This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/fVFj14fsxVQLnq5jeDqpACchzvY.roa File: fVFj14fsxVQLnq5jeDqpACchzvY.roa (raw, json) Hash identifier: tFyXhmu61YvaBWZTRbVxI+39pR0/jDnz2sf2raHLD4k= Subject key identifier: 7D:51:63:D7:87:EC:C5:54:0B:9E:AE:63:78:3A:A9:00:27:21:CE:F6 Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Certificate serial: 019B7BA3D6F5D928D09509F27B2B3059DBA6 Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/fVFj14fsxVQLnq5jeDqpACchzvY.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8628 IP address blocks: 109.121.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d6:f5:d9:28:d0:95:09:f2:7b:2b:30:59:db:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d5163d787ecc5540b9eae63783aa9002721cef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:eb:80:f4:06:9e:cc:af:5e:a4:e5:3d:3a:4f: 71:80:b3:8c:1b:78:c1:8b:62:57:0a:eb:97:39:43: 83:c1:bf:2d:60:82:b8:5b:28:d8:04:58:78:a3:77: 84:94:c7:3c:bb:d3:9d:90:c0:82:0b:2e:e6:ce:04: a7:24:3f:ef:81:75:82:86:23:8b:42:6d:e5:72:23: 64:f3:22:b5:e5:82:4f:06:a4:15:98:1b:68:3d:80: b0:c8:34:ae:b8:7a:ea:c0:cf:f2:ff:b1:3f:3a:79: ba:81:a1:1d:09:1d:42:85:05:92:96:09:de:38:51: 21:a9:eb:09:b9:18:c0:92:b4:3a:34:cb:a3:e1:22: e1:05:0f:1c:6a:53:da:bd:e3:27:7d:85:2a:0a:7c: 4b:70:3b:c8:dd:a7:f5:de:eb:9a:0b:78:1d:9c:1d: f7:b3:d7:7f:a9:49:79:ff:29:07:be:bc:98:f9:2c: 95:a4:90:11:dd:c6:ab:d7:29:32:a5:93:ac:5e:f2: 8e:8e:bd:3e:50:4e:7c:03:b0:c7:5c:75:ca:9e:b0: 63:96:ce:fd:bd:5b:e8:76:9b:d7:b6:21:2b:e9:22: f4:6a:d2:23:0e:6c:6c:0a:40:88:0f:3a:39:32:5f: 3e:43:db:de:8a:9b:4d:31:ab:e6:f8:ca:f1:f5:cf: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:51:63:D7:87:EC:C5:54:0B:9E:AE:63:78:3A:A9:00:27:21:CE:F6 X509v3 Authority Key Identifier: keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/fVFj14fsxVQLnq5jeDqpACchzvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.133.0/24 Signature Algorithm: sha256WithRSAEncryption 96:36:c6:7f:df:56:cd:d2:e3:8f:d3:09:aa:28:3b:6b:3b:15: f8:a0:94:35:9a:92:d2:19:75:41:7a:ec:55:54:4c:87:8e:19: d7:22:da:d6:87:7f:94:61:8d:56:9e:a6:10:7d:d6:36:29:ef: cb:ef:6d:e8:84:7b:ed:46:46:8e:bc:06:5e:32:c1:b9:c5:8d: f6:21:66:53:ae:45:76:df:47:30:5d:c6:a9:f5:1a:d6:3d:6c: a4:d0:5c:30:ed:87:06:45:f6:13:36:8c:d0:c7:26:25:e5:4d: 60:0f:35:cf:c4:29:9a:96:b3:d1:f3:b2:c7:15:24:be:60:06: 63:13:b1:e0:3f:70:51:fe:7d:f8:de:8d:81:db:68:1c:42:79: ba:06:ff:ba:31:e8:9f:16:c7:86:4b:75:19:52:64:49:e7:fc: e8:c0:c1:69:32:50:18:a4:f9:fc:c1:af:b2:fe:07:38:5e:32: 29:0c:68:d8:15:89:65:0d:72:69:76:0a:7e:c5:ed:85:52:fd: 58:d3:9a:13:83:3c:df:2d:94:7d:ce:82:9e:35:72:59:28:e8: 92:86:f7:df:72:1b:84:78:f3:10:00:92:ac:f8:d8:21:3b:51: 65:da:e9:7c:97:79:44:42:15:f1:d2:0f:bf:38:2a:d6:b1:ab: 56:f6:10:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9b12SjQlQnyeyswWdumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz YjcxYzUwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDUxNjNkNzg3ZWNjNTU0MGI5ZWFlNjM3ODNhYTkwMDI3MjFjZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+uA9AaezK9epOU9Ok9xgLOMG3jB i2JXCuuXOUODwb8tYIK4WyjYBFh4o3eElMc8u9OdkMCCCy7mzgSnJD/vgXWChiOL Qm3lciNk8yK15YJPBqQVmBtoPYCwyDSuuHrqwM/y/7E/Onm6gaEdCR1ChQWSlgne OFEhqesJuRjAkrQ6NMuj4SLhBQ8calPaveMnfYUqCnxLcDvI3af13uuaC3gdnB33 s9d/qUl5/ykHvryY+SyVpJAR3car1ykypZOsXvKOjr0+UE58A7DHXHXKnrBjls79 vVvodpvXtiEr6SL0atIjDmxsCkCIDzo5Ml8+Q9veiptNMavm+Mrx9c938QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1RY9eH7MVUC56uY3g6qQAnIc72MB8GA1UdIwQY MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt MWQ1ZDk0NWEwNWEzLzEvZlZGajE0ZnN4VlFMbnE1amVEcXBBQ2NoenZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmFMA0G CSqGSIb3DQEBCwUAA4IBAQCWNsZ/31bN0uOP0wmqKDtrOxX4oJQ1mpLSGXVBeuxV VEyHjhnXItrWh3+UYY1WnqYQfdY2Ke/L723ohHvtRkaOvAZeMsG5xY32IWZTrkV2 30cwXcap9RrWPWyk0Fww7YcGRfYTNozQxyYl5U1gDzXPxCmalrPR87LHFSS+YAZj E7HgP3BR/n343o2B22gcQnm6Bv+6MeifFseGS3UZUmRJ5/zowMFpMlAYpPn8wa+y /gc4XjIpDGjYFYllDXJpdgp+xe2FUv1Y05oTgzzfLZR9zoKeNXJZKOiShvffchuE ePMQAJKs+NghO1Fl2ul8l3lEQhXx0g+/OCrWsatW9hAa -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:26 2026 by rpki-client