This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa File: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (raw, json) Hash identifier: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs= Subject key identifier: 7F:D5:DA:36:B5:AB:9E:C9:F2:7B:D3:67:9F:6F:8B:CB:52:B9:50:E2 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D375B4CF213F2BAFB3C846B0686F Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa Signing time: Fri 02 Jan 2026 16:18:27 +0000 ROA not before: Fri 02 Jan 2026 16:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20738 IP address blocks: 109.106.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d3:75:b4:cf:21:3f:2b:af:b3:c8:46:b0:68:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fd5da36b5ab9ec9f27bd3679f6f8bcb52b950e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:7e:1b:d8:a6:20:e4:38:35:60:8f:b6:60: 4b:0e:25:de:c9:19:a0:bb:5c:57:51:34:e6:a4:d4: 57:95:a9:c0:d3:e3:03:0c:5c:c1:9e:26:01:14:88: 14:29:08:bf:0a:66:6f:54:ae:89:86:eb:a7:ce:d6: 26:4b:ca:4d:be:ec:58:5f:3d:50:3e:dd:0b:f9:c5: 54:38:bd:c0:4d:6d:ac:2e:92:ec:9c:a6:dd:14:ac: fd:29:5a:82:27:16:7a:10:9c:6e:27:37:b6:de:39: cd:f0:6f:c6:e1:c4:d3:2c:8b:e4:7b:d8:b5:8b:73: 32:ee:2d:3a:ac:52:37:fa:c8:21:b6:d1:8d:99:e9: 0b:c8:29:1d:4f:98:a7:5c:b1:d0:9f:1e:97:7b:a0: 12:1c:80:c2:ae:96:9d:68:88:cc:f7:2b:45:bc:7a: 44:e7:5e:5f:0d:d4:45:ec:1d:90:d1:32:4b:f7:59: e5:6d:73:31:21:65:7f:cf:86:61:79:c0:d8:d6:30: 8f:58:20:de:3b:ab:ad:92:3f:e3:dc:ee:fc:f1:2d: ca:07:34:06:e6:73:85:ec:bf:ca:3d:43:49:90:63: 39:9c:96:23:b0:ec:9e:ca:4c:a0:e7:43:cc:2f:a3: 06:82:39:78:da:10:fc:60:da:9f:cb:ab:aa:ba:19: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D5:DA:36:B5:AB:9E:C9:F2:7B:D3:67:9F:6F:8B:CB:52:B9:50:E2 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.106.184.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:98:4d:f8:fb:5d:68:56:f7:f5:be:9d:3d:6b:f5:3f:0c:6d: 43:49:00:64:3a:89:75:7a:c4:71:e7:25:7c:81:d4:84:14:0c: c0:58:12:58:83:36:d7:b0:94:0b:91:d1:f7:4e:e2:71:f8:be: 22:e4:9f:d3:b8:4a:92:c8:12:c1:15:5c:ab:8a:6a:b0:26:dc: 41:8c:5d:3f:da:9a:89:f2:a5:a8:54:5f:74:9b:bf:b6:e9:d1: 15:8d:3a:3f:5a:0c:0a:9b:9f:2e:a9:5d:52:3d:83:ad:0b:47: 52:ad:88:f8:fa:b5:31:01:8c:2c:4b:8d:db:b1:16:9e:a8:0c: 3d:c7:48:5c:68:d7:80:46:45:62:15:db:fd:d4:b4:c1:fe:8c: 50:7f:72:5d:6b:45:dc:be:f4:a7:54:1e:1f:64:43:cc:15:88: 60:86:cf:27:09:5b:e2:84:2d:05:cc:67:62:d9:7c:5e:f4:a2: f7:b0:2f:ea:56:1a:0c:54:e9:d0:b4:d5:9e:ff:fe:c9:b0:ec: d4:33:01:da:3f:20:f8:3b:37:f4:fa:22:4c:73:27:f5:16:ea: c7:af:47:7b:aa:ca:24:e6:7a:f4:c1:be:5d:1c:08:9f:c9:0c: e0:44:cf:c4:1e:11:78:b0:96:83:49:6b:be:fa:2b:47:f3:30: f8:4d:ff:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gNN1tM8hPyuvs8hGsGhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmQ1ZGEzNmI1YWI5ZWM5ZjI3YmQzNjc5ZjZmOGJjYjUyYjk1MGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp25+G9imIOQ4NWCPtmBLDiXeyRmg u1xXUTTmpNRXlanA0+MDDFzBniYBFIgUKQi/CmZvVK6JhuunztYmS8pNvuxYXz1Q Pt0L+cVUOL3ATW2sLpLsnKbdFKz9KVqCJxZ6EJxuJze23jnN8G/G4cTTLIvke9i1 i3My7i06rFI3+sghttGNmekLyCkdT5inXLHQnx6Xe6ASHIDCrpadaIjM9ytFvHpE 515fDdRF7B2Q0TJL91nlbXMxIWV/z4ZhecDY1jCPWCDeO6utkj/j3O788S3KBzQG 5nOF7L/KPUNJkGM5nJYjsOyeykyg50PML6MGgjl42hD8YNqfy6uquhnh1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/V2ja1q57J8nvTZ59vi8tSuVDiMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvZjlYYU5yV3Juc255ZTlObm4yLUx5MUs1VU9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbWq4MA0G CSqGSIb3DQEBCwUAA4IBAQB+mE34+11oVvf1vp09a/U/DG1DSQBkOol1esRx5yV8 gdSEFAzAWBJYgzbXsJQLkdH3TuJx+L4i5J/TuEqSyBLBFVyrimqwJtxBjF0/2pqJ 8qWoVF90m7+26dEVjTo/WgwKm58uqV1SPYOtC0dSrYj4+rUxAYwsS43bsRaeqAw9 x0hcaNeARkViFdv91LTB/oxQf3Jda0XcvvSnVB4fZEPMFYhghs8nCVvihC0FzGdi 2Xxe9KL3sC/qVhoMVOnQtNWe//7JsOzUMwHaPyD4Ozf0+iJMcyf1FurHr0d7qsok 5nr0wb5dHAifyQzgRM/EHhF4sJaDSWu++itH8zD4Tf+3 -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:04 2026 by rpki-client