This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/u3D_hlivTjqeyYweUUKg9zC8hbU.roa File: u3D_hlivTjqeyYweUUKg9zC8hbU.roa (raw, json) Hash identifier: FpGQ1itJgjwSIbVL5aFAH9uoaltOjy7SXbsMpySOvPk= Subject key identifier: BB:70:FF:86:58:AF:4E:3A:9E:C9:8C:1E:51:42:A0:F7:30:BC:85:B5 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C69B083ECFD378F8D9638439316F9C Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/u3D_hlivTjqeyYweUUKg9zC8hbU.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209835 IP address blocks: 109.167.12.0/24 maxlen: 24 176.56.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9b:08:3e:cf:d3:78:f8:d9:63:84:39:31:6f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb70ff8658af4e3a9ec98c1e5142a0f730bc85b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:17:83:59:35:f2:8c:3b:1d:80:32:29:60: 1c:da:e0:5f:f3:bc:82:64:88:a8:38:10:4b:6d:78: e0:dc:c4:73:07:62:64:77:24:e4:0b:26:22:d3:e1: 51:dc:af:04:ad:f0:70:a9:35:e4:45:0e:17:3c:04: 04:2f:76:40:fc:dc:df:43:a5:4d:1f:37:bf:69:90: f5:01:f0:19:8c:94:c7:ca:34:5f:9b:40:fc:ae:f1: 93:f8:ac:f0:8f:2c:0d:e2:6c:6a:a2:ca:f9:40:7c: 46:09:ab:d8:76:5d:be:e4:6b:d3:35:76:c2:4c:fc: 4a:11:c2:26:b5:87:12:42:19:c0:5a:b6:2d:0c:0c: 79:85:36:98:a5:79:84:fc:2a:7c:6a:6d:3e:4a:1b: 5e:95:f0:5f:0b:4f:18:7a:ea:d9:fe:45:dd:7c:dc: d6:18:9e:21:49:b5:5d:7f:64:45:80:41:db:8d:e8: e1:55:c6:1b:aa:d2:4f:ad:51:d8:2c:a7:9b:58:0e: 45:87:9b:c8:6b:ca:a8:a3:42:2c:5a:3b:da:9f:be: 12:18:6e:e3:4e:02:34:d4:1b:59:37:ed:a1:ab:ba: 11:c7:56:2a:6c:63:6b:b7:ba:ce:1a:e3:18:e1:6c: 15:4e:8f:b1:9d:5a:38:8d:c8:39:f8:ed:6b:ef:d0: 7a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:70:FF:86:58:AF:4E:3A:9E:C9:8C:1E:51:42:A0:F7:30:BC:85:B5 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/u3D_hlivTjqeyYweUUKg9zC8hbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.167.12.0/24 176.56.119.0/24 Signature Algorithm: sha256WithRSAEncryption 79:33:f8:9b:76:80:83:32:2f:45:e9:2b:af:97:a9:10:4a:74: 7c:79:90:14:df:2f:dc:43:b6:f6:ca:d0:0c:c3:23:b2:ab:67: f1:b6:c5:37:4f:47:07:99:32:33:b1:8a:26:a2:84:c1:81:fe: ab:45:0e:17:21:b4:c2:42:b0:95:47:a2:ab:73:a9:17:d3:20: 10:7d:e6:e2:c8:46:bf:2f:bc:4d:a9:95:03:4f:90:33:c3:ec: 7f:5d:c5:03:64:76:95:b8:02:96:ed:24:73:93:ad:9d:ff:c7: a5:1f:23:90:87:a9:17:06:b9:ba:5c:3c:4a:83:a2:0d:39:99: 69:a2:8b:5b:60:f2:6d:c8:e0:2f:b8:dd:eb:53:c8:dc:ae:d6: dc:17:5e:91:48:19:82:7e:19:b8:8a:b5:8e:5c:ac:ec:2b:9a: 38:66:2a:8c:8c:cc:a5:af:0a:20:48:fa:6f:10:e1:59:3f:e9: d5:30:5b:2e:83:16:a3:f5:60:00:75:7a:d1:6b:23:99:71:c5: 16:18:07:7f:a1:0d:76:df:76:0b:d9:7a:c4:b5:cc:14:e6:f4: ea:d9:a0:b7:36:19:14:9b:6d:93:fb:73:7f:23:c3:f8:f8:06: 67:b5:7a:b2:c2:02:d3:9d:7e:00:65:68:a1:61:9b:ec:1c:d4: 5a:2b:0f:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xpsIPs/TePjZY4Q5MW+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjcwZmY4NjU4YWY0ZTNhOWVjOThjMWU1MTQyYTBmNzMwYmM4NWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjkXg1k18ow7HYAyKWAc2uBf87yC ZIioOBBLbXjg3MRzB2JkdyTkCyYi0+FR3K8ErfBwqTXkRQ4XPAQEL3ZA/NzfQ6VN Hze/aZD1AfAZjJTHyjRfm0D8rvGT+KzwjywN4mxqosr5QHxGCavYdl2+5GvTNXbC TPxKEcImtYcSQhnAWrYtDAx5hTaYpXmE/Cp8am0+ShtelfBfC08YeurZ/kXdfNzW GJ4hSbVdf2RFgEHbjejhVcYbqtJPrVHYLKebWA5Fh5vIa8qoo0IsWjvan74SGG7j TgI01BtZN+2hq7oRx1YqbGNrt7rOGuMY4WwVTo+xnVo4jcg5+O1r79B6swIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLtw/4ZYr046nsmMHlFCoPcwvIW1MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvdTNEX2hsaXZUanFleVl3ZVVVS2c5ekM4aGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbacMAwQA sDh3MA0GCSqGSIb3DQEBCwUAA4IBAQB5M/ibdoCDMi9F6Suvl6kQSnR8eZAU3y/c Q7b2ytAMwyOyq2fxtsU3T0cHmTIzsYomooTBgf6rRQ4XIbTCQrCVR6Krc6kX0yAQ febiyEa/L7xNqZUDT5Azw+x/XcUDZHaVuAKW7SRzk62d/8elHyOQh6kXBrm6XDxK g6INOZlpootbYPJtyOAvuN3rU8jcrtbcF16RSBmCfhm4irWOXKzsK5o4ZiqMjMyl rwogSPpvEOFZP+nVMFsugxaj9WAAdXrRayOZccUWGAd/oQ1233YL2XrEtcwU5vTq 2aC3NhkUm22T+3N/I8P4+AZntXqywgLTnX4AZWihYZvsHNRaKw+v -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:52 2026 by rpki-client