This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/n6Wo3lo-2eA2XYso_uRxdemIdA0.roa File: n6Wo3lo-2eA2XYso_uRxdemIdA0.roa (raw, json) Hash identifier: 2tz9zox6U7ONHf2qWHGmR4VfoTDutc5E/pTR0ItF2rI= Subject key identifier: 9F:A5:A8:DE:5A:3E:D9:E0:36:5D:8B:28:FE:E4:71:75:E9:88:74:0D Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B7F1464DD11F2400C11F1AA87F4EABCF4 Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/n6Wo3lo-2eA2XYso_uRxdemIdA0.roa Signing time: Fri 02 Jan 2026 14:20:01 +0000 ROA not before: Fri 02 Jan 2026 14:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206243 IP address blocks: 109.120.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:64:dd:11:f2:40:0c:11:f1:aa:87:f4:ea:bc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Jan 2 14:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fa5a8de5a3ed9e0365d8b28fee47175e988740d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:1a:4f:4e:7c:13:0a:e6:3c:25:51:57:48: 88:ec:c7:6c:c3:31:61:bd:ef:f4:7b:2c:3d:42:8f: ad:18:53:b0:b4:d9:5e:21:29:b7:5e:99:91:74:c2: fc:9a:bb:3c:55:ce:04:f2:c2:29:99:98:9b:62:58: 89:f2:3d:6b:d5:8d:49:53:c7:11:1a:07:79:8d:82: 50:7b:3c:a8:c7:45:10:02:ff:41:ba:a2:a8:ac:fe: 74:fb:55:10:d0:6a:32:e2:f8:f6:f6:7e:33:a1:e1: cc:fc:e1:ad:2c:06:41:c3:d5:ef:83:4e:8f:55:ec: c0:8a:34:66:2d:43:f0:ce:e6:01:f3:e7:e8:dc:24: 16:46:b6:51:29:4c:74:d4:0c:ec:1c:6a:03:4e:5a: 51:86:b5:61:c4:b3:50:a3:12:f3:a7:ef:e9:6e:4d: fd:89:fc:72:2d:54:4f:49:e8:19:42:f2:98:8e:bb: c6:8d:a5:07:ed:08:fd:6b:80:e7:df:2e:11:5e:27: e0:64:d9:b3:45:c2:4b:5b:62:b3:35:8b:36:a9:d5: e8:d7:44:25:07:15:53:27:c7:1d:bb:5e:db:9a:0a: b2:7e:0f:3c:f9:d8:c1:8a:cc:67:4a:d1:00:60:11: 47:a1:97:15:12:ad:cc:70:2d:ab:ca:d7:58:06:03: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A5:A8:DE:5A:3E:D9:E0:36:5D:8B:28:FE:E4:71:75:E9:88:74:0D X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/n6Wo3lo-2eA2XYso_uRxdemIdA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.120.144.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:ec:e2:1b:c1:fe:85:1d:c1:1c:d8:a5:c2:41:85:ba:58:54: ef:bc:43:90:7d:b7:0c:ac:61:f0:e2:ef:99:85:94:26:10:12: 2f:69:70:de:21:8b:a3:f6:3f:5d:53:10:07:08:b0:d8:15:53: b5:e9:25:2c:a1:54:66:16:84:c9:7b:4d:93:13:80:5a:55:99: 1c:7a:19:63:ce:8e:fc:5b:dc:3f:cc:a9:1d:5d:7e:a3:8c:16: af:3d:5c:c6:6e:cc:03:05:15:de:52:68:de:3f:7c:1b:0b:56: 32:13:67:42:61:b0:cd:84:07:b3:99:de:9f:9b:e9:9f:49:6b: 6b:b9:24:7c:12:3b:bb:8b:45:42:b1:40:c1:5f:1a:00:39:6b: 93:5e:b4:24:ad:46:e4:39:e6:83:11:bc:ac:95:e6:fe:36:66: af:98:38:4e:95:9b:6a:0e:97:4f:8d:8e:8f:1b:5e:42:4a:65: 59:c7:67:dd:82:8e:fa:d6:4e:a9:5d:29:0e:ed:43:5d:7f:ac: a5:36:4c:6d:e0:5f:f1:6b:78:e2:7d:66:d5:ec:95:83:b8:d0: 75:df:18:71:ec:b2:95:5e:da:d0:28:3b:fa:17:85:85:fe:86: 9a:cb:a1:8a:45:35:b6:22:4f:30:d6:0a:d0:58:1d:8f:76:f2: 44:cc:31:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGTdEfJADBHxqof06rz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjYwMTAyMTQyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmE1YThkZTVhM2VkOWUwMzY1ZDhiMjhmZWU0NzE3NWU5ODg3NDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr84aT058EwrmPCVRV0iI7MdswzFh ve/0eyw9Qo+tGFOwtNleISm3XpmRdML8mrs8Vc4E8sIpmZibYliJ8j1r1Y1JU8cR Ggd5jYJQezyox0UQAv9BuqKorP50+1UQ0Goy4vj29n4zoeHM/OGtLAZBw9Xvg06P VezAijRmLUPwzuYB8+fo3CQWRrZRKUx01AzsHGoDTlpRhrVhxLNQoxLzp+/pbk39 ifxyLVRPSegZQvKYjrvGjaUH7Qj9a4Dn3y4RXifgZNmzRcJLW2KzNYs2qdXo10Ql BxVTJ8cdu17bmgqyfg88+djBisxnStEAYBFHoZcVEq3McC2rytdYBgNSgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ+lqN5aPtngNl2LKP7kcXXpiHQNMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvbjZXbzNsby0yZUEyWFlzb191UnhkZW1JZEEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXiQMA0G CSqGSIb3DQEBCwUAA4IBAQA+7OIbwf6FHcEc2KXCQYW6WFTvvEOQfbcMrGHw4u+Z hZQmEBIvaXDeIYuj9j9dUxAHCLDYFVO16SUsoVRmFoTJe02TE4BaVZkcehljzo78 W9w/zKkdXX6jjBavPVzGbswDBRXeUmjeP3wbC1YyE2dCYbDNhAezmd6fm+mfSWtr uSR8Eju7i0VCsUDBXxoAOWuTXrQkrUbkOeaDEbysleb+NmavmDhOlZtqDpdPjY6P G15CSmVZx2fdgo761k6pXSkO7UNdf6ylNkxt4F/xa3jifWbV7JWDuNB13xhx7LKV XtrQKDv6F4WF/oaay6GKRTW2Ik8w1grQWB2PdvJEzDFF -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:33 2026 by rpki-client