This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/7jj42obFD8RD0DjQ1ozNQQKQyX4.roa File: 7jj42obFD8RD0DjQ1ozNQQKQyX4.roa (raw, json) Hash identifier: nLM/rezqL1i4yqf0Rz+h3pdwMXHwlPmA9MtXcIXiwTY= Subject key identifier: EE:38:F8:DA:86:C5:0F:C4:43:D0:38:D0:D6:8C:CD:41:02:90:C9:7E Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3 Certificate serial: 019B7C11AEB84B557583A33965253CA418EE Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/7jj42obFD8RD0DjQ1ozNQQKQyX4.roa Signing time: Fri 02 Jan 2026 00:18:12 +0000 ROA not before: Fri 02 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12312 IP address blocks: 192.109.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ae:b8:4b:55:75:83:a3:39:65:25:3c:a4:18:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3 Validity Not Before: Jan 2 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee38f8da86c50fc443d038d0d68ccd410290c97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:64:e6:04:f4:13:9e:e5:49:45:91:2c:97:61: 04:a1:77:2b:b9:ea:df:70:06:0f:c3:f2:2a:29:17: 04:cd:f6:79:de:e9:9d:aa:08:77:79:08:52:04:41: 5a:94:3c:e1:06:2c:d6:5e:9f:82:49:b2:5f:b0:a5: 4b:9f:a0:54:47:27:e0:ef:a0:0b:e0:47:c5:97:2e: 37:a0:e4:82:9b:bc:d9:6b:5b:fa:69:2b:dc:8d:01: fd:2a:ab:f5:e3:35:da:7a:f7:e3:7c:de:03:d0:43: d5:ca:d7:17:54:31:7a:93:72:d0:f3:e0:82:e0:85: 74:4a:2b:b0:fe:b2:5a:db:f3:90:4a:d4:8b:23:8e: 21:ba:c2:3b:af:24:28:c1:95:6b:c7:36:3c:ff:2f: e1:22:4a:08:0b:25:df:b6:ed:fe:b5:ba:90:d5:55: 51:fc:df:3c:07:17:62:e1:c9:d0:fa:80:c9:67:5a: 03:44:ee:89:35:39:01:33:10:3a:8c:46:28:a5:c3: 74:29:f2:6e:17:ab:34:2a:50:8f:7a:a3:63:87:4b: 21:1b:5e:0e:8b:1a:9f:bb:ad:b8:d8:68:95:5d:5c: 80:a1:af:95:6a:02:0b:3c:72:f3:74:78:56:63:72: 28:d6:7c:4b:92:97:3e:18:bc:8d:0b:7b:f4:fa:91: 26:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:38:F8:DA:86:C5:0F:C4:43:D0:38:D0:D6:8C:CD:41:02:90:C9:7E X509v3 Authority Key Identifier: keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/7jj42obFD8RD0DjQ1ozNQQKQyX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.111.0/24 Signature Algorithm: sha256WithRSAEncryption 30:91:48:55:c8:10:ec:ed:12:14:1d:38:ee:c3:ca:eb:c6:ee: b2:55:5a:64:fe:83:01:a1:b5:f4:23:46:63:ac:32:94:bd:cb: fc:d1:e4:4e:7b:d7:e0:ca:3b:0b:51:2c:06:2c:43:26:a0:71: 97:27:7d:39:fa:f7:88:b3:da:aa:f2:1d:11:ca:56:1e:49:1a: 88:a3:40:0d:f8:81:22:fa:54:fe:29:85:05:cc:a7:5a:2c:ba: 77:4b:a2:db:71:5f:a9:36:05:6c:70:e8:18:08:2a:17:70:b4: 3a:ff:f1:37:e0:62:21:04:50:55:f9:4c:2e:1e:89:74:7a:d3: 79:09:a9:0d:7a:c5:1a:04:fd:e4:f6:ed:5e:05:e2:e9:27:1c: 48:19:01:28:1a:36:47:f2:b6:47:40:fa:92:d2:16:fb:79:ca: fc:0b:9d:c0:68:cb:db:e6:e9:50:08:c0:06:66:b4:45:fc:f5: d7:66:1e:a8:34:d0:74:e5:b6:e8:f5:f6:41:c8:8c:59:22:43: fa:27:0c:1f:c9:ce:55:c8:40:bc:72:6f:0e:7e:3d:3a:6f:60: eb:86:2d:eb:a8:60:9d:07:fb:e0:2b:7e:a4:64:6c:15:1e:29: 0a:e1:66:39:cb:73:9e:54:22:e9:1c:b0:b2:31:26:64:8a:9f: 11:11:ea:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ea64S1V1g6M5ZSU8pBjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYzZmZDNmMzJjYTQ1OTRjOTYwNzU2NTlhNzA4OWIyN2Fl M2ZlZjMwHhcNMjYwMTAyMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTM4ZjhkYTg2YzUwZmM0NDNkMDM4ZDBkNjhjY2Q0MTAyOTBjOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42TmBPQTnuVJRZEsl2EEoXcruerf cAYPw/IqKRcEzfZ53umdqgh3eQhSBEFalDzhBizWXp+CSbJfsKVLn6BURyfg76AL 4EfFly43oOSCm7zZa1v6aSvcjQH9Kqv14zXaevfjfN4D0EPVytcXVDF6k3LQ8+CC 4IV0Siuw/rJa2/OQStSLI44husI7ryQowZVrxzY8/y/hIkoICyXftu3+tbqQ1VVR /N88Bxdi4cnQ+oDJZ1oDRO6JNTkBMxA6jEYopcN0KfJuF6s0KlCPeqNjh0shG14O ixqfu6242GiVXVyAoa+VagILPHLzdHhWY3Io1nxLkpc+GLyNC3v0+pEmAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO44+NqGxQ/EQ9A40NaMzUECkMl+MB8GA1UdIwQY MBaAFJvG/T8yykWUyWB1ZZpwibJ64/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYt ZGNiZTUzZGE3ODYwLzEvN2pqNDJvYkZEOFJEMERqUTFvek5RUUtReVg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYtZGNiZTUzZGE3ODYw LzEvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG1vMA0G CSqGSIb3DQEBCwUAA4IBAQAwkUhVyBDs7RIUHTjuw8rrxu6yVVpk/oMBobX0I0Zj rDKUvcv80eROe9fgyjsLUSwGLEMmoHGXJ305+veIs9qq8h0RylYeSRqIo0AN+IEi +lT+KYUFzKdaLLp3S6LbcV+pNgVscOgYCCoXcLQ6//E34GIhBFBV+UwuHol0etN5 CakNesUaBP3k9u1eBeLpJxxIGQEoGjZH8rZHQPqS0hb7ecr8C53AaMvb5ulQCMAG ZrRF/PXXZh6oNNB05bbo9fZByIxZIkP6Jwwfyc5VyEC8cm8Ofj06b2Drhi3rqGCd B/vgK36kZGwVHikK4WY5y3OeVCLpHLCyMSZkip8REepr -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:32 2026 by rpki-client