This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/z1A9j3Rv4TvtLtaD1Nnq_X_sOwQ.roa File: z1A9j3Rv4TvtLtaD1Nnq_X_sOwQ.roa (raw, json) Hash identifier: G2CHvYhf4pvbtn9bn6ExRtKBsl13SB1ScEQ3QJbOvI0= Subject key identifier: CF:50:3D:8F:74:6F:E1:3B:ED:2E:D6:83:D4:D9:EA:FD:7F:EC:3B:04 Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A320DC175A34ED460625358FF0BA7F Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/z1A9j3Rv4TvtLtaD1Nnq_X_sOwQ.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52025 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 2a01:fb05:2000::/36 maxlen: 36 2a01:fb05:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:20:dc:17:5a:34:ed:46:06:25:35:8f:f0:ba:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf503d8f746fe13bed2ed683d4d9eafd7fec3b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:e3:b8:c4:79:47:29:15:d4:de:da:1d:6a: 4c:f7:7b:bf:cb:33:27:f3:9c:a4:36:30:e9:10:79: 64:e8:c2:6a:a7:a5:12:70:5c:7e:32:0c:32:f2:6d: c3:64:b0:ff:35:43:69:3c:06:a3:ed:ee:00:1f:a2: e3:b8:27:08:5c:5a:fb:ba:d3:4a:08:5d:99:89:40: 1a:04:45:f8:15:d9:a6:18:90:fb:c1:4a:6c:46:1a: 62:75:12:e1:cf:23:1f:3f:bf:35:c4:ab:4b:76:c2: 09:3b:77:39:69:fc:ce:93:a4:b1:45:df:45:65:c1: ed:45:a3:f0:09:fb:25:86:69:87:45:36:bc:c6:70: fd:7c:65:83:f7:e2:84:7f:a5:4b:29:f1:09:ff:27: 68:16:b3:cf:21:a3:4f:5f:8a:7c:0f:d6:03:ed:c1: 59:3d:ae:ca:51:29:17:b6:2a:ef:10:cb:67:1e:6d: 9a:4c:20:ac:22:c7:df:4a:f2:46:5e:c6:0b:da:88: 4d:0b:4e:58:76:93:0a:7d:f8:32:fb:d2:b0:9d:84: 26:9a:39:98:2a:ae:57:05:2c:d0:39:8b:4c:d8:4f: c7:3c:84:45:a8:67:f5:eb:05:ca:2b:ec:28:f5:82: e7:a5:b1:ca:f0:31:e2:a9:f2:76:1a:d5:13:0b:cf: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:50:3D:8F:74:6F:E1:3B:ED:2E:D6:83:D4:D9:EA:FD:7F:EC:3B:04 X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/z1A9j3Rv4TvtLtaD1Nnq_X_sOwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb01::/32 2a01:fb05:2000::/36 2a01:fb05:9000::/36 Signature Algorithm: sha256WithRSAEncryption 90:9b:f9:d3:8c:0f:f6:cc:b3:26:3c:d1:d8:61:48:29:ca:13: 7c:47:1e:20:47:e7:f8:08:86:bc:a7:19:32:30:ab:b7:f1:be: 24:52:95:fc:4c:8e:e2:16:2a:a1:da:e4:6f:13:13:1e:56:92: f5:4b:a0:7c:20:90:c8:d2:b5:c0:80:de:a7:72:6e:d7:47:78: 07:51:4b:65:9e:98:fb:ad:33:62:82:eb:f6:fc:f5:c7:11:4c: 89:b6:83:06:0b:1d:37:ba:2b:35:d4:94:da:95:0b:4d:5d:27: 53:e1:6b:c5:cc:2e:02:e1:99:df:b5:f9:9e:2a:0b:6c:c6:24: 32:a9:f8:a4:73:71:f4:76:1c:15:e4:04:e6:0c:1b:aa:19:b1: c0:e8:7a:3d:e2:87:16:43:1a:0e:d3:62:ee:75:49:4c:2a:b7: 84:75:f5:ca:bc:b9:4e:b7:95:89:88:e2:66:30:48:77:a0:fb: 5d:8c:b0:c9:dd:ac:39:57:e7:f2:fe:6b:ff:5f:d1:64:3a:dd: f2:fa:af:c8:57:02:a0:1a:b9:3c:3c:6c:80:58:cf:98:2f:77: a4:6d:10:29:3a:41:94:bf:0d:8b:a8:c6:17:07:a2:7d:a5:0d: 08:2b:a9:89:d8:f3:76:50:08:ca:7a:04:2c:05:d7:86:32:a7: 63:62:ee:4e -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt4oyDcF1o07UYGJTWP8Lp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjUwM2Q4Zjc0NmZlMTNiZWQyZWQ2ODNkNGQ5ZWFmZDdmZWMzYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPnjuMR5RykV1N7aHWpM93u/yzMn 85ykNjDpEHlk6MJqp6UScFx+Mgwy8m3DZLD/NUNpPAaj7e4AH6LjuCcIXFr7utNK CF2ZiUAaBEX4FdmmGJD7wUpsRhpidRLhzyMfP781xKtLdsIJO3c5afzOk6SxRd9F ZcHtRaPwCfslhmmHRTa8xnD9fGWD9+KEf6VLKfEJ/ydoFrPPIaNPX4p8D9YD7cFZ Pa7KUSkXtirvEMtnHm2aTCCsIsffSvJGXsYL2ohNC05YdpMKffgy+9KwnYQmmjmY Kq5XBSzQOYtM2E/HPIRFqGf16wXKK+wo9YLnpbHK8DHiqfJ2GtUTC8+DNQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFM9QPY90b+E77S7Wg9TZ6v1/7DsEMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvejFBOWozUnY0VHZ0THRhRDFObnFfWF9zT3dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAMBAIAATAGAwQAbc3BMB0E AgACMBcDBQAqAfsBAwYEKgH7BSADBgQqAfsFkDANBgkqhkiG9w0BAQsFAAOCAQEA kJv504wP9syzJjzR2GFIKcoTfEceIEfn+AiGvKcZMjCrt/G+JFKV/EyO4hYqodrk bxMTHlaS9UugfCCQyNK1wIDep3Ju10d4B1FLZZ6Y+60zYoLr9vz1xxFMibaDBgsd N7orNdSU2pULTV0nU+FrxcwuAuGZ37X5nioLbMYkMqn4pHNx9HYcFeQE5gwbqhmx wOh6PeKHFkMaDtNi7nVJTCq3hHX1yry5TreViYjiZjBId6D7XYywyd2sOVfn8v5r /1/RZDrd8vqvyFcCoBq5PDxsgFjPmC93pG0QKTpBlL8Ni6jGFweifaUNCCupidjz dlAIynoELAXXhjKnY2LuTg== -----END CERTIFICATE-----Generated at Fri Jan 9 08:47:04 2026 by rpki-client