This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/db61oXLP39Cp59_X9LRtM_MiXZA.roa File: db61oXLP39Cp59_X9LRtM_MiXZA.roa (raw, json) Hash identifier: 2/tDRp+KE5yxGlSOAf8H33OyX8Awatl3Wh7fusLDcOY= Subject key identifier: 75:BE:B5:A1:72:CF:DF:D0:A9:E7:DF:D7:F4:B4:6D:33:F3:22:5D:90 Certificate issuer: /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a Certificate serial: 019B7E385D35BE0C8E6236D1B833EF7EA24C Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/db61oXLP39Cp59_X9LRtM_MiXZA.roa Signing time: Fri 02 Jan 2026 10:19:41 +0000 ROA not before: Fri 02 Jan 2026 10:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196740 IP address blocks: 109.207.112.0/20 maxlen: 20 109.207.112.0/24 maxlen: 24 109.207.113.0/24 maxlen: 24 109.207.114.0/24 maxlen: 24 109.207.115.0/24 maxlen: 24 109.207.116.0/24 maxlen: 24 109.207.117.0/24 maxlen: 24 109.207.118.0/24 maxlen: 24 109.207.119.0/24 maxlen: 24 109.207.120.0/24 maxlen: 24 109.207.121.0/24 maxlen: 24 109.207.122.0/24 maxlen: 24 109.207.123.0/24 maxlen: 24 109.207.124.0/24 maxlen: 24 109.207.125.0/24 maxlen: 24 109.207.126.0/24 maxlen: 24 109.207.127.0/24 maxlen: 24 193.53.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5d:35:be:0c:8e:62:36:d1:b8:33:ef:7e:a2:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75beb5a172cfdfd0a9e7dfd7f4b46d33f3225d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:19:37:e7:cf:92:a6:7c:6a:e8:cd:9b:e6: 50:66:ea:0f:1f:0f:91:43:fa:00:35:8a:6b:91:58: 71:4f:22:ae:8f:91:4f:50:72:97:45:71:7b:83:9c: 6f:06:96:7c:39:2c:60:ff:e4:79:26:31:34:98:fc: 12:06:4c:9b:14:5b:2a:8f:fd:56:36:bf:65:a8:61: 3f:3e:3f:c5:25:04:38:81:9d:70:0e:7b:0b:c0:86: f8:db:a1:bb:24:8f:3d:2c:67:90:c4:cd:1e:cf:d2: 1d:c7:6c:69:06:fa:74:9f:36:7d:a6:ec:33:f0:92: d1:fa:4f:46:a5:f7:7b:6a:8c:88:e6:8f:85:98:a6: ea:3f:7f:ab:c0:52:24:56:d5:45:24:b2:bb:34:56: 32:3a:66:16:47:9c:d8:19:59:c6:5f:9f:51:fa:e3: f0:78:db:11:3d:e5:08:73:33:34:20:e0:e9:28:17: 0b:72:36:ac:7e:9a:b0:0e:b8:40:cc:53:57:67:54: b3:7d:06:7f:d7:f7:23:05:14:70:e6:08:6c:f5:32: 72:fa:34:7a:fb:1f:e1:1c:00:88:2b:00:cb:12:34: 4f:7f:e8:ac:50:07:c6:2f:ac:2d:46:7f:01:b9:93: d0:7a:71:ab:b5:c5:28:14:a7:ae:27:73:b4:a5:42: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BE:B5:A1:72:CF:DF:D0:A9:E7:DF:D7:F4:B4:6D:33:F3:22:5D:90 X509v3 Authority Key Identifier: keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/db61oXLP39Cp59_X9LRtM_MiXZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.207.112.0/20 