This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/JTVRFgjSF0wCjzCtUhSKpCl_TUk.roa File: JTVRFgjSF0wCjzCtUhSKpCl_TUk.roa (raw, json) Hash identifier: wox6lqP1PyuIYK9orYp+88PVyMjWfAYIPPj2pBEz1PI= Subject key identifier: 25:35:51:16:08:D2:17:4C:02:8F:30:AD:52:14:8A:A4:29:7F:4D:49 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019AC9C872D3C473345E99BA049872510D18 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/JTVRFgjSF0wCjzCtUhSKpCl_TUk.roa Signing time: Fri 28 Nov 2025 09:25:48 +0000 ROA not before: Fri 28 Nov 2025 09:25:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203345 IP address blocks: 109.122.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:c8:72:d3:c4:73:34:5e:99:ba:04:98:72:51:0d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Nov 28 09:25:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2535511608d2174c028f30ad52148aa4297f4d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:58:fb:b6:d0:aa:35:7d:39:1b:1d:2e:e1: 04:ff:05:64:02:92:da:66:aa:ec:60:fa:bf:d5:c0: 98:3f:4f:43:bb:8b:e9:68:09:e1:66:34:8d:80:47: e1:9f:48:a5:33:ea:d4:da:73:34:46:cb:ee:e1:4a: f3:fe:6b:cb:8d:cf:a6:20:c4:29:87:a4:80:e3:37: 8e:ed:fb:90:cc:a5:63:ae:57:74:77:38:76:3e:3f: 37:c0:de:f4:cf:42:f8:72:c1:9a:11:76:fe:ff:3f: 9c:ff:35:7b:3f:bb:d7:49:56:76:00:4d:8a:22:7a: cc:f7:ba:68:68:fb:1e:8d:55:0b:9e:42:47:71:15: 2a:78:ff:eb:de:26:d9:7e:ef:6e:79:9e:d8:79:c2: 30:0b:a0:58:17:78:fa:d6:c6:d5:40:43:7e:fe:de: 01:2d:b5:f2:fc:10:d6:d5:ad:b9:29:0b:b2:ee:a2: 77:c1:d6:ba:a6:fd:61:1c:eb:62:35:77:84:f2:00: 2f:65:6b:25:f6:09:65:6b:9e:13:79:b3:88:39:44: 6e:46:8f:a8:f8:ab:12:b8:c0:e7:c3:37:2e:be:b1: 69:b3:37:2d:de:e9:e2:19:23:14:5c:dd:73:c8:9b: ec:89:66:58:28:12:a0:b1:34:8f:d1:6b:87:8b:87: 59:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:35:51:16:08:D2:17:4C:02:8F:30:AD:52:14:8A:A4:29:7F:4D:49 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/JTVRFgjSF0wCjzCtUhSKpCl_TUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.8.0/24 Signature Algorithm: sha256WithRSAEncryption b2:65:a8:07:0e:75:1e:78:8b:e1:f3:37:dc:41:f0:5a:dd:e6: a3:83:92:9f:72:23:f8:31:b0:5a:a8:ce:dc:89:52:85:07:08: 85:b3:f4:42:19:8c:b1:e6:1b:a5:22:da:29:e6:20:9d:f3:38: b3:a7:84:2d:37:a6:30:81:b0:0e:b8:d3:88:5e:00:da:e5:dc: f3:4e:c1:63:c4:67:a7:a9:d0:26:3a:1f:b5:81:ab:82:f6:ce: 47:41:39:f6:c5:cf:4e:d6:a9:1f:47:1c:65:30:f4:b9:03:44: da:cd:89:fa:a4:ae:4c:3b:da:b3:c2:dc:40:a8:87:7a:3d:1c: 56:0e:01:eb:d9:7e:6c:fa:ab:af:58:7e:60:0f:3a:f9:83:aa: ec:11:bf:be:4b:ee:0e:e0:3c:b0:4d:ac:cd:11:5d:90:09:66: 4d:74:54:2a:a8:28:8d:ba:b3:88:e6:25:b8:b8:be:15:4f:ea: 39:85:50:5a:ac:46:bc:7e:c3:6d:69:3d:ea:ad:41:6a:4c:78: b1:a7:9c:22:bb:7c:68:33:73:78:f5:24:55:84:46:90:0f:ff: 59:04:c6:cb:cb:02:f7:31:ce:3b:2e:be:d9:54:2a:a6:d2:f3: d0:84:9f:a7:11:b9:46:64:1c:3e:4d:f3:be:3a:30:a0:6e:48: 8f:d1:35:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrJyHLTxHM0Xpm6BJhyUQ0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjUxMTI4MDkyNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTM1NTExNjA4ZDIxNzRjMDI4ZjMwYWQ1MjE0OGFhNDI5N2Y0ZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lRY+7bQqjV9ORsdLuEE/wVkApLa ZqrsYPq/1cCYP09Du4vpaAnhZjSNgEfhn0ilM+rU2nM0Rsvu4Urz/mvLjc+mIMQp h6SA4zeO7fuQzKVjrld0dzh2Pj83wN70z0L4csGaEXb+/z+c/zV7P7vXSVZ2AE2K InrM97poaPsejVULnkJHcRUqeP/r3ibZfu9ueZ7YecIwC6BYF3j61sbVQEN+/t4B LbXy/BDW1a25KQuy7qJ3wda6pv1hHOtiNXeE8gAvZWsl9glla54TebOIOURuRo+o +KsSuMDnwzcuvrFpszct3uniGSMUXN1zyJvsiWZYKBKgsTSP0WuHi4dZLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCU1URYI0hdMAo8wrVIUiqQpf01JMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvSlRWUkZnalNGMHdDanpDdFVoU0twQ2xfVFVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoIMA0G CSqGSIb3DQEBCwUAA4IBAQCyZagHDnUeeIvh8zfcQfBa3eajg5KfciP4MbBaqM7c iVKFBwiFs/RCGYyx5hulItop5iCd8zizp4QtN6YwgbAOuNOIXgDa5dzzTsFjxGen qdAmOh+1gauC9s5HQTn2xc9O1qkfRxxlMPS5A0TazYn6pK5MO9qzwtxAqId6PRxW DgHr2X5s+quvWH5gDzr5g6rsEb++S+4O4DywTazNEV2QCWZNdFQqqCiNurOI5iW4 uL4VT+o5hVBarEa8fsNtaT3qrUFqTHixp5wiu3xoM3N49SRVhEaQD/9ZBMbLywL3 Mc47Lr7ZVCqm0vPQhJ+nEblGZBw+TfO+OjCgbkiP0TXc -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:14 2025 by rpki-client