This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/u2UoUcD01FR6Gm9X9tpyAaOzZTo.roa File: u2UoUcD01FR6Gm9X9tpyAaOzZTo.roa (raw, json) Hash identifier: /+na6f52i0IzWlXOvWB9jKcZ2W/nTF/S0c3QA8HP8eI= Subject key identifier: BB:65:28:51:C0:F4:D4:54:7A:1A:6F:57:F6:DA:72:01:A3:B3:65:3A Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab Certificate serial: 019B7B358214FCFCFC506637398CD39D96DF Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/u2UoUcD01FR6Gm9X9tpyAaOzZTo.roa Signing time: Thu 01 Jan 2026 20:17:42 +0000 ROA not before: Thu 01 Jan 2026 20:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197423 IP address blocks: 109.106.226.0/24 maxlen: 24 109.106.229.0/24 maxlen: 24 109.106.230.0/24 maxlen: 24 109.106.233.0/24 maxlen: 24 109.106.234.0/24 maxlen: 24 109.106.235.0/24 maxlen: 24 109.106.236.0/24 maxlen: 24 109.106.237.0/24 maxlen: 24 109.245.55.0/24 maxlen: 24 109.245.56.0/24 maxlen: 24 109.245.57.0/24 maxlen: 24 109.245.61.0/24 maxlen: 24 109.245.62.0/24 maxlen: 24 109.245.63.0/24 maxlen: 24 109.245.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:82:14:fc:fc:fc:50:66:37:39:8c:d3:9d:96:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab Validity Not Before: Jan 1 20:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb652851c0f4d4547a1a6f57f6da7201a3b3653a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:70:13:b1:29:6e:5b:11:2e:68:2f:4b:e0:ec: 47:7c:0c:69:4c:5c:76:3a:76:f6:0a:7e:81:e5:be: a9:31:ac:3f:19:0e:b7:65:54:80:f6:30:32:41:e8: a4:17:5b:02:51:7d:36:06:57:77:74:ab:b0:16:0d: a9:30:4a:6e:9d:96:01:6a:c4:51:5e:bf:c8:d5:86: d4:22:03:9a:4f:fe:15:5e:88:b4:58:e6:6d:f8:62: e7:db:7a:13:ba:dc:fc:d0:ea:34:87:3c:f6:4b:ba: a2:ef:3c:4e:27:d3:7c:69:f0:8d:37:41:e0:fb:03: 79:27:aa:4d:f7:3a:d5:90:be:e5:5b:20:9a:7d:7a: 59:1b:7f:79:17:84:1f:a4:54:01:c2:03:c0:06:c0: 56:69:0b:4d:02:7b:ee:dd:31:0b:45:2a:17:ef:ee: e4:ec:a1:d4:c1:4f:df:e0:1c:05:5f:9b:1b:9d:89: 2e:ba:52:3a:23:c7:fb:b3:86:b5:c2:04:71:b6:3b: 21:7b:a3:a7:d6:04:91:34:95:2e:8f:d4:3c:97:5c: 27:f4:37:7b:ac:c0:11:53:58:00:99:69:e5:ee:f2: 76:a1:cd:89:1c:7c:70:86:34:80:d4:87:45:e1:e3: 06:a0:d4:83:2a:c5:06:8c:b5:44:40:97:df:0e:c9: 39:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:65:28:51:C0:F4:D4:54:7A:1A:6F:57:F6:DA:72:01:A3:B3:65:3A X509v3 Authority Key Identifier: keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/u2UoUcD01FR6Gm9X9tpyAaOzZTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.106.226.0/24 109.106.229.0-109.106.230.255 109.106.233.0-109.106.237.255 