193.53.83.0/24 Signature Algorithm: sha256WithRSAEncryption 54:f9:82:b9:c1:73:d5:71:c3:bd:f7:31:14:73:9e:8b:27:2e: 9c:56:85:d0:0a:6e:37:3d:2b:71:63:a6:6f:22:f1:f2:42:b4: 82:22:cc:e7:0f:fe:a5:f1:b9:99:7a:ec:48:7a:62:9f:f0:27: 2a:7a:5d:24:c1:5a:6c:06:d8:7f:c5:2e:4b:bc:3f:ed:9f:56: 84:5b:be:ba:ba:b2:cf:27:9f:2a:fd:1d:5a:4f:b0:60:5b:e4: 31:df:04:63:e5:d0:75:05:1b:65:77:eb:cd:87:b2:3f:90:71: 18:7a:f9:ae:23:12:bf:07:ee:5d:97:f5:85:54:9b:88:86:71: 3c:6b:ca:a6:4e:fa:57:68:f3:c1:da:a4:09:c8:3c:a8:0e:f6: 46:42:fb:ec:10:e4:b7:d2:3e:20:3c:0e:b7:88:dc:20:a9:0b: a9:76:fc:51:cd:10:cf:f9:24:80:39:54:a3:e8:2e:c9:d8:8a: 5b:ac:bc:3c:23:4a:5e:81:91:86:d4:55:1f:dc:e6:51:99:bc: 6b:96:68:ea:0e:2c:84:c8:0f:9d:4d:9e:05:6e:6d:25:c0:c3: f8:14:dc:b3:f7:70:16:05:5a:31:47:00:60:bf:db:b7:fe:16: 6c:04:a9:40:32:a8:20:fb:2b:b1:d4:d1:7a:8d:b8:30:0b:29: b8:49:6e:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OF01vgyOYjbRuDPvfqJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhOGU3ZGZjZDIwMGM4NWViM2NhYzY2Zjg1OWI3MTEwYWI5 OWIxMGEwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWJlYjVhMTcyY2ZkZmQwYTllN2RmZDdmNGI0NmQzM2YzMjI1ZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPcZN+fPkqZ8aujNm+ZQZuoPHw+R Q/oANYprkVhxTyKuj5FPUHKXRXF7g5xvBpZ8OSxg/+R5JjE0mPwSBkybFFsqj/1W Nr9lqGE/Pj/FJQQ4gZ1wDnsLwIb426G7JI89LGeQxM0ez9Idx2xpBvp0nzZ9puwz 8JLR+k9Gpfd7aoyI5o+FmKbqP3+rwFIkVtVFJLK7NFYyOmYWR5zYGVnGX59R+uPw eNsRPeUIczM0IODpKBcLcjasfpqwDrhAzFNXZ1SzfQZ/1/cjBRRw5ghs9TJy+jR6 +x/hHACIKwDLEjRPf+isUAfGL6wtRn8BuZPQenGrtcUoFKeuJ3O0pULccwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHW+taFyz9/Qqeff1/S0bTPzIl2QMB8GA1UdIwQY MBaAFAqOffzSAMhes8rGb4WbcRCrmbEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQt YTQ3ZWI5MzI5NTk3LzEvZGI2MW9YTFAzOUNwNTlfWDlMUnRNX01pWFpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQtYTQ3ZWI5MzI5NTk3 LzEvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEbc9wAwQA wTVTMA0GCSqGSIb3DQEBCwUAA4IBAQBU+YK5wXPVccO99zEUc56LJy6cVoXQCm43 PStxY6ZvIvHyQrSCIsznD/6l8bmZeuxIemKf8Ccqel0kwVpsBth/xS5LvD/tn1aE W766urLPJ58q/R1aT7BgW+Qx3wRj5dB1BRtld+vNh7I/kHEYevmuIxK/B+5dl/WF VJuIhnE8a8qmTvpXaPPB2qQJyDyoDvZGQvvsEOS30j4gPA63iNwgqQupdvxRzRDP +SSAOVSj6C7J2IpbrLw8I0pegZGG1FUf3OZRmbxrlmjqDiyEyA+dTZ4Fbm0lwMP4 FNyz93AWBVoxRwBgv9u3/hZsBKlAMqgg+yux1NF6jbgwCym4SW6R -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:39 2026 by rpki-client