This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/tfjWDOLaBV3XOF9cIpIBjUhnoek.roa File: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (raw, json) Hash identifier: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w= Subject key identifier: B5:F8:D6:0C:E2:DA:05:5D:D7:38:5F:5C:22:92:01:8D:48:67:A1:E9 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019B7F823C52CE9F2F9307D2F28B8877F6BA Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/tfjWDOLaBV3XOF9cIpIBjUhnoek.roa Signing time: Fri 02 Jan 2026 16:20:00 +0000 ROA not before: Fri 02 Jan 2026 16:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24745 IP address blocks: 109.99.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:3c:52:ce:9f:2f:93:07:d2:f2:8b:88:77:f6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jan 2 16:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5f8d60ce2da055dd7385f5c2292018d4867a1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:21:23:5e:60:59:a0:ef:1b:f4:25:76:3f:d9: f1:42:4b:90:4f:d3:84:4b:99:4a:18:1e:81:4a:e2: 3b:90:00:9e:03:3a:92:37:13:ef:2e:0b:b3:50:af: b8:0c:75:b5:22:94:5b:86:d4:0e:a0:86:91:1e:43: 67:f8:4e:fc:0f:b8:cf:5f:5e:77:07:80:20:b1:ac: 2f:06:27:ec:40:17:36:84:9e:17:cd:a6:ed:fc:05: f4:c1:87:e8:24:67:85:61:24:fc:64:83:1c:5f:23: 5a:2e:58:94:42:f0:4a:c9:4e:85:74:cf:35:d8:9d: 9f:d0:94:2b:88:ac:06:30:73:6e:28:77:12:b6:64: 1f:b8:bf:7d:ac:d4:ec:e6:15:c6:67:9b:2c:93:80: eb:ec:26:59:36:ed:5a:39:62:77:96:16:a0:f1:32: f4:25:d8:8c:82:cd:f7:36:f0:00:0f:1d:5d:0a:61: b8:78:62:07:bb:95:58:30:39:83:4d:26:76:5e:82: b8:80:2d:88:29:b8:2b:60:34:9e:63:d0:fe:af:f5: d1:0d:7d:dd:92:5c:f3:74:5c:6a:b7:ae:1a:7d:71: 1d:1c:66:d7:a7:75:59:bb:90:35:0b:fa:04:f7:59: 88:36:7e:46:64:ac:6a:f9:c8:ce:37:8c:bd:49:13: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F8:D6:0C:E2:DA:05:5D:D7:38:5F:5C:22:92:01:8D:48:67:A1:E9 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/tfjWDOLaBV3XOF9cIpIBjUhnoek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.99.158.0/24 Signature Algorithm: sha256WithRSAEncryption 32:cb:91:87:fc:31:29:96:67:b2:54:99:c7:5f:f6:dd:36:59: 16:5b:85:ba:77:61:dd:80:1d:0b:06:a2:b0:a2:08:79:cb:bd: f4:91:2f:3c:df:17:3f:d7:64:f4:ed:e9:7c:5f:04:b6:46:2c: 62:39:bf:0a:9c:55:8a:cf:aa:d6:5c:7e:b9:3c:e6:c7:9f:18: cf:e8:31:de:4f:a4:f7:25:60:bc:00:64:46:9a:ec:8a:ab:7c: b8:c6:d6:0f:a6:45:92:4d:3b:b7:f9:c1:71:c5:e8:11:8c:58: b3:ca:1e:cd:fe:8d:89:9c:e5:8b:84:0f:19:ed:b0:bd:ac:cc: db:cf:73:19:e9:2e:19:00:6c:d0:00:a4:bb:db:ec:43:2f:30: fe:6c:1c:11:92:dd:68:8c:54:76:f3:b4:86:3f:f0:fe:22:71: 6b:f1:87:de:95:59:f7:44:7a:ca:96:56:64:3d:c0:ea:4f:d8: d1:21:ba:17:b9:bf:8d:2c:a5:91:56:23:4b:c5:9d:34:78:f1: 4a:0c:41:56:e4:af:43:f2:4b:86:30:b1:bd:d1:27:43:c9:c1: 65:58:bb:15:ba:2c:1c:60:f7:6e:be:24:f6:cd:5f:e0:85:76: 43:0f:c9:56:c3:7c:0b:05:a2:fc:be:aa:39:d2:7c:13:b9:7e: c5:54:2f:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gjxSzp8vkwfS8ouId/a6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwMTAyMTYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWY4ZDYwY2UyZGEwNTVkZDczODVmNWMyMjkyMDE4ZDQ4NjdhMWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiEjXmBZoO8b9CV2P9nxQkuQT9OE S5lKGB6BSuI7kACeAzqSNxPvLguzUK+4DHW1IpRbhtQOoIaRHkNn+E78D7jPX153 B4AgsawvBifsQBc2hJ4Xzabt/AX0wYfoJGeFYST8ZIMcXyNaLliUQvBKyU6FdM81 2J2f0JQriKwGMHNuKHcStmQfuL99rNTs5hXGZ5ssk4Dr7CZZNu1aOWJ3lhag8TL0 JdiMgs33NvAADx1dCmG4eGIHu5VYMDmDTSZ2XoK4gC2IKbgrYDSeY9D+r/XRDX3d klzzdFxqt64afXEdHGbXp3VZu5A1C/oE91mINn5GZKxq+cjON4y9SRMT6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLX41gzi2gVd1zhfXCKSAY1IZ6HpMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvdGZqV0RPTGFCVjNYT0Y5Y0lwSUJqVWhub2VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWOeMA0G CSqGSIb3DQEBCwUAA4IBAQAyy5GH/DEplmeyVJnHX/bdNlkWW4W6d2HdgB0LBqKw ogh5y730kS883xc/12T07el8XwS2RixiOb8KnFWKz6rWXH65PObHnxjP6DHeT6T3 JWC8AGRGmuyKq3y4xtYPpkWSTTu3+cFxxegRjFizyh7N/o2JnOWLhA8Z7bC9rMzb z3MZ6S4ZAGzQAKS72+xDLzD+bBwRkt1ojFR287SGP/D+InFr8YfelVn3RHrKllZk PcDqT9jRIboXub+NLKWRViNLxZ00ePFKDEFW5K9D8kuGMLG90SdDycFlWLsVuiwc YPduviT2zV/ghXZDD8lWw3wLBaL8vqo50nwTuX7FVC9Z -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:33 2026 by rpki-client