This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa File: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (raw, json) Hash identifier: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c= Subject key identifier: 7F:45:69:82:B0:17:69:3D:E8:57:16:43:38:45:36:89:5D:62:35:26 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B7BA3C03935CCB58D9ECC67C9A93D69AF Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa Signing time: Thu 01 Jan 2026 22:18:07 +0000 ROA not before: Thu 01 Jan 2026 22:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48030 IP address blocks: 109.107.160.0/24 maxlen: 24 109.107.180.0/24 maxlen: 24 109.107.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c0:39:35:cc:b5:8d:9e:cc:67:c9:a9:3d:69:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jan 1 22:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f456982b017693de8571643384536895d623526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:ff:76:fa:59:af:1c:d3:b9:24:a7:87:42: 31:1d:af:d2:b1:fe:4c:ad:70:a0:5c:c3:7b:31:6a: 86:2b:f9:d9:39:23:aa:7f:93:54:e3:a7:73:ab:18: 05:1d:8a:41:5c:03:8a:0b:0c:fc:15:74:27:24:5d: 12:a2:b5:48:ed:f7:e5:80:af:5d:9e:b7:4c:10:2c: 5c:13:ea:b4:fb:a3:5a:10:e4:85:66:02:98:ce:3a: 37:9b:3f:52:c4:8d:d1:8e:a7:a5:64:a5:0d:71:10: 87:78:4b:de:61:86:fd:1e:27:fa:a6:f8:74:68:36: 8d:01:63:38:32:ab:3d:ef:87:86:0f:c9:2c:45:e7: b6:ef:06:80:ac:d1:c2:82:6a:95:18:f1:81:7e:82: fa:3b:58:86:46:7a:f9:6c:12:11:ba:00:ec:c3:7a: 7b:04:ec:2e:6c:2a:56:0e:b0:a3:89:e7:e7:ae:c2: f4:c5:3d:53:5a:df:2f:ed:43:35:67:0f:1f:c6:92: 33:c0:b1:b7:23:9e:98:7c:b6:17:ea:54:90:88:c4: b9:b9:66:8e:6a:63:03:db:af:89:f4:39:b7:20:c2: 21:d9:02:78:18:5f:7e:02:9b:14:1a:46:2b:d1:b7: 35:52:4b:0f:ba:d2:2e:0d:2f:ce:6b:fe:76:63:b6: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:45:69:82:B0:17:69:3D:E8:57:16:43:38:45:36:89:5D:62:35:26 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.160.0/24 109.107.180.0/24 109.107.191.0/24 Signature Algorithm: sha256WithRSAEncryption 35:a4:3b:9b:60:ea:37:94:df:1a:e7:f6:df:09:70:ea:43:f6: 1f:35:6d:39:2a:e4:97:56:fb:50:61:a7:a2:da:ab:f8:d9:0e: 81:e5:6d:25:6d:ec:40:56:d7:79:ab:8d:15:df:dc:1d:02:08: 02:37:01:12:63:d3:14:7a:14:a0:33:39:f3:51:7b:17:e9:bc: 75:30:71:69:a4:7a:a6:84:c3:a4:14:6f:0b:03:31:af:9f:b8: 04:44:1a:58:86:de:91:0c:c8:a4:03:5a:15:fa:cd:76:5c:a8: 1a:3b:ce:7a:94:92:a3:85:f7:37:0e:c6:6c:0b:90:97:91:7e: 89:78:37:20:c2:64:25:4d:01:f7:92:d0:19:56:a8:4a:a8:55: 1f:17:d4:9e:82:49:1d:a6:6d:f4:a8:36:c6:65:57:a5:50:5d: 64:f1:b2:cc:3a:a6:30:6e:e9:90:79:13:41:5a:25:25:7a:d6: 86:5e:ec:32:1a:10:33:95:06:45:d1:93:db:c0:75:37:d2:21: 9f:9e:9e:7b:65:5e:fb:25:1c:05:24:6b:fe:02:e3:d8:81:fa: 1e:89:0a:5c:54:95:ab:f7:5f:93:96:69:2f:16:5d:1d:6b:dd: 3a:87:af:7e:64:2e:1f:2a:fb:9d:d5:5e:c1:32:c6:74:3e:24: bf:ca:c7:8c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o8A5Ncy1jZ7MZ8mpPWmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMTAxMjIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjQ1Njk4MmIwMTc2OTNkZTg1NzE2NDMzODQ1MzY4OTVkNjIzNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz7/dvpZrxzTuSSnh0IxHa/Ssf5M rXCgXMN7MWqGK/nZOSOqf5NU46dzqxgFHYpBXAOKCwz8FXQnJF0SorVI7fflgK9d nrdMECxcE+q0+6NaEOSFZgKYzjo3mz9SxI3RjqelZKUNcRCHeEveYYb9Hif6pvh0 aDaNAWM4Mqs974eGD8ksRee27waArNHCgmqVGPGBfoL6O1iGRnr5bBIRugDsw3p7 BOwubCpWDrCjiefnrsL0xT1TWt8v7UM1Zw8fxpIzwLG3I56YfLYX6lSQiMS5uWaO amMD26+J9Dm3IMIh2QJ4GF9+ApsUGkYr0bc1UksPutIuDS/Oa/52Y7Y0lwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH9FaYKwF2k96FcWQzhFNoldYjUmMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvZjBWcGdyQVhhVDNvVnhaRE9FVTJpVjFpTlNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbWugAwQA bWu0AwQAbWu/MA0GCSqGSIb3DQEBCwUAA4IBAQA1pDubYOo3lN8a5/bfCXDqQ/Yf NW05KuSXVvtQYaei2qv42Q6B5W0lbexAVtd5q40V39wdAggCNwESY9MUehSgMznz UXsX6bx1MHFppHqmhMOkFG8LAzGvn7gERBpYht6RDMikA1oV+s12XKgaO856lJKj hfc3DsZsC5CXkX6JeDcgwmQlTQH3ktAZVqhKqFUfF9Segkkdpm30qDbGZVelUF1k 8bLMOqYwbumQeRNBWiUletaGXuwyGhAzlQZF0ZPbwHU30iGfnp57ZV77JRwFJGv+ AuPYgfoeiQpcVJWr91+TlmkvFl0da906h69+ZC4fKvud1V7BMsZ0PiS/yseM -----END CERTIFICATE-----Generated at Wed Jan 21 19:41:25 2026 by rpki-client