This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/10VeRd-dKyjhB82yK0FZfBzYDrU.roa File: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (raw, json) Hash identifier: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4= Subject key identifier: D7:45:5E:45:DF:9D:2B:28:E1:07:CD:B2:2B:41:59:7C:1C:D8:0E:B5 Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb Certificate serial: 019B7C7F19A3F8542AB2CA7103EB42EB74A2 Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/10VeRd-dKyjhB82yK0FZfBzYDrU.roa Signing time: Fri 02 Jan 2026 02:17:42 +0000 ROA not before: Fri 02 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394201 IP address blocks: 109.235.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:19:a3:f8:54:2a:b2:ca:71:03:eb:42:eb:74:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb Validity Not Before: Jan 2 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7455e45df9d2b28e107cdb22b41597c1cd80eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8a:07:8b:aa:79:b8:45:ca:87:9e:f2:08:15: 8d:86:e5:1c:c6:c6:c8:69:df:63:ce:7e:bd:2f:43: 60:4f:e7:12:b5:2e:87:f5:5c:2f:c5:02:63:d3:ec: 68:df:bb:61:f6:69:98:5c:0e:dc:a5:b9:12:8c:8b: 8a:7b:ba:b9:5a:e9:fb:83:6a:97:56:43:bd:fb:27: f4:a2:35:30:0e:0f:12:17:52:15:ef:35:fd:a6:eb: a6:0d:1b:ab:be:7c:3e:bc:d2:29:b4:92:1b:fb:1c: 9a:27:60:f6:33:71:4c:e5:fe:f8:76:dd:6b:db:f6: c4:85:50:0a:93:49:46:0f:de:97:f3:a2:f3:83:da: 33:05:f0:4d:17:61:6d:ff:5b:31:14:5a:45:0c:b3: 53:5a:b7:fb:aa:31:61:3f:9d:6a:9e:1e:13:f3:e7: ae:c9:0c:3d:15:b9:64:f6:f8:65:8c:b9:a8:7b:54: 3f:7d:a5:dc:63:4d:c0:c7:95:22:8d:22:18:e0:d7: c5:a4:7f:9e:fb:89:fc:93:3d:f1:11:f5:6a:b5:c1: 37:8a:20:30:e6:06:50:24:14:47:5b:d6:63:66:89: 74:d9:37:e2:d8:3a:54:c4:34:60:96:e7:f5:54:9b: 34:b1:f6:87:0a:c0:f1:2c:39:2e:0e:bc:c6:ae:a9: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:45:5E:45:DF:9D:2B:28:E1:07:CD:B2:2B:41:59:7C:1C:D8:0E:B5 X509v3 Authority Key Identifier: keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/10VeRd-dKyjhB82yK0FZfBzYDrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.235.96.0/24 Signature Algorithm: sha256WithRSAEncryption 85:95:45:3f:5c:b4:40:1a:d9:fb:ba:37:09:31:e5:9d:3e:1e: 82:2a:b0:54:b1:2d:76:ab:f3:c9:1c:0c:67:1e:6c:59:4f:5d: ea:85:ff:dd:b4:4a:7d:1d:b5:4e:23:87:e2:fb:88:be:b6:fc: 3a:21:06:c2:4d:d4:13:b1:79:ce:cd:7e:98:f9:dc:15:8b:0f: f4:43:f0:1e:87:84:cb:d8:b4:b4:64:e1:c4:0c:90:ed:67:33: 3a:4d:75:81:da:a2:0b:5f:41:e9:b0:fe:c5:a1:1f:0f:7e:6c: 25:e9:b9:bf:c6:cf:9d:b4:f2:2c:1f:5a:b0:b7:9c:3d:cc:19: a7:a8:71:89:2f:2a:f0:f0:53:84:62:5c:df:f7:b1:05:0a:0f: dc:54:3a:70:ff:68:a5:8f:d8:f5:68:0a:b1:93:63:0a:ec:74: f2:53:e6:79:f8:8f:e4:c4:84:46:ab:11:3f:aa:92:db:1c:67: 4c:17:ef:b4:d3:7e:8f:e7:82:7e:58:d6:25:a7:d5:65:38:ad: 09:54:14:df:d1:64:53:01:0b:90:9b:b2:89:0c:fb:f9:78:cb: 99:4f:c9:a1:64:e0:0b:e9:b8:ef:7d:90:98:d9:d2:ad:6c:de: 44:61:67:ef:e2:d3:0b:29:02:d8:03:bf:08:d1:e7:b1:0b:dc: c9:88:70:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fxmj+FQqsspxA+tC63SiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZGYxMjU5YjNhYTFkZTM0ZDEzZDFkODYzMTc4ODY0ZDlk MTg1Y2IwHhcNMjYwMTAyMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzQ1NWU0NWRmOWQyYjI4ZTEwN2NkYjIyYjQxNTk3YzFjZDgwZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIoHi6p5uEXKh57yCBWNhuUcxsbI ad9jzn69L0NgT+cStS6H9VwvxQJj0+xo37th9mmYXA7cpbkSjIuKe7q5Wun7g2qX VkO9+yf0ojUwDg8SF1IV7zX9puumDRurvnw+vNIptJIb+xyaJ2D2M3FM5f74dt1r 2/bEhVAKk0lGD96X86Lzg9ozBfBNF2Ft/1sxFFpFDLNTWrf7qjFhP51qnh4T8+eu yQw9Fblk9vhljLmoe1Q/faXcY03Ax5UijSIY4NfFpH+e+4n8kz3xEfVqtcE3iiAw 5gZQJBRHW9ZjZol02Tfi2DpUxDRgluf1VJs0sfaHCsDxLDkuDrzGrqkLDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdFXkXfnSso4QfNsitBWXwc2A61MB8GA1UdIwQY MBaAFIbfElmzqh3jTRPR2GMXiGTZ0YXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQt YTUxYWEyM2E4ZmRkLzEvMTBWZVJkLWRLeWpoQjgyeUswRlpmQnpZRHJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQtYTUxYWEyM2E4ZmRk LzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbetgMA0G CSqGSIb3DQEBCwUAA4IBAQCFlUU/XLRAGtn7ujcJMeWdPh6CKrBUsS12q/PJHAxn HmxZT13qhf/dtEp9HbVOI4fi+4i+tvw6IQbCTdQTsXnOzX6Y+dwViw/0Q/Aeh4TL 2LS0ZOHEDJDtZzM6TXWB2qILX0HpsP7FoR8Pfmwl6bm/xs+dtPIsH1qwt5w9zBmn qHGJLyrw8FOEYlzf97EFCg/cVDpw/2ilj9j1aAqxk2MK7HTyU+Z5+I/kxIRGqxE/ qpLbHGdMF++0036P54J+WNYlp9VlOK0JVBTf0WRTAQuQm7KJDPv5eMuZT8mhZOAL 6bjvfZCY2dKtbN5EYWfv4tMLKQLYA78I0eexC9zJiHBU -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:34 2026 by rpki-client