This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa File: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (raw, json) Hash identifier: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is= Subject key identifier: 9D:2F:AA:47:EF:3B:80:62:7A:A4:17:F6:97:BF:C7:08:93:88:78:73 Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000 Certificate serial: 019B7F85959EEA05E823177E171DCCC8E8B4 Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209156 IP address blocks: 109.121.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:95:9e:ea:05:e8:23:17:7e:17:1d:cc:c8:e8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000 Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d2faa47ef3b80627aa417f697bfc70893887873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4f:59:81:50:80:70:40:e2:f6:7a:62:fe:d1: 58:28:d2:b3:19:48:e5:45:35:70:d1:38:15:86:64: a8:47:cd:08:17:f3:0c:6f:d2:75:7c:5a:5d:b5:84: ed:a4:d6:2e:a2:ab:99:34:76:14:05:1a:88:9e:b4: 2a:ba:52:2e:31:b1:ec:eb:93:26:c9:64:e6:bc:28: 60:11:60:e3:8c:5e:50:ee:76:70:79:9c:7a:98:c7: fb:fb:2e:90:8d:7b:eb:b8:5e:05:09:38:77:db:2a: 88:3b:3d:a7:3b:5a:96:85:71:0b:5e:cb:cc:c5:8d: 46:28:61:4e:af:c7:70:8f:af:07:1f:55:dc:55:af: c3:d9:d5:7a:3d:e2:ec:f6:96:91:6e:20:f9:16:20: ec:ec:04:c2:82:3b:99:f4:78:ff:cc:45:cc:51:16: 85:40:ee:fc:ea:89:1b:f9:f9:ae:02:55:01:12:84: b5:ac:54:4c:17:7b:14:20:ef:e9:70:6b:4a:75:26: 93:39:e7:4e:1d:da:2c:f9:6a:b0:e5:5e:cd:23:62: 03:c2:cf:b4:8e:30:b5:b3:32:2a:bb:dd:81:de:0b: ce:a4:8d:e5:ca:23:b9:22:dd:7f:4a:e0:86:92:4b: 91:9a:d2:96:bf:69:89:50:ca:01:bf:f1:f6:ae:f2: 9d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2F:AA:47:EF:3B:80:62:7A:A4:17:F6:97:BF:C7:08:93:88:78:73 X509v3 Authority Key Identifier: keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.135.0/24 Signature Algorithm: sha256WithRSAEncryption a7:55:fd:4e:af:4d:55:b3:2b:7d:0e:c5:8e:76:f5:0c:16:37: 69:a8:76:ca:60:5b:89:34:b4:fb:ca:15:20:d6:f9:52:2a:6d: fd:8a:bf:2e:e5:2d:37:18:94:f9:8a:92:db:10:62:9c:72:a6: 47:49:e7:31:6c:6f:5f:c1:2d:12:3e:5b:60:6f:35:b3:b0:9a: 2b:3e:80:7f:47:36:fa:e9:be:7f:8c:0d:12:f5:f3:5c:c5:99: 99:2a:90:bf:05:f9:2e:3d:d8:d4:cd:f1:6e:a5:8b:13:fe:d2: fc:7e:73:1b:bf:c2:81:69:bd:e9:e0:52:24:35:2e:b6:86:89: f2:29:e8:3e:8d:d3:65:99:24:fd:c3:b3:cf:cf:13:32:a6:22: 7c:68:64:92:75:e6:40:43:b0:16:40:49:15:26:50:b1:47:27: 73:56:6d:0d:88:11:87:f2:88:89:5e:d2:6e:9c:5e:42:78:03: be:4e:51:a1:22:1d:55:79:a3:34:f3:6b:07:de:74:1e:ab:51: 8e:64:e0:34:59:00:db:c3:a6:20:83:05:35:4d:93:5b:73:96: db:3f:0e:fe:1e:66:4e:db:95:8c:68:7f:01:ca:d3:31:4e:93: 1c:9a:9f:40:c5:f1:33:83:ed:6f:c1:b5:5a:b0:9a:20:a4:82: f7:e4:65:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hZWe6gXoIxd+Fx3MyOi0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1 YTUwMDAwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDJmYWE0N2VmM2I4MDYyN2FhNDE3ZjY5N2JmYzcwODkzODg3ODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6k9ZgVCAcEDi9npi/tFYKNKzGUjl RTVw0TgVhmSoR80IF/MMb9J1fFpdtYTtpNYuoquZNHYUBRqInrQqulIuMbHs65Mm yWTmvChgEWDjjF5Q7nZweZx6mMf7+y6QjXvruF4FCTh32yqIOz2nO1qWhXELXsvM xY1GKGFOr8dwj68HH1XcVa/D2dV6PeLs9paRbiD5FiDs7ATCgjuZ9Hj/zEXMURaF QO786okb+fmuAlUBEoS1rFRMF3sUIO/pcGtKdSaTOedOHdos+Wqw5V7NI2IDws+0 jjC1szIqu92B3gvOpI3lyiO5It1/SuCGkkuRmtKWv2mJUMoBv/H2rvKdewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0vqkfvO4BieqQX9pe/xwiTiHhzMB8GA1UdIwQY MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt ZGNlNmQ2OTA5MjQ3LzEvblMtcVItODdnR0o2cEJmMmw3X0hDSk9JZUhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3 LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmHMA0G CSqGSIb3DQEBCwUAA4IBAQCnVf1Or01Vsyt9DsWOdvUMFjdpqHbKYFuJNLT7yhUg 1vlSKm39ir8u5S03GJT5ipLbEGKccqZHSecxbG9fwS0SPltgbzWzsJorPoB/Rzb6 6b5/jA0S9fNcxZmZKpC/BfkuPdjUzfFupYsT/tL8fnMbv8KBab3p4FIkNS62hony Keg+jdNlmST9w7PPzxMypiJ8aGSSdeZAQ7AWQEkVJlCxRydzVm0NiBGH8oiJXtJu nF5CeAO+TlGhIh1VeaM082sH3nQeq1GOZOA0WQDbw6YggwU1TZNbc5bbPw7+HmZO 25WMaH8BytMxTpMcmp9AxfEzg+1vwbVasJogpIL35GUh -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:08 2026 by rpki-client