This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-vXs8A60Wo9w_MhcfooONX1CWBc.roa File: 1-vXs8A60Wo9w_MhcfooONX1CWBc.roa (raw, json) Hash identifier: l4SVSp/InzaI0fB/VJ2Dzr8zKalVtB2WUG5d8+G5c6s= Subject key identifier: FA:F5:EC:F0:0E:B4:5A:8F:70:FC:C8:5C:7E:8A:0E:35:7D:42:58:17 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD9EF7909A283EA062D4BDF5E42D8 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-vXs8A60Wo9w_MhcfooONX1CWBc.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214618 IP address blocks: 109.176.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d9:ef:79:09:a2:83:ea:06:2d:4b:df:5e:42:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faf5ecf00eb45a8f70fcc85c7e8a0e357d425817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:53:ba:0b:e6:0a:07:11:9d:b7:67:9a:d4:b0: ba:87:ce:3e:d4:77:46:f1:62:6d:ec:0c:ff:98:9c: 99:cf:69:17:f5:a2:1e:f7:8e:42:eb:39:f7:21:b7: 1d:9a:6b:17:90:31:bb:fd:85:33:c9:e8:cc:0a:3f: a8:84:f2:51:34:5b:46:45:45:f6:33:45:66:30:10: 50:3c:b1:ed:a9:f3:e3:a4:c1:52:f4:0e:68:b7:0f: ca:5b:86:48:85:c0:7b:29:30:0c:90:a2:78:f2:d5: a5:42:bb:7a:1b:5c:eb:db:1a:16:af:64:1b:bb:25: 49:be:b1:7b:2b:87:7c:d5:5b:3b:90:df:95:5e:96: c2:08:2f:8b:e2:d0:41:dc:ca:0a:29:e2:81:83:8f: 6f:dd:b2:3a:b9:80:ad:39:6f:7e:3f:46:42:3f:08: 83:8a:2f:1c:1c:3a:e8:82:1c:f3:59:8c:5a:4b:3a: a5:d5:5e:b4:c0:22:91:c7:f9:f2:54:0c:93:29:59: 43:8e:d7:62:29:73:84:c5:ab:bf:62:e4:04:39:0c: 26:59:ed:ff:38:fa:68:1a:78:b2:4a:7c:7f:4d:83: f6:1a:06:8c:44:ff:bc:dc:3e:0b:b1:ad:5b:72:ec: c7:98:53:dd:55:91:b6:60:98:40:72:62:2a:3f:5d: f2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F5:EC:F0:0E:B4:5A:8F:70:FC:C8:5C:7E:8A:0E:35:7D:42:58:17 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-vXs8A60Wo9w_MhcfooONX1CWBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.239.0/24 Signature Algorithm: sha256WithRSAEncryption a0:21:c6:ec:02:ef:21:1b:71:c2:81:11:c9:c4:b5:ae:b0:3b: 8d:33:27:63:7a:7f:b4:74:7f:d6:dc:44:18:54:06:1b:2a:c2: 10:b2:1b:a2:1c:f5:6a:1e:e3:5f:b3:f7:b9:e3:31:c3:79:34: 95:a2:5c:3a:ea:59:bb:c7:a0:84:87:e9:29:10:d8:34:9f:c2: f2:27:90:1b:01:2c:96:e3:b4:1f:9e:52:88:d0:60:82:38:ef: 0e:68:2c:05:1d:63:44:13:74:1c:5a:08:57:0a:69:af:94:b2: 82:0d:4d:2f:d8:9d:dd:0d:b9:9e:d7:3a:c1:d1:f5:af:7d:33: fc:f8:73:47:dd:6e:91:46:7a:b8:35:2a:fb:a7:2e:3e:e1:2e: ca:a1:c5:2c:99:d2:77:41:c0:65:b1:39:fe:c8:ec:52:cb:57: 6c:9a:e6:91:13:04:f8:e9:a5:67:f1:6d:b9:06:13:6c:e0:71: 2f:28:40:9e:4d:e0:22:ad:2e:12:77:23:59:d1:02:4d:f7:e7: aa:bb:60:05:65:e6:0c:f7:2b:35:2d:b3:14:7f:ac:b8:3a:e7: 70:4d:f5:9a:f0:5b:ba:40:4e:8b:5b:9b:aa:88:50:32:a7:29: fd:37:5c:34:c2:3d:cd:b5:05:48:ea:1c:9c:ac:15:69:e8:ff: 96:62:d7:60 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6WtnveQmig+oGLUvfXkLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWY1ZWNmMDBlYjQ1YThmNzBmY2M4NWM3ZThhMGUzNTdkNDI1ODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1O6C+YKBxGdt2ea1LC6h84+1HdG 8WJt7Az/mJyZz2kX9aIe945C6zn3IbcdmmsXkDG7/YUzyejMCj+ohPJRNFtGRUX2 M0VmMBBQPLHtqfPjpMFS9A5otw/KW4ZIhcB7KTAMkKJ48tWlQrt6G1zr2xoWr2Qb uyVJvrF7K4d81Vs7kN+VXpbCCC+L4tBB3MoKKeKBg49v3bI6uYCtOW9+P0ZCPwiD ii8cHDroghzzWYxaSzql1V60wCKRx/nyVAyTKVlDjtdiKXOExau/YuQEOQwmWe3/ OPpoGniySnx/TYP2GgaMRP+83D4Lsa1bcuzHmFPdVZG2YJhAcmIqP13y3QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPr17PAOtFqPcPzIXH6KDjV9QlgXMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMS12WHM4QTYwV285d19NaGNmb29PTlgxQ1dCYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGEvNDlkYzAwLTk3ZTItNDYyOC1hZTM5LTQxMjI4ZTM5ZmY3 Yy8xL1A5TU5pbjRTX0h2Mkxnd1NIbnpDSnQ2bE81cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG2w7zAN BgkqhkiG9w0BAQsFAAOCAQEAoCHG7ALvIRtxwoERycS1rrA7jTMnY3p/tHR/1txE GFQGGyrCELIbohz1ah7jX7P3ueMxw3k0laJcOupZu8eghIfpKRDYNJ/C8ieQGwEs luO0H55SiNBggjjvDmgsBR1jRBN0HFoIVwppr5Sygg1NL9id3Q25ntc6wdH1r30z /PhzR91ukUZ6uDUq+6cuPuEuyqHFLJnSd0HAZbE5/sjsUstXbJrmkRME+OmlZ/Ft uQYTbOBxLyhAnk3gIq0uEncjWdECTffnqrtgBWXmDPcrNS2zFH+suDrncE31mvBb ukBOi1ubqohQMqcp/TdcNMI9zbUFSOocnKwVaej/lmLXYA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:25 2026 by rpki-client