This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/Qb7PambfEf_g09Ayn1nPZWLdckg.roa File: Qb7PambfEf_g09Ayn1nPZWLdckg.roa (raw, json) Hash identifier: D+yE2HfI7/79Gq9M55ucpa9RUw6VzqZoMJhKAGu/cdY= Subject key identifier: 41:BE:CF:6A:66:DF:11:FF:E0:D3:D0:32:9F:59:CF:65:62:DD:72:48 Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086 Certificate serial: 019B77C6BB5099FEA66F8CC9B7CC3D47F2B3 Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/Qb7PambfEf_g09Ayn1nPZWLdckg.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43648 IP address blocks: 109.107.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bb:50:99:fe:a6:6f:8c:c9:b7:cc:3d:47:f2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41becf6a66df11ffe0d3d0329f59cf6562dd7248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:87:48:a8:c3:36:d4:f0:91:77:97:40:86: c1:de:c0:88:54:bf:91:0c:ba:74:c2:61:b2:37:fe: ff:10:a7:bd:35:bb:76:72:80:a7:fb:7a:a6:a6:6b: 63:cf:58:0e:e6:93:34:fe:be:52:1e:85:14:e9:95: 60:9a:53:1e:6f:24:c3:3c:7e:47:6b:e9:bb:30:a6: 7d:b8:53:0f:65:7f:80:a0:0b:68:a7:8e:e9:c5:cc: f0:fd:3b:9e:fd:f0:c5:a8:a3:95:6a:15:2c:64:c0: e8:06:18:83:5e:a9:be:7d:68:67:ff:5e:ac:b9:3c: 8e:94:39:ed:28:07:c5:7f:5e:d5:5e:cd:b6:ea:f8: 0a:a6:a9:28:b8:cd:3f:eb:c5:89:3d:73:bb:66:3a: fc:73:e8:31:b6:51:c4:ec:74:de:e2:eb:7a:45:68: 16:ee:49:a2:12:90:a0:ff:43:5e:bd:c9:0f:33:af: c5:c2:c3:d5:06:b0:eb:de:35:8e:05:5d:6d:10:f1: 7f:6c:72:1a:c9:45:19:28:29:04:7e:2d:0b:25:73: f2:e1:65:66:61:11:91:f3:f7:94:c0:f6:3d:1f:7d: 26:29:6d:f3:54:74:78:50:0a:ed:28:01:50:9b:fa: 4c:99:5e:b5:19:a2:68:96:be:e3:35:95:aa:1b:42: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BE:CF:6A:66:DF:11:FF:E0:D3:D0:32:9F:59:CF:65:62:DD:72:48 X509v3 Authority Key Identifier: keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/Qb7PambfEf_g09Ayn1nPZWLdckg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.138.0/24 Signature Algorithm: sha256WithRSAEncryption 10:87:2d:10:a0:c0:5f:ed:94:d1:fa:11:6e:fe:e0:39:50:1d: c1:f0:49:a4:fc:50:3a:76:d0:61:88:93:eb:43:d0:15:c4:17: 4e:67:be:c4:91:e9:a8:a8:67:a6:a7:2a:8b:1d:56:c1:8f:66: cc:5e:b7:d4:62:e6:0a:6d:43:71:46:1f:8e:d3:96:75:45:4f: 52:73:82:2e:b2:bb:ce:10:d4:f6:d7:37:c9:0f:3f:cf:b4:38: 80:6d:fb:60:91:40:4a:2c:14:a5:ee:7f:b1:03:44:15:34:3a: 44:ea:5f:a9:18:67:f8:f4:16:14:d5:be:7d:1b:75:90:bf:03: d5:fb:43:c0:fd:88:31:ee:0c:f1:60:44:eb:13:34:91:bd:b3: 54:97:ba:46:e4:e4:c3:b4:98:12:24:27:a9:4d:d6:99:f5:b4: 45:a9:59:e1:0b:a1:30:7b:59:2c:17:5c:3e:64:fe:de:6b:6d: e6:76:af:80:4c:19:0e:ee:97:40:36:52:69:f4:83:55:9a:e6: c8:e0:d7:3a:cf:ee:07:e7:76:b8:38:8a:e9:6a:20:50:66:47: 9d:15:b6:6a:18:14:bc:37:d3:3d:a5:45:03:cb:66:1d:58:39: 3b:e6:f0:47:cd:8a:de:8c:2a:6c:d0:1b:ec:38:21:0f:88:60: 31:b0:da:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrtQmf6mb4zJt8w9R/KzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZjhlN2ZiZDRhYjY5NTA3ZmIxZmUzNTc5YWYzNDNhNTY2 MzkwODYwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWJlY2Y2YTY2ZGYxMWZmZTBkM2QwMzI5ZjU5Y2Y2NTYyZGQ3MjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMWHSKjDNtTwkXeXQIbB3sCIVL+R DLp0wmGyN/7/EKe9Nbt2coCn+3qmpmtjz1gO5pM0/r5SHoUU6ZVgmlMebyTDPH5H a+m7MKZ9uFMPZX+AoAtop47pxczw/Tue/fDFqKOVahUsZMDoBhiDXqm+fWhn/16s uTyOlDntKAfFf17VXs226vgKpqkouM0/68WJPXO7Zjr8c+gxtlHE7HTe4ut6RWgW 7kmiEpCg/0NevckPM6/FwsPVBrDr3jWOBV1tEPF/bHIayUUZKCkEfi0LJXPy4WVm YRGR8/eUwPY9H30mKW3zVHR4UArtKAFQm/pMmV61GaJolr7jNZWqG0IpGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEG+z2pm3xH/4NPQMp9Zz2Vi3XJIMB8GA1UdIwQY MBaAFHf45/vUq2lQf7H+NXmvNDpWY5CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1Njgt NzdmNmU5NGUzZGNjLzEvUWI3UGFtYmZFZl9nMDlBeW4xblBaV0xkY2tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1NjgtNzdmNmU5NGUzZGNj LzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuKMA0G CSqGSIb3DQEBCwUAA4IBAQAQhy0QoMBf7ZTR+hFu/uA5UB3B8Emk/FA6dtBhiJPr Q9AVxBdOZ77EkemoqGempyqLHVbBj2bMXrfUYuYKbUNxRh+O05Z1RU9Sc4IusrvO ENT21zfJDz/PtDiAbftgkUBKLBSl7n+xA0QVNDpE6l+pGGf49BYU1b59G3WQvwPV +0PA/Ygx7gzxYETrEzSRvbNUl7pG5OTDtJgSJCepTdaZ9bRFqVnhC6Ewe1ksF1w+ ZP7ea23mdq+ATBkO7pdANlJp9INVmubI4Nc6z+4H53a4OIrpaiBQZkedFbZqGBS8 N9M9pUUDy2YdWDk75vBHzYrejCps0BvsOCEPiGAxsNoI -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:10 2026 by rpki-client