This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa File: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (raw, json) Hash identifier: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg= Subject key identifier: FB:0C:CB:66:01:EF:A1:3B:4A:94:95:30:88:C5:87:D8:57:0C:1B:64 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B7BA3C0F0D1DD8958353AFEAF33A7397E Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa Signing time: Thu 01 Jan 2026 22:18:07 +0000 ROA not before: Thu 01 Jan 2026 22:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51765 IP address blocks: 109.107.171.0/24 maxlen: 24 109.107.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c0:f0:d1:dd:89:58:35:3a:fe:af:33:a7:39:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jan 1 22:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb0ccb6601efa13b4a94953088c587d8570c1b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:eb:7f:5b:70:7b:af:01:25:13:72:05:01: 58:ac:7f:e5:e6:59:65:1e:57:bc:da:6b:32:57:ee: 90:f6:a5:59:e4:b3:a0:e4:0e:07:9f:e4:93:6d:b4: 49:e1:53:91:70:64:c3:f2:33:f8:7a:28:77:5f:c8: 8d:ea:c9:2f:b0:f3:5e:8b:5e:a9:0d:db:07:4b:61: 70:39:93:2f:9a:0f:f0:f8:08:49:d1:ed:1a:87:6e: b5:09:a1:cf:1c:44:3b:7d:ed:cc:3e:fd:5f:a3:16: 05:14:7a:06:4f:87:d1:33:48:2f:8d:cb:8a:6d:72: dd:4c:3e:99:cd:74:25:1f:54:3d:5d:16:0e:cc:5f: 04:21:63:6f:5c:77:e4:05:de:cd:d1:e7:c1:f9:cc: 07:e3:14:64:62:f0:c9:4d:d6:9d:fe:aa:e5:a1:44: 38:65:b9:ff:fb:23:4d:6b:4b:27:b7:e6:e2:0f:52: 7a:ef:bc:72:48:6d:87:54:fa:30:97:8e:0c:31:cd: 90:de:77:55:ae:66:79:bf:4e:ea:68:99:96:b0:42: 63:81:ae:9a:c8:47:52:13:94:ea:99:ac:f5:2e:d7: f1:3a:e1:78:af:b4:63:09:96:68:89:58:2f:0e:d2: ad:cb:97:db:d2:8f:cd:b1:80:01:2d:7a:4a:7f:f2: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0C:CB:66:01:EF:A1:3B:4A:94:95:30:88:C5:87:D8:57:0C:1B:64 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.171.0/24 109.107.182.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:b9:b7:95:54:86:75:a4:18:9e:6a:c6:37:ab:9c:7f:a1:aa: c5:05:ff:e7:e0:2f:2f:d9:04:4f:34:06:65:a3:17:fd:fd:9a: 35:f5:c6:f6:63:be:9f:75:2d:89:19:c8:f4:2a:5c:08:01:89: bc:49:f3:77:ec:5b:4f:fc:aa:a2:3c:b0:fe:10:d3:59:a7:08: 63:77:1c:d5:0e:02:2b:32:44:9d:b1:6f:6e:bd:85:e2:d9:74: 81:86:1a:d5:d6:40:07:f4:95:d2:bb:98:ee:e3:2b:3a:de:f4: 68:c3:b5:e8:88:6d:7b:02:56:76:1e:19:1b:1e:2c:63:7f:cd: 85:0c:07:6b:74:d1:dc:15:dd:3b:60:0a:96:d5:85:dd:78:09: 98:15:7a:d6:f2:59:59:3a:9f:18:ef:90:d3:40:86:79:b5:26: 75:52:28:2e:a5:ea:ac:ed:67:83:bc:9f:f5:e9:30:64:49:e1: 63:5b:e6:1e:8b:64:7a:77:70:0e:17:f5:e6:1f:10:ca:de:0d: 3d:1c:ff:85:3a:6d:f2:6a:f6:55:5b:a1:35:13:f3:ca:16:3c: b8:77:fd:66:0b:2e:23:45:70:94:a8:ff:83:b8:17:07:d2:30: 61:85:0d:16:47:ae:0d:d7:b3:f5:d0:0b:96:e4:bb:78:9f:5b: 92:10:9b:6e -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt7o8Dw0d2JWDU6/q8zpzl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMTAxMjIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjBjY2I2NjAxZWZhMTNiNGE5NDk1MzA4OGM1ODdkODU3MGMxYjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupLrf1twe68BJRNyBQFYrH/l5lll Hle82msyV+6Q9qVZ5LOg5A4Hn+STbbRJ4VORcGTD8jP4eih3X8iN6skvsPNei16p DdsHS2FwOZMvmg/w+AhJ0e0ah261CaHPHEQ7fe3MPv1foxYFFHoGT4fRM0gvjcuK bXLdTD6ZzXQlH1Q9XRYOzF8EIWNvXHfkBd7N0efB+cwH4xRkYvDJTdad/qrloUQ4 Zbn/+yNNa0snt+biD1J677xySG2HVPowl44MMc2Q3ndVrmZ5v07qaJmWsEJjga6a yEdSE5Tqmaz1LtfxOuF4r7RjCZZoiVgvDtKty5fb0o/NsYABLXpKf/LQZwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPsMy2YB76E7SpSVMIjFh9hXDBtkMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvMS13ekxaZ0h2b1R0S2xKVXdpTVdIMkZjTUcyUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmQvYzdlZTllLWI1YmYtNGMyZC1hOTgzLWRlZTNlZDQ5N2Fl ZS8xL0JlbjhvS2hZVC1zY0VqR1FjVUl3WWJDUDVGWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAG1rqwME AG1rtjANBgkqhkiG9w0BAQsFAAOCAQEATbm3lVSGdaQYnmrGN6ucf6GqxQX/5+Av L9kETzQGZaMX/f2aNfXG9mO+n3UtiRnI9CpcCAGJvEnzd+xbT/yqojyw/hDTWacI Y3cc1Q4CKzJEnbFvbr2F4tl0gYYa1dZAB/SV0ruY7uMrOt70aMO16IhtewJWdh4Z Gx4sY3/NhQwHa3TR3BXdO2AKltWF3XgJmBV61vJZWTqfGO+Q00CGebUmdVIoLqXq rO1ng7yf9ekwZEnhY1vmHotkendwDhf15h8Qyt4NPRz/hTpt8mr2VVuhNRPzyhY8 uHf9ZgsuI0VwlKj/g7gXB9IwYYUNFkeuDdez9dALluS7eJ9bkhCbbg== -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:56 2026 by rpki-client