This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/p11TeDMm0uMplq6QnnT6a0h_yrw.roa File: p11TeDMm0uMplq6QnnT6a0h_yrw.roa (raw, json) Hash identifier: xmy1s06ovFLtUr1mbZMaGtqrWwFvo5nSDSbPj7EtqcI= Subject key identifier: A7:5D:53:78:33:26:D2:E3:29:96:AE:90:9E:74:FA:6B:48:7F:CA:BC Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B7E38C04645380FAF180B105D4ED95D19 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/p11TeDMm0uMplq6QnnT6a0h_yrw.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26042 IP address blocks: 109.122.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c0:46:45:38:0f:af:18:0b:10:5d:4e:d9:5d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a75d53783326d2e32996ae909e74fa6b487fcabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5c:6d:b0:d5:96:5f:90:2c:89:00:69:43:b2: 9f:6a:59:f8:c7:00:48:c1:20:c5:31:43:d6:3d:ac: d0:8e:44:39:86:d1:cb:7a:73:d2:19:2e:27:59:b4: 3e:25:4b:d9:b5:1d:f0:cd:55:79:9a:98:00:08:19: 44:0e:ae:e6:ab:dd:d9:1d:83:c1:67:86:f8:5f:e3: 74:a3:a1:14:b0:bf:00:9c:36:96:7b:3f:73:bb:b8: 59:97:1c:c4:b6:52:9d:bb:2b:56:5d:b3:42:e9:ec: 7f:ea:6e:8b:80:ec:47:de:97:6a:63:1d:6b:d5:a0: c9:a2:dc:aa:f8:e5:33:99:c4:29:87:fe:07:f1:24: e9:0a:57:d5:63:35:d6:a6:04:d7:5c:07:72:97:6a: cf:78:12:38:c5:8d:6e:47:24:52:09:c2:d8:f1:15: e2:48:59:5a:64:5b:67:23:5b:27:df:34:f2:45:39: a4:19:28:f5:90:a0:15:2a:e5:5c:65:e4:5b:25:44: 36:2f:6a:c4:53:2c:0d:1a:02:65:5a:da:bf:bd:db: 1b:f2:35:7a:56:8a:84:88:97:bb:0a:e1:2d:33:47: ff:1d:df:8e:e7:9f:8c:87:31:03:7b:1a:64:29:04: 32:ad:2f:18:38:ec:9a:7d:6b:b4:da:3f:fc:9f:78: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5D:53:78:33:26:D2:E3:29:96:AE:90:9E:74:FA:6B:48:7F:CA:BC X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/p11TeDMm0uMplq6QnnT6a0h_yrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.60.0/24 Signature Algorithm: sha256WithRSAEncryption a6:c4:da:6c:2a:e5:52:0c:fa:1a:41:a2:cf:47:a5:5a:ed:66: 61:f0:a1:58:eb:67:8e:54:6f:c8:ae:b9:75:53:bd:e8:b8:6e: 0f:9a:7b:43:cb:4d:c3:54:b8:6c:bb:dd:66:5d:33:38:97:87: c2:ff:63:a8:4a:1e:ca:5b:8d:ff:4e:1c:ae:f0:f5:64:dc:33: f0:d0:1f:e4:e7:2c:d1:d8:9f:53:8c:95:2d:39:0c:72:d0:2e: 0a:34:35:88:c1:e6:d8:5e:1b:d8:68:30:89:04:a3:1e:1a:91: f9:21:91:9c:52:1a:29:13:4e:44:05:69:68:12:7b:90:fc:82: c8:5f:4e:66:6c:75:5c:8b:e6:88:f6:63:a0:73:a1:00:40:1b: 3a:29:46:34:3b:33:61:b3:46:f7:b8:f0:f9:2c:95:83:0d:0b: fb:5c:ab:4f:fa:01:9c:ff:0f:ef:e5:82:a8:22:80:e8:09:bc: e9:5e:a4:fd:49:9f:01:a7:a0:5a:f3:d4:bc:e4:1e:20:a7:4d: d3:97:b7:bd:77:ff:40:3c:8a:bc:4e:00:c4:7f:15:9e:22:96: 3e:16:0d:f8:fa:99:41:46:e1:3f:f9:1a:ef:20:d2:c6:1b:71: 48:fe:8c:a4:52:58:16:22:a9:06:17:42:cf:93:65:41:59:42: 61:3e:87:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMBGRTgPrxgLEF1O2V0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzVkNTM3ODMzMjZkMmUzMjk5NmFlOTA5ZTc0ZmE2YjQ4N2ZjYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVxtsNWWX5AsiQBpQ7Kfaln4xwBI wSDFMUPWPazQjkQ5htHLenPSGS4nWbQ+JUvZtR3wzVV5mpgACBlEDq7mq93ZHYPB Z4b4X+N0o6EUsL8AnDaWez9zu7hZlxzEtlKduytWXbNC6ex/6m6LgOxH3pdqYx1r 1aDJotyq+OUzmcQph/4H8STpClfVYzXWpgTXXAdyl2rPeBI4xY1uRyRSCcLY8RXi SFlaZFtnI1sn3zTyRTmkGSj1kKAVKuVcZeRbJUQ2L2rEUywNGgJlWtq/vdsb8jV6 VoqEiJe7CuEtM0f/Hd+O55+MhzEDexpkKQQyrS8YOOyafWu02j/8n3gdjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKddU3gzJtLjKZaukJ50+mtIf8q8MB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvcDExVGVETW0wdU1wbHE2UW5uVDZhMGhfeXJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo8MA0G CSqGSIb3DQEBCwUAA4IBAQCmxNpsKuVSDPoaQaLPR6Va7WZh8KFY62eOVG/Irrl1 U73ouG4PmntDy03DVLhsu91mXTM4l4fC/2OoSh7KW43/Thyu8PVk3DPw0B/k5yzR 2J9TjJUtOQxy0C4KNDWIwebYXhvYaDCJBKMeGpH5IZGcUhopE05EBWloEnuQ/ILI X05mbHVci+aI9mOgc6EAQBs6KUY0OzNhs0b3uPD5LJWDDQv7XKtP+gGc/w/v5YKo IoDoCbzpXqT9SZ8Bp6Ba89S85B4gp03Tl7e9d/9APIq8TgDEfxWeIpY+Fg34+plB RuE/+RrvINLGG3FI/oykUlgWIqkGF0LPk2VBWUJhPoeH -----END CERTIFICATE-----Generated at Sun Jan 25 10:07:00 2026 by rpki-client