This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/F8Gqk6CTN-eEo9DeMdWC6pmIKlQ.roa File: F8Gqk6CTN-eEo9DeMdWC6pmIKlQ.roa (raw, json) Hash identifier: ZzrT3Z7vgWuSW3jqHI8wLsqKWnF6JhMXBToucZDHchY= Subject key identifier: 17:C1:AA:93:A0:93:37:E7:84:A3:D0:DE:31:D5:82:EA:99:88:2A:54 Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019B7AC94DFC4BF12B98C763C00F443A7EE8 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/F8Gqk6CTN-eEo9DeMdWC6pmIKlQ.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20940 IP address blocks: 109.230.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4d:fc:4b:f1:2b:98:c7:63:c0:0f:44:3a:7e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17c1aa93a09337e784a3d0de31d582ea99882a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a3:fb:b2:37:3e:60:89:d5:e9:46:ef:74:d3: a8:3e:8f:3b:7a:df:f7:38:4b:36:d9:c3:bf:e7:cb: 55:ac:72:24:93:fb:27:7a:fc:35:18:03:38:3c:71: 91:8c:d8:78:f0:de:19:f3:6f:4d:96:6a:1d:ed:11: f4:5c:20:1c:de:da:48:44:d8:a1:2c:82:17:3a:73: 91:9d:c7:74:b8:a0:15:37:ec:6c:b7:8d:be:f0:c3: 0d:42:2e:9f:6e:37:0c:7d:5d:ae:cf:ce:f7:b4:82: cc:32:9e:63:33:92:75:e5:36:84:d7:3e:a0:67:f1: 97:a6:ab:63:29:3f:07:5a:1a:07:48:cf:77:31:ee: 21:39:1c:8b:d9:10:02:ed:db:f8:27:7b:e7:82:f5: 5a:51:c1:3c:59:1d:5e:71:84:9c:36:66:fb:4e:d4: 0d:eb:25:f0:64:fc:ac:39:23:cf:68:b6:ce:65:39: ba:3b:a7:db:37:f6:77:1f:f9:29:6c:89:c3:74:b4: d7:3c:af:c3:e2:57:b5:c7:18:98:39:13:65:22:87: d3:b1:5e:e2:07:0c:49:88:1f:e6:f1:b5:da:2e:16: e4:58:41:d5:ad:1b:1e:b7:05:8e:3e:c0:4b:5c:28: a1:6b:37:af:b9:91:5e:5e:00:6e:0a:84:96:77:72: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C1:AA:93:A0:93:37:E7:84:A3:D0:DE:31:D5:82:EA:99:88:2A:54 X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/F8Gqk6CTN-eEo9DeMdWC6pmIKlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.230.127.0/24 Signature Algorithm: sha256WithRSAEncryption 58:4a:b8:da:e2:17:ac:d5:ed:26:00:5d:43:01:f7:47:02:b1: 37:d0:31:e5:10:94:c3:ff:b8:e2:46:f7:93:bc:f7:c6:5c:fb: 1d:4c:a5:e1:e3:04:86:85:f4:f2:1d:2f:3f:3b:5a:06:5a:b3: e9:e6:61:47:72:b8:ed:62:77:a3:5a:da:0e:fd:f0:fb:6f:37: b4:c7:94:06:ad:96:31:9e:e0:2f:69:f8:ed:a2:09:ad:1d:30: ef:04:1b:b5:0c:0a:6e:46:5e:55:86:7f:72:32:3a:c1:45:0b: 43:41:f9:e8:07:4f:73:c3:52:d0:22:ee:73:19:0c:f1:db:1c: ca:80:83:2f:e7:b0:08:f0:01:da:7d:fd:61:8a:46:7c:be:eb: ce:de:9c:21:48:1e:13:b6:12:c5:c9:c0:62:72:b9:30:9b:80: 50:fa:26:71:fc:e5:4a:f1:bd:54:e4:e3:39:d8:68:34:d3:70: b7:c1:8c:5d:bb:8b:6d:e2:3a:e1:9d:9b:1d:40:08:3e:a8:1b: d6:6d:01:ea:45:58:ae:31:b4:97:1c:5f:c6:14:8e:93:4a:0b: 24:69:20:3c:ff:44:14:54:43:6a:c9:0a:ff:73:5e:c2:06:68: 9d:ae:9f:db:bc:b7:67:3a:5a:7f:62:ad:02:73:c2:c3:9b:5a: 98:8e:98:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yU38S/ErmMdjwA9EOn7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2MxYWE5M2EwOTMzN2U3ODRhM2QwZGUzMWQ1ODJlYTk5ODgyYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qP7sjc+YInV6UbvdNOoPo87et/3 OEs22cO/58tVrHIkk/snevw1GAM4PHGRjNh48N4Z829Nlmod7RH0XCAc3tpIRNih LIIXOnORncd0uKAVN+xst42+8MMNQi6fbjcMfV2uz873tILMMp5jM5J15TaE1z6g Z/GXpqtjKT8HWhoHSM93Me4hORyL2RAC7dv4J3vngvVaUcE8WR1ecYScNmb7TtQN 6yXwZPysOSPPaLbOZTm6O6fbN/Z3H/kpbInDdLTXPK/D4le1xxiYORNlIofTsV7i BwxJiB/m8bXaLhbkWEHVrRsetwWOPsBLXCihazevuZFeXgBuCoSWd3LMMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBfBqpOgkzfnhKPQ3jHVguqZiCpUMB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvRjhHcWs2Q1ROLWVFbzlEZU1kV0M2cG1JS2xRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbeZ/MA0G CSqGSIb3DQEBCwUAA4IBAQBYSrja4hes1e0mAF1DAfdHArE30DHlEJTD/7jiRveT vPfGXPsdTKXh4wSGhfTyHS8/O1oGWrPp5mFHcrjtYnejWtoO/fD7bze0x5QGrZYx nuAvafjtogmtHTDvBBu1DApuRl5Vhn9yMjrBRQtDQfnoB09zw1LQIu5zGQzx2xzK gIMv57AI8AHaff1hikZ8vuvO3pwhSB4TthLFycBicrkwm4BQ+iZx/OVK8b1U5OM5 2Gg003C3wYxdu4tt4jrhnZsdQAg+qBvWbQHqRViuMbSXHF/GFI6TSgskaSA8/0QU VENqyQr/c17CBmidrp/bvLdnOlp/Yq0Cc8LDm1qYjpiF -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:10 2026 by rpki-client