp7DmN64WcgM15VhYis9JKhYhBdDnuebEFV7Y8U5v5nJsciUnYX/5qwas6+ZP cy5AH9AiMTHbc7FnhkxpUTkwApsgEit4wFE+/8axHlPzI46cU+pPhT3RLKzvhMcm 1lbur3eKyPjSoViqh6r+xPj5VQHdqipZI+XJ83JIxL+2P4+2rNENq4KaBSjaBqDG K2a592MGhZDqOukXBw6C3PwW7UhnjZ29kzCeRU+tiVYUGcTQlTi8jhD28QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCBq8wwU6e1nj+04gRPxeblL/f6OMB8GA1UdIwQY MBaAFKR/cIw0pecdrz0uVLmat08GnvgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMt NmIyN2ZmMjI1N2M2LzEvSUdyekRCVHA3V2VQN1RpQkVfRjV1VXY5X280LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMtNmIyN2ZmMjI1N2M2 LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCbcp4AwQA bcp9AwQAbcp/MA0EAgACMAcDBQEqA+GAMA0GCSqGSIb3DQEBCwUAA4IBAQCP+HTt b1v0Re7othQ9No+tCtywmLByISJfHprgDUkyf2nG2qMAHK4KNuwgNd2I0d2T0AZw CLN0X/hySX687tY6/YyoCMQwVuhE5rDMpAtjt2zggHFf/ZtBYyjM/10DZaBNYeJ6 zobhy+afemzI130/on/Ve+dfIFFFsYDN58X3reVNgQ2dvnk2ln++g9SfG4Uv5QYg LX/ucpV52eEDaUymnziyIu1oMZccWAbU6sjU46C/6ThuH7Bxa/6Zxaojqg7xl+Dg Q+RKZccfOnocT8ibp3OhETVCQLLhCrCUbZyoxhUc64de8N5XeGJoF7Ree6DbZvPu Xe47KduJaMX9ysR7 -----END CERTIFICATE-----Generated at Sat Jan 10 14:24:03 2026 by rpki-client