This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/L9TWZulmOgbRwrR8pCdihrCbfKY.roa File: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (raw, json) Hash identifier: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30= Subject key identifier: 2F:D4:D6:66:E9:66:3A:06:D1:C2:B4:7C:A4:27:62:86:B0:9B:7C:A6 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B7BA3C40EBD8295003C9BC0559ED505CD Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/L9TWZulmOgbRwrR8pCdihrCbfKY.roa Signing time: Thu 01 Jan 2026 22:18:08 +0000 ROA not before: Thu 01 Jan 2026 22:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212792 IP address blocks: 109.107.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c4:0e:bd:82:95:00:3c:9b:c0:55:9e:d5:05:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jan 1 22:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fd4d666e9663a06d1c2b47ca4276286b09b7ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:8a:3e:6c:f8:81:55:b3:39:12:a7:a3:f7: dc:a5:f3:5c:08:77:cf:bf:c0:27:63:f3:c1:4c:8e: 20:d9:36:2a:82:19:da:9d:0e:6c:95:54:79:e5:88: db:bf:b6:37:d5:dd:8f:f6:29:0e:fa:72:90:f1:59: 9a:88:57:69:c2:5b:18:8e:38:ae:67:91:1f:72:fa: 66:e3:67:6b:1d:34:68:81:8f:ca:80:92:cb:70:4a: 5e:1d:3b:ae:4b:f9:88:88:bc:0b:74:83:93:8d:99: 36:60:3a:1f:69:52:2f:61:ae:b8:c8:13:8f:ed:44: 6f:01:01:2c:18:99:62:cf:b6:33:9b:e5:14:9c:be: a6:04:cb:00:d2:be:2e:6e:0c:44:b3:9b:b1:f7:0b: 01:0c:ba:8a:42:6e:52:d7:e7:be:96:83:50:6c:7e: c3:67:b9:c6:9a:35:14:57:81:28:b1:c6:11:df:5b: 5d:7e:5b:93:85:f5:26:20:01:49:25:f5:4e:ee:df: 7d:f8:93:08:c8:ee:3b:e8:e5:d7:18:ff:c2:f9:4a: 20:3b:f6:d0:6e:d5:74:9a:c5:cc:39:35:02:58:a6: 5c:6b:5c:06:32:66:45:d7:79:d8:54:da:09:fd:51: 72:f3:a0:3a:3b:24:c0:bf:96:e5:87:1a:4b:51:ab: e4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D4:D6:66:E9:66:3A:06:D1:C2:B4:7C:A4:27:62:86:B0:9B:7C:A6 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/L9TWZulmOgbRwrR8pCdihrCbfKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.183.0/24 Signature Algorithm: sha256WithRSAEncryption ee:72:57:89:1e:a3:d2:76:31:31:b0:b8:62:15:4a:4b:42:b9: d4:0c:8a:ad:f8:29:b1:76:0f:4b:83:91:96:ac:2c:8d:a1:f5: 09:97:f2:c4:e8:8c:08:13:2f:c8:18:36:2a:31:71:30:d8:33: af:2b:22:4c:44:85:52:63:5f:b6:01:ca:1e:79:b9:86:36:53: 7a:f8:b1:d3:4f:2d:2e:10:b8:7f:e5:27:b2:54:77:2e:87:84: b4:77:02:0b:e0:d8:71:c1:6e:d9:d8:6b:c1:b9:fd:5e:77:91: 38:17:b5:38:c4:83:5c:87:cc:c6:df:6d:11:36:15:7b:cd:11: c0:89:2b:15:4c:0e:f6:c7:2b:db:b2:a7:c9:45:62:c3:c2:9e: 23:18:f2:97:fa:c0:69:37:f8:32:62:d1:52:06:ee:e8:bd:71: 7e:7d:76:b0:10:e8:e2:3e:40:54:70:67:32:89:51:84:9b:a2: cf:0b:54:45:d4:ed:2e:f3:ce:af:95:cb:7a:0f:ac:ce:11:4e: 7a:ff:e1:e4:ce:a7:68:a0:91:a8:5b:5b:fb:c0:b1:01:11:cc: 7c:69:56:38:d3:62:08:73:de:bd:26:6e:5a:ef:a2:8e:4e:98: f5:ae:85:80:f4:27:75:60:e3:dd:7e:2d:c2:e2:7b:52:a2:79: 1f:0d:aa:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8QOvYKVADybwFWe1QXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMTAxMjIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmQ0ZDY2NmU5NjYzYTA2ZDFjMmI0N2NhNDI3NjI4NmIwOWI3Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tiKPmz4gVWzORKno/fcpfNcCHfP v8AnY/PBTI4g2TYqghnanQ5slVR55Yjbv7Y31d2P9ikO+nKQ8VmaiFdpwlsYjjiu Z5Efcvpm42drHTRogY/KgJLLcEpeHTuuS/mIiLwLdIOTjZk2YDofaVIvYa64yBOP 7URvAQEsGJliz7Yzm+UUnL6mBMsA0r4ubgxEs5ux9wsBDLqKQm5S1+e+loNQbH7D Z7nGmjUUV4EoscYR31tdfluThfUmIAFJJfVO7t99+JMIyO476OXXGP/C+UogO/bQ btV0msXMOTUCWKZca1wGMmZF13nYVNoJ/VFy86A6OyTAv5blhxpLUavknwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC/U1mbpZjoG0cK0fKQnYoawm3ymMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvTDlUV1p1bG1PZ2JSd3JSOHBDZGlockNiZktZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWu3MA0G CSqGSIb3DQEBCwUAA4IBAQDucleJHqPSdjExsLhiFUpLQrnUDIqt+Cmxdg9Lg5GW rCyNofUJl/LE6IwIEy/IGDYqMXEw2DOvKyJMRIVSY1+2AcoeebmGNlN6+LHTTy0u ELh/5SeyVHcuh4S0dwIL4NhxwW7Z2GvBuf1ed5E4F7U4xINch8zG320RNhV7zRHA iSsVTA72xyvbsqfJRWLDwp4jGPKX+sBpN/gyYtFSBu7ovXF+fXawEOjiPkBUcGcy iVGEm6LPC1RF1O0u886vlct6D6zOEU56/+HkzqdooJGoW1v7wLEBEcx8aVY402II c969Jm5a76KOTpj1roWA9Cd1YOPdfi3C4ntSonkfDaqT -----END CERTIFICATE-----Generated at Wed Jan 21 19:41:25 2026 by rpki-client