This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/aSCZbcSmEJx6c2tD4gHByaxG1uY.roa File: aSCZbcSmEJx6c2tD4gHByaxG1uY.roa (raw, json) Hash identifier: wDx1oYMOzxSizEmKrbgo5abGosEvvZQ9f/EODfQUxnw= Subject key identifier: 69:20:99:6D:C4:A6:10:9C:7A:73:6B:43:E2:01:C1:C9:AC:46:D6:E6 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6BA45ACB44C34B5CAF2E5A6E4ED72 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/aSCZbcSmEJx6c2tD4gHByaxG1uY.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213789 IP address blocks: 109.248.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ba:45:ac:b4:4c:34:b5:ca:f2:e5:a6:e4:ed:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6920996dc4a6109c7a736b43e201c1c9ac46d6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:dc:38:a5:7e:58:83:26:d5:43:85:cb:c4: 1f:f8:87:12:da:4a:78:9e:79:2b:77:6d:3e:10:55: 80:56:e0:1c:65:f9:1c:b1:fd:54:1f:15:28:70:49: ff:42:b5:a0:24:32:5e:6f:24:3e:74:d1:17:58:ca: be:14:29:34:8e:67:05:e2:bf:3e:fd:1f:b1:e2:b7: 51:9a:12:78:12:f4:5f:6b:f8:80:04:cc:2e:b4:59: b8:5a:e2:9c:f0:67:02:72:f5:08:d8:c7:cd:d3:cd: 96:33:37:eb:c1:59:ae:07:91:96:57:d5:45:97:44: 67:de:fc:db:e7:a7:d8:63:fb:b7:42:4e:d2:79:dd: bf:4d:0e:f1:1e:75:73:c8:60:cb:dd:c2:eb:3a:e9: c7:22:d4:c2:2c:f1:7e:6f:f9:f4:ba:ad:93:ba:0a: e1:79:c5:87:98:f3:ba:5c:1b:75:c2:c1:bd:b5:4b: 0b:32:ea:d6:54:c5:2a:3b:21:b4:31:64:0f:ed:3c: a3:d7:96:be:53:04:99:a6:7d:ea:90:78:55:9c:56: c4:dc:3f:54:ea:fd:cf:45:57:f8:38:23:4d:0d:10: e9:ad:ff:51:c0:3a:74:aa:81:96:1b:e2:3f:97:13: 66:37:4c:9d:3f:19:d1:60:31:12:1d:e0:be:26:0b: 58:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:20:99:6D:C4:A6:10:9C:7A:73:6B:43:E2:01:C1:C9:AC:46:D6:E6 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/aSCZbcSmEJx6c2tD4gHByaxG1uY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.248.227.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:a2:b7:14:ca:f3:6d:66:cd:f9:8b:8a:2c:33:e4:6d:c3:ea: db:49:63:13:9d:b7:33:a2:8a:35:c8:0f:c8:11:f7:55:45:a7: fe:d3:9f:df:d3:8f:95:65:d0:54:01:3d:34:96:d0:b9:21:70: ee:49:7a:1c:95:68:48:2a:50:67:b3:90:4b:a0:4e:05:8d:4a: bf:c1:14:a2:3a:3c:40:59:ca:85:ce:3e:35:d4:a1:01:dd:b5: 72:69:e9:05:bf:fa:df:77:26:bc:b4:8c:6a:67:db:34:6a:9f: c2:f4:51:96:ac:b4:21:6c:72:61:21:f0:38:c7:1c:56:f8:a3: a0:7d:cd:9f:ca:76:a1:2a:e7:fd:b9:08:76:63:14:90:d4:1c: 63:cd:cf:54:07:ea:ec:2f:e7:5c:37:11:76:37:ed:6b:5b:07: 76:2a:bd:72:72:9c:e1:06:b6:fb:8d:62:01:87:16:88:bd:9b: 76:4c:d5:b7:12:30:b0:7d:76:5d:07:93:2a:c8:94:33:ce:68: b8:43:0e:36:fe:75:c6:07:d7:7d:b3:e0:44:3f:70:1d:75:b9: 3b:d4:e7:ca:da:0a:84:50:67:ce:4c:a2:a8:fc:41:2f:46:47: 54:10:40:0b:9d:0c:67:77:ff:5d:93:54:2a:8a:0a:96:70:f2: 54:cc:b6:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrpFrLRMNLXK8uWm5O1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTIwOTk2ZGM0YTYxMDljN2E3MzZiNDNlMjAxYzFjOWFjNDZkNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBfcOKV+WIMm1UOFy8Qf+IcS2kp4 nnkrd20+EFWAVuAcZfkcsf1UHxUocEn/QrWgJDJebyQ+dNEXWMq+FCk0jmcF4r8+ /R+x4rdRmhJ4EvRfa/iABMwutFm4WuKc8GcCcvUI2MfN082WMzfrwVmuB5GWV9VF l0Rn3vzb56fYY/u3Qk7Sed2/TQ7xHnVzyGDL3cLrOunHItTCLPF+b/n0uq2Tugrh ecWHmPO6XBt1wsG9tUsLMurWVMUqOyG0MWQP7Tyj15a+UwSZpn3qkHhVnFbE3D9U 6v3PRVf4OCNNDRDprf9RwDp0qoGWG+I/lxNmN0ydPxnRYDESHeC+JgtYxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGkgmW3EphCcenNrQ+IBwcmsRtbmMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvYVNDWmJjU21FSng2YzJ0RDRnSEJ5YXhHMXVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbfjjMA0G CSqGSIb3DQEBCwUAA4IBAQBqorcUyvNtZs35i4osM+Rtw+rbSWMTnbczooo1yA/I EfdVRaf+05/f04+VZdBUAT00ltC5IXDuSXoclWhIKlBns5BLoE4FjUq/wRSiOjxA WcqFzj411KEB3bVyaekFv/rfdya8tIxqZ9s0ap/C9FGWrLQhbHJhIfA4xxxW+KOg fc2fynahKuf9uQh2YxSQ1Bxjzc9UB+rsL+dcNxF2N+1rWwd2Kr1ycpzhBrb7jWIB hxaIvZt2TNW3EjCwfXZdB5MqyJQzzmi4Qw42/nXGB9d9s+BEP3Addbk71OfK2gqE UGfOTKKo/EEvRkdUEEALnQxnd/9dk1QqigqWcPJUzLZH -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:33 2026 by rpki-client