This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/1iiQznngAAUoJBg2IRNbTIROLgA.roa File: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (raw, json) Hash identifier: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU= Subject key identifier: D6:28:90:CE:79:E0:00:05:28:24:18:36:21:13:5B:4C:84:4E:2E:00 Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019B7FF1320030587B42D4B81E636B7D799C Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/1iiQznngAAUoJBg2IRNbTIROLgA.roa Signing time: Fri 02 Jan 2026 18:21:11 +0000 ROA not before: Fri 02 Jan 2026 18:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136787 IP address blocks: 109.104.115.0/24 maxlen: 24 193.84.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:32:00:30:58:7b:42:d4:b8:1e:63:6b:7d:79:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Jan 2 18:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d62890ce79e000052824183621135b4c844e2e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a6:da:b7:e9:a6:ed:1f:78:a6:2e:75:5b:86: 31:04:15:32:91:01:e1:bd:f2:c8:c4:be:c2:43:c9: a9:a4:43:86:e8:d8:27:c8:9f:49:9a:8f:f3:e2:67: 8a:df:f5:95:b9:93:21:04:56:b2:89:e8:89:c6:7d: 11:4b:04:13:35:26:ea:93:ad:37:37:49:21:be:b8: 91:c9:09:da:d0:f9:8d:5d:f4:a3:61:12:60:b3:a6: 32:b7:6a:7c:ec:a5:73:58:a8:8a:4d:d9:e2:b7:d9: 0f:22:1f:4d:b8:11:f6:41:dc:c4:83:2d:5a:54:df: a8:e7:28:db:a4:e1:f9:38:f9:0f:35:62:7c:f1:5b: 20:45:37:bd:50:70:ec:f3:04:f9:63:19:b7:36:1f: b9:eb:ba:55:ff:c2:61:48:4a:ac:e2:e3:1f:bf:06: 97:bb:f2:cd:ea:45:4d:95:42:05:cd:df:87:59:74: 2c:cd:3f:c4:64:a3:fe:8e:c0:42:69:37:bb:e9:45: fa:0f:2a:81:da:8c:25:92:07:50:18:a2:38:32:97: 50:dc:eb:c5:52:3b:7b:db:a4:e7:a2:10:55:dc:d4: 87:2c:8a:b2:1d:b9:cd:13:d8:cc:5c:4a:35:ad:fc: a7:c9:55:5e:f8:33:6f:1b:b9:36:8a:3c:72:4b:f3: 74:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:28:90:CE:79:E0:00:05:28:24:18:36:21:13:5B:4C:84:4E:2E:00 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/1iiQznngAAUoJBg2IRNbTIROLgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.104.115.0/24 193.84.51.0/24 Signature Algorithm: sha256WithRSAEncryption b5:7a:dd:91:bc:ac:fa:de:31:6e:73:75:87:9e:86:56:37:73: ac:3d:66:8e:32:76:31:12:87:7c:85:8b:a8:98:33:fe:9e:58: f9:0d:97:af:5a:23:2c:73:13:f3:75:16:cb:93:d4:4d:4e:15: 80:15:ed:18:93:34:11:92:9f:20:b2:e4:5d:31:54:84:f1:34: cf:5c:20:08:73:49:37:b5:10:ce:bc:53:26:e3:b7:72:01:8b: c2:82:ba:25:cf:60:45:b7:f5:0e:3d:72:80:24:cd:cc:2c:8f: 5d:3c:3d:b7:19:38:29:17:e6:15:4a:9c:ab:20:c7:e6:2e:e6: 5e:5f:f8:b6:f7:6a:79:0f:ee:aa:13:66:9d:cc:12:d3:ad:a9: d2:a0:a0:3e:fe:31:9b:82:b8:80:65:0c:38:d7:39:1d:db:b8: a3:53:45:ac:ad:e2:f3:f0:49:a1:cd:9f:6d:9b:84:74:56:ba: 46:8e:5d:24:5f:93:b8:0a:5a:b7:b8:f1:08:2f:d8:d3:6f:e5: 0a:aa:45:91:c2:66:7c:82:df:23:f0:af:ed:d6:0e:cc:40:d5: 3a:67:14:e8:ba:58:de:bb:f1:62:3f:56:dc:12:5b:ab:f3:1a: 8d:38:a2:f2:81:b6:6a:ca:32:ca:23:49:59:f2:e8:f1:f1:43: 98:ad:cb:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8TIAMFh7QtS4HmNrfXmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwMTAyMTgyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjI4OTBjZTc5ZTAwMDA1MjgyNDE4MzYyMTEzNWI0Yzg0NGUyZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3abat+mm7R94pi51W4YxBBUykQHh vfLIxL7CQ8mppEOG6NgnyJ9Jmo/z4meK3/WVuZMhBFayieiJxn0RSwQTNSbqk603 N0khvriRyQna0PmNXfSjYRJgs6Yyt2p87KVzWKiKTdnit9kPIh9NuBH2QdzEgy1a VN+o5yjbpOH5OPkPNWJ88VsgRTe9UHDs8wT5Yxm3Nh+567pV/8JhSEqs4uMfvwaX u/LN6kVNlUIFzd+HWXQszT/EZKP+jsBCaTe76UX6DyqB2owlkgdQGKI4MpdQ3OvF Ujt726TnohBV3NSHLIqyHbnNE9jMXEo1rfynyVVe+DNvG7k2ijxyS/N07QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNYokM554AAFKCQYNiETW0yETi4AMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvMWlpUXpubmdBQVVvSkJnMklSTmJUSVJPTGdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbWhzAwQA wVQzMA0GCSqGSIb3DQEBCwUAA4IBAQC1et2RvKz63jFuc3WHnoZWN3OsPWaOMnYx Eod8hYuomDP+nlj5DZevWiMscxPzdRbLk9RNThWAFe0YkzQRkp8gsuRdMVSE8TTP XCAIc0k3tRDOvFMm47dyAYvCgrolz2BFt/UOPXKAJM3MLI9dPD23GTgpF+YVSpyr IMfmLuZeX/i292p5D+6qE2adzBLTranSoKA+/jGbgriAZQw41zkd27ijU0WsreLz 8EmhzZ9tm4R0VrpGjl0kX5O4Clq3uPEIL9jTb+UKqkWRwmZ8gt8j8K/t1g7MQNU6 ZxTouljeu/FiP1bcElur8xqNOKLygbZqyjLKI0lZ8ujx8UOYrct2 -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:06 2026 by rpki-client