This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/vjopgg6Mzp0TKVQf4nuT3drIOg8.roa File: vjopgg6Mzp0TKVQf4nuT3drIOg8.roa (raw, json) Hash identifier: UeisqqQdTHKvYF+wt35MTJmqHXsMaDYqpyCR2F86cwM= Subject key identifier: BE:3A:29:82:0E:8C:CE:9D:13:29:54:1F:E2:7B:93:DD:DA:C8:3A:0F Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Certificate serial: 019B7BA3D8F48920326B08934A8B19A66D79 Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/vjopgg6Mzp0TKVQf4nuT3drIOg8.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39396 IP address blocks: 109.121.136.0/24 maxlen: 24 109.121.139.0/24 maxlen: 24 109.121.142.0/24 maxlen: 24 109.121.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d8:f4:89:20:32:6b:08:93:4a:8b:19:a6:6d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be3a29820e8cce9d1329541fe27b93dddac83a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:21:ec:3b:a8:c6:9f:6d:71:11:5c:7e:8a:8a: f7:99:81:54:a7:39:39:7b:64:87:40:19:28:e8:8b: 7b:ce:22:ec:1e:0f:8f:9f:47:bd:60:e3:9a:91:72: f6:7d:48:88:c9:90:6c:1c:33:d6:40:71:1e:a8:39: 87:63:1b:aa:14:7d:bb:a8:21:47:e1:b3:0a:6f:e6: dd:6b:a7:9c:2f:37:38:86:12:50:94:85:b5:cd:58: 6a:d5:72:dc:d9:97:4c:85:52:53:3e:ae:20:9e:12: bb:fc:bb:58:83:0a:24:df:6d:66:a7:f5:3b:3f:02: 1b:91:2a:11:71:ca:bc:a2:4b:fe:00:f4:c7:c5:d6: 08:66:43:a3:02:49:16:04:a0:fa:ac:d5:44:d3:78: 95:9a:4b:fe:a9:2b:bb:bc:1b:e1:92:23:73:63:c0: d4:63:14:ad:d0:1a:60:a2:11:c5:7f:61:97:89:42: ef:fc:78:8e:26:ae:61:72:dc:f6:0e:e8:59:25:1b: e2:3e:23:64:58:8f:87:93:ca:e8:ba:93:5a:c4:bc: 85:36:d1:aa:8b:1d:69:c5:13:2b:b2:dc:7c:cf:db: 79:70:86:18:20:35:3c:50:26:5f:53:19:7b:ef:d7: fe:bc:08:b1:90:b8:67:59:bc:bc:3e:04:f3:fe:72: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3A:29:82:0E:8C:CE:9D:13:29:54:1F:E2:7B:93:DD:DA:C8:3A:0F X509v3 Authority Key Identifier: keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/vjopgg6Mzp0TKVQf4nuT3drIOg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.136.0/24 109.121.139.0/24 109.121.142.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:26:12:47:0a:e8:4b:77:e3:e6:0c:80:1f:a2:74:0f:7d:d3: 94:df:da:0d:5c:b5:5a:b6:c4:50:a7:e2:f5:70:b3:e2:b2:7b: 95:19:b6:0b:f2:31:6c:cc:f0:81:3d:1a:00:d6:ed:d4:34:91: 10:4c:c3:fa:e6:c4:c4:e5:3f:2f:0d:51:59:42:20:46:7a:90: f3:3b:84:8a:42:8d:b5:ea:0b:cd:ff:64:ae:a1:c9:e6:c7:0f: 5a:0c:a2:49:88:23:b9:3a:08:0d:e4:c3:95:5b:84:ab:c6:49: 95:bb:9e:e7:2a:70:3a:2d:72:fe:dc:52:79:48:a1:46:4c:08: aa:9b:08:a2:74:cf:0b:5b:d5:05:56:50:b2:8d:84:da:9f:0e: f7:38:b6:4f:1d:27:bf:7d:9c:bc:f8:39:ee:15:a2:57:50:08: 00:a0:3b:2c:f1:46:5a:3f:78:5d:2e:8f:2c:15:07:ff:46:da: 61:3b:03:40:d0:e2:b1:9c:7a:9e:42:80:d6:d7:42:59:13:26: b8:32:4d:8c:ac:5d:a1:84:2b:8b:32:04:a6:a3:8d:4d:90:02: 9e:d4:39:af:c0:66:9a:67:33:7c:11:7e:ca:f6:37:0e:39:8e: 63:76:a2:3e:c5:af:8e:e0:df:35:08:a5:32:fe:b1:45:26:44: 4a:84:e5:01 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o9j0iSAyawiTSosZpm15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz YjcxYzUwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTNhMjk4MjBlOGNjZTlkMTMyOTU0MWZlMjdiOTNkZGRhYzgzYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSHsO6jGn21xEVx+ior3mYFUpzk5 e2SHQBko6It7ziLsHg+Pn0e9YOOakXL2fUiIyZBsHDPWQHEeqDmHYxuqFH27qCFH 4bMKb+bda6ecLzc4hhJQlIW1zVhq1XLc2ZdMhVJTPq4gnhK7/LtYgwok321mp/U7 PwIbkSoRccq8okv+APTHxdYIZkOjAkkWBKD6rNVE03iVmkv+qSu7vBvhkiNzY8DU YxSt0BpgohHFf2GXiULv/HiOJq5hctz2DuhZJRviPiNkWI+Hk8roupNaxLyFNtGq ix1pxRMrstx8z9t5cIYYIDU8UCZfUxl779f+vAixkLhnWby8PgTz/nKdvQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL46KYIOjM6dEylUH+J7k93ayDoPMB8GA1UdIwQY MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt MWQ1ZDk0NWEwNWEzLzEvdmpvcGdnNk16cDBUS1ZRZjRudVQzZHJJT2c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXmIAwQA bXmLAwQBbXmOMA0GCSqGSIb3DQEBCwUAA4IBAQANJhJHCuhLd+PmDIAfonQPfdOU 39oNXLVatsRQp+L1cLPisnuVGbYL8jFszPCBPRoA1u3UNJEQTMP65sTE5T8vDVFZ QiBGepDzO4SKQo216gvN/2Suocnmxw9aDKJJiCO5OggN5MOVW4SrxkmVu57nKnA6 LXL+3FJ5SKFGTAiqmwiidM8LW9UFVlCyjYTanw73OLZPHSe/fZy8+DnuFaJXUAgA oDss8UZaP3hdLo8sFQf/RtphOwNA0OKxnHqeQoDW10JZEya4Mk2MrF2hhCuLMgSm o41NkAKe1DmvwGaaZzN8EX7K9jcOOY5jdqI+xa+O4N81CKUy/rFFJkRKhOUB -----END CERTIFICATE-----Generated at Sun Jan 25 21:26:01 2026 by rpki-client