This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/NMzuJZbxOy1LB40urUAindiN9YQ.roa File: NMzuJZbxOy1LB40urUAindiN9YQ.roa (raw, json) Hash identifier: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M= Subject key identifier: 34:CC:EE:25:96:F1:3B:2D:4B:07:8D:2E:AD:40:22:9D:D8:8D:F5:84 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B7BA3C5FF0673552B47673E76C8F5F94F Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/NMzuJZbxOy1LB40urUAindiN9YQ.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216246 IP address blocks: 109.107.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c5:ff:06:73:55:2b:47:67:3e:76:c8:f5:f9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34ccee2596f13b2d4b078d2ead40229dd88df584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:ba:99:f1:8f:87:b0:72:6b:da:78:4d:f2: 17:11:dd:ca:bb:64:bb:28:b5:f5:6f:e0:5d:e0:15: b3:63:fc:9f:2d:0e:a4:06:3a:a4:91:f0:a4:ff:3f: 05:2e:dd:0c:8d:3f:db:06:61:b9:a2:c9:e2:02:54: 94:ec:12:47:0f:3d:21:5c:78:d3:11:dd:8f:77:39: 8c:44:6b:e5:fa:62:0e:4f:fc:4c:a5:c4:35:03:eb: 18:8b:71:62:f6:1a:2c:85:82:66:f2:eb:57:e3:27: 9a:59:ce:e0:07:d7:73:08:8b:f4:3e:9a:04:c2:f1: 23:9b:c4:73:84:39:00:1d:98:00:49:d6:07:b5:27: 07:35:e2:67:44:d8:d0:e6:2f:1f:f7:df:d9:ae:6f: 3e:b8:93:0f:bf:fa:92:94:ef:b5:cb:53:e5:12:ec: 97:41:0d:0a:7d:ee:69:0f:08:01:66:af:37:a0:8b: 31:c7:61:98:9c:9b:b5:a2:9b:09:7a:a4:0a:f6:31: d8:9b:1f:16:8d:14:4d:f0:3c:43:a5:41:83:88:25: 8e:f4:cb:0f:5c:7a:f3:d5:be:35:d2:85:c4:8b:f1: cc:7f:c6:45:0d:4f:73:39:85:fc:32:ed:37:c6:9b: a8:12:98:07:bd:11:21:cc:62:3a:6b:61:d4:ca:ee: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CC:EE:25:96:F1:3B:2D:4B:07:8D:2E:AD:40:22:9D:D8:8D:F5:84 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/NMzuJZbxOy1LB40urUAindiN9YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.189.0/24 Signature Algorithm: sha256WithRSAEncryption c7:82:fa:46:48:59:63:f3:27:38:9c:87:97:ec:a9:5e:3e:06: 69:bf:85:95:94:ad:48:f6:65:d4:09:73:18:1f:9b:57:18:d2: 62:ea:8b:a5:31:b6:b6:a7:ff:5b:3e:21:74:93:22:16:12:48: b4:c8:8c:fa:2e:99:eb:27:15:52:5e:c0:7b:6f:88:6f:d1:e2: b3:78:6a:4a:49:39:3c:5b:8b:69:86:ef:c9:2a:cd:6d:27:7c: 8e:5a:cd:01:7f:65:5a:a9:db:8c:c9:80:7b:c0:47:f3:3c:c0: 2e:5a:44:f0:b1:bb:d4:de:c5:2e:fc:54:94:2d:aa:36:11:32: 68:83:32:35:47:4d:f6:20:90:88:7f:3f:09:93:a7:4f:7c:12: 23:e7:5a:d7:a0:a2:2b:b9:5d:3b:3f:df:19:cc:0e:8f:b9:d8: 22:12:b0:18:e5:59:17:9f:48:a2:37:09:b9:db:83:0c:a2:49: f5:5c:95:0f:19:e2:c3:d9:b4:77:01:b6:31:ac:5a:f1:41:cd: 51:33:13:9b:48:e9:f8:1c:b8:f5:92:83:61:60:c1:d0:e7:fc: 59:32:05:bc:d5:fc:fd:2f:e1:fa:40:2c:90:0a:7c:ff:28:5e: 7d:f0:05:da:1a:2e:69:ed:9b:a4:b2:d9:d8:c2:6a:d5:41:bf: 0c:f5:94:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8X/BnNVK0dnPnbI9flPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGNjZWUyNTk2ZjEzYjJkNGIwNzhkMmVhZDQwMjI5ZGQ4OGRmNTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpu6mfGPh7Bya9p4TfIXEd3Ku2S7 KLX1b+Bd4BWzY/yfLQ6kBjqkkfCk/z8FLt0MjT/bBmG5osniAlSU7BJHDz0hXHjT Ed2PdzmMRGvl+mIOT/xMpcQ1A+sYi3Fi9hoshYJm8utX4yeaWc7gB9dzCIv0PpoE wvEjm8RzhDkAHZgASdYHtScHNeJnRNjQ5i8f99/Zrm8+uJMPv/qSlO+1y1PlEuyX QQ0Kfe5pDwgBZq83oIsxx2GYnJu1opsJeqQK9jHYmx8WjRRN8DxDpUGDiCWO9MsP XHrz1b410oXEi/HMf8ZFDU9zOYX8Mu03xpuoEpgHvREhzGI6a2HUyu5fNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDTM7iWW8TstSweNLq1AIp3YjfWEMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvTk16dUpaYnhPeTFMQjQwdXJVQWluZGlOOVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWu9MA0G CSqGSIb3DQEBCwUAA4IBAQDHgvpGSFlj8yc4nIeX7KlePgZpv4WVlK1I9mXUCXMY H5tXGNJi6oulMba2p/9bPiF0kyIWEki0yIz6LpnrJxVSXsB7b4hv0eKzeGpKSTk8 W4tphu/JKs1tJ3yOWs0Bf2VaqduMyYB7wEfzPMAuWkTwsbvU3sUu/FSULao2ETJo gzI1R032IJCIfz8Jk6dPfBIj51rXoKIruV07P98ZzA6PudgiErAY5VkXn0iiNwm5 24MMokn1XJUPGeLD2bR3AbYxrFrxQc1RMxObSOn4HLj1koNhYMHQ5/xZMgW81fz9 L+H6QCyQCnz/KF598AXaGi5p7ZukstnYwmrVQb8M9ZTl -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:49 2026 by rpki-client