This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/jX6P-bHofIqjGsTJnOwPDX7xdQE.roa File: jX6P-bHofIqjGsTJnOwPDX7xdQE.roa (raw, json) Hash identifier: a9lEvQ6DaP+YBlQpn96SMBqrqZvPXdiisAwCLDojp1s= Subject key identifier: 8D:7E:8F:F9:B1:E8:7C:8A:A3:1A:C4:C9:9C:EC:0F:0D:7E:F1:75:01 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C717828F5293ACEA91CC98BAC3B895 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/jX6P-bHofIqjGsTJnOwPDX7xdQE.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208323 IP address blocks: 109.70.100.0/24 maxlen: 24 2a03:e600:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:17:82:8f:52:93:ac:ea:91:cc:98:ba:c3:b8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d7e8ff9b1e87c8aa31ac4c99cec0f0d7ef17501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:c7:e5:d0:b0:58:f8:c3:f8:cf:7a:e6:c9: 2d:f9:a7:ad:0e:a6:2a:ee:4d:d7:47:e1:16:d8:93: 80:ad:11:ae:ac:fc:5d:93:d4:6f:dd:4c:f6:f8:ef: 98:5e:5c:28:0f:aa:f5:be:69:4a:30:2e:fb:1f:36: fe:64:48:0c:e2:ad:4c:ea:df:1b:bf:26:72:4b:96: 7d:b1:f5:6d:f3:8a:7a:cf:76:b1:53:4a:b9:f1:05: 60:76:4d:f8:dc:76:d5:eb:9b:fd:e8:c2:d0:51:22: 52:17:d2:8e:88:3c:34:fe:44:f8:b9:c2:ac:14:61: 66:7e:6d:12:b5:8b:ab:3f:67:1f:47:66:1e:66:9e: 0d:62:b7:4c:38:82:4a:ba:44:f2:dc:66:ed:86:d1: b1:73:06:fa:ae:87:f2:37:71:04:fb:e2:8c:3e:c2: 40:a9:79:0d:17:f1:f0:63:0b:6c:91:e2:bc:6f:e4: d2:18:d5:8c:9b:eb:b5:02:22:5f:29:f2:df:c1:c8: 26:ae:5f:c0:aa:ed:7a:24:c8:02:80:8f:2c:af:b4: 45:a3:0c:d0:5a:a2:20:3d:4d:1b:39:83:0e:bf:69: f8:6c:b8:ae:ec:2e:30:82:16:4c:25:29:b1:94:a9: 4a:0b:1c:c0:8f:27:5a:2c:4e:d8:bf:d7:e1:0f:44: 3e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7E:8F:F9:B1:E8:7C:8A:A3:1A:C4:C9:9C:EC:0F:0D:7E:F1:75:01 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/jX6P-bHofIqjGsTJnOwPDX7xdQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.70.100.0/24 IPv6: 2a03:e600:100::/48 Signature Algorithm: sha256WithRSAEncryption df:47:10:79:9f:74:95:1f:87:bf:82:3c:80:6a:10:1a:4e:69: 7d:dc:c4:38:e6:ae:65:65:ef:18:2c:02:6f:c0:fc:e5:e4:c3: e9:a8:60:46:f5:54:23:e9:57:eb:09:34:61:bd:1d:c5:47:d7: a2:92:ee:db:c8:76:c6:75:90:d5:aa:6a:54:f1:70:d1:1e:e2: a3:7f:70:5a:39:e7:b1:f7:b5:62:06:38:76:e9:69:09:c0:a3: f8:c9:b2:41:82:9d:5d:23:a9:9f:78:33:a7:87:f0:f2:f7:d7: 6d:97:95:ad:1f:4d:a2:8f:03:f9:a6:da:d0:dd:8f:23:0f:48: 76:17:de:e5:f1:2a:96:60:51:37:1f:55:08:8b:b0:82:8b:35: 69:c1:c8:68:bc:66:de:79:ee:14:9a:ec:b4:4c:03:2c:55:1c: 06:0b:23:87:e0:fd:96:10:39:6d:1d:98:4b:da:41:fa:37:88: eb:ed:c4:b7:e6:cc:7f:e7:6d:07:e9:6e:b9:09:94:a4:4d:fc: ca:09:fc:4a:f0:70:79:de:89:44:05:79:4d:e6:cb:c4:98:c8: de:30:e6:40:0d:14:1f:9a:fc:4d:63:68:f6:24:5d:c1:41:25: 46:21:27:2a:1a:66:26:bc:e9:03:f7:00:74:0a:7f:0a:e0:49: 84:d9:ec:c8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xxeCj1KTrOqRzJi6w7iVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDdlOGZmOWIxZTg3YzhhYTMxYWM0Yzk5Y2VjMGYwZDdlZjE3NTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV7H5dCwWPjD+M965skt+aetDqYq 7k3XR+EW2JOArRGurPxdk9Rv3Uz2+O+YXlwoD6r1vmlKMC77Hzb+ZEgM4q1M6t8b vyZyS5Z9sfVt84p6z3axU0q58QVgdk343HbV65v96MLQUSJSF9KOiDw0/kT4ucKs FGFmfm0StYurP2cfR2YeZp4NYrdMOIJKukTy3GbthtGxcwb6rofyN3EE++KMPsJA qXkNF/HwYwtskeK8b+TSGNWMm+u1AiJfKfLfwcgmrl/Aqu16JMgCgI8sr7RFowzQ WqIgPU0bOYMOv2n4bLiu7C4wghZMJSmxlKlKCxzAjydaLE7Yv9fhD0Q+UwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFI1+j/mx6HyKoxrEyZzsDw1+8XUBMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvalg2UC1iSG9mSXFqR3NUSm5Pd1BEWDd4ZFFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAbUZkMA8E AgACMAkDBwAqA+YAAQAwDQYJKoZIhvcNAQELBQADggEBAN9HEHmfdJUfh7+CPIBq EBpOaX3cxDjmrmVl7xgsAm/A/OXkw+moYEb1VCPpV+sJNGG9HcVH16KS7tvIdsZ1 kNWqalTxcNEe4qN/cFo557H3tWIGOHbpaQnAo/jJskGCnV0jqZ94M6eH8PL3122X la0fTaKPA/mm2tDdjyMPSHYX3uXxKpZgUTcfVQiLsIKLNWnByGi8Zt557hSa7LRM AyxVHAYLI4fg/ZYQOW0dmEvaQfo3iOvtxLfmzH/nbQfpbrkJlKRN/MoJ/ErwcHne iUQFeU3my8SYyN4w5kANFB+a/E1jaPYkXcFBJUYhJyoaZia86QP3AHQKfwrgSYTZ 7Mg= -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:42 2026 by rpki-client