This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/dLGbVw4XjZNxPwPFJNBdYIMXYCo.roa File: dLGbVw4XjZNxPwPFJNBdYIMXYCo.roa (raw, json) Hash identifier: tcA5TqMgWOL6GjCqrP8Wr/DwbL09yVVazURLi3SWBlw= Subject key identifier: 74:B1:9B:57:0E:17:8D:93:71:3F:03:C5:24:D0:5D:60:83:17:60:2A Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Certificate serial: 019B7BA3DA9BA131FD6931D7051F3022EF34 Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/dLGbVw4XjZNxPwPFJNBdYIMXYCo.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209362 IP address blocks: 109.121.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:da:9b:a1:31:fd:69:31:d7:05:1f:30:22:ef:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74b19b570e178d93713f03c524d05d608317602a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:5b:3e:bf:64:08:1a:c2:94:7e:d8:c8:91: f1:e9:47:37:16:2e:e3:38:7e:18:b8:90:29:3d:af: 4e:ec:5e:ec:10:00:cc:3b:f3:7c:33:f3:16:a0:58: 7c:b8:bf:f7:e6:01:50:e5:65:f5:66:ca:a0:73:53: 07:2e:28:4d:4b:b7:17:f9:6f:2f:3e:24:9d:09:73: 38:6f:a4:7d:65:2a:84:0d:26:49:f1:15:ae:fb:4c: dd:a0:a1:2d:0c:b2:3e:cb:6c:7b:71:c9:b4:57:56: bc:aa:a8:62:78:e4:8e:19:ee:2a:4c:5c:84:f4:af: ff:d3:86:3f:c5:a1:93:47:ad:38:7f:82:10:f8:ef: 56:12:2e:54:55:4a:49:d4:98:1b:c9:e0:c2:0a:93: 11:24:70:5a:af:53:f4:80:4e:41:10:6d:2a:9e:62: 7c:9d:76:6f:92:b1:88:b2:4b:3a:27:16:0c:b7:d5: 83:af:a4:40:4b:b5:64:6e:ce:b3:79:af:9c:8b:17: fb:e4:93:26:b0:a4:64:9a:05:8d:18:64:fd:33:38: bb:95:72:4f:e1:65:60:e6:24:ef:3c:57:49:3d:ac: 5c:8e:5f:68:5f:66:c6:0e:d5:08:71:22:9f:20:2c: 5c:15:b9:1b:3d:a6:c6:85:a4:7d:70:7f:8e:49:34: 05:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:9B:57:0E:17:8D:93:71:3F:03:C5:24:D0:5D:60:83:17:60:2A X509v3 Authority Key Identifier: keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/dLGbVw4XjZNxPwPFJNBdYIMXYCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.128.0/24 Signature Algorithm: sha256WithRSAEncryption 82:0a:6c:1d:4a:4a:54:3f:50:62:e0:fa:6c:6c:3c:57:20:d5: 6b:c3:99:58:5e:02:12:4c:4b:28:98:f5:2c:75:a7:b0:fd:85: 99:03:37:bc:20:eb:b9:08:a3:15:c3:9f:e2:a0:a6:53:69:74: b1:28:d8:fe:6c:cd:c0:93:39:15:cc:2e:3e:17:7d:70:cb:f9: 66:28:a9:3f:7d:3f:10:30:13:32:b2:95:02:77:d8:da:6f:03: 35:23:b6:e4:7a:f3:e1:5d:68:da:64:85:22:0c:e2:2d:5e:6e: 6e:69:b9:e1:39:ac:37:5a:71:0f:59:10:4e:12:dc:39:3b:43: 94:07:79:12:35:ab:11:f5:47:8d:22:2f:d4:ed:f3:ef:2c:5d: e1:7b:30:10:ca:1d:e7:10:a9:46:61:bc:4e:39:09:b1:52:76: 71:52:5b:3f:b4:43:d4:36:cb:6c:54:ee:d2:54:e1:f1:54:ad: d4:5f:8e:5b:7e:6a:a6:c6:25:2f:f1:a0:5c:13:bb:9a:40:12: c5:53:cf:30:b6:97:0b:c8:1a:32:f0:c3:d8:e5:ca:04:3f:cc: d4:24:6a:4b:96:61:b6:b1:8a:a4:81:ec:4a:1d:14:4e:a3:ce: 65:98:2b:ea:2a:45:2e:f1:67:11:27:14:27:d9:c8:8e:ec:be: 54:2f:85:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9qboTH9aTHXBR8wIu80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz YjcxYzUwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGIxOWI1NzBlMTc4ZDkzNzEzZjAzYzUyNGQwNWQ2MDgzMTc2MDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MRbPr9kCBrClH7YyJHx6Uc3Fi7j OH4YuJApPa9O7F7sEADMO/N8M/MWoFh8uL/35gFQ5WX1Zsqgc1MHLihNS7cX+W8v PiSdCXM4b6R9ZSqEDSZJ8RWu+0zdoKEtDLI+y2x7ccm0V1a8qqhieOSOGe4qTFyE 9K//04Y/xaGTR604f4IQ+O9WEi5UVUpJ1JgbyeDCCpMRJHBar1P0gE5BEG0qnmJ8 nXZvkrGIsks6JxYMt9WDr6RAS7Vkbs6zea+cixf75JMmsKRkmgWNGGT9Mzi7lXJP 4WVg5iTvPFdJPaxcjl9oX2bGDtUIcSKfICxcFbkbPabGhaR9cH+OSTQFpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHSxm1cOF42TcT8DxSTQXWCDF2AqMB8GA1UdIwQY MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt MWQ1ZDk0NWEwNWEzLzEvZExHYlZ3NFhqWk54UHdQRkpOQmRZSU1YWUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmAMA0G CSqGSIb3DQEBCwUAA4IBAQCCCmwdSkpUP1Bi4PpsbDxXINVrw5lYXgISTEsomPUs daew/YWZAze8IOu5CKMVw5/ioKZTaXSxKNj+bM3AkzkVzC4+F31wy/lmKKk/fT8Q MBMyspUCd9jabwM1I7bkevPhXWjaZIUiDOItXm5uabnhOaw3WnEPWRBOEtw5O0OU B3kSNasR9UeNIi/U7fPvLF3hezAQyh3nEKlGYbxOOQmxUnZxUls/tEPUNstsVO7S VOHxVK3UX45bfmqmxiUv8aBcE7uaQBLFU88wtpcLyBoy8MPY5coEP8zUJGpLlmG2 sYqkgexKHRROo85lmCvqKkUu8WcRJxQn2ciO7L5UL4Wp -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:23 2026 by rpki-client