This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa File: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (raw, json) Hash identifier: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4= Subject key identifier: 97:90:FD:4E:F8:BD:2A:8C:DA:DB:F9:B1:B7:3C:49:42:AF:EC:FA:CD Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb Certificate serial: 019B7C7F1A369CC5C596F0FF4AD50ABA2C47 Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa Signing time: Fri 02 Jan 2026 02:17:43 +0000 ROA not before: Fri 02 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 109.235.97.0/24 maxlen: 24 109.235.98.0/24 maxlen: 24 109.235.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:1a:36:9c:c5:c5:96:f0:ff:4a:d5:0a:ba:2c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb Validity Not Before: Jan 2 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9790fd4ef8bd2a8cdadbf9b1b73c4942afecfacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:76:24:ad:f7:ac:0d:c6:fd:2a:5c:9b:70: 1d:62:21:f8:fa:38:c9:c3:40:3a:5c:0e:4d:4c:bc: 47:49:96:9f:fd:88:df:ea:85:55:44:ae:52:66:9a: ad:f8:aa:76:7a:01:bc:f3:1c:8f:64:a0:8b:2b:56: 78:5c:e3:19:73:23:f9:10:22:0f:65:1a:e3:a0:e4: 3f:10:0c:12:85:13:21:9f:24:19:d9:99:fc:6b:b6: fe:0d:91:2d:07:c3:bb:6f:94:92:64:ce:9e:77:c2: b3:85:a5:87:5e:2e:ba:a2:1c:5e:1d:b3:f8:c0:60: a7:f7:9e:d5:dd:0b:e4:76:3a:3f:ad:cf:4c:15:ac: 5b:ff:bc:be:52:0f:d6:6c:83:ca:96:96:a7:64:63: f0:93:fb:e0:81:84:8d:88:cb:e4:f3:2f:a7:a3:a4: 3d:a9:87:7b:ea:5f:ab:ed:4a:eb:08:f8:29:61:f2: 68:0f:29:1d:9f:12:b3:46:4e:78:f5:62:d8:ea:04: b5:6d:44:5e:50:97:fb:6d:2d:54:61:71:fa:1c:72: d8:66:50:ea:fe:f4:eb:9f:e9:e5:0f:28:dd:b0:33: a4:96:c9:ac:da:99:58:2a:a0:4b:51:33:0b:d4:2f: 5c:55:a3:b7:f7:61:62:cb:a0:d2:0a:9f:47:5a:8b: 95:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:90:FD:4E:F8:BD:2A:8C:DA:DB:F9:B1:B7:3C:49:42:AF:EC:FA:CD X509v3 Authority Key Identifier: keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.235.97.0-109.235.99.255 Signature Algorithm: sha256WithRSAEncryption d5:0b:d7:da:13:29:73:31:63:ee:a4:83:4e:0c:12:82:3e:10: 94:08:0c:9b:1e:ff:5c:11:c6:aa:39:24:70:ec:86:c8:ef:a9: 12:ea:59:56:12:9d:a9:7d:3b:03:2c:d8:46:92:96:ca:39:3f: e5:13:da:67:85:c5:c5:b5:96:35:6e:17:86:5e:b8:62:19:92: 40:3a:87:1c:c0:3c:9a:72:7d:62:ab:90:e9:65:f9:92:fa:6f: 22:af:2b:df:0c:a2:3c:c6:4f:50:af:2b:dc:b2:c0:e8:6e:14: 00:7d:bf:f6:ee:85:29:df:4b:20:1a:66:c8:92:f6:59:6b:ba: a9:61:f8:01:83:eb:a5:a4:b6:0a:70:78:88:7b:49:91:10:f8: f2:49:cf:a5:ad:b3:0c:4a:c5:92:e1:d3:0f:df:e1:d5:2f:b5: bb:61:54:0b:35:65:3e:02:09:85:b4:96:57:d7:f2:23:af:c0: 86:77:a5:e1:29:a6:95:45:6a:1a:b2:d2:11:75:50:46:a2:5c: 8d:1a:63:8f:28:89:0e:82:22:45:d7:da:f3:2d:a9:ee:61:bb: a5:f4:38:b8:58:5f:d7:50:72:12:70:bf:02:b8:ed:49:58:e8: 12:f6:53:c1:20:fb:a3:5e:bb:03:5f:f8:5c:87:01:5f:e0:18: 8b:e5:02:d8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8fxo2nMXFlvD/StUKuixHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZGYxMjU5YjNhYTFkZTM0ZDEzZDFkODYzMTc4ODY0ZDlk MTg1Y2IwHhcNMjYwMTAyMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzkwZmQ0ZWY4YmQyYThjZGFkYmY5YjFiNzNjNDk0MmFmZWNmYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWp2JK33rA3G/Spcm3AdYiH4+jjJ w0A6XA5NTLxHSZaf/Yjf6oVVRK5SZpqt+Kp2egG88xyPZKCLK1Z4XOMZcyP5ECIP ZRrjoOQ/EAwShRMhnyQZ2Zn8a7b+DZEtB8O7b5SSZM6ed8KzhaWHXi66ohxeHbP4 wGCn957V3Qvkdjo/rc9MFaxb/7y+Ug/WbIPKlpanZGPwk/vggYSNiMvk8y+no6Q9 qYd76l+r7UrrCPgpYfJoDykdnxKzRk549WLY6gS1bUReUJf7bS1UYXH6HHLYZlDq /vTrn+nlDyjdsDOklsms2plYKqBLUTML1C9cVaO392Fiy6DSCp9HWouVxQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJeQ/U74vSqM2tv5sbc8SUKv7PrNMB8GA1UdIwQY MBaAFIbfElmzqh3jTRPR2GMXiGTZ0YXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQt YTUxYWEyM2E4ZmRkLzEvbDVEOVR2aTlLb3phMl9teHR6eEpRcV9zLXMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQtYTUxYWEyM2E4ZmRk LzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABt62ED BAJt62AwDQYJKoZIhvcNAQELBQADggEBANUL19oTKXMxY+6kg04MEoI+EJQIDJse /1wRxqo5JHDshsjvqRLqWVYSnal9OwMs2EaSlso5P+UT2meFxcW1ljVuF4ZeuGIZ kkA6hxzAPJpyfWKrkOll+ZL6byKvK98MojzGT1CvK9yywOhuFAB9v/buhSnfSyAa ZsiS9llruqlh+AGD66WktgpweIh7SZEQ+PJJz6WtswxKxZLh0w/f4dUvtbthVAs1 ZT4CCYW0llfX8iOvwIZ3peEpppVFahqy0hF1UEaiXI0aY48oiQ6CIkXX2vMtqe5h u6X0OLhYX9dQchJwvwK47UlY6BL2U8Eg+6NeuwNf+FyHAV/gGIvlAtg= -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:48 2026 by rpki-client