This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/03jlII3QdUhqMom-QyYODCrOaLg.roa File: 03jlII3QdUhqMom-QyYODCrOaLg.roa (raw, json) Hash identifier: eOC5qdIGMityASuS/ixV04bgmoNB3p0BasICn2Hkce4= Subject key identifier: D3:78:E5:20:8D:D0:75:48:6A:32:89:BE:43:26:0E:0C:2A:CE:68:B8 Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Certificate serial: 019B7BA3D9387F0A13A95089C0B240D64304 Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/03jlII3QdUhqMom-QyYODCrOaLg.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41292 IP address blocks: 109.121.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d9:38:7f:0a:13:a9:50:89:c0:b2:40:d6:43:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d378e5208dd075486a3289be43260e0c2ace68b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:e3:15:12:a7:5d:56:ad:78:a6:a3:31:1a: 05:ff:c3:e4:02:a2:fa:67:fc:2a:d1:8d:fc:3e:4d: 5b:40:fe:ef:65:54:a9:47:43:e4:85:10:45:c7:39: 6c:00:fc:d1:dd:34:e2:33:4e:e0:e3:7e:c0:8b:54: 0c:ee:e8:e8:59:99:7d:70:81:2a:5e:9e:d8:df:37: bf:a8:0c:b5:8b:37:f0:1e:c5:44:12:5f:08:8b:4b: cd:94:b1:65:18:8a:65:c0:6d:48:0b:2f:b1:ea:04: f5:b1:50:0e:66:9b:8f:66:33:c3:7e:29:be:9e:65: 3c:a0:c5:24:0f:de:52:4e:6b:50:d9:9b:70:7d:ee: 4d:f8:45:f0:5d:6e:13:3c:bf:b4:e6:2b:04:7c:9b: 1b:e8:9b:0f:72:9a:0c:f4:bb:fe:ed:42:7a:6c:9f: bb:04:0b:92:c4:d5:06:82:21:08:01:c7:14:08:3b: ad:6c:56:6e:c4:b0:f8:80:4c:5a:05:51:cd:a0:07: 32:e4:dc:a5:08:f5:10:18:5c:99:81:11:82:b3:16: dd:85:02:d5:96:76:da:4c:d9:f7:1d:53:9e:23:6c: be:f4:6d:b6:3c:ca:84:4d:fd:25:0f:9b:26:5e:66: e2:0d:d5:27:99:aa:04:44:6b:b4:1b:4c:0a:8e:39: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:78:E5:20:8D:D0:75:48:6A:32:89:BE:43:26:0E:0C:2A:CE:68:B8 X509v3 Authority Key Identifier: keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/03jlII3QdUhqMom-QyYODCrOaLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.159.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:20:08:76:5b:05:25:63:c9:18:47:49:e4:c6:da:b2:71:78: d9:f7:6b:2c:ba:f1:1d:35:91:de:41:bf:cd:89:e2:a4:cd:0f: cd:dc:79:5f:79:49:f6:90:62:56:76:1d:bb:ce:92:a3:2b:66: 33:60:db:a5:1c:b6:f3:72:2f:70:20:70:87:c8:84:5f:07:3c: 7b:51:96:d5:f3:28:a3:c4:35:44:be:fd:aa:e2:a0:f6:8e:23: f4:ec:69:6c:29:f2:e2:72:78:37:3d:dc:62:c1:e5:e3:cd:73: a8:86:ef:29:68:f4:c6:d5:90:87:58:a2:1b:66:14:da:42:d1: 89:4a:74:fb:ac:e1:72:0b:f8:cc:38:21:01:ae:45:a4:4d:35: 99:7c:d7:db:4e:f4:25:dd:87:c6:68:33:5f:b5:b9:d3:3e:2a: 54:e4:a4:b0:b9:78:85:08:a5:2d:7d:4f:fc:41:98:36:eb:e0: 65:c8:b6:9d:46:41:38:41:bc:40:36:2c:1b:f8:d0:a6:b7:fd: 6f:d3:8f:de:c8:52:d1:fd:79:15:09:69:8d:0f:e5:b6:0a:3e: de:99:4c:cc:fa:de:94:b8:21:63:10:66:79:d2:71:b1:7b:2d: 31:48:5c:e1:82:21:35:7b:3a:48:c7:30:a4:cd:05:7d:c7:b1: 36:5e:2c:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9k4fwoTqVCJwLJA1kMEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz YjcxYzUwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzc4ZTUyMDhkZDA3NTQ4NmEzMjg5YmU0MzI2MGUwYzJhY2U2OGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbPjFRKnXVateKajMRoF/8PkAqL6 Z/wq0Y38Pk1bQP7vZVSpR0PkhRBFxzlsAPzR3TTiM07g437Ai1QM7ujoWZl9cIEq Xp7Y3ze/qAy1izfwHsVEEl8Ii0vNlLFlGIplwG1ICy+x6gT1sVAOZpuPZjPDfim+ nmU8oMUkD95STmtQ2Ztwfe5N+EXwXW4TPL+05isEfJsb6JsPcpoM9Lv+7UJ6bJ+7 BAuSxNUGgiEIAccUCDutbFZuxLD4gExaBVHNoAcy5NylCPUQGFyZgRGCsxbdhQLV lnbaTNn3HVOeI2y+9G22PMqETf0lD5smXmbiDdUnmaoERGu0G0wKjjlZXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNN45SCN0HVIajKJvkMmDgwqzmi4MB8GA1UdIwQY MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt MWQ1ZDk0NWEwNWEzLzEvMDNqbElJM1FkVWhxTW9tLVF5WU9EQ3JPYUxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmfMA0G CSqGSIb3DQEBCwUAA4IBAQBrIAh2WwUlY8kYR0nkxtqycXjZ92ssuvEdNZHeQb/N ieKkzQ/N3HlfeUn2kGJWdh27zpKjK2YzYNulHLbzci9wIHCHyIRfBzx7UZbV8yij xDVEvv2q4qD2jiP07GlsKfLicng3PdxiweXjzXOohu8paPTG1ZCHWKIbZhTaQtGJ SnT7rOFyC/jMOCEBrkWkTTWZfNfbTvQl3YfGaDNftbnTPipU5KSwuXiFCKUtfU/8 QZg26+BlyLadRkE4QbxANiwb+NCmt/1v04/eyFLR/XkVCWmND+W2Cj7emUzM+t6U uCFjEGZ50nGxey0xSFzhgiE1ezpIxzCkzQV9x7E2XixE -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:44 2026 by rpki-client