This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/I0iFxg4YDv2EqdD6x3XNbYtiOcc.roa File: I0iFxg4YDv2EqdD6x3XNbYtiOcc.roa (raw, json) Hash identifier: X/uQaGmwBp1SywmuChkJP3FndRdfv24v12p2o7UXcms= Subject key identifier: 23:48:85:C6:0E:18:0E:FD:84:A9:D0:FA:C7:75:CD:6D:8B:62:39:C7 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B7F1465295BE9130860255CCA5471F15D Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/I0iFxg4YDv2EqdD6x3XNbYtiOcc.roa Signing time: Fri 02 Jan 2026 14:20:01 +0000 ROA not before: Fri 02 Jan 2026 14:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206728 IP address blocks: 109.120.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:65:29:5b:e9:13:08:60:25:5c:ca:54:71:f1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Jan 2 14:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=234885c60e180efd84a9d0fac775cd6d8b6239c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:0e:53:d2:82:0d:2a:98:49:b2:a6:e4:21: 6b:d2:76:82:81:48:b2:64:6c:aa:38:1c:8c:35:e8: 9a:ca:6e:85:28:a6:96:2e:5d:76:62:13:eb:b3:51: ef:03:8c:dc:3b:66:ca:80:b4:a5:1b:fd:98:53:2b: 0e:4d:52:d8:29:9c:08:ad:ca:40:f6:12:de:de:4e: 7f:67:55:e5:d5:2c:28:85:f9:bb:af:93:b4:d3:a7: e8:a7:b4:c3:ad:e3:f7:d2:0a:63:14:d3:24:55:54: 78:77:39:e9:7b:89:98:51:92:7b:03:61:a3:c5:c9: 2f:87:f7:c2:6c:3b:98:72:2e:39:52:4a:61:22:1e: 7a:ab:30:ae:58:76:db:d6:4d:52:bb:ea:e9:d3:d7: 89:d6:ee:6b:d1:46:57:7b:6f:c0:44:aa:79:68:68: 30:38:a9:e3:6f:81:11:53:f4:52:ec:b1:6b:55:42: 6d:63:43:40:f4:bc:25:00:84:60:4b:6c:0b:21:ba: 2d:8e:c4:3c:3a:30:18:fd:48:c8:8a:f7:51:07:9d: 05:7b:63:d1:87:4f:07:5a:e6:55:9a:ca:57:ae:4a: a6:4b:e9:5b:e8:86:c0:1a:11:47:21:4c:75:06:8d: 01:d6:39:e3:f9:00:1c:ec:07:15:ed:21:69:20:7b: 32:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:48:85:C6:0E:18:0E:FD:84:A9:D0:FA:C7:75:CD:6D:8B:62:39:C7 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/I0iFxg4YDv2EqdD6x3XNbYtiOcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.120.136.0/24 Signature Algorithm: sha256WithRSAEncryption 40:cc:ee:9f:06:62:d2:ec:22:62:26:63:02:9d:8f:4f:00:46: 42:76:d4:f6:9c:96:93:1b:43:e6:06:5e:55:53:bb:3d:a5:a7: f5:28:d6:4b:f0:7d:33:83:54:ed:1f:d2:e0:71:31:a7:e0:61: 5c:1a:5d:26:57:bf:4b:0e:3b:5f:52:b2:1c:ca:d3:5c:4b:12: ac:d1:ab:49:b2:cd:09:e0:c9:04:fe:25:16:a8:7c:7e:82:4e: 79:36:36:75:b9:68:19:7d:8d:1c:4f:8f:81:66:94:35:46:bc: 80:17:a5:fc:2c:f3:27:e9:6e:5f:76:fe:13:85:e6:b2:3c:30: 6b:92:34:61:c4:3f:46:5a:42:d3:0a:5f:25:51:2b:13:8c:a4: de:6e:4f:78:22:a7:72:05:5c:dc:7b:dc:90:52:50:f6:46:75: e2:e3:ad:cd:c5:0b:18:4d:38:93:cf:7d:3c:4a:6e:e3:45:4b: 2a:11:55:c9:47:b2:06:80:2c:c5:bd:ce:41:86:ad:a0:79:29: f6:31:8e:84:fb:72:c3:e7:5b:81:8f:7f:82:e4:07:2d:70:1a: 64:87:1c:37:93:37:3d:29:49:48:85:4b:28:16:72:a4:d0:b9: 64:e8:60:cc:38:39:20:55:d3:a5:57:37:97:67:24:b1:5f:c0: ed:90:8a:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGUpW+kTCGAlXMpUcfFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjYwMTAyMTQyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzQ4ODVjNjBlMTgwZWZkODRhOWQwZmFjNzc1Y2Q2ZDhiNjIzOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrEOU9KCDSqYSbKm5CFr0naCgUiy ZGyqOByMNeiaym6FKKaWLl12YhPrs1HvA4zcO2bKgLSlG/2YUysOTVLYKZwIrcpA 9hLe3k5/Z1Xl1Swohfm7r5O006fop7TDreP30gpjFNMkVVR4dznpe4mYUZJ7A2Gj xckvh/fCbDuYci45UkphIh56qzCuWHbb1k1Su+rp09eJ1u5r0UZXe2/ARKp5aGgw OKnjb4ERU/RS7LFrVUJtY0NA9LwlAIRgS2wLIbotjsQ8OjAY/UjIivdRB50Fe2PR h08HWuZVmspXrkqmS+lb6IbAGhFHIUx1Bo0B1jnj+QAc7AcV7SFpIHsyAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCNIhcYOGA79hKnQ+sd1zW2LYjnHMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvSTBpRnhnNFlEdjJFcWRENngzWE5iWXRpT2NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXiIMA0G CSqGSIb3DQEBCwUAA4IBAQBAzO6fBmLS7CJiJmMCnY9PAEZCdtT2nJaTG0PmBl5V U7s9paf1KNZL8H0zg1TtH9LgcTGn4GFcGl0mV79LDjtfUrIcytNcSxKs0atJss0J 4MkE/iUWqHx+gk55NjZ1uWgZfY0cT4+BZpQ1RryAF6X8LPMn6W5fdv4TheayPDBr kjRhxD9GWkLTCl8lUSsTjKTebk94IqdyBVzce9yQUlD2RnXi463NxQsYTTiTz308 Sm7jRUsqEVXJR7IGgCzFvc5Bhq2geSn2MY6E+3LD51uBj3+C5ActcBpkhxw3kzc9 KUlIhUsoFnKk0Llk6GDMODkgVdOlVzeXZySxX8DtkIrv -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:21 2026 by rpki-client