This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/CKw7YUU1WDFXghLTioU_4G1r5PQ.roa File: CKw7YUU1WDFXghLTioU_4G1r5PQ.roa (raw, json) Hash identifier: DpX6z86tnFqAIeYJZrYerzvsKoSsBlaklQUN/AagpKg= Subject key identifier: 08:AC:3B:61:45:35:58:31:57:82:12:D3:8A:85:3F:E0:6D:6B:E4:F4 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B1E7C6DAE83C4E97D35EB7BF20A3270C1 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/CKw7YUU1WDFXghLTioU_4G1r5PQ.roa Signing time: Sun 14 Dec 2025 20:10:29 +0000 ROA not before: Sun 14 Dec 2025 20:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 109.122.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:7c:6d:ae:83:c4:e9:7d:35:eb:7b:f2:0a:32:70:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Dec 14 20:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=08ac3b6145355831578212d38a853fe06d6be4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:eb:bc:0f:05:c8:83:a7:a2:17:6e:e1:c8: 55:8b:b6:d9:47:54:ce:33:81:cd:b4:c8:7c:50:ae: c6:ae:6f:7b:99:a0:10:58:e3:84:c3:19:cd:2e:ec: e0:f6:df:69:66:2d:a0:b1:6d:15:1b:ea:9e:f6:b3: 2a:6d:89:c7:ea:0f:b7:11:04:ee:9d:a9:e6:d9:8a: 11:bd:6c:9c:04:8d:d5:31:f4:59:70:6c:43:73:55: 4f:ce:7f:28:b2:31:2e:07:ef:00:cb:4f:b3:de:e4: e6:b1:c1:93:60:61:69:15:88:52:60:28:36:2c:63: 57:64:9a:50:15:af:f4:95:dd:2f:45:94:2f:8f:5b: 76:22:ba:16:97:75:78:5f:81:f7:fc:74:a1:9a:69: d2:df:89:3e:a9:45:30:b0:c7:e9:67:e5:3e:d0:3d: f3:20:bc:ce:ea:da:bb:3c:c3:2e:27:92:bc:65:4b: 47:10:65:e7:76:a5:5e:53:b8:01:91:62:0d:c5:71: 3a:ac:fe:e7:91:c8:61:7a:da:e4:73:34:46:4a:b7: f4:2e:1f:7d:6a:14:30:1e:d0:ba:24:62:f6:6f:8d: c0:0a:d8:e4:6c:01:7a:c8:7f:96:c9:50:38:81:8e: 43:dd:01:b0:17:28:0c:03:43:06:03:b5:8d:f2:f8: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AC:3B:61:45:35:58:31:57:82:12:D3:8A:85:3F:E0:6D:6B:E4:F4 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/CKw7YUU1WDFXghLTioU_4G1r5PQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.29.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:f0:f7:f9:76:58:3e:90:58:c7:d5:25:15:9e:ef:7d:e1:40: f1:2f:7e:23:70:b0:9b:0a:f1:02:cf:f8:31:14:ec:7e:d7:02: 93:11:07:c1:58:97:12:12:2f:3d:f5:5f:76:34:ac:f5:e2:b7: 21:98:19:ee:ed:80:7a:0c:f2:a6:95:4a:c0:d2:97:36:b3:35: 02:38:c4:cf:f7:c9:be:3a:53:90:ed:92:96:37:8a:50:89:67: 34:86:e5:73:b7:6c:3a:41:e6:1c:06:c8:86:e8:0f:1d:03:fb: 33:5c:b0:38:d7:7f:00:fe:81:e4:99:5b:80:62:c9:fc:38:d1: c0:55:8b:e0:f1:2b:7d:ae:bf:27:ec:fd:88:d5:4a:0a:41:33: cf:74:be:7e:bf:15:3c:8b:0b:60:1e:c0:d5:e0:4a:66:35:a9: 0a:18:0e:fd:d3:19:7f:8c:63:84:3a:09:8e:98:65:17:95:cb: f1:13:0c:04:e7:83:ff:2e:2c:0b:29:a2:f7:e8:18:42:a9:94: 0b:2b:69:3e:55:1c:72:a3:34:e5:4d:0d:20:85:eb:99:5b:c3: e2:f7:ab:78:0e:c8:f7:0b:6f:b6:e8:05:99:57:f6:04:38:2a: 3c:4c:67:4b:77:a5:a5:21:3f:ce:c2:c8:ff:2b:ba:e7:1b:b3: 92:3c:1e:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsefG2ug8TpfTXre/IKMnDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjUxMjE0MjAxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGFjM2I2MTQ1MzU1ODMxNTc4MjEyZDM4YTg1M2ZlMDZkNmJlNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycDrvA8FyIOnohdu4chVi7bZR1TO M4HNtMh8UK7Grm97maAQWOOEwxnNLuzg9t9pZi2gsW0VG+qe9rMqbYnH6g+3EQTu nanm2YoRvWycBI3VMfRZcGxDc1VPzn8osjEuB+8Ay0+z3uTmscGTYGFpFYhSYCg2 LGNXZJpQFa/0ld0vRZQvj1t2IroWl3V4X4H3/HShmmnS34k+qUUwsMfpZ+U+0D3z ILzO6tq7PMMuJ5K8ZUtHEGXndqVeU7gBkWINxXE6rP7nkchhetrkczRGSrf0Lh99 ahQwHtC6JGL2b43ACtjkbAF6yH+WyVA4gY5D3QGwFygMA0MGA7WN8vgOXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAisO2FFNVgxV4IS04qFP+Bta+T0MB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvQ0t3N1lVVTFXREZYZ2hMVGlvVV80RzFyNVBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXodMA0G CSqGSIb3DQEBCwUAA4IBAQBf8Pf5dlg+kFjH1SUVnu994UDxL34jcLCbCvECz/gx FOx+1wKTEQfBWJcSEi899V92NKz14rchmBnu7YB6DPKmlUrA0pc2szUCOMTP98m+ OlOQ7ZKWN4pQiWc0huVzt2w6QeYcBsiG6A8dA/szXLA4138A/oHkmVuAYsn8ONHA VYvg8St9rr8n7P2I1UoKQTPPdL5+vxU8iwtgHsDV4EpmNakKGA790xl/jGOEOgmO mGUXlcvxEwwE54P/LiwLKaL36BhCqZQLK2k+VRxyozTlTQ0gheuZW8Pi96t4Dsj3 C2+26AWZV/YEOCo8TGdLd6WlIT/Owsj/K7rnG7OSPB7E -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:40 2025 by rpki-client