This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/uJ00F8qIfVMMrHchmdDbvZw-2tg.roa File: uJ00F8qIfVMMrHchmdDbvZw-2tg.roa (raw, json) Hash identifier: t7V/RCs2b24oev8xL9bKPY+EhCLc2I+OwMw22paUwcM= Subject key identifier: B8:9D:34:17:CA:88:7D:53:0C:AC:77:21:99:D0:DB:BD:9C:3E:DA:D8 Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e Certificate serial: 019B7834D155BCCCDB8C5EF06CBA3D00B3E8 Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/uJ00F8qIfVMMrHchmdDbvZw-2tg.roa Signing time: Thu 01 Jan 2026 06:18:05 +0000 ROA not before: Thu 01 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200724 IP address blocks: 109.121.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d1:55:bc:cc:db:8c:5e:f0:6c:ba:3d:00:b3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e Validity Not Before: Jan 1 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b89d3417ca887d530cac772199d0dbbd9c3edad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b0:af:b4:f4:00:64:b0:0f:6d:72:0c:3e:56: 24:9c:47:7b:54:6d:96:ca:00:6b:a7:eb:88:c5:6e: 07:7e:54:81:ef:76:d3:db:dd:3e:c4:dc:48:70:64: e2:a2:9c:59:91:6e:c3:c5:80:09:b5:74:59:47:27: de:9d:7a:28:15:72:4c:7b:cb:41:3f:b1:64:9a:9d: fd:96:a5:d0:ba:fe:88:ef:ae:9c:bc:47:8d:ea:27: 45:79:43:a8:cc:40:f7:b1:21:a4:77:d9:12:d5:7f: d3:f8:6b:77:ef:74:e8:eb:9b:88:58:9a:f3:9a:8a: 20:fb:ee:24:26:01:5c:01:76:f5:8f:a9:41:f3:8d: 16:93:9a:48:6f:e0:13:4c:61:59:0c:b5:af:0b:1f: a7:31:e6:f0:ef:30:41:2e:19:fd:20:c7:4a:3a:f7: e2:20:66:96:0b:1f:d6:9c:61:cd:d6:d8:e1:fd:32: 6e:54:8d:53:1e:14:f5:c6:12:e4:8c:40:f8:02:8b: 5e:26:66:2d:f9:13:b4:93:f9:3b:4c:4b:2e:a2:d7: 00:7a:0e:96:df:69:fc:84:be:12:f5:91:45:25:40: 7b:fd:72:20:c6:25:e3:33:02:b3:0c:76:cf:17:02: 10:a8:dc:99:08:0c:da:2d:db:c0:80:f7:16:ee:49: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9D:34:17:CA:88:7D:53:0C:AC:77:21:99:D0:DB:BD:9C:3E:DA:D8 X509v3 Authority Key Identifier: keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/uJ00F8qIfVMMrHchmdDbvZw-2tg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.127.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:65:bd:08:91:5f:2d:4d:b8:96:52:06:64:c0:6a:79:c5:6b: 61:b3:85:64:72:fc:d3:f2:c1:a1:bc:ea:dd:b7:e7:10:5c:58: 52:29:c1:a8:dc:34:3b:05:86:63:b7:6c:eb:29:f6:0a:08:2e: be:31:2e:57:d9:15:bc:5d:68:27:dd:ef:54:43:b0:75:ca:26: 5f:7e:98:ed:3c:a6:8c:cc:41:39:6f:c3:9a:26:ad:7e:5e:3b: 58:a9:37:d3:2f:80:a1:f2:54:ca:01:5b:86:e8:a9:f5:79:20: cd:17:13:fd:19:2e:de:9f:75:d7:27:bb:3b:c7:86:a5:d1:3d: 3f:fc:30:77:aa:7d:6c:5d:a8:32:1c:b0:33:72:16:f4:1e:16: 5f:a5:d5:94:bb:a3:b4:f6:40:b5:29:c9:5b:6d:30:dd:51:b6: d7:1e:a9:f2:95:1a:22:8b:85:59:89:4a:a9:18:9a:de:f9:98: 7c:55:6f:3b:f0:5f:00:da:29:4f:b3:bd:51:64:b9:f8:19:39: 1f:01:10:ee:80:9e:68:04:d4:ad:f8:d4:a2:9a:e9:ba:d4:bc: f5:49:92:a5:c5:7c:39:38:8d:d2:6f:37:14:24:72:b1:79:8f: c1:5b:db:ab:f4:6d:87:9f:7c:23:84:49:7c:17:01:1a:e6:59: d2:18:c2:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNFVvMzbjF7wbLo9ALPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx YWM0N2UwHhcNMjYwMTAxMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODlkMzQxN2NhODg3ZDUzMGNhYzc3MjE5OWQwZGJiZDljM2VkYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7CvtPQAZLAPbXIMPlYknEd7VG2W ygBrp+uIxW4HflSB73bT290+xNxIcGTiopxZkW7DxYAJtXRZRyfenXooFXJMe8tB P7Fkmp39lqXQuv6I766cvEeN6idFeUOozED3sSGkd9kS1X/T+Gt373To65uIWJrz moog++4kJgFcAXb1j6lB840Wk5pIb+ATTGFZDLWvCx+nMebw7zBBLhn9IMdKOvfi IGaWCx/WnGHN1tjh/TJuVI1THhT1xhLkjED4AoteJmYt+RO0k/k7TEsuotcAeg6W 32n8hL4S9ZFFJUB7/XIgxiXjMwKzDHbPFwIQqNyZCAzaLdvAgPcW7knluQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLidNBfKiH1TDKx3IZnQ272cPtrYMB8GA1UdIwQY MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt Y2YwOTA3MTMzMjQxLzEvdUowMEY4cUlmVk1NckhjaG1kRGJ2WnctMnRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXl/MA0G CSqGSIb3DQEBCwUAA4IBAQBOZb0IkV8tTbiWUgZkwGp5xWths4VkcvzT8sGhvOrd t+cQXFhSKcGo3DQ7BYZjt2zrKfYKCC6+MS5X2RW8XWgn3e9UQ7B1yiZffpjtPKaM zEE5b8OaJq1+XjtYqTfTL4Ch8lTKAVuG6Kn1eSDNFxP9GS7en3XXJ7s7x4al0T0/ /DB3qn1sXagyHLAzchb0HhZfpdWUu6O09kC1KclbbTDdUbbXHqnylRoii4VZiUqp GJre+Zh8VW878F8A2ilPs71RZLn4GTkfARDugJ5oBNSt+NSimum61Lz1SZKlxXw5 OI3SbzcUJHKxeY/BW9ur9G2Hn3wjhEl8FwEa5lnSGMK1 -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:10 2026 by rpki-client