This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m5yMYV4pBm1qpA0jit6hm99wXvM.roa File: m5yMYV4pBm1qpA0jit6hm99wXvM.roa (raw, json) Hash identifier: 15C3Wvo3bxrDjbCmZIkVXncLYoGj5VtzpzHvZLU0GJs= Subject key identifier: 9B:9C:8C:61:5E:29:06:6D:6A:A4:0D:23:8A:DE:A1:9B:DF:70:5E:F3 Certificate issuer: /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee Certificate serial: 019B7834466C7102A4E748098C504AEF23A7 Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m5yMYV4pBm1qpA0jit6hm99wXvM.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44152 IP address blocks: 109.109.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:46:6c:71:02:a4:e7:48:09:8c:50:4a:ef:23:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b9c8c615e29066d6aa40d238adea19bdf705ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:43:9f:47:49:d4:7f:bb:3f:16:44:08:dd: ff:01:7b:e9:06:85:76:79:49:48:86:17:83:2d:38: 83:9c:d6:c8:76:0a:1d:33:b2:d9:c5:93:93:d5:e5: 43:af:bd:bf:56:e3:11:a3:75:ef:62:38:cb:71:fd: e0:65:71:1f:b6:e9:57:15:d7:41:35:19:3e:6b:cc: 4a:57:01:5f:6d:8d:de:82:b1:57:ec:b7:29:6b:88: 11:67:1b:78:80:fb:6d:67:e5:ab:8b:a7:5a:97:a5: b4:fd:b9:3e:5b:e4:78:b4:67:b2:ba:91:3b:fb:9d: e1:83:f9:28:39:a0:ce:64:34:77:85:64:b1:da:8b: 50:88:02:cd:18:86:03:a6:a3:7a:03:76:05:23:6f: 50:d7:14:1b:be:b9:37:8d:e9:17:be:93:89:67:d2: ab:2d:5c:75:9d:ed:14:3b:57:f9:88:10:0c:bc:75: c5:fd:b4:57:7a:7a:ea:2b:2d:35:5e:d8:3a:83:ba: c6:5d:66:6c:bd:df:d4:bf:35:cd:08:3c:3e:00:01: 06:f7:fb:70:32:26:b0:27:98:fe:e9:4f:1d:55:77: 6b:6f:1b:a8:68:11:d6:46:3d:fa:e3:f9:94:4c:fb: 46:d1:3d:89:b3:a3:18:ec:84:20:51:f7:b1:cf:f0: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9C:8C:61:5E:29:06:6D:6A:A4:0D:23:8A:DE:A1:9B:DF:70:5E:F3 X509v3 Authority Key Identifier: keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m5yMYV4pBm1qpA0jit6hm99wXvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.109.205.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ea:84:d7:e5:e2:3b:72:74:03:46:ee:b1:05:96:89:16:f8: 11:ab:ab:79:69:b3:04:82:d9:97:31:94:25:a2:04:8b:bf:77: 1c:21:9d:c3:8b:2b:44:4f:89:b0:de:cc:37:c8:3f:04:78:fc: 52:e4:86:66:42:27:6e:25:ee:4b:3a:93:0e:13:12:45:66:67: 2f:49:d3:e0:2b:fa:ab:d9:bc:e0:ad:6d:b3:57:cd:22:ca:2e: 3a:2b:04:5b:5a:75:a0:f9:ce:cc:0a:39:d0:12:4f:ff:c6:cf: 76:32:e6:bb:ba:94:3e:02:bb:8c:3d:3f:48:57:a2:00:e6:c4: c9:8f:a6:31:ac:b8:39:aa:7a:cb:e2:59:d0:e0:81:a8:d3:72: fc:f2:87:86:78:16:d7:17:7d:ed:c4:11:5e:18:59:8b:a4:5f: 95:4c:1e:4e:81:b8:62:c0:d3:05:2d:43:0e:5e:81:98:88:0f: 25:78:b2:5b:8d:b0:c8:98:50:cc:7e:11:73:9c:1e:f6:57:ba: 09:99:fc:3d:51:72:16:19:bb:94:be:8e:fb:23:7a:aa:a1:d0: 41:86:ff:99:19:b5:66:0f:33:59:5d:2d:4c:a2:a3:ec:70:c7: 9a:8f:44:81:98:a4:9b:74:2a:dd:0e:1b:49:6f:80:9b:fb:dd: 00:47:d8:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEZscQKk50gJjFBK7yOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliN2QyNDQxNmFhOGE0NzhiM2VkMzZlMmU2NTg1NWQ0MjI1 OWQ5ZWUwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjljOGM2MTVlMjkwNjZkNmFhNDBkMjM4YWRlYTE5YmRmNzA1ZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOJDn0dJ1H+7PxZECN3/AXvpBoV2 eUlIhheDLTiDnNbIdgodM7LZxZOT1eVDr72/VuMRo3XvYjjLcf3gZXEftulXFddB NRk+a8xKVwFfbY3egrFX7Lcpa4gRZxt4gPttZ+Wri6dal6W0/bk+W+R4tGeyupE7 +53hg/koOaDOZDR3hWSx2otQiALNGIYDpqN6A3YFI29Q1xQbvrk3jekXvpOJZ9Kr LVx1ne0UO1f5iBAMvHXF/bRXenrqKy01Xtg6g7rGXWZsvd/UvzXNCDw+AAEG9/tw MiawJ5j+6U8dVXdrbxuoaBHWRj364/mUTPtG0T2Js6MY7IQgUfexz/CniQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJucjGFeKQZtaqQNI4reoZvfcF7zMB8GA1UdIwQY MBaAFJt9JEFqqKR4s+024uZYVdQiWdnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYt ZWYzYmJiMDU2NTVlLzEvbTV5TVlWNHBCbTFxcEEwaml0NmhtOTl3WHZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYtZWYzYmJiMDU2NTVl LzEvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbW3NMA0G CSqGSIb3DQEBCwUAA4IBAQCc6oTX5eI7cnQDRu6xBZaJFvgRq6t5abMEgtmXMZQl ogSLv3ccIZ3DiytET4mw3sw3yD8EePxS5IZmQiduJe5LOpMOExJFZmcvSdPgK/qr 2bzgrW2zV80iyi46KwRbWnWg+c7MCjnQEk//xs92Mua7upQ+AruMPT9IV6IA5sTJ j6YxrLg5qnrL4lnQ4IGo03L88oeGeBbXF33txBFeGFmLpF+VTB5OgbhiwNMFLUMO XoGYiA8leLJbjbDImFDMfhFznB72V7oJmfw9UXIWGbuUvo77I3qqodBBhv+ZGbVm DzNZXS1MoqPscMeaj0SBmKSbdCrdDhtJb4Cb+90AR9iH -----END CERTIFICATE-----Generated at Mon Jan 26 03:28:01 2026 by rpki-client