This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/pv7UkzYYP8xvPJ2nWFG-mYBcSXs.roa File: pv7UkzYYP8xvPJ2nWFG-mYBcSXs.roa (raw, json) Hash identifier: sD5TKrZGO4iSZPRSCMN7+QqBhg0LaF/kYb+LyJosYmU= Subject key identifier: A6:FE:D4:93:36:18:3F:CC:6F:3C:9D:A7:58:51:BE:99:80:5C:49:7B Certificate issuer: /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357 Certificate serial: 019B78A26DE11256BD585B47B223A771FDB3 Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/pv7UkzYYP8xvPJ2nWFG-mYBcSXs.roa Signing time: Thu 01 Jan 2026 08:17:49 +0000 ROA not before: Thu 01 Jan 2026 08:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61263 IP address blocks: 109.207.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6d:e1:12:56:bd:58:5b:47:b2:23:a7:71:fd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357 Validity Not Before: Jan 1 08:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6fed49336183fcc6f3c9da75851be99805c497b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ee:68:ba:40:46:89:09:52:90:a5:f3:12:4a: ba:0d:d7:75:ed:24:aa:0d:99:b8:41:75:e3:cd:14: 38:1b:e7:76:0e:c9:3c:9f:27:29:a0:bd:a8:36:08: ea:b2:a5:33:d5:0e:d2:48:87:08:2a:91:de:8f:3a: 9e:d1:22:72:6f:e4:da:68:3f:15:fb:a3:9d:dc:75: a4:26:21:78:7b:4d:25:3f:e5:0b:d6:0f:11:5d:17: 57:87:bb:7b:e6:84:e5:a9:dc:94:cd:18:10:70:d6: 24:c3:93:d2:34:f4:d1:a5:51:02:cc:63:94:6c:ad: 9c:77:e6:4f:21:0d:70:c1:e5:95:bd:93:50:07:bb: c3:98:e5:15:5f:25:dd:a4:39:29:13:f4:fe:c5:8f: 34:d3:f1:0b:da:06:ce:98:b5:87:b5:28:9e:83:73: 05:22:bd:8c:2b:13:52:f4:e6:72:b6:00:3a:b7:78: 8e:bc:92:99:2b:00:fc:c1:e9:33:69:31:48:9b:70: f6:83:3c:4c:27:eb:81:85:01:a4:c3:2c:dc:26:a8: 3c:7f:9d:d3:c8:9c:ed:eb:cb:8f:5c:5d:b2:72:1b: 76:03:bc:29:58:33:df:7f:60:51:05:58:68:be:41: 55:71:12:ff:75:dc:9b:75:0e:b2:36:91:47:98:54: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FE:D4:93:36:18:3F:CC:6F:3C:9D:A7:58:51:BE:99:80:5C:49:7B X509v3 Authority Key Identifier: keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/pv7UkzYYP8xvPJ2nWFG-mYBcSXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.207.241.0/24 Signature Algorithm: sha256WithRSAEncryption 49:bb:7e:7c:37:37:c6:66:e3:e5:10:5b:41:7b:12:85:49:7c: 09:38:bb:e0:b4:89:c0:4d:70:46:21:d9:ad:b0:d7:c1:fe:ce: 2c:08:81:7e:43:a4:99:76:4c:22:ca:6c:74:cb:65:8d:c9:92: 5f:a1:83:40:ee:9b:dc:79:35:b0:7b:2a:f1:df:a2:f0:a0:ee: a7:0d:0c:95:af:fc:ec:3a:17:ef:02:a4:d2:67:bc:80:28:98: 2b:ad:6e:c1:cc:03:99:3a:26:38:ff:af:90:ea:09:95:5c:39: 9b:f9:88:5c:d7:f4:57:21:24:b0:7b:38:fa:3f:3a:1c:e9:b8: 53:ed:1a:7f:fa:4d:20:f0:4c:c7:28:f2:18:21:03:d2:b9:20: 41:56:9c:10:b9:d2:33:8c:42:35:e8:9a:39:d3:79:b9:86:77: f0:3d:93:38:32:e8:9f:75:34:f5:4f:1b:86:57:ec:b4:57:4a: 63:fe:93:14:7c:da:b6:3b:90:06:c9:fe:a6:cc:72:76:97:56: 7b:a0:84:c2:04:90:a5:a8:fd:75:8d:6d:8d:97:3e:7d:1f:3b: 12:ed:8a:18:e8:70:68:aa:6d:4a:c6:d2:5d:d4:54:87:bd:bf: 66:3a:46:c6:aa:57:d2:35:06:33:6a:01:05:d6:85:3f:78:00: 6b:37:b0:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4om3hEla9WFtHsiOncf2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjRhOGI5M2FmOWVhOWNmMThhYWNhNGU3M2YxMTZlYzI2 ZWIzNTcwHhcNMjYwMTAxMDgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmZlZDQ5MzM2MTgzZmNjNmYzYzlkYTc1ODUxYmU5OTgwNWM0OTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu5oukBGiQlSkKXzEkq6Ddd17SSq DZm4QXXjzRQ4G+d2Dsk8nycpoL2oNgjqsqUz1Q7SSIcIKpHejzqe0SJyb+TaaD8V +6Od3HWkJiF4e00lP+UL1g8RXRdXh7t75oTlqdyUzRgQcNYkw5PSNPTRpVECzGOU bK2cd+ZPIQ1wweWVvZNQB7vDmOUVXyXdpDkpE/T+xY800/EL2gbOmLWHtSieg3MF Ir2MKxNS9OZytgA6t3iOvJKZKwD8wekzaTFIm3D2gzxMJ+uBhQGkwyzcJqg8f53T yJzt68uPXF2ycht2A7wpWDPff2BRBVhovkFVcRL/ddybdQ6yNpFHmFSJSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKb+1JM2GD/Mbzydp1hRvpmAXEl7MB8GA1UdIwQY MBaAFJ+0qLk6+eqc8YqspOc/EW7CbrNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdTb3VUcjU2cHp4aXF5azV6OFJic0p1czFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OTg3NDEtZWRhNC00YzVkLWFmOWYt OGQ2OGViMjBmYmRkLzEvcHY3VWt6WVlQOHh2UEoybldGRy1tWUJjU1hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84OTg3NDEtZWRhNC00YzVkLWFmOWYtOGQ2OGViMjBmYmRk LzEvbjdTb3VUcjU2cHp4aXF5azV6OFJic0p1czFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc/xMA0G CSqGSIb3DQEBCwUAA4IBAQBJu358NzfGZuPlEFtBexKFSXwJOLvgtInATXBGIdmt sNfB/s4sCIF+Q6SZdkwiymx0y2WNyZJfoYNA7pvceTWweyrx36LwoO6nDQyVr/zs OhfvAqTSZ7yAKJgrrW7BzAOZOiY4/6+Q6gmVXDmb+Yhc1/RXISSwezj6Pzoc6bhT 7Rp/+k0g8EzHKPIYIQPSuSBBVpwQudIzjEI16Jo503m5hnfwPZM4MuifdTT1TxuG V+y0V0pj/pMUfNq2O5AGyf6mzHJ2l1Z7oITCBJClqP11jW2Nlz59HzsS7YoY6HBo qm1KxtJd1FSHvb9mOkbGqlfSNQYzagEF1oU/eABrN7B1 -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:12 2026 by rpki-client