This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/Co9EBzH3FQeVmuqgSnvlZLtyBUs.roa File: Co9EBzH3FQeVmuqgSnvlZLtyBUs.roa (raw, json) Hash identifier: Tz0AYGnnSruzndjtcc2996lF3mrEc9QKF4xL5BBOObY= Subject key identifier: 0A:8F:44:07:31:F7:15:07:95:9A:EA:A0:4A:7B:E5:64:BB:72:05:4B Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A325676DC0C4AB01FB1B57B5660D92 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/Co9EBzH3FQeVmuqgSnvlZLtyBUs.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206221 IP address blocks: 109.205.193.0/24 maxlen: 24 158.94.220.0/24 maxlen: 24 158.94.221.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 2a01:fb05:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:25:67:6d:c0:c4:ab:01:fb:1b:57:b5:66:0d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a8f440731f71507959aeaa04a7be564bb72054b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:90:90:9c:26:93:e8:1b:b7:08:7e:9c:82: 98:1c:ee:23:1f:e5:7b:35:fb:26:df:ed:3f:c0:64: c6:d3:9d:25:ae:f7:5a:61:00:2b:cd:f4:6b:5d:e1: a7:40:2c:c5:30:5b:d7:1d:12:c7:c4:6f:56:f9:1b: 25:cd:4a:bc:0f:a6:6d:7d:11:45:d4:e4:55:d9:1f: a7:c7:43:c8:09:43:1e:7d:a0:c0:f6:90:79:f9:69: 64:9a:31:b5:2d:13:1d:32:8c:d8:d4:c6:86:93:e2: ac:6a:05:e2:74:c0:ee:2a:37:3d:c8:0e:61:15:5d: 59:81:9f:1a:db:14:76:3f:72:b8:93:d7:0f:c0:43: 03:c9:49:74:e8:06:8b:db:2d:c2:61:e3:57:90:11: 26:f1:2f:db:ae:2a:10:c9:c8:a0:af:9c:98:78:d7: 64:da:d6:0f:c3:08:4f:5c:f4:74:e5:fb:0a:1a:5b: 7c:60:ef:d0:47:6a:91:de:89:31:e6:dd:f9:b2:35: 42:a1:6d:b2:28:85:4e:fc:1b:fe:d7:22:ba:ec:99: 1b:c1:1a:e6:a9:02:52:a7:e5:48:ba:f0:63:f7:7f: 72:bb:c3:91:90:eb:95:d7:9e:08:4c:a5:fb:4e:9c: 63:ce:d8:f2:a9:d3:cb:c2:72:76:ff:eb:15:00:14: 7e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8F:44:07:31:F7:15:07:95:9A:EA:A0:4A:7B:E5:64:BB:72:05:4B X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/Co9EBzH3FQeVmuqgSnvlZLtyBUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 158.94.220.0/23 IPv6: 2a01:fb01::/32 2a01:fb05:c000::/36 Signature Algorithm: sha256WithRSAEncryption 06:2a:da:ad:ae:68:52:90:25:ee:b2:77:a9:ef:aa:54:03:89: 1a:99:53:b4:28:ec:c9:fa:dc:2f:af:34:e2:f5:c1:d5:de:f8: 91:d5:dd:db:35:d1:ba:26:8e:d2:ba:80:38:2c:6e:b0:74:ad: 4c:65:c7:d1:d7:bd:66:16:b0:b9:f6:00:81:da:2e:14:65:5b: 9a:d9:a5:65:b6:a9:30:9f:95:ad:86:04:4f:0a:a8:d1:6f:e1: 2f:29:d0:18:c0:79:98:5d:a8:eb:ae:6b:91:ac:14:a9:99:b0: ba:9c:0e:49:4a:98:25:31:46:11:f0:38:dc:de:6a:bb:cc:64: cf:4e:fa:af:7e:c8:da:8f:5f:c7:7d:2d:db:aa:17:e3:68:b4: ff:11:83:f9:f8:bb:79:00:83:c2:94:4f:e9:05:ed:a6:ec:3a: ab:f2:96:9d:3d:ed:20:e4:95:cb:cd:7d:fd:59:a9:af:fa:42: 81:5c:2f:5e:cb:f1:b2:75:42:c0:f8:13:02:d5:34:10:60:44: 4a:c0:55:29:86:78:98:53:0b:93:cd:1a:69:c9:0d:d7:88:92: 21:4f:de:8e:a5:04:fa:5a:d8:b0:e7:37:69:23:d7:57:e5:81: d7:8a:3c:17:0f:30:3e:5d:02:17:1f:49:74:69:29:76:78:ce: 22:23:f5:3e -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt4oyVnbcDEqwH7G1e1Zg2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYThmNDQwNzMxZjcxNTA3OTU5YWVhYTA0YTdiZTU2NGJiNzIwNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwWQkJwmk+gbtwh+nIKYHO4jH+V7 Nfsm3+0/wGTG050lrvdaYQArzfRrXeGnQCzFMFvXHRLHxG9W+RslzUq8D6ZtfRFF 1ORV2R+nx0PICUMefaDA9pB5+WlkmjG1LRMdMozY1MaGk+KsagXidMDuKjc9yA5h FV1ZgZ8a2xR2P3K4k9cPwEMDyUl06AaL2y3CYeNXkBEm8S/brioQycigr5yYeNdk 2tYPwwhPXPR05fsKGlt8YO/QR2qR3okx5t35sjVCoW2yKIVO/Bv+1yK67JkbwRrm qQJSp+VIuvBj939yu8ORkOuV154ITKX7TpxjztjyqdPLwnJ2/+sVABR+hQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFAqPRAcx9xUHlZrqoEp75WS7cgVLMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvQ285RUJ6SDNGUWVWbXVxZ1NudmxaTHR5QlVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzASBAIAATAMAwQAbc3BAwQB nl7cMBUEAgACMA8DBQAqAfsBAwYEKgH7BcAwDQYJKoZIhvcNAQELBQADggEBAAYq 2q2uaFKQJe6yd6nvqlQDiRqZU7Qo7Mn63C+vNOL1wdXe+JHV3ds10bomjtK6gDgs brB0rUxlx9HXvWYWsLn2AIHaLhRlW5rZpWW2qTCfla2GBE8KqNFv4S8p0BjAeZhd qOuua5GsFKmZsLqcDklKmCUxRhHwONzearvMZM9O+q9+yNqPX8d9LduqF+NotP8R g/n4u3kAg8KUT+kF7absOqvylp097SDklcvNff1Zqa/6QoFcL17L8bJ1QsD4EwLV NBBgRErAVSmGeJhTC5PNGmnJDdeIkiFP3o6lBPpa2LDnN2kj11flgdeKPBcPMD5d AhcfSXRpKXZ4ziIj9T4= -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:08 2026 by rpki-client