This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/jkeoRlUiAeo681KZqVdOpuHmKaA.roa File: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (raw, json) Hash identifier: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U= Subject key identifier: 8E:47:A8:46:55:22:01:EA:3A:F3:52:99:A9:57:4E:A6:E1:E6:29:A0 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B7BA3C4782E1D849CC05C960E1E875198 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/jkeoRlUiAeo681KZqVdOpuHmKaA.roa Signing time: Thu 01 Jan 2026 22:18:08 +0000 ROA not before: Thu 01 Jan 2026 22:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213369 IP address blocks: 109.107.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c4:78:2e:1d:84:9c:c0:5c:96:0e:1e:87:51:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jan 1 22:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e47a846552201ea3af35299a9574ea6e1e629a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:fa:2f:24:1f:33:78:be:50:55:5e:0e:02: e1:16:df:00:07:4a:25:0b:c1:c5:2d:3d:54:19:d4: 11:9c:66:a1:ad:af:56:2c:50:05:92:59:56:de:f1: 26:96:d4:9a:c5:68:b6:33:92:b1:17:16:1b:46:27: 80:49:6e:dc:36:42:62:f3:fa:eb:20:0f:22:61:2d: ff:23:a6:80:9e:38:20:b2:a3:3a:dd:cf:2a:80:b4: 2e:c9:77:55:4b:1a:29:0d:d0:c7:64:cc:5a:af:8f: fe:d6:97:ad:d7:b5:bb:eb:24:8f:e9:dc:94:0a:7d: 82:36:34:8f:00:94:16:4c:5c:e7:f8:c2:9e:2c:63: 17:c5:92:7c:ee:ef:8f:62:3b:70:91:cf:bc:b0:1f: d6:6e:9c:69:db:57:0b:0f:04:9b:9d:07:a3:8a:4d: ef:0c:96:0b:f3:38:13:27:e7:a0:ed:d5:81:b8:ba: 23:a7:0a:8b:33:65:c6:59:ee:e6:d9:1e:76:6c:2a: b6:bc:db:c3:67:07:43:0e:9a:7c:09:f6:12:d9:15: 13:db:db:b6:7b:87:20:c4:98:cf:28:55:e2:e6:23: 35:93:5c:82:5e:24:70:e8:7a:32:14:3e:d9:74:1f: c5:ab:69:1c:44:84:d5:b3:fb:6a:fd:56:0b:86:26: 0b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:47:A8:46:55:22:01:EA:3A:F3:52:99:A9:57:4E:A6:E1:E6:29:A0 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/jkeoRlUiAeo681KZqVdOpuHmKaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.162.0/23 Signature Algorithm: sha256WithRSAEncryption 18:b1:cf:39:99:ca:95:c5:7f:6e:2e:49:7d:de:62:47:a4:f3: 15:2d:84:bf:ee:10:47:91:b2:42:ee:7e:89:e9:e7:5a:7a:01: 9e:0f:e3:a1:9c:2f:37:73:4b:dd:a7:8c:87:c2:ca:21:f5:e3: bb:0c:1c:83:c3:e8:af:8c:76:c4:d2:13:b7:24:7c:95:39:6d: b4:5d:19:44:44:26:57:8b:b1:86:9e:dd:2e:94:a5:50:00:00: a8:4d:2a:0a:49:51:e7:2a:ed:b8:5b:94:28:c9:7c:f2:33:30: 60:7c:11:8e:7a:04:64:fe:50:5e:f9:72:2f:b4:85:96:e7:36: 25:4c:af:04:45:6e:c0:64:33:53:92:97:b7:a7:93:92:1f:90: 84:83:98:ff:d1:90:ad:88:99:4a:3c:94:1e:44:1f:69:7e:dd: 99:f3:11:97:b4:08:58:d7:35:20:48:bb:64:1e:05:c7:02:e9: 38:c6:99:89:58:d5:97:fb:ec:5e:f3:a6:a6:39:49:74:fd:f3: c0:3f:1c:3b:a0:d0:b2:2b:31:69:59:3d:5a:f1:15:ae:94:cd: a3:7d:79:e0:94:29:71:9f:ac:8d:f3:2c:ba:89:d0:4e:7d:93: 45:15:12:62:25:5b:63:4d:cb:bf:43:4b:e3:a1:be:c0:ad:72: bf:35:a1:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8R4Lh2EnMBclg4eh1GYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMTAxMjIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTQ3YTg0NjU1MjIwMWVhM2FmMzUyOTlhOTU3NGVhNmUxZTYyOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR/6LyQfM3i+UFVeDgLhFt8AB0ol C8HFLT1UGdQRnGahra9WLFAFkllW3vEmltSaxWi2M5KxFxYbRieASW7cNkJi8/rr IA8iYS3/I6aAnjggsqM63c8qgLQuyXdVSxopDdDHZMxar4/+1pet17W76ySP6dyU Cn2CNjSPAJQWTFzn+MKeLGMXxZJ87u+PYjtwkc+8sB/Wbpxp21cLDwSbnQejik3v DJYL8zgTJ+eg7dWBuLojpwqLM2XGWe7m2R52bCq2vNvDZwdDDpp8CfYS2RUT29u2 e4cgxJjPKFXi5iM1k1yCXiRw6HoyFD7ZdB/Fq2kcRITVs/tq/VYLhiYLLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI5HqEZVIgHqOvNSmalXTqbh5imgMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvamtlb1JsVWlBZW82ODFLWnFWZE9wdUhtS2FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbWuiMA0G CSqGSIb3DQEBCwUAA4IBAQAYsc85mcqVxX9uLkl93mJHpPMVLYS/7hBHkbJC7n6J 6edaegGeD+OhnC83c0vdp4yHwsoh9eO7DByDw+ivjHbE0hO3JHyVOW20XRlERCZX i7GGnt0ulKVQAACoTSoKSVHnKu24W5QoyXzyMzBgfBGOegRk/lBe+XIvtIWW5zYl TK8ERW7AZDNTkpe3p5OSH5CEg5j/0ZCtiJlKPJQeRB9pft2Z8xGXtAhY1zUgSLtk HgXHAuk4xpmJWNWX++xe86amOUl0/fPAPxw7oNCyKzFpWT1a8RWulM2jfXnglClx n6yN8yy6idBOfZNFFRJiJVtjTcu/Q0vjob7ArXK/NaET -----END CERTIFICATE-----Generated at Wed Jan 21 19:42:42 2026 by rpki-client