This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/et0vONg2oCsHj6zy5uBZeaTDgyA.roa File: et0vONg2oCsHj6zy5uBZeaTDgyA.roa (raw, json) Hash identifier: jzz7fqg5Wyyqq0v/V+b9qQwJ0UV0OYMgP6tapXwy3P8= Subject key identifier: 7A:DD:2F:38:D8:36:A0:2B:07:8F:AC:F2:E6:E0:59:79:A4:C3:83:20 Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Certificate serial: 019B7BA3D9774FB83B6F47A76F2259383F6B Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/et0vONg2oCsHj6zy5uBZeaTDgyA.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41313 IP address blocks: 109.121.160.0/23 maxlen: 23 109.121.162.0/24 maxlen: 24 109.121.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d9:77:4f:b8:3b:6f:47:a7:6f:22:59:38:3f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7add2f38d836a02b078facf2e6e05979a4c38320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:2c:6b:0a:6c:b1:08:d8:e4:59:fd:1a:34: 0e:bc:31:c8:c0:7f:4c:47:f5:48:11:fb:ce:c2:d7: 7a:eb:c8:27:1a:c7:93:9d:21:da:71:aa:cb:5c:77: 1c:11:75:de:23:4e:07:b7:b0:0e:5c:89:ca:b2:84: 8b:e3:54:93:06:4b:86:95:bd:30:3c:e7:e8:02:df: 91:0b:d0:f7:dc:99:15:03:0f:19:85:39:ea:92:3b: b8:f8:5b:e4:d9:69:70:c6:f5:0c:58:55:e0:63:00: 42:f1:f4:ea:96:8b:67:71:3f:9d:ee:8e:2c:cb:8f: aa:e1:78:8c:70:02:98:fa:30:63:0d:0e:79:17:d2: ed:88:ef:01:ac:23:3f:78:15:68:a5:22:42:bc:5c: 1c:2e:3f:be:16:e1:12:94:87:01:53:9f:32:7c:c1: c2:54:d9:c3:05:1a:d3:4d:8b:11:7e:b7:72:cb:ef: b3:c9:3e:85:89:8f:ab:00:89:12:b5:66:da:b9:5b: 4f:12:b7:63:f7:d2:c2:22:c7:69:3f:4c:dd:b5:d8: f5:3b:9a:a3:4e:4b:92:87:87:92:3e:8e:5b:63:dc: 78:82:ab:b2:84:08:4f:b2:67:14:3c:71:f0:44:32: 40:64:0b:24:a7:c6:3b:3b:41:f1:1f:d8:a3:7f:18: 16:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DD:2F:38:D8:36:A0:2B:07:8F:AC:F2:E6:E0:59:79:A4:C3:83:20 X509v3 Authority Key Identifier: keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/et0vONg2oCsHj6zy5uBZeaTDgyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.160.0-109.121.162.255 109.121.166.0/24 Signature Algorithm: sha256WithRSAEncryption 77:4a:08:71:a4:cf:aa:cc:ea:b6:6b:db:86:51:b8:a6:0f:dd: 04:bf:4a:91:b9:76:e4:92:2b:93:9d:18:15:f7:18:19:d4:60: f6:a0:e3:d8:54:66:06:aa:3f:63:21:90:1b:f2:99:1e:ff:d4: be:be:d1:cb:79:74:80:ca:c8:98:c9:3a:c0:03:71:df:96:69: 00:a4:d1:68:7f:15:67:78:d2:81:f0:a2:0c:0a:e2:9d:e7:9b: d3:77:6d:2d:52:77:1f:50:58:cc:bb:7d:2f:69:88:08:57:99: 1f:b0:10:65:95:af:9b:a2:52:fb:02:00:f6:a5:73:43:42:cc: 66:ea:07:d0:08:52:bb:cf:b5:56:72:40:46:b7:cb:8e:42:7e: c6:e1:72:38:ee:cc:34:a4:47:66:04:e0:2b:f7:56:2c:a3:2e: cd:ef:9b:b6:c7:41:53:81:14:7e:2b:ff:a9:f7:1a:77:b1:48: 83:22:cd:67:fb:0c:30:17:1c:c6:d3:71:b3:20:7c:01:52:05: 70:9d:b7:62:ce:39:65:aa:2e:76:d7:fb:ec:6d:35:b4:0c:ee: 1f:25:94:ae:a5:87:54:a5:d4:d9:51:5a:28:0d:75:08:90:89: ea:1c:81:c8:f1:70:d1:bc:11:4c:8c:5d:14:9d:78:b2:01:f5: ee:9a:fe:43 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7o9l3T7g7b0enbyJZOD9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz YjcxYzUwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWRkMmYzOGQ4MzZhMDJiMDc4ZmFjZjJlNmUwNTk3OWE0YzM4MzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthosawpssQjY5Fn9GjQOvDHIwH9M R/VIEfvOwtd668gnGseTnSHacarLXHccEXXeI04Ht7AOXInKsoSL41STBkuGlb0w POfoAt+RC9D33JkVAw8ZhTnqkju4+Fvk2WlwxvUMWFXgYwBC8fTqlotncT+d7o4s y4+q4XiMcAKY+jBjDQ55F9LtiO8BrCM/eBVopSJCvFwcLj++FuESlIcBU58yfMHC VNnDBRrTTYsRfrdyy++zyT6FiY+rAIkStWbauVtPErdj99LCIsdpP0zdtdj1O5qj TkuSh4eSPo5bY9x4gquyhAhPsmcUPHHwRDJAZAskp8Y7O0HxH9ijfxgW7QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHrdLzjYNqArB4+s8ubgWXmkw4MgMB8GA1UdIwQY MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt MWQ1ZDk0NWEwNWEzLzEvZXQwdk9OZzJvQ3NIajZ6eTV1QlplYVREZ3lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAVteaAD BABteaIDBABteaYwDQYJKoZIhvcNAQELBQADggEBAHdKCHGkz6rM6rZr24ZRuKYP 3QS/SpG5duSSK5OdGBX3GBnUYPag49hUZgaqP2MhkBvymR7/1L6+0ct5dIDKyJjJ OsADcd+WaQCk0Wh/FWd40oHwogwK4p3nm9N3bS1Sdx9QWMy7fS9piAhXmR+wEGWV r5uiUvsCAPalc0NCzGbqB9AIUrvPtVZyQEa3y45CfsbhcjjuzDSkR2YE4Cv3Viyj Ls3vm7bHQVOBFH4r/6n3GnexSIMizWf7DDAXHMbTcbMgfAFSBXCdt2LOOWWqLnbX ++xtNbQM7h8llK6lh1Sl1NlRWigNdQiQieocgcjxcNG8EUyMXRSdeLIB9e6a/kM= -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:41 2026 by rpki-client