This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dGrRhZkkeqeg0QmJRczdbBuCWhI.roa File: dGrRhZkkeqeg0QmJRczdbBuCWhI.roa (raw, json) Hash identifier: k3YOmIqrYwzzOWW13tzU+FoRqOYFgR4UKdtExFj94lU= Subject key identifier: 74:6A:D1:85:99:24:7A:A7:A0:D1:09:89:45:CC:DD:6C:1B:82:5A:12 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B128C6695ED767EE8FC3BE2AC2BA9AE56 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dGrRhZkkeqeg0QmJRczdbBuCWhI.roa Signing time: Fri 12 Dec 2025 12:32:29 +0000 ROA not before: Fri 12 Dec 2025 12:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197537 IP address blocks: 109.122.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:8c:66:95:ed:76:7e:e8:fc:3b:e2:ac:2b:a9:ae:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Dec 12 12:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=746ad18599247aa7a0d1098945ccdd6c1b825a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f4:60:3d:53:66:f2:d6:f8:84:62:cf:ab:f6: 52:76:e9:d5:af:6a:4a:5c:97:1b:b2:a3:ea:bb:b7: 29:47:c9:26:6a:28:ba:8c:10:21:e5:96:1a:f9:9d: d7:9a:e3:86:c0:c5:7b:c7:36:28:c4:4b:12:c4:3f: 5b:3d:5a:a7:c0:07:f8:79:ea:4b:19:be:37:60:92: de:80:e5:83:69:ea:7b:97:cc:9c:01:7a:24:59:a5: cc:7e:d3:3a:9f:f0:cf:77:da:4f:f8:51:63:f2:f0: a6:9a:b8:bf:51:7e:5e:b5:54:c6:77:18:f2:c1:38: ff:b3:55:61:34:6f:c1:17:35:e4:fc:ed:ec:6d:f5: 1d:1e:d1:b5:cd:ba:bf:66:1f:bf:fb:da:3b:5e:5d: fe:fc:9e:5b:3d:ad:46:54:dc:8e:5a:c3:e6:d5:26: b8:c3:87:d5:91:4f:00:70:64:2b:50:3f:f3:0a:b3: f4:df:1f:d3:c0:e8:6c:94:ae:4d:7d:cc:d1:91:39: 72:09:ee:12:d4:cc:5d:b2:6c:b9:6b:12:5a:01:ec: 29:32:5b:6c:b3:61:13:4d:7b:00:f8:66:a1:88:51: 63:46:e2:7f:32:26:d5:f4:1f:d1:76:2c:bf:96:17: 2c:ef:84:b8:c4:0b:bf:4e:e6:4b:b3:b0:23:91:82: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6A:D1:85:99:24:7A:A7:A0:D1:09:89:45:CC:DD:6C:1B:82:5A:12 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dGrRhZkkeqeg0QmJRczdbBuCWhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.26.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:5d:f5:b5:b8:8b:ac:cc:22:e3:bd:67:86:06:b6:77:7b:04: 75:f4:72:28:a3:43:58:24:14:91:51:76:24:fc:b8:4b:48:81: 9f:94:ce:cf:7f:0c:b0:a7:96:50:cd:59:0c:1b:2f:79:82:42: 0e:bd:b1:e5:48:f1:ee:3b:81:cf:cd:91:9c:b4:14:dc:bc:6b: 2d:1f:15:9d:87:c0:cc:88:8d:2d:05:e2:a4:e8:47:9f:8d:2c: e8:52:1b:09:2b:39:e9:8c:e6:ec:a1:fa:de:da:b9:92:a4:5a: 5c:19:82:a3:ab:d6:c7:27:03:59:8c:1f:58:f4:de:b9:7a:11: 14:90:2b:f9:69:3d:74:06:4e:ad:87:4d:f6:25:79:a8:37:3e: 92:49:04:f3:cf:ea:28:a5:e3:b5:41:8f:7c:00:62:fe:c5:c2: e6:19:2e:53:b5:35:44:46:72:21:80:2f:e1:7f:2b:ed:88:e2: be:ff:fd:7f:23:8e:3a:d1:d5:97:3f:78:80:2e:72:d6:13:e0: d4:9f:2e:a8:ec:fb:27:37:37:b4:24:e9:68:8d:c4:fb:2e:73: b0:3b:30:59:51:ef:b8:d2:9e:33:a4:3b:1d:e5:53:a6:ff:21: 15:2a:73:07:8e:03:fb:a6:25:28:d6:3a:c9:95:60:86:13:2c: 2c:9a:04:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsSjGaV7XZ+6Pw74qwrqa5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjUxMjEyMTIzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDZhZDE4NTk5MjQ3YWE3YTBkMTA5ODk0NWNjZGQ2YzFiODI1YTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fRgPVNm8tb4hGLPq/ZSdunVr2pK XJcbsqPqu7cpR8kmaii6jBAh5ZYa+Z3XmuOGwMV7xzYoxEsSxD9bPVqnwAf4eepL Gb43YJLegOWDaep7l8ycAXokWaXMftM6n/DPd9pP+FFj8vCmmri/UX5etVTGdxjy wTj/s1VhNG/BFzXk/O3sbfUdHtG1zbq/Zh+/+9o7Xl3+/J5bPa1GVNyOWsPm1Sa4 w4fVkU8AcGQrUD/zCrP03x/TwOhslK5NfczRkTlyCe4S1Mxdsmy5axJaAewpMlts s2ETTXsA+GahiFFjRuJ/MibV9B/Rdiy/lhcs74S4xAu/TuZLs7AjkYKE2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHRq0YWZJHqnoNEJiUXM3WwbgloSMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvZEdyUmhaa2tlcWVnMFFtSlJjemRiQnVDV2hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoaMA0G CSqGSIb3DQEBCwUAA4IBAQAPXfW1uIuszCLjvWeGBrZ3ewR19HIoo0NYJBSRUXYk /LhLSIGflM7Pfwywp5ZQzVkMGy95gkIOvbHlSPHuO4HPzZGctBTcvGstHxWdh8DM iI0tBeKk6EefjSzoUhsJKznpjObsofre2rmSpFpcGYKjq9bHJwNZjB9Y9N65ehEU kCv5aT10Bk6th032JXmoNz6SSQTzz+oopeO1QY98AGL+xcLmGS5TtTVERnIhgC/h fyvtiOK+//1/I4460dWXP3iALnLWE+DUny6o7PsnNze0JOlojcT7LnOwOzBZUe+4 0p4zpDsd5VOm/yEVKnMHjgP7piUo1jrJlWCGEywsmgTO -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:21 2025 by rpki-client