This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/dIi4Sd6A0woxUOrDa0aIPMxZeKA.roa File: dIi4Sd6A0woxUOrDa0aIPMxZeKA.roa (raw, json) Hash identifier: guube1BWqaZ3lHZMwDTgjnu3u/KgBDszavN68xccEaU= Subject key identifier: 74:88:B8:49:DE:80:D3:0A:31:50:EA:C3:6B:46:88:3C:CC:59:78:A0 Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A323D03B1C280975DEFA097A22227A Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/dIi4Sd6A0woxUOrDa0aIPMxZeKA.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62768 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:23:d0:3b:1c:28:09:75:de:fa:09:7a:22:22:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7488b849de80d30a3150eac36b46883ccc5978a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:f7:6f:f0:f0:39:5c:e0:ab:89:fb:9f:a3: ab:1d:6f:ce:6e:70:90:b8:fa:62:1d:b2:43:5b:c0: ba:46:99:64:82:22:6d:14:8f:42:91:97:99:5b:e5: 22:9a:38:41:0b:d8:ad:23:21:3a:df:e2:48:2e:7b: 72:6a:5d:76:74:c4:df:3b:c1:3e:fb:d8:7c:e3:8a: fc:17:5a:c8:43:df:cf:95:1b:8c:51:14:53:f1:c7: 50:35:40:29:91:bc:8e:74:8f:cd:19:3f:cb:7c:24: 71:ce:b7:67:c3:af:91:a4:f1:1c:e0:3d:71:d8:f2: 81:1e:09:c2:f1:5e:77:50:a4:31:9d:76:b4:84:87: 74:fd:3b:ea:0b:b6:30:8a:a4:61:0f:3a:61:5b:8b: cd:1a:e2:df:4a:d2:69:00:48:37:d6:24:16:99:9e: 56:b4:a3:5f:ed:0e:7e:d1:16:29:39:9e:cf:72:2b: a0:aa:3b:b0:f4:a5:17:76:2d:10:50:bd:2c:a7:39: ac:6e:6b:3d:15:41:60:c1:ec:64:6e:01:d8:fb:54: 53:28:f4:d7:9e:74:00:8d:5b:70:c4:2a:a8:43:ba: f3:61:74:04:6d:57:80:25:da:34:75:3d:00:3c:06: 99:ef:db:d4:f1:8c:6a:12:57:f4:a4:50:55:fb:9f: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:88:B8:49:DE:80:D3:0A:31:50:EA:C3:6B:46:88:3C:CC:59:78:A0 X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/dIi4Sd6A0woxUOrDa0aIPMxZeKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb01::/32 Signature Algorithm: sha256WithRSAEncryption 06:c6:6a:11:03:8f:fd:2c:67:86:9a:a0:95:21:b9:f2:2b:bf: 4c:13:de:18:4e:7c:36:fb:d9:d3:96:97:45:41:07:ce:5d:7c: 23:86:14:f9:28:37:b6:f5:cf:b6:2f:93:a0:0d:eb:77:e3:cb: 2c:ef:18:69:98:23:5f:ad:9b:4f:37:22:00:a0:28:01:77:00: 07:10:bb:b8:8a:3c:fe:67:39:d5:f0:9d:dc:7b:b0:80:74:bf: 67:a5:31:de:91:cd:19:1a:a9:b7:56:e9:52:3f:44:1d:ed:1a: 8c:c9:6e:0c:51:f6:24:a4:06:ec:94:21:e7:f0:a1:24:33:b1: a6:6a:c2:3f:68:c8:50:d6:ce:f9:93:85:a6:40:09:28:9a:88: 64:72:b3:b2:4d:99:74:c3:1c:d4:fe:c0:fe:dc:1d:d8:ea:97: cd:22:73:81:e3:4c:b6:75:63:a6:3f:c1:d7:ae:26:d9:c9:d3: 05:15:4d:17:ca:27:5d:64:ea:a6:71:b3:8b:66:9a:4a:22:8f: 9d:83:99:54:0a:46:0b:d7:82:9d:87:5a:d5:c0:93:e1:e1:1e: 0e:35:df:29:87:11:8c:a9:2a:9a:51:24:b8:90:11:10:6a:f3: 03:68:ed:ed:89:50:77:fb:bc:54:9d:30:54:d6:59:5a:d1:4d: cf:4d:e4:18 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oyPQOxwoCXXe+gl6IiJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDg4Yjg0OWRlODBkMzBhMzE1MGVhYzM2YjQ2ODgzY2NjNTk3OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznb3b/DwOVzgq4n7n6OrHW/ObnCQ uPpiHbJDW8C6RplkgiJtFI9CkZeZW+UimjhBC9itIyE63+JILntyal12dMTfO8E+ +9h844r8F1rIQ9/PlRuMURRT8cdQNUApkbyOdI/NGT/LfCRxzrdnw6+RpPEc4D1x 2PKBHgnC8V53UKQxnXa0hId0/TvqC7YwiqRhDzphW4vNGuLfStJpAEg31iQWmZ5W tKNf7Q5+0RYpOZ7Pciugqjuw9KUXdi0QUL0spzmsbms9FUFgwexkbgHY+1RTKPTX nnQAjVtwxCqoQ7rzYXQEbVeAJdo0dT0APAaZ79vU8YxqElf0pFBV+5/4YwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHSIuEnegNMKMVDqw2tGiDzMWXigMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvZElpNFNkNkEwd294VU9yRGEwYUlQTXhaZUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAbc3BMA0E AgACMAcDBQAqAfsBMA0GCSqGSIb3DQEBCwUAA4IBAQAGxmoRA4/9LGeGmqCVIbny K79ME94YTnw2+9nTlpdFQQfOXXwjhhT5KDe29c+2L5OgDet348ss7xhpmCNfrZtP NyIAoCgBdwAHELu4ijz+ZznV8J3ce7CAdL9npTHekc0ZGqm3VulSP0Qd7RqMyW4M UfYkpAbslCHn8KEkM7GmasI/aMhQ1s75k4WmQAkomohkcrOyTZl0wxzU/sD+3B3Y 6pfNInOB40y2dWOmP8HXribZydMFFU0XyiddZOqmcbOLZppKIo+dg5lUCkYL14Kd h1rVwJPh4R4ONd8phxGMqSqaUSS4kBEQavMDaO3tiVB3+7xUnTBU1lla0U3PTeQY -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:15 2026 by rpki-client