This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/jWvsjyWzcez7RSdGXVt1VZifw50.roa File: jWvsjyWzcez7RSdGXVt1VZifw50.roa (raw, json) Hash identifier: o3YKe1mE6fJ+FoN5jy8aXvAeuPK11V/ALHAwoBkDaJY= Subject key identifier: 8D:6B:EC:8F:25:B3:71:EC:FB:45:27:46:5D:5B:75:55:98:9F:C3:9D Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B128C6626A8C040052FA40660007F4F88 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/jWvsjyWzcez7RSdGXVt1VZifw50.roa Signing time: Fri 12 Dec 2025 12:32:29 +0000 ROA not before: Fri 12 Dec 2025 12:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55201 IP address blocks: 109.122.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:8c:66:26:a8:c0:40:05:2f:a4:06:60:00:7f:4f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Dec 12 12:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d6bec8f25b371ecfb4527465d5b7555989fc39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:6a:c4:f2:15:40:ac:b6:07:96:60:b3:b3: 0f:70:da:e1:32:ff:0c:94:9b:7d:d8:2a:dc:8a:54: 94:d0:32:4a:dd:88:d5:81:59:f6:05:fd:2f:a4:dd: 4d:28:e8:6e:9f:94:11:10:84:20:c9:f4:e9:8a:99: 0a:ac:db:00:af:3f:3f:dc:13:a3:f9:ca:97:93:cd: 2a:f6:4c:53:ca:58:d2:f8:d1:f2:23:2a:3e:52:de: d5:85:bc:37:f8:ef:99:1f:d1:b0:fd:ea:0f:ab:ed: a6:e2:4b:3e:f1:8c:8a:9c:67:c4:07:1b:ef:be:d1: 22:d0:13:72:07:fd:b9:19:fe:3d:ef:70:09:c2:6f: 04:0b:ba:ae:af:88:20:bf:5b:57:df:2a:cf:07:61: 2a:61:00:1c:9c:d7:89:9d:86:60:5a:07:14:16:81: fb:3c:8b:76:cd:a5:ba:cb:e3:ad:db:eb:cd:8c:83: 45:26:d1:7d:6a:c2:2b:02:ac:30:8b:18:f6:59:32: 59:d6:a7:a7:2e:cf:89:ca:4f:ae:6d:72:ed:71:ef: b7:43:63:02:27:cd:5b:4b:5b:05:f4:0f:64:88:3d: 0d:5a:ec:e6:1d:3f:2c:52:90:eb:df:b3:9b:45:1c: 38:af:72:d3:a6:27:36:c0:bc:e2:15:f0:f9:d3:34: 80:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6B:EC:8F:25:B3:71:EC:FB:45:27:46:5D:5B:75:55:98:9F:C3:9D X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/jWvsjyWzcez7RSdGXVt1VZifw50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.26.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:e6:de:ed:68:4f:21:26:b9:f7:03:9b:cc:cb:88:d4:f7:bd: 21:b8:93:80:a5:f0:39:f5:c7:e6:85:11:4b:84:83:73:fd:4f: 1a:aa:c4:c6:b9:37:b2:43:10:2c:c0:9f:8d:63:a3:b3:bf:20: 71:e2:ef:d0:4b:93:42:dd:d2:7b:09:fc:83:2d:0d:95:b5:33: 97:67:39:68:97:2d:67:42:1e:b3:bd:4b:be:5e:56:79:ef:32: 16:c0:6e:92:e8:d7:a0:ed:2d:97:31:0c:4c:46:2a:c0:f8:0b: f7:1f:b2:6d:1f:1b:04:d3:ce:44:da:3c:e1:f0:15:7b:71:f7: ad:d0:ec:05:db:45:b4:6e:fa:60:90:da:8a:5b:a6:02:26:d2: 9a:44:cd:dc:fd:ce:aa:bc:0c:54:86:f2:72:87:5c:1a:68:dc: f5:ad:86:66:07:e3:07:84:25:fd:b2:a6:19:86:9f:31:aa:d6: 0e:60:e4:07:95:41:33:42:23:db:1f:73:ff:c4:f0:c2:2a:c6: 4a:12:a0:81:74:14:5c:fd:37:8c:c7:88:25:51:72:3e:38:21: af:8b:72:69:d4:0c:a7:ad:59:9d:f0:da:9c:31:c6:bb:4f:49: f7:6c:01:9a:02:98:82:c1:be:47:65:96:df:a2:d7:1a:9a:4d: 39:f3:4a:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsSjGYmqMBABS+kBmAAf0+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjUxMjEyMTIzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDZiZWM4ZjI1YjM3MWVjZmI0NTI3NDY1ZDViNzU1NTk4OWZjMzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7hqxPIVQKy2B5Zgs7MPcNrhMv8M lJt92CrcilSU0DJK3YjVgVn2Bf0vpN1NKOhun5QREIQgyfTpipkKrNsArz8/3BOj +cqXk80q9kxTyljS+NHyIyo+Ut7Vhbw3+O+ZH9Gw/eoPq+2m4ks+8YyKnGfEBxvv vtEi0BNyB/25Gf4973AJwm8EC7qur4ggv1tX3yrPB2EqYQAcnNeJnYZgWgcUFoH7 PIt2zaW6y+Ot2+vNjINFJtF9asIrAqwwixj2WTJZ1qenLs+Jyk+ubXLtce+3Q2MC J81bS1sF9A9kiD0NWuzmHT8sUpDr37ObRRw4r3LTpic2wLziFfD50zSAOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI1r7I8ls3Hs+0UnRl1bdVWYn8OdMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvald2c2p5V3pjZXo3UlNkR1hWdDFWWmlmdzUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoaMA0G CSqGSIb3DQEBCwUAA4IBAQAt5t7taE8hJrn3A5vMy4jU970huJOApfA59cfmhRFL hINz/U8aqsTGuTeyQxAswJ+NY6OzvyBx4u/QS5NC3dJ7CfyDLQ2VtTOXZzloly1n Qh6zvUu+XlZ57zIWwG6S6Neg7S2XMQxMRirA+Av3H7JtHxsE085E2jzh8BV7cfet 0OwF20W0bvpgkNqKW6YCJtKaRM3c/c6qvAxUhvJyh1waaNz1rYZmB+MHhCX9sqYZ hp8xqtYOYOQHlUEzQiPbH3P/xPDCKsZKEqCBdBRc/TeMx4glUXI+OCGvi3Jp1Ayn rVmd8NqcMca7T0n3bAGaApiCwb5HZZbfotcamk0580qV -----END CERTIFICATE-----Generated at Tue Dec 16 06:14:09 2025 by rpki-client