This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/8Z4cnJPLnuvDnXqgx8BKoKEM9bU.roa File: 8Z4cnJPLnuvDnXqgx8BKoKEM9bU.roa (raw, json) Hash identifier: 6Fm2cAinJPnR+GJXlx5vjK077RhAacIcahwr2z1YkDg= Subject key identifier: F1:9E:1C:9C:93:CB:9E:EB:C3:9D:7A:A0:C7:C0:4A:A0:A1:0C:F5:B5 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B7F146A10FAFA66D42EC352CA3040C64A Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/8Z4cnJPLnuvDnXqgx8BKoKEM9bU.roa Signing time: Fri 02 Jan 2026 14:20:02 +0000 ROA not before: Fri 02 Jan 2026 14:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215730 IP address blocks: 109.120.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:6a:10:fa:fa:66:d4:2e:c3:52:ca:30:40:c6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Jan 2 14:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f19e1c9c93cb9eebc39d7aa0c7c04aa0a10cf5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:82:e2:d4:8e:fd:ee:59:98:80:a4:b9:83: c6:c4:ca:25:bf:7f:08:7c:67:1f:9c:ac:28:73:e4: af:89:03:77:e8:8d:da:17:43:51:b7:90:3e:f5:50: 0b:04:39:71:bd:54:66:f8:1e:17:a5:0b:7d:95:70: 09:3a:4e:d0:13:8a:5d:d3:6e:dd:ed:04:74:6c:d5: 3c:9f:2f:4f:f8:32:d8:fa:bc:fe:ac:9d:1a:82:a8: 95:e7:e0:7b:5d:0a:83:5f:87:af:0d:6d:b2:45:1b: 06:ca:d5:48:cc:28:56:96:65:12:e4:3f:a4:82:73: 1d:52:13:81:ce:66:5b:3e:f9:5f:c2:60:89:cf:9a: 94:2f:e6:8b:51:3c:af:0b:64:a4:c6:fa:ff:ae:9a: 16:e6:e7:1c:ef:ba:14:2b:6b:f3:53:f6:b0:52:51: 01:19:69:31:51:cb:a7:86:c6:ff:f9:6d:dd:0b:61: 97:37:0f:b2:2f:54:b2:9a:ce:72:fc:7c:eb:eb:16: da:12:af:bd:fb:0d:de:d7:2a:2c:ac:c1:80:c3:5b: 8e:42:ba:54:aa:12:63:83:0c:ec:c6:bc:1e:36:75: 38:eb:8d:ee:c6:10:fe:b5:94:9f:08:78:4f:22:16: 0c:d4:51:2c:12:91:d6:4f:49:00:c0:6e:41:88:c8: 9f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9E:1C:9C:93:CB:9E:EB:C3:9D:7A:A0:C7:C0:4A:A0:A1:0C:F5:B5 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/8Z4cnJPLnuvDnXqgx8BKoKEM9bU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.120.137.0/24 Signature Algorithm: sha256WithRSAEncryption 95:c7:a9:ef:1a:87:73:e9:02:f8:65:4b:28:6a:2b:90:10:3f: 91:75:13:a9:b3:66:fc:1a:8a:bb:3d:d6:8e:e6:b1:37:16:c6: 51:ec:e3:1a:5f:b0:8a:e6:dd:2e:d1:47:8e:11:2b:bf:15:78: f5:8d:12:6d:f5:23:2d:7d:3a:42:59:72:45:67:1d:60:20:7e: 8f:85:ee:e8:53:1e:6e:5c:9d:27:af:88:41:53:66:12:a2:bc: dc:e9:29:43:89:40:af:4b:04:ee:91:ab:b8:03:f7:36:ef:98: 93:a7:d4:de:23:fe:83:7c:7d:20:b6:b6:cd:c5:bc:4d:f4:a8: ac:7a:91:22:25:57:eb:07:63:ea:ac:a2:fe:5a:5e:5f:36:b2: 71:76:0e:47:8b:e2:31:b8:15:d7:23:8f:61:f8:02:26:9d:82: 12:f2:df:45:a2:51:59:c7:b8:fb:eb:71:e0:01:4a:28:11:b1: ff:c5:da:50:70:73:ff:49:bc:a1:19:90:c4:e4:ea:58:f7:2b: d2:0e:cd:91:08:71:97:e9:19:14:01:dc:ba:0e:45:58:05:43: b5:b4:06:18:17:bc:6f:ab:e5:69:d6:c7:0e:2b:1f:6e:e6:84: 08:19:08:c7:da:0f:73:4c:16:bb:97:3d:fa:b9:1f:76:08:4d: eb:5b:e5:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGoQ+vpm1C7DUsowQMZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjYwMTAyMTQyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTllMWM5YzkzY2I5ZWViYzM5ZDdhYTBjN2MwNGFhMGExMGNmNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1CC4tSO/e5ZmICkuYPGxMolv38I fGcfnKwoc+SviQN36I3aF0NRt5A+9VALBDlxvVRm+B4XpQt9lXAJOk7QE4pd027d 7QR0bNU8ny9P+DLY+rz+rJ0agqiV5+B7XQqDX4evDW2yRRsGytVIzChWlmUS5D+k gnMdUhOBzmZbPvlfwmCJz5qUL+aLUTyvC2Skxvr/rpoW5ucc77oUK2vzU/awUlEB GWkxUcunhsb/+W3dC2GXNw+yL1Syms5y/Hzr6xbaEq+9+w3e1yosrMGAw1uOQrpU qhJjgwzsxrweNnU4643uxhD+tZSfCHhPIhYM1FEsEpHWT0kAwG5BiMifuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPGeHJyTy57rw516oMfASqChDPW1MB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvOFo0Y25KUExudXZEblhxZ3g4QktvS0VNOWJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXiJMA0G CSqGSIb3DQEBCwUAA4IBAQCVx6nvGodz6QL4ZUsoaiuQED+RdROps2b8Goq7PdaO 5rE3FsZR7OMaX7CK5t0u0UeOESu/FXj1jRJt9SMtfTpCWXJFZx1gIH6Phe7oUx5u XJ0nr4hBU2YSorzc6SlDiUCvSwTukau4A/c275iTp9TeI/6DfH0gtrbNxbxN9Kis epEiJVfrB2PqrKL+Wl5fNrJxdg5Hi+IxuBXXI49h+AImnYIS8t9FolFZx7j763Hg AUooEbH/xdpQcHP/SbyhGZDE5OpY9yvSDs2RCHGX6RkUAdy6DkVYBUO1tAYYF7xv q+Vp1scOKx9u5oQIGQjH2g9zTBa7lz36uR92CE3rW+Uo -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:38 2026 by rpki-client