This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/09L29M524JtLa5ZgogkXLXq_qVQ.roa File: 09L29M524JtLa5ZgogkXLXq_qVQ.roa (raw, json) Hash identifier: vbKviP/C/Uh8p10yamrn572MJG8g6MCiVwGfvH2mWcc= Subject key identifier: D3:D2:F6:F4:CE:76:E0:9B:4B:6B:96:60:A2:09:17:2D:7A:BF:A9:54 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019B7C80D66E9AF80EBF06BB311F883BD714 Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/09L29M524JtLa5ZgogkXLXq_qVQ.roa Signing time: Fri 02 Jan 2026 02:19:36 +0000 ROA not before: Fri 02 Jan 2026 02:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210202 IP address blocks: 107.150.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d6:6e:9a:f8:0e:bf:06:bb:31:1f:88:3b:d7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3d2f6f4ce76e09b4b6b9660a209172d7abfa954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:65:a1:fc:c4:dd:c4:11:64:88:4b:bf:e7: c0:f3:a5:b3:bc:c6:e0:9c:51:04:ed:cb:59:de:7e: 45:66:2b:3a:a1:e0:30:2a:82:03:28:a3:aa:bb:f9: 9c:30:8a:d6:a3:44:5e:a1:d6:91:78:ff:4b:7a:f1: 32:82:40:a4:8b:72:80:f2:c9:9a:64:fe:a0:b2:0e: be:12:9c:d8:e4:2d:bf:98:f9:0d:27:25:f2:d9:b9: 6a:09:25:cd:f2:f8:77:62:cf:61:f6:ee:b8:7b:26: e6:aa:f4:79:75:a8:f9:ab:4b:b8:cb:b2:93:2a:d7: 48:c9:76:df:01:f8:db:11:95:df:16:0f:03:b3:1f: 88:74:08:48:f6:b5:f2:fc:9c:79:ee:c0:fa:bd:ff: 64:ce:07:db:02:b2:a1:bd:1c:0c:fb:ca:f2:47:5c: 9a:b9:fe:4a:39:ee:50:b6:ac:c2:33:3b:80:15:80: 87:7b:8f:43:fe:0d:4c:ba:3d:50:37:a9:8a:01:b9: 76:63:c3:f8:6c:61:73:b8:70:d6:fd:6a:ab:60:48: 18:57:cf:35:e3:39:1d:22:1b:be:58:79:4a:27:69: 13:f5:b8:3a:a5:64:8b:c3:71:80:66:36:e2:a7:d6: 0f:19:de:0c:57:bc:75:c2:7e:c0:c9:5b:11:eb:a9: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D2:F6:F4:CE:76:E0:9B:4B:6B:96:60:A2:09:17:2D:7A:BF:A9:54 X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/09L29M524JtLa5ZgogkXLXq_qVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.150.164.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:63:be:c5:08:b9:f9:74:af:fe:12:44:5b:7c:77:67:03:82: cb:1f:c4:e4:60:5f:ad:74:00:af:de:3e:cc:d2:15:09:90:13: 78:dc:a6:d6:66:95:a3:42:28:80:9e:84:fd:cf:7a:e3:8c:bd: bd:07:0e:10:12:fe:07:b8:89:5d:9c:29:d7:97:a3:83:5f:57: 37:75:f2:f3:6d:02:6a:5b:ed:27:a7:ff:bc:b6:02:b3:0c:22: 1e:03:3e:a9:88:34:3d:f1:28:7c:9f:f3:97:33:63:4c:b9:b7: 41:5c:fd:9a:3f:2b:c7:48:57:32:46:19:66:8a:7d:4b:d3:22: 48:8a:3f:38:55:d0:da:66:d3:52:05:d9:6f:0a:93:08:92:e6: be:36:3f:04:ec:16:01:c5:74:72:a8:b9:b2:12:0e:f7:ce:df: ff:b1:0d:8f:87:31:01:e7:a8:a0:23:32:66:e2:80:50:12:60: ad:dc:e2:bd:34:ff:32:5e:90:60:d6:67:67:5c:c2:52:a2:ef: 24:5f:a5:92:2d:78:22:ed:47:61:98:e5:f9:ee:23:7f:9d:ed: e4:6d:8b:dd:8e:c8:0c:77:af:bd:d6:7b:4e:f6:00:60:16:bb: 40:94:c8:42:d7:44:91:38:b0:77:9a:e9:0a:67:b8:d3:30:eb: 58:43:a9:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gNZumvgOvwa7MR+IO9cUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2QyZjZmNGNlNzZlMDliNGI2Yjk2NjBhMjA5MTcyZDdhYmZhOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtullofzE3cQRZIhLv+fA86WzvMbg nFEE7ctZ3n5FZis6oeAwKoIDKKOqu/mcMIrWo0ReodaReP9LevEygkCki3KA8sma ZP6gsg6+EpzY5C2/mPkNJyXy2blqCSXN8vh3Ys9h9u64eybmqvR5daj5q0u4y7KT KtdIyXbfAfjbEZXfFg8Dsx+IdAhI9rXy/Jx57sD6vf9kzgfbArKhvRwM+8ryR1ya uf5KOe5QtqzCMzuAFYCHe49D/g1Muj1QN6mKAbl2Y8P4bGFzuHDW/WqrYEgYV881 4zkdIhu+WHlKJ2kT9bg6pWSLw3GAZjbip9YPGd4MV7x1wn7AyVsR66n7AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPS9vTOduCbS2uWYKIJFy16v6lUMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvMDlMMjlNNTI0SnRMYTVaZ29na1hMWHFfcVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5akMA0G CSqGSIb3DQEBCwUAA4IBAQB6Y77FCLn5dK/+EkRbfHdnA4LLH8TkYF+tdACv3j7M 0hUJkBN43KbWZpWjQiiAnoT9z3rjjL29Bw4QEv4HuIldnCnXl6ODX1c3dfLzbQJq W+0np/+8tgKzDCIeAz6piDQ98Sh8n/OXM2NMubdBXP2aPyvHSFcyRhlmin1L0yJI ij84VdDaZtNSBdlvCpMIkua+Nj8E7BYBxXRyqLmyEg73zt//sQ2PhzEB56igIzJm 4oBQEmCt3OK9NP8yXpBg1mdnXMJSou8kX6WSLXgi7UdhmOX57iN/ne3kbYvdjsgM d6+91ntO9gBgFrtAlMhC10SROLB3mukKZ7jTMOtYQ6nM -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:04 2026 by rpki-client