This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/h2ehCOfcqqF0IeqWvo2nn953cBo.roa File: h2ehCOfcqqF0IeqWvo2nn953cBo.roa (raw, json) Hash identifier: YB7JVVHHykrYeDl2WcAdwEq3+YyTaiH2aC/3bBu/CY4= Subject key identifier: 87:67:A1:08:E7:DC:AA:A1:74:21:EA:96:BE:8D:A7:9F:DE:77:70:1A Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019B7AC94CEB96DC51B751F8ACDF0A523719 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/h2ehCOfcqqF0IeqWvo2nn953cBo.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16625 IP address blocks: 109.230.116.0/22 maxlen: 22 109.230.116.0/24 maxlen: 24 109.230.117.0/24 maxlen: 24 109.230.118.0/24 maxlen: 24 109.230.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4c:eb:96:dc:51:b7:51:f8:ac:df:0a:52:37:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8767a108e7dcaaa17421ea96be8da79fde77701a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:5a:87:b9:75:e0:f8:58:ad:f9:d7:01:54: bb:c0:07:d5:67:62:d5:da:db:48:de:26:f0:6a:05: e7:33:5b:d9:96:ca:5d:e8:65:82:5a:fb:78:a0:99: b6:b5:f9:db:c3:79:63:ef:81:cb:90:94:b2:f7:46: 96:1c:ec:61:61:b0:0c:71:74:29:2e:c8:82:04:49: b5:fe:29:c5:25:ee:19:5f:f1:b7:df:db:88:d7:9d: 64:74:63:87:bf:d2:07:6a:b1:e4:49:63:e8:f7:ab: b9:1d:bc:91:4a:a7:d8:6a:55:6b:8f:7f:8e:9e:e8: 07:5c:5c:f8:4c:50:54:b9:cf:77:a1:a9:02:f3:f9: b7:bc:a8:de:16:be:d5:ec:be:fb:0c:db:42:67:89: c1:40:87:16:ba:5a:e2:75:b6:82:6f:37:e1:74:9c: b1:36:0a:2f:d9:a4:ee:11:ae:df:2b:b3:b2:c7:68: 1d:8a:ce:4f:ea:f8:c8:10:b2:05:15:ed:8c:2a:41: a6:5d:02:bc:45:76:52:7c:33:19:9a:b7:5b:d6:b9: 93:e2:a1:7b:3d:01:0b:40:c1:b3:62:52:a5:fb:cb: fa:ad:45:b4:6f:d5:70:13:f2:eb:53:13:b8:34:4a: 90:f1:2d:47:89:7d:e3:c2:ed:26:c0:bc:f4:06:4e: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:67:A1:08:E7:DC:AA:A1:74:21:EA:96:BE:8D:A7:9F:DE:77:70:1A X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/h2ehCOfcqqF0IeqWvo2nn953cBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.230.116.0/22 Signature Algorithm: sha256WithRSAEncryption 91:52:b7:10:4e:c9:58:db:46:53:d0:77:e0:f4:b9:6e:af:f8: 4f:22:87:01:3b:ec:76:13:d3:7f:97:78:45:a7:6a:13:45:5b: 90:b5:ba:7a:b4:3a:a1:da:83:91:7d:91:ec:d8:44:ec:fe:96: 0b:03:3b:f1:c0:04:cb:4c:72:33:8e:96:77:ca:2d:90:3e:64: bd:fb:cc:38:5e:d5:58:cc:21:44:39:6e:25:a7:58:03:35:ea: 57:fd:74:61:16:25:09:bc:ed:3f:53:80:33:03:ee:b1:e3:0c: b4:c8:2e:85:fa:fe:43:5c:b1:7d:a3:cb:61:c5:4b:0e:2d:f5: 88:3f:c6:e6:b7:03:40:5a:54:05:c1:a9:01:5b:ed:47:17:37: 42:7a:c8:01:23:47:a4:66:18:fd:55:bc:50:d7:2c:55:a6:03: ce:30:f0:90:5c:2b:1f:7d:b1:29:e4:80:5b:77:16:0d:3b:4c: c7:ef:09:00:86:ee:47:36:52:ef:ed:11:6d:d8:cc:17:66:02: e9:f3:ad:e6:0d:a5:5c:27:ef:df:74:7d:e8:b5:7b:8e:f3:17: f8:80:4b:96:93:af:58:d4:bb:10:c7:95:35:65:7b:ec:ec:b0: d9:4e:47:e3:8d:39:7d:69:97:96:0a:11:1c:2a:43:10:24:99: e6:e9:70:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUzrltxRt1H4rN8KUjcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzY3YTEwOGU3ZGNhYWExNzQyMWVhOTZiZThkYTc5ZmRlNzc3MDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD5ah7l14PhYrfnXAVS7wAfVZ2LV 2ttI3ibwagXnM1vZlspd6GWCWvt4oJm2tfnbw3lj74HLkJSy90aWHOxhYbAMcXQp LsiCBEm1/inFJe4ZX/G339uI151kdGOHv9IHarHkSWPo96u5HbyRSqfYalVrj3+O nugHXFz4TFBUuc93oakC8/m3vKjeFr7V7L77DNtCZ4nBQIcWulridbaCbzfhdJyx Ngov2aTuEa7fK7Oyx2gdis5P6vjIELIFFe2MKkGmXQK8RXZSfDMZmrdb1rmT4qF7 PQELQMGzYlKl+8v6rUW0b9VwE/LrUxO4NEqQ8S1HiX3jwu0mwLz0Bk56bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIdnoQjn3KqhdCHqlr6Np5/ed3AaMB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvaDJlaENPZmNxcUYwSWVxV3ZvMm5uOTUzY0JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbeZ0MA0G CSqGSIb3DQEBCwUAA4IBAQCRUrcQTslY20ZT0Hfg9Llur/hPIocBO+x2E9N/l3hF p2oTRVuQtbp6tDqh2oORfZHs2ETs/pYLAzvxwATLTHIzjpZ3yi2QPmS9+8w4XtVY zCFEOW4lp1gDNepX/XRhFiUJvO0/U4AzA+6x4wy0yC6F+v5DXLF9o8thxUsOLfWI P8bmtwNAWlQFwakBW+1HFzdCesgBI0ekZhj9VbxQ1yxVpgPOMPCQXCsffbEp5IBb dxYNO0zH7wkAhu5HNlLv7RFt2MwXZgLp863mDaVcJ+/fdH3otXuO8xf4gEuWk69Y 1LsQx5U1ZXvs7LDZTkfjjTl9aZeWChEcKkMQJJnm6XCv -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:52 2026 by rpki-client