109.245.55.0-109.245.57.255 109.245.61.0-109.245.63.255 109.245.216.0/24 Signature Algorithm: sha256WithRSAEncryption 77:87:2b:33:76:f9:b0:9c:a9:9f:b8:4b:e6:96:fb:aa:30:8d: 32:e7:79:8d:01:47:82:d8:92:cb:d5:e7:fc:d0:ea:22:68:be: e5:7d:f8:b0:78:f2:3d:b5:51:4b:27:f4:d8:98:e9:5d:f8:88: 13:5a:66:43:52:c9:70:bf:ae:fb:a6:fb:3e:00:5b:cc:8a:85: 47:84:05:4d:c9:46:2e:90:10:8b:2f:2a:8d:96:84:e8:50:77: e1:50:f8:10:54:77:5a:d7:68:be:07:21:9e:25:ea:09:e5:5d: 5d:00:0b:68:da:fe:67:e7:56:3c:96:2a:90:22:71:36:02:9f: 84:92:e5:e3:38:3f:73:a4:8b:e9:63:20:42:f3:c8:a8:bc:53: b6:99:ba:31:56:fb:60:50:99:90:30:ab:bd:c6:76:61:a5:e1: db:44:22:5c:06:f8:28:fc:ea:75:9b:b5:ab:53:63:d5:14:98: 4c:57:49:cc:fa:3c:98:1d:db:ce:ab:ca:92:17:3c:ff:b2:7d: 32:9e:46:59:1c:f2:5b:43:16:0e:7a:52:05:20:11:2e:85:2e: 5a:d5:f3:1d:a9:42:dd:06:ed:09:80:b6:f1:a3:34:77:97:94: 21:8a:0a:ef:35:b1:10:2e:64:db:37:da:c4:ff:22:50:3a:90: fb:ea:4a:cf -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt7NYIU/Pz8UGY3OYzTnZbfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzJmZTJjODA1ZWQ2M2FmYzljODllOTMyNGFjOTRkMzA5 MzlhYWIwHhcNMjYwMTAxMjAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjY1Mjg1MWMwZjRkNDU0N2ExYTZmNTdmNmRhNzIwMWEzYjM2NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XATsSluWxEuaC9L4OxHfAxpTFx2 Onb2Cn6B5b6pMaw/GQ63ZVSA9jAyQeikF1sCUX02Bld3dKuwFg2pMEpunZYBasRR Xr/I1YbUIgOaT/4VXoi0WOZt+GLn23oTutz80Oo0hzz2S7qi7zxOJ9N8afCNN0Hg +wN5J6pN9zrVkL7lWyCafXpZG395F4QfpFQBwgPABsBWaQtNAnvu3TELRSoX7+7k 7KHUwU/f4BwFX5sbnYkuulI6I8f7s4a1wgRxtjshe6On1gSRNJUuj9Q8l1wn9Dd7 rMARU1gAmWnl7vJ2oc2JHHxwhjSA1IdF4eMGoNSDKsUGjLVEQJffDsk55QIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFLtlKFHA9NRUehpvV/bacgGjs2U6MB8GA1UdIwQY MBaAFA1y/iyAXtY6/JyJ6TJKyU0wk5qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgt Y2Y4MThjN2M0NTFhLzEvdTJVb1VjRDAxRlI2R205WDl0cHlBYU96WlRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgtY2Y4MThjN2M0NTFh LzEvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAbWriMAwD BABtauUDBABtauYwDAMEAG1q6QMEAW1q7DAMAwQAbfU3AwQBbfU4MAwDBABt9T0D BAZt9QADBABt9dgwDQYJKoZIhvcNAQELBQADggEBAHeHKzN2+bCcqZ+4S+aW+6ow jTLneY0BR4LYksvV5/zQ6iJovuV9+LB48j21UUsn9NiY6V34iBNaZkNSyXC/rvum +z4AW8yKhUeEBU3JRi6QEIsvKo2WhOhQd+FQ+BBUd1rXaL4HIZ4l6gnlXV0AC2ja /mfnVjyWKpAicTYCn4SS5eM4P3Oki+ljIELzyKi8U7aZujFW+2BQmZAwq73GdmGl 4dtEIlwG+Cj86nWbtatTY9UUmExXScz6PJgd286rypIXPP+yfTKeRlkc8ltDFg56 UgUgES6FLlrV8x2pQt0G7QmAtvGjNHeXlCGKCu81sRAuZNs32sT/IlA6kPvqSs8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:12 2026 by rpki-client