This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/Ia9rU_HnOLpqHoOSNPCbNpzSdZA.roa File: Ia9rU_HnOLpqHoOSNPCbNpzSdZA.roa (raw, json) Hash identifier: 7WjQ7xQPdO83hgdz7TmIaUo0sps2mKcL1hCxEGSYvvY= Subject key identifier: 21:AF:6B:53:F1:E7:38:BA:6A:1E:83:92:34:F0:9B:36:9C:D2:75:90 Certificate issuer: /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357 Certificate serial: 019B78A26E3E3AEF94C35F401539AE084B16 Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/Ia9rU_HnOLpqHoOSNPCbNpzSdZA.roa Signing time: Thu 01 Jan 2026 08:17:49 +0000 ROA not before: Thu 01 Jan 2026 08:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214414 IP address blocks: 109.207.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6e:3e:3a:ef:94:c3:5f:40:15:39:ae:08:4b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357 Validity Not Before: Jan 1 08:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21af6b53f1e738ba6a1e839234f09b369cd27590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:d4:e1:97:a5:19:63:7c:3e:cb:d8:29:ae: fc:fc:63:98:a4:0f:6c:33:54:62:e7:cb:f0:45:b4: 98:73:eb:3a:cc:2c:c9:bf:73:b8:a7:4c:d7:cd:0b: c4:a3:d3:ed:9f:c7:6e:58:26:9e:00:a6:59:e2:75: d0:ae:e5:88:3e:dc:c4:36:4c:1a:d3:0e:9d:24:e4: 9a:5e:fa:b9:80:d3:8f:ff:55:cf:3f:fe:7d:00:03: 6a:10:6a:f8:44:15:99:cb:8f:f9:a5:a4:f4:74:00: 9a:2a:d6:0b:b5:31:ce:8b:d2:0d:ae:84:4e:dd:f9: 66:49:b0:8a:b8:f5:70:62:99:50:2a:95:15:04:7c: e9:6c:d9:4f:11:71:20:05:fd:8a:38:05:60:dd:c4: 70:c8:fd:6b:de:10:e0:1f:a9:df:48:2b:bf:2d:9f: d3:18:d0:92:c3:c1:29:19:88:45:96:7d:92:24:2c: 36:37:9e:d6:6e:7e:b1:29:ab:e2:ca:4b:6d:f0:ad: e0:2b:e6:a1:eb:f0:37:db:e4:d4:d5:1d:f2:fe:84: 0b:66:08:46:5f:30:80:a0:04:10:15:35:ec:5a:4f: 4b:f5:f4:e6:d8:a9:de:95:4b:c9:89:2f:82:09:a3: fa:7c:d5:89:c5:70:1c:d2:73:07:05:03:df:bf:58: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AF:6B:53:F1:E7:38:BA:6A:1E:83:92:34:F0:9B:36:9C:D2:75:90 X509v3 Authority Key Identifier: keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/Ia9rU_HnOLpqHoOSNPCbNpzSdZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.207.242.0/24 Signature Algorithm: sha256WithRSAEncryption 41:8c:8a:ff:f4:ff:ff:07:c8:ba:72:0e:3c:a3:09:8b:dd:27: 81:3a:fd:b2:84:e8:ad:28:7f:ff:dd:dc:bd:85:9d:79:92:24: f2:b5:7a:e6:79:a7:03:bb:26:b9:09:f1:0e:c6:1e:97:25:44: 2d:d2:35:55:f4:08:98:e8:8b:4a:72:e9:7e:59:8a:d8:6c:ef: c1:92:18:a1:4f:37:2f:0e:10:1f:ec:ab:db:69:6c:c0:2f:af: 51:e8:a5:74:50:06:01:f2:ab:5c:b3:18:87:7a:39:d7:fa:f9: 3c:70:6e:d0:7e:77:b9:a9:17:b6:24:d4:a0:3b:5c:d0:31:4f: 48:1d:1c:a0:ba:28:d6:58:fe:c0:d0:06:b7:38:4f:c9:78:5a: 59:ac:2e:6d:53:6e:7f:a8:a3:1f:e6:a3:3a:4a:2e:1a:fc:47: 29:54:8f:d8:00:95:34:15:d4:97:ed:7f:49:6a:86:98:d0:d3: 0d:7c:60:9a:22:b4:fc:71:c3:97:4c:4a:98:04:f5:13:92:43: d9:77:28:36:cc:fd:e8:bc:a7:2d:af:b7:b7:03:1c:f6:8e:b4: f3:79:26:da:36:b8:18:7c:a3:9d:9f:a0:18:46:4c:75:3a:26: 2d:03:73:b9:08:c5:48:05:04:8f:2c:83:c9:33:26:92:2e:3a: 13:68:d0:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4om4+Ou+Uw19AFTmuCEsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjRhOGI5M2FmOWVhOWNmMThhYWNhNGU3M2YxMTZlYzI2 ZWIzNTcwHhcNMjYwMTAxMDgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWFmNmI1M2YxZTczOGJhNmExZTgzOTIzNGYwOWIzNjljZDI3NTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn3U4ZelGWN8PsvYKa78/GOYpA9s M1Ri58vwRbSYc+s6zCzJv3O4p0zXzQvEo9Ptn8duWCaeAKZZ4nXQruWIPtzENkwa 0w6dJOSaXvq5gNOP/1XPP/59AANqEGr4RBWZy4/5paT0dACaKtYLtTHOi9INroRO 3flmSbCKuPVwYplQKpUVBHzpbNlPEXEgBf2KOAVg3cRwyP1r3hDgH6nfSCu/LZ/T GNCSw8EpGYhFln2SJCw2N57Wbn6xKaviyktt8K3gK+ah6/A32+TU1R3y/oQLZghG XzCAoAQQFTXsWk9L9fTm2KnelUvJiS+CCaP6fNWJxXAc0nMHBQPfv1jDiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCGva1Px5zi6ah6DkjTwmzac0nWQMB8GA1UdIwQY MBaAFJ+0qLk6+eqc8YqspOc/EW7CbrNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdTb3VUcjU2cHp4aXF5azV6OFJic0p1czFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OTg3NDEtZWRhNC00YzVkLWFmOWYt OGQ2OGViMjBmYmRkLzEvSWE5clVfSG5PTHBxSG9PU05QQ2JOcHpTZFpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84OTg3NDEtZWRhNC00YzVkLWFmOWYtOGQ2OGViMjBmYmRk LzEvbjdTb3VUcjU2cHp4aXF5azV6OFJic0p1czFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc/yMA0G CSqGSIb3DQEBCwUAA4IBAQBBjIr/9P//B8i6cg48owmL3SeBOv2yhOitKH//3dy9 hZ15kiTytXrmeacDuya5CfEOxh6XJUQt0jVV9AiY6ItKcul+WYrYbO/BkhihTzcv DhAf7KvbaWzAL69R6KV0UAYB8qtcsxiHejnX+vk8cG7Qfne5qRe2JNSgO1zQMU9I HRyguijWWP7A0Aa3OE/JeFpZrC5tU25/qKMf5qM6Si4a/EcpVI/YAJU0FdSX7X9J aoaY0NMNfGCaIrT8ccOXTEqYBPUTkkPZdyg2zP3ovKctr7e3Axz2jrTzeSbaNrgY fKOdn6AYRkx1OiYtA3O5CMVIBQSPLIPJMyaSLjoTaNAN -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:32 2026 by rpki-client