This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/e_-cDL9S-PwlVQ_DKjwnfW0tt7c.roa File: e_-cDL9S-PwlVQ_DKjwnfW0tt7c.roa (raw, json) Hash identifier: 6PChnQpINtih6r77OhVxWKRB4JPj4g8KJ34c75c/92Y= Subject key identifier: 7B:FF:9C:0C:BF:52:F8:FC:25:55:0F:C3:2A:3C:27:7D:6D:2D:B7:B7 Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A3266FACCF62E3A13D8AA3AF82A390 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/e_-cDL9S-PwlVQ_DKjwnfW0tt7c.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209735 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 2a01:fb05:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:26:6f:ac:cf:62:e3:a1:3d:8a:a3:af:82:a3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bff9c0cbf52f8fc25550fc32a3c277d6d2db7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:5d:13:b1:55:7e:e0:32:2d:c6:47:32:b7: cf:ee:11:43:0e:08:fb:c3:aa:e5:55:12:bd:a3:f0: 6e:bb:a0:84:a7:a6:48:a9:7b:c1:4a:1b:80:c2:26: 88:53:22:d3:c9:0c:00:ee:8f:1b:69:a6:d9:c1:ee: 56:b9:da:09:8f:d4:6e:9b:05:b9:34:6e:39:ec:c4: 80:61:3d:8e:87:12:3f:5a:2d:0f:69:6d:3d:88:f6: df:96:6e:e5:b5:fc:08:0d:ee:4d:4f:40:d6:f2:62: fe:70:bd:a2:e9:c8:eb:0f:53:99:85:8d:75:83:09: 33:f5:b1:c9:4d:8f:9f:6c:12:31:a2:21:0f:2c:36: 23:ad:20:f0:ce:77:a8:0f:d5:58:cf:95:60:85:d0: bf:07:c1:79:e1:38:58:74:c2:91:3b:0b:cb:e7:af: 94:9e:dc:0c:49:99:b6:77:24:0c:3c:62:3c:56:76: 1a:45:0c:37:d4:b6:65:d5:63:8a:a8:eb:53:35:a9: 04:6a:ad:21:ef:37:10:f1:5b:6d:5a:78:52:2f:bd: 7f:4c:c0:34:2a:42:0d:d9:d0:e4:14:a2:56:e6:de: 3c:19:8f:04:29:bf:dc:19:39:02:02:14:1d:45:11: 33:be:ab:44:90:f8:d2:75:5d:76:bb:b3:3c:93:27: 8c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FF:9C:0C:BF:52:F8:FC:25:55:0F:C3:2A:3C:27:7D:6D:2D:B7:B7 X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/e_-cDL9S-PwlVQ_DKjwnfW0tt7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb01::/32 2a01:fb05:8000::/36 Signature Algorithm: sha256WithRSAEncryption 06:45:21:7f:d7:a9:1f:4c:73:3d:29:38:88:aa:5b:05:fc:85: 5d:5c:ac:05:a7:8e:40:ec:ab:c1:ca:31:60:db:64:9e:43:19: 57:99:ab:9d:c1:b7:61:c3:18:f5:9b:2e:02:c6:f9:27:ad:bf: 38:db:51:1e:cc:2a:8f:98:97:5f:7e:48:20:0a:74:22:5b:dd: db:e8:96:f2:f9:5b:88:8d:55:bd:4c:2d:81:b4:42:00:5c:ce: b6:2a:92:e7:dc:7b:34:f8:57:63:ea:a9:f2:f3:22:a6:22:39: 76:3b:3a:22:d4:b7:6d:58:18:64:5f:65:7a:3b:ac:bb:43:2c: 1e:61:19:25:02:0b:d1:15:9b:e7:0d:c6:bb:d0:e9:b0:e0:4d: 20:73:c1:a9:2f:2e:e9:1d:94:84:c6:0d:1b:fb:8e:83:cd:5f: 78:53:3f:a8:a6:92:89:d3:7e:57:e0:b7:4b:c3:03:e6:ab:08: a1:2b:05:60:e9:53:44:a1:5c:c2:83:1b:6c:99:5e:bb:71:ab: 16:65:00:dc:b5:bd:06:1f:df:78:47:81:b1:9e:5a:c8:a7:c5: 9e:af:a2:48:f4:68:51:aa:57:19:f2:0f:52:c0:d0:ff:b8:99: 17:f9:32:90:dc:44:51:41:0b:a8:75:5c:81:08:28:80:25:30: 61:68:b0:20 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4oyZvrM9i46E9iqOvgqOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmZmOWMwY2JmNTJmOGZjMjU1NTBmYzMyYTNjMjc3ZDZkMmRiN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt1dE7FVfuAyLcZHMrfP7hFDDgj7 w6rlVRK9o/Buu6CEp6ZIqXvBShuAwiaIUyLTyQwA7o8baabZwe5WudoJj9RumwW5 NG457MSAYT2OhxI/Wi0PaW09iPbflm7ltfwIDe5NT0DW8mL+cL2i6cjrD1OZhY11 gwkz9bHJTY+fbBIxoiEPLDYjrSDwzneoD9VYz5VghdC/B8F54ThYdMKROwvL56+U ntwMSZm2dyQMPGI8VnYaRQw31LZl1WOKqOtTNakEaq0h7zcQ8VttWnhSL71/TMA0 KkIN2dDkFKJW5t48GY8EKb/cGTkCAhQdRREzvqtEkPjSdV12u7M8kyeMawIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFHv/nAy/Uvj8JVUPwyo8J31tLbe3MB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvZV8tY0RMOVMtUHdsVlFfREtqd25mVzB0dDdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQAbc3BMBUE AgACMA8DBQAqAfsBAwYEKgH7BYAwDQYJKoZIhvcNAQELBQADggEBAAZFIX/XqR9M cz0pOIiqWwX8hV1crAWnjkDsq8HKMWDbZJ5DGVeZq53Bt2HDGPWbLgLG+Setvzjb UR7MKo+Yl19+SCAKdCJb3dvolvL5W4iNVb1MLYG0QgBczrYqkufcezT4V2PqqfLz IqYiOXY7OiLUt21YGGRfZXo7rLtDLB5hGSUCC9EVm+cNxrvQ6bDgTSBzwakvLukd lITGDRv7joPNX3hTP6imkonTflfgt0vDA+arCKErBWDpU0ShXMKDG2yZXrtxqxZl ANy1vQYf33hHgbGeWsinxZ6vokj0aFGqVxnyD1LA0P+4mRf5MpDcRFFBC6h1XIEI KIAlMGFosCA= -----END CERTIFICATE-----Generated at Fri Jan 9 14:02:00 2026 by rpki-client