This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-T2ZYMPKiBruESoAmH7Wwl9yq20.roa File: 1-T2ZYMPKiBruESoAmH7Wwl9yq20.roa (raw, json) Hash identifier: q7HWgyE7yd60WRqAoHlyuMAcwhALB0o3MA1S/JRjlcw= Subject key identifier: F9:3D:99:60:C3:CA:88:1A:EE:11:2A:00:98:7E:D6:C2:5F:72:AB:6D Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019B7D77BD782D3C883F8ECBBA22D9EE121D Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-T2ZYMPKiBruESoAmH7Wwl9yq20.roa Signing time: Fri 02 Jan 2026 06:49:17 +0000 ROA not before: Fri 02 Jan 2026 06:49:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 109.122.241.0/24 maxlen: 24 109.122.242.0/24 maxlen: 24 109.122.243.0/24 maxlen: 24 109.122.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:77:bd:78:2d:3c:88:3f:8e:cb:ba:22:d9:ee:12:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jan 2 06:49:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f93d9960c3ca881aee112a00987ed6c25f72ab6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:ad:17:97:6d:58:b1:93:8d:5f:9c:eb:48: 50:39:12:ba:99:a5:b9:78:82:b4:cd:dd:57:ba:3d: 43:33:a8:b0:79:23:c9:e4:f3:ef:e3:b6:2d:5d:e4: 78:c9:8c:87:1a:93:28:b2:d6:16:57:58:9a:f2:bd: 32:18:49:75:2b:f2:cc:86:51:d1:e7:3d:db:2f:13: 4d:a9:41:a9:32:fb:5a:09:b3:fc:c9:5f:a3:3b:d5: 44:26:a7:76:49:77:29:9c:80:ab:8f:da:f7:8d:48: 20:54:7d:e2:47:7f:59:a4:fc:fb:53:8c:2c:f2:fb: 5a:f5:40:b7:ac:cd:8a:69:5b:5e:8a:57:98:22:43: 94:30:5e:f4:d9:f1:22:d8:9f:0f:a1:17:c7:1e:cf: 8e:63:58:6f:45:1a:4f:f3:99:aa:0f:3f:bb:ca:24: d2:7d:be:11:5e:31:ae:0b:cb:51:9f:5b:d6:7f:fe: 74:ef:85:71:7a:be:20:f8:79:06:c6:3b:91:85:7e: a6:6f:fc:3b:00:ba:43:27:b1:a1:42:b1:24:ae:d6: 28:4a:21:88:40:f6:02:cc:f6:cb:b7:b3:41:5c:88: 2c:e2:4a:a6:d5:69:bf:be:28:be:f6:60:39:77:b8: 9c:39:4b:46:9c:01:ac:2b:e9:88:54:fa:a8:fb:05: 5e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3D:99:60:C3:CA:88:1A:EE:11:2A:00:98:7E:D6:C2:5F:72:AB:6D X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-T2ZYMPKiBruESoAmH7Wwl9yq20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.241.0-109.122.243.255 109.122.253.0/24 Signature Algorithm: sha256WithRSAEncryption b0:fc:6e:28:ee:2d:34:2c:10:0a:31:1c:3a:fd:66:62:cd:27: 70:ea:89:aa:23:70:be:62:80:94:f0:a3:1e:d3:35:53:54:2a: 7f:21:47:83:8f:37:95:eb:bc:cf:62:4c:5b:6b:21:93:ad:60: 73:f3:24:ff:97:a1:90:b4:1a:d8:ef:64:e1:e3:59:b4:a3:32: 3a:3a:12:e5:b1:ed:46:f7:a3:1e:c8:1d:cb:34:f4:e4:c0:fb: 7c:c6:5d:fd:22:dd:af:f7:3b:5e:63:d7:98:d4:ec:e6:ee:8f: 34:b7:41:c9:a7:34:36:c0:1f:a5:cb:f9:02:1d:ce:1b:32:0d: 50:f0:10:cd:20:52:9a:48:4a:83:77:52:ec:2a:39:53:94:01: 6d:35:4a:47:96:85:d4:7c:ec:b9:ae:68:53:11:26:73:06:53: 30:51:43:d9:52:f7:e9:39:7e:88:6c:d6:f6:17:21:70:21:0a: 64:a3:1f:10:95:7d:2c:7d:99:51:98:3f:b1:12:37:0b:c2:82: 7b:86:7c:7c:05:d5:00:3e:f3:fe:33:94:e2:4d:e9:96:d6:c0: 9a:e6:b1:c1:82:3c:0d:db:a2:cd:05:48:19:90:7b:c4:71:de: cc:e4:38:8b:07:e2:ee:83:7d:bf:b1:04:7d:25:f8:2d:e7:eb: f7:5f:98:c7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9d714LTyIP47LuiLZ7hIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMTAyMDY0OTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTNkOTk2MGMzY2E4ODFhZWUxMTJhMDA5ODdlZDZjMjVmNzJhYjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYOtF5dtWLGTjV+c60hQORK6maW5 eIK0zd1Xuj1DM6iweSPJ5PPv47YtXeR4yYyHGpMostYWV1ia8r0yGEl1K/LMhlHR 5z3bLxNNqUGpMvtaCbP8yV+jO9VEJqd2SXcpnICrj9r3jUggVH3iR39ZpPz7U4ws 8vta9UC3rM2KaVteileYIkOUMF702fEi2J8PoRfHHs+OY1hvRRpP85mqDz+7yiTS fb4RXjGuC8tRn1vWf/5074Vxer4g+HkGxjuRhX6mb/w7ALpDJ7GhQrEkrtYoSiGI QPYCzPbLt7NBXIgs4kqm1Wm/vii+9mA5d7icOUtGnAGsK+mIVPqo+wVeIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPk9mWDDyoga7hEqAJh+1sJfcqttMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvMS1UMlpZTVBLaUJydUVTb0FtSDdXd2w5eXEyMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTIvYzk2MWEwLTRmNTMtNDIyYS1iN2RkLTNkZmE1MTBkNmIx Ni8xL2JkczRzMFBhTFJHVENlMnFHY2VuaUhBeWZyNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQAbXrx AwQCbXrwAwQAbXr9MA0GCSqGSIb3DQEBCwUAA4IBAQCw/G4o7i00LBAKMRw6/WZi zSdw6omqI3C+YoCU8KMe0zVTVCp/IUeDjzeV67zPYkxbayGTrWBz8yT/l6GQtBrY 72Th41m0ozI6OhLlse1G96MeyB3LNPTkwPt8xl39It2v9zteY9eY1Ozm7o80t0HJ pzQ2wB+ly/kCHc4bMg1Q8BDNIFKaSEqDd1LsKjlTlAFtNUpHloXUfOy5rmhTESZz BlMwUUPZUvfpOX6IbNb2FyFwIQpkox8QlX0sfZlRmD+xEjcLwoJ7hnx8BdUAPvP+ M5TiTemW1sCa5rHBgjwN26LNBUgZkHvEcd7M5DiLB+Lug32/sQR9Jfgt5+v3X5jH -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:43 2026 by rpki-client