This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/IgX0yg7OLyE1FEmaOzvAFNwec_c.roa File: IgX0yg7OLyE1FEmaOzvAFNwec_c.roa (raw, json) Hash identifier: sizb6eBcughEhem8l1JDf+pWnplrlybiAHwSKXoLMaY= Subject key identifier: 22:05:F4:CA:0E:CE:2F:21:35:14:49:9A:3B:3B:C0:14:DC:1E:73:F7 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B7BA3C53EB4D4B379EE9D2CF5D8113E53 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/IgX0yg7OLyE1FEmaOzvAFNwec_c.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216024 IP address blocks: 109.107.171.0/24 maxlen: 24 109.107.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c5:3e:b4:d4:b3:79:ee:9d:2c:f5:d8:11:3e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2205f4ca0ece2f213514499a3b3bc014dc1e73f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:fd:e6:cc:9d:9b:77:32:81:ca:f0:8b:b8: e8:da:68:5b:ac:ea:9a:5f:f8:3b:a7:ea:36:7d:74: 4a:61:d9:86:6a:ec:4f:1f:e0:bc:d0:9f:5d:a9:66: 51:ca:fe:2d:a7:a2:80:ee:c2:25:bb:0a:b7:ad:b4: ed:cb:59:52:3c:e8:b5:15:ac:79:ee:37:0d:3e:9d: 00:b7:cb:a5:f2:27:e5:e0:b0:eb:78:74:1a:dd:bf: d6:8e:db:e0:32:9d:86:96:c2:a0:86:8a:b2:35:d9: d8:08:d6:f9:8a:c3:ec:c8:01:d8:99:23:89:92:e6: 4b:7e:2f:df:15:e6:b9:51:0d:59:0f:3e:15:c1:07: b2:71:c5:70:59:47:b2:ec:01:29:62:99:0a:e1:8d: 6c:78:d7:78:0d:7f:4d:c7:32:ae:8a:ba:80:63:52: a3:40:55:b0:e9:5b:8b:53:b3:81:5b:e5:af:ec:2e: 38:0a:81:4a:05:a8:63:28:27:2e:57:96:ac:7d:ce: 85:dc:b1:c8:c1:3e:3f:69:35:09:64:04:d5:79:61: 6b:31:69:6a:08:f6:5f:5f:fb:03:b7:2c:05:16:7c: 49:ee:45:de:e2:d0:dd:25:e7:3d:f2:1a:f0:89:7d: 3f:e7:a6:17:66:66:4f:46:30:ce:3c:28:ad:56:22: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:05:F4:CA:0E:CE:2F:21:35:14:49:9A:3B:3B:C0:14:DC:1E:73:F7 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/IgX0yg7OLyE1FEmaOzvAFNwec_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.171.0/24 109.107.182.0/24 Signature Algorithm: sha256WithRSAEncryption c3:24:c4:3e:2f:c4:17:a8:3a:24:ab:8f:d1:2f:20:c6:c8:14: 9f:fb:66:25:81:9a:f3:e7:5f:68:80:cf:84:6f:2e:7a:57:e2: bc:d8:e4:70:5a:c6:1d:a9:fc:cb:4c:e9:40:c2:2a:b2:86:26: 56:84:1b:cd:b0:58:01:44:aa:64:1a:97:0b:1b:95:eb:3c:41: 78:2d:98:02:77:42:30:f2:f5:2c:a7:91:e1:15:88:4d:83:fc: e7:4a:62:de:cf:51:be:af:98:84:8a:27:c0:cd:95:6b:5c:1a: 62:0f:70:32:f3:c5:c2:65:6b:99:2e:97:3f:32:ee:70:89:8a: 06:ac:b5:22:e0:59:d0:63:b6:10:87:44:57:89:a1:d3:19:53: 3d:d5:2e:37:c0:48:79:37:29:59:2c:9f:7c:70:f4:16:14:a5: d6:20:c8:61:00:af:44:75:ac:09:52:ac:6e:8f:da:4a:ad:5a: c7:c1:c4:ea:e3:9b:5c:32:0c:aa:b8:71:68:55:7e:b4:81:7e: 58:35:f9:f2:c5:c1:8e:32:fa:8a:65:87:cb:3f:29:25:36:11: 1c:fb:b3:9f:8b:e7:f8:5c:9b:8e:de:f7:bb:b2:88:f2:b5:aa: 8d:94:2e:58:1a:8f:ba:78:c9:5d:46:ec:c6:cc:06:e3:60:83: f5:c2:0c:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o8U+tNSzee6dLPXYET5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjA1ZjRjYTBlY2UyZjIxMzUxNDQ5OWEzYjNiYzAxNGRjMWU3M2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Jj95sydm3cygcrwi7jo2mhbrOqa X/g7p+o2fXRKYdmGauxPH+C80J9dqWZRyv4tp6KA7sIluwq3rbTty1lSPOi1Fax5 7jcNPp0At8ul8ifl4LDreHQa3b/WjtvgMp2GlsKghoqyNdnYCNb5isPsyAHYmSOJ kuZLfi/fFea5UQ1ZDz4VwQeyccVwWUey7AEpYpkK4Y1seNd4DX9NxzKuirqAY1Kj QFWw6VuLU7OBW+Wv7C44CoFKBahjKCcuV5asfc6F3LHIwT4/aTUJZATVeWFrMWlq CPZfX/sDtywFFnxJ7kXe4tDdJec98hrwiX0/56YXZmZPRjDOPCitViKElwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCIF9MoOzi8hNRRJmjs7wBTcHnP3MB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvSWdYMHlnN09MeUUxRkVtYU96dkFGTndlY19jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbWurAwQA bWu2MA0GCSqGSIb3DQEBCwUAA4IBAQDDJMQ+L8QXqDokq4/RLyDGyBSf+2YlgZrz 519ogM+Eby56V+K82ORwWsYdqfzLTOlAwiqyhiZWhBvNsFgBRKpkGpcLG5XrPEF4 LZgCd0Iw8vUsp5HhFYhNg/znSmLez1G+r5iEiifAzZVrXBpiD3Ay88XCZWuZLpc/ Mu5wiYoGrLUi4FnQY7YQh0RXiaHTGVM91S43wEh5NylZLJ98cPQWFKXWIMhhAK9E dawJUqxuj9pKrVrHwcTq45tcMgyquHFoVX60gX5YNfnyxcGOMvqKZYfLPyklNhEc +7Ofi+f4XJuO3ve7sojytaqNlC5YGo+6eMldRuzGzAbjYIP1wgxl -----END CERTIFICATE-----Generated at Wed Jan 21 19:41:25 2026 by rpki-client