This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/cyPQOcdzS_4SfdQdVz0CqSZMdww.roa File: cyPQOcdzS_4SfdQdVz0CqSZMdww.roa (raw, json) Hash identifier: 0WNUn7RLirYyARkbquAfInmWqcScy7Jj0jC1hD9xaio= Subject key identifier: 73:23:D0:39:C7:73:4B:FE:12:7D:D4:1D:57:3D:02:A9:26:4C:77:0C Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B7BA3C1E933CC24C491777951C1B31E85 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/cyPQOcdzS_4SfdQdVz0CqSZMdww.roa Signing time: Thu 01 Jan 2026 22:18:07 +0000 ROA not before: Thu 01 Jan 2026 22:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52000 IP address blocks: 109.107.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c1:e9:33:cc:24:c4:91:77:79:51:c1:b3:1e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jan 1 22:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7323d039c7734bfe127dd41d573d02a9264c770c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:79:b1:9c:95:57:9c:4e:09:ca:59:9b:f8: a5:1c:be:f3:27:7c:ed:d4:2d:46:6e:69:fd:17:a2: 59:fb:bf:38:d7:59:36:bc:3b:56:c8:28:36:64:ae: 26:e6:8e:af:86:95:50:70:0e:a5:74:f2:21:70:3e: 89:bf:5b:e2:f6:19:c8:f5:9d:11:e3:28:b3:f1:fc: e7:84:74:40:b6:7c:6b:a4:8c:2d:34:33:da:36:f2: 9b:2b:36:78:61:9c:d6:1b:e7:cb:78:ed:9d:87:c2: db:27:dd:d7:7e:a1:45:11:61:81:d9:d6:5f:2d:a9: dc:50:d5:99:22:10:46:bc:cd:b5:7b:60:04:4c:66: 8d:6c:9c:9c:d6:3b:47:17:96:0f:01:c6:14:db:7c: 66:cb:84:16:42:61:59:36:79:78:bc:e0:70:20:ac: 9a:bc:7a:ce:7d:ce:16:56:75:08:af:5a:ae:dd:d1: 39:9c:63:e9:4d:54:63:31:f6:e2:db:cb:92:6a:71: 3d:a1:f7:e9:51:7b:25:57:b7:c4:27:9e:58:68:e9: 8f:e4:3a:c9:93:b0:cb:36:0b:a1:b9:27:02:8c:6e: ed:3b:67:b5:11:b0:0c:46:fa:56:09:a7:bd:65:a2: c0:03:4a:42:84:2d:13:2f:42:c8:91:2d:7c:83:38: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:23:D0:39:C7:73:4B:FE:12:7D:D4:1D:57:3D:02:A9:26:4C:77:0C X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/cyPQOcdzS_4SfdQdVz0CqSZMdww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.170.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:21:6a:f6:92:56:6f:74:16:73:ff:b0:c8:8f:1b:fe:b5:5e: 9c:1c:b3:42:bc:b0:61:92:4f:a3:34:43:7a:40:66:f6:7e:e7: 6e:56:43:7a:f9:c5:ec:b2:74:78:bb:92:81:62:3e:62:31:1d: 2d:44:16:32:81:5f:bd:7c:a6:70:e7:0a:9e:53:ea:35:ce:52: 6c:84:9f:b6:14:0c:65:7e:26:6d:cd:a3:74:c8:3e:a4:d5:51: 54:5d:fb:d7:a3:3a:6a:23:91:b7:a1:15:c5:87:54:68:b0:2a: c2:03:b9:44:9a:2a:5b:01:80:42:eb:f9:1c:8a:ec:b4:91:b4: bd:88:00:d2:62:ca:31:4a:2f:fd:e7:fc:ca:be:fb:67:e9:3a: 12:f6:db:fc:3b:f5:12:92:a2:c0:ef:27:ff:68:5e:24:bf:ee: f2:02:13:0d:e2:93:a6:68:64:e7:30:2c:60:68:10:2d:0a:55: 28:7b:9d:05:7f:70:f1:ad:84:9b:19:27:5f:f3:ac:ce:ae:e2: a6:4d:d6:6d:f3:db:92:e6:69:93:93:32:29:c0:cb:4f:11:61: e9:88:5a:33:cd:00:e6:76:47:7f:c3:29:0f:b9:ce:78:f3:6c: 04:2c:7e:86:9d:8d:b3:36:11:bb:06:62:16:61:d4:8a:f9:52: 44:6a:60:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8HpM8wkxJF3eVHBsx6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMTAxMjIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzIzZDAzOWM3NzM0YmZlMTI3ZGQ0MWQ1NzNkMDJhOTI2NGM3NzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgd5sZyVV5xOCcpZm/ilHL7zJ3zt 1C1Gbmn9F6JZ+78411k2vDtWyCg2ZK4m5o6vhpVQcA6ldPIhcD6Jv1vi9hnI9Z0R 4yiz8fznhHRAtnxrpIwtNDPaNvKbKzZ4YZzWG+fLeO2dh8LbJ93XfqFFEWGB2dZf LancUNWZIhBGvM21e2AETGaNbJyc1jtHF5YPAcYU23xmy4QWQmFZNnl4vOBwIKya vHrOfc4WVnUIr1qu3dE5nGPpTVRjMfbi28uSanE9offpUXslV7fEJ55YaOmP5DrJ k7DLNguhuScCjG7tO2e1EbAMRvpWCae9ZaLAA0pChC0TL0LIkS18gzjofQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHMj0DnHc0v+En3UHVc9AqkmTHcMMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvY3lQUU9jZHpTXzRTZmRRZFZ6MENxU1pNZHd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuqMA0G CSqGSIb3DQEBCwUAA4IBAQBbIWr2klZvdBZz/7DIjxv+tV6cHLNCvLBhkk+jNEN6 QGb2fuduVkN6+cXssnR4u5KBYj5iMR0tRBYygV+9fKZw5wqeU+o1zlJshJ+2FAxl fiZtzaN0yD6k1VFUXfvXozpqI5G3oRXFh1RosCrCA7lEmipbAYBC6/kciuy0kbS9 iADSYsoxSi/95/zKvvtn6ToS9tv8O/USkqLA7yf/aF4kv+7yAhMN4pOmaGTnMCxg aBAtClUoe50Ff3DxrYSbGSdf86zOruKmTdZt89uS5mmTkzIpwMtPEWHpiFozzQDm dkd/wykPuc5482wELH6GnY2zNhG7BmIWYdSK+VJEamDf -----END CERTIFICATE-----Generated at Thu Jan 8 23:54:42 2026 by rpki-client