This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/D8iXuTiRXYqEkJFvJ6uAf8IIke4.roa File: D8iXuTiRXYqEkJFvJ6uAf8IIke4.roa (raw, json) Hash identifier: SPNOBHWtTKROWkEPCTbPZeikMWIykdbg4/O6u08XSt4= Subject key identifier: 0F:C8:97:B9:38:91:5D:8A:84:90:91:6F:27:AB:80:7F:C2:08:91:EE Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A31BA2B584F686ECAAF59D1B2914BA Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/D8iXuTiRXYqEkJFvJ6uAf8IIke4.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24381 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 2a01:fb02::/34 maxlen: 34 2a01:fb05:1000::/36 maxlen: 36 2a01:fb05:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1b:a2:b5:84:f6:86:ec:aa:f5:9d:1b:29:14:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fc897b938915d8a8490916f27ab807fc20891ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:ba:8a:c0:30:37:b6:6d:28:ff:1c:0a:6e: 1c:43:44:bc:f0:62:52:1b:7c:d0:d0:58:45:e9:a1: 11:56:bb:b3:2a:7d:9a:65:d7:e2:c9:9a:6b:8f:e3: 5c:b2:74:23:f4:a0:65:e6:6c:25:6c:e4:8d:63:17: e9:0b:61:17:ae:da:61:b1:8b:f0:4d:59:fe:ec:f9: 64:5e:f5:62:e0:9e:d6:ff:20:7f:e8:4a:94:40:91: d5:65:88:03:60:80:6a:64:a2:8f:8d:89:2b:07:94: 0c:c5:ae:f3:db:96:bf:d2:f1:94:a9:59:b7:0f:56: 37:83:dc:1a:57:56:b8:88:53:3a:8a:a1:08:79:a1: 0d:26:e8:91:c4:00:7c:0a:5b:e7:72:54:37:ef:fd: 14:29:4d:9a:35:e7:1e:90:74:8c:fb:7c:91:56:89: 6b:65:a8:14:a2:d8:64:f6:83:45:d7:0b:78:6f:8f: fe:c9:9b:0f:06:de:74:92:34:c5:e4:86:b1:bb:f3: 9b:f0:e6:b9:3d:8d:e1:82:35:c0:9c:99:0c:ed:cc: 32:38:51:8a:3a:ec:96:56:ae:57:63:0d:e0:56:85: dc:7e:42:65:00:b2:ba:31:26:b1:f8:37:ce:76:60: 08:df:d6:58:a5:23:63:19:13:11:77:ee:d9:85:f0: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C8:97:B9:38:91:5D:8A:84:90:91:6F:27:AB:80:7F:C2:08:91:EE X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/D8iXuTiRXYqEkJFvJ6uAf8IIke4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb01::-2a01:fb02:3fff:ffff:ffff:ffff:ffff:ffff 2a01:fb05:1000::/36 2a01:fb05:8000::/36 Signature Algorithm: sha256WithRSAEncryption 6c:da:29:4c:15:90:ff:08:b8:98:11:7b:18:1e:0d:0a:28:23: 06:42:59:12:1b:1e:4f:12:b5:6e:7c:6a:ff:18:31:71:1d:a8: e4:88:42:c4:97:f9:d1:ce:e1:b2:c1:07:37:07:8a:fe:38:c1: 05:e2:7d:ed:4b:5d:3d:b2:41:aa:1d:e7:99:e8:c7:65:ae:8e: 6b:2f:b7:54:43:43:10:b3:69:2e:95:4d:08:0e:c9:9b:43:f4: 6c:61:2a:68:4e:17:44:c9:27:9f:e5:24:0c:98:22:b4:ac:dd: 54:24:6e:98:ce:e6:55:4b:a0:9b:ae:5a:c5:ed:c4:bb:de:9a: d2:85:71:22:b4:53:f6:18:64:dc:ad:3f:00:b7:71:27:bd:c7: 1d:ba:ea:fe:d1:e4:51:0d:51:09:4a:ed:be:11:9b:28:65:ee: 08:c2:30:24:56:63:08:95:ea:4d:8e:9b:10:90:74:68:2c:26: 26:25:e3:4d:3a:83:76:ad:d8:83:ec:41:16:31:17:98:28:fe: 26:a9:ef:b2:8c:d0:62:f1:dd:06:32:da:5b:d8:3e:a8:e7:df: 23:b3:67:fb:a6:eb:f0:2b:ec:1f:88:c8:f8:72:76:a0:98:e9: 73:60:d6:8b:45:b1:34:de:f7:b5:57:ce:f3:f3:99:0d:d8:cc: 8a:b1:20:00 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt4oxuitYT2huyq9Z0bKRS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmM4OTdiOTM4OTE1ZDhhODQ5MDkxNmYyN2FiODA3ZmMyMDg5MWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YO6isAwN7ZtKP8cCm4cQ0S88GJS G3zQ0FhF6aERVruzKn2aZdfiyZprj+NcsnQj9KBl5mwlbOSNYxfpC2EXrtphsYvw TVn+7PlkXvVi4J7W/yB/6EqUQJHVZYgDYIBqZKKPjYkrB5QMxa7z25a/0vGUqVm3 D1Y3g9waV1a4iFM6iqEIeaENJuiRxAB8ClvnclQ37/0UKU2aNecekHSM+3yRVolr ZagUothk9oNF1wt4b4/+yZsPBt50kjTF5Iaxu/Ob8Oa5PY3hgjXAnJkM7cwyOFGK OuyWVq5XYw3gVoXcfkJlALK6MSax+DfOdmAI39ZYpSNjGRMRd+7ZhfD84wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFA/Il7k4kV2KhJCRbyergH/CCJHuMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvRDhpWHVUaVJYWXFFa0pGdko2dUFmOElJa2U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAMBAIAATAGAwQAbc3BMCcE AgACMCEwDwMFACoB+wEDBgYqAfsCAAMGBCoB+wUQAwYEKgH7BYAwDQYJKoZIhvcN AQELBQADggEBAGzaKUwVkP8IuJgRexgeDQooIwZCWRIbHk8StW58av8YMXEdqOSI QsSX+dHO4bLBBzcHiv44wQXife1LXT2yQaod55nox2Wujmsvt1RDQxCzaS6VTQgO yZtD9GxhKmhOF0TJJ5/lJAyYIrSs3VQkbpjO5lVLoJuuWsXtxLvemtKFcSK0U/YY ZNytPwC3cSe9xx266v7R5FENUQlK7b4Rmyhl7gjCMCRWYwiV6k2OmxCQdGgsJiYl 4006g3at2IPsQRYxF5go/iap77KM0GLx3QYy2lvYPqjn3yOzZ/um6/Ar7B+IyPhy dqCY6XNg1otFsTTe97VXzvPzmQ3YzIqxIAA= -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:07 2026 by rpki-client