This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/m0G5GX11-PLi8Cf5dbRKsch6VxU.roa File: m0G5GX11-PLi8Cf5dbRKsch6VxU.roa (raw, json) Hash identifier: B5VOYp4J4pteli5ym2in+54bvDMlgr4itugyDjzngoo= Subject key identifier: 9B:41:B9:19:7D:75:F8:F2:E2:F0:27:F9:75:B4:4A:B1:C8:7A:57:15 Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Certificate serial: 019B7CEE5A86D400DE07822E0552073ABB09 Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/m0G5GX11-PLi8Cf5dbRKsch6VxU.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8747 IP address blocks: 109.235.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5a:86:d4:00:de:07:82:2e:05:52:07:3a:bb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b41b9197d75f8f2e2f027f975b44ab1c87a5715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e1:6c:86:ae:21:39:d7:f4:2e:01:43:e1:af: ef:31:0f:ef:33:aa:31:46:60:f9:27:3d:25:da:0c: 3e:3f:75:7d:26:84:c1:27:76:ca:8b:f2:1a:87:7d: 0a:c9:01:0d:78:a2:2e:14:bc:7e:b6:fa:0d:72:0a: 66:01:53:d6:85:47:08:97:d4:d6:94:2c:a2:28:8d: 47:f5:a9:61:20:e8:42:65:44:44:e1:1a:5b:14:25: fd:23:0f:4c:b6:a3:d7:29:19:5d:76:ac:5e:28:85: c2:fc:bd:87:e0:fb:6d:54:bf:ac:4e:49:ab:30:ea: 62:3b:f6:76:e7:54:29:9a:d7:19:f5:68:9f:99:b8: 04:f0:f6:c3:38:85:76:df:4b:96:ea:88:9c:bf:49: 3d:ad:22:53:04:f1:86:5a:35:ba:c6:ce:00:ae:2e: 6a:c3:ab:97:ff:7c:f3:a7:ca:c8:2d:5c:80:0b:a1: af:22:97:b3:a2:fb:04:85:f6:27:ae:95:d6:ed:a3: 6e:0c:13:9b:40:c0:8c:bf:7e:20:00:17:34:74:65: d8:24:8a:4c:19:0d:54:23:0f:b3:6a:cd:69:9e:94: 8a:77:43:26:b1:99:37:48:bc:05:85:49:8d:29:46: 65:9a:fb:4b:51:7c:cf:a9:94:db:2b:51:5f:d4:96: 0c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:41:B9:19:7D:75:F8:F2:E2:F0:27:F9:75:B4:4A:B1:C8:7A:57:15 X509v3 Authority Key Identifier: keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/m0G5GX11-PLi8Cf5dbRKsch6VxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.235.180.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:48:02:f3:fa:fb:db:d0:5b:00:6a:b6:f3:89:82:47:22:44: 87:6d:13:97:4a:be:ea:3e:af:fb:16:74:4a:ea:49:e8:67:6d: ee:44:6a:ac:d0:6d:3e:f4:f7:a5:c3:3d:44:f1:fe:ea:30:c0: 29:a4:af:9e:d2:ab:c4:90:41:7c:07:90:15:55:51:89:f7:f0: 60:49:20:04:53:49:ac:18:b4:99:ad:b0:9f:7f:3c:33:3f:da: f7:07:ab:b0:0f:37:f0:84:01:5a:21:4c:09:bd:5e:3d:d1:45: 0b:01:09:0f:54:0d:81:cb:5c:e1:72:41:23:af:0f:5a:0c:a9: 39:29:e8:35:0e:0e:3a:fb:b5:20:ea:e3:07:14:9f:90:ee:c7: 9b:74:6b:a3:b0:98:08:42:28:c2:64:1a:38:1d:1a:e3:70:eb: 3a:eb:7a:b9:54:bc:7c:50:d1:83:b7:11:fd:56:3e:9a:cd:3d: e6:02:29:54:39:a2:f7:38:c1:ce:3a:80:01:72:bc:a7:2b:8a: 74:32:f8:61:3e:c9:1f:22:cf:1c:d4:04:43:ce:e5:4d:40:05: a0:3a:b5:f2:57:f1:ae:05:b3:8e:58:04:45:05:44:83:bc:35: 61:c7:47:1e:82:2c:65:7b:6d:45:c9:c9:6d:9b:5f:d9:d6:a2: 0f:34:ea:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lqG1ADeB4IuBVIHOrsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5 YTQxMzkwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjQxYjkxOTdkNzVmOGYyZTJmMDI3Zjk3NWI0NGFiMWM4N2E1NzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuFshq4hOdf0LgFD4a/vMQ/vM6ox RmD5Jz0l2gw+P3V9JoTBJ3bKi/Iah30KyQENeKIuFLx+tvoNcgpmAVPWhUcIl9TW lCyiKI1H9alhIOhCZURE4RpbFCX9Iw9MtqPXKRlddqxeKIXC/L2H4PttVL+sTkmr MOpiO/Z251QpmtcZ9WifmbgE8PbDOIV230uW6oicv0k9rSJTBPGGWjW6xs4Ari5q w6uX/3zzp8rILVyAC6GvIpezovsEhfYnrpXW7aNuDBObQMCMv34gABc0dGXYJIpM GQ1UIw+zas1pnpSKd0MmsZk3SLwFhUmNKUZlmvtLUXzPqZTbK1Ff1JYM3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJtBuRl9dfjy4vAn+XW0SrHIelcVMB8GA1UdIwQY MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt MGExYTM1ODk3ZjEwLzEvbTBHNUdYMTEtUExpOENmNWRiUktzY2g2VnhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbeu0MA0G CSqGSIb3DQEBCwUAA4IBAQCaSALz+vvb0FsAarbziYJHIkSHbROXSr7qPq/7FnRK 6knoZ23uRGqs0G0+9Pelwz1E8f7qMMAppK+e0qvEkEF8B5AVVVGJ9/BgSSAEU0ms GLSZrbCffzwzP9r3B6uwDzfwhAFaIUwJvV490UULAQkPVA2By1zhckEjrw9aDKk5 Keg1Dg46+7Ug6uMHFJ+Q7sebdGujsJgIQijCZBo4HRrjcOs663q5VLx8UNGDtxH9 Vj6azT3mAilUOaL3OMHOOoABcrynK4p0MvhhPskfIs8c1ARDzuVNQAWgOrXyV/Gu BbOOWARFBUSDvDVhx0cegixle21Fycltm1/Z1qIPNOp/ -----END CERTIFICATE-----Generated at Mon Feb 2 09:53:05 2026 by rpki-client