This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/0MNL0uKxne1mAOLvHp-kx9a8Fdo.roa File: 0MNL0uKxne1mAOLvHp-kx9a8Fdo.roa (raw, json) Hash identifier: pIY3J3TKdJieQx/4M129VemTVQ361aPzoM039AQ5uwg= Subject key identifier: D0:C3:4B:D2:E2:B1:9D:ED:66:00:E2:EF:1E:9F:A4:C7:D6:BC:15:DA Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d Certificate serial: 019B797E81D1F4FD54DBC91EFFE94089367A Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/0MNL0uKxne1mAOLvHp-kx9a8Fdo.roa Signing time: Thu 01 Jan 2026 12:18:12 +0000 ROA not before: Thu 01 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50201 IP address blocks: 109.232.92.0/22 maxlen: 22 2a0b:93c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:81:d1:f4:fd:54:db:c9:1e:ff:e9:40:89:36:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d Validity Not Before: Jan 1 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0c34bd2e2b19ded6600e2ef1e9fa4c7d6bc15da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:50:e3:1f:bd:54:44:be:d5:f0:82:03:69:b1: 9f:a4:75:a7:8f:a8:d5:16:e9:2e:8e:e4:d6:e1:2c: 78:8a:a5:9f:97:6b:9e:02:4e:cd:16:5c:b6:ff:89: 5b:eb:b9:4f:6e:0b:52:ef:44:92:45:e6:f9:b1:6e: c0:b8:1b:47:a4:d6:33:c3:48:81:95:df:8e:da:a6: 74:02:01:5c:39:4a:1a:b9:44:53:56:5d:74:52:17: 5f:6c:97:49:a0:96:34:ab:03:c3:77:79:b3:43:3f: e7:bb:c0:95:24:bc:e1:11:33:7d:e0:2b:28:60:b8: a7:bf:be:5a:08:2a:f1:12:5f:41:20:b9:62:6f:02: 2b:cf:05:d8:08:53:6e:49:72:b8:62:39:fa:f7:64: 90:43:8c:47:5a:e3:f6:84:e8:75:03:93:a8:d8:9c: 8a:c8:91:5d:c3:b7:f8:da:ef:ad:65:39:44:fc:22: e5:f6:dd:9f:29:1b:60:f4:b0:94:6d:47:96:f5:bb: 27:2a:85:bc:8e:66:5e:df:55:42:84:3d:ae:08:08: 88:78:54:db:87:62:74:b4:93:fb:67:6f:36:cf:5e: f8:3f:c3:55:d8:24:2e:22:06:fc:53:03:e1:ab:e5: 59:a9:ad:20:fc:cb:ad:be:37:64:be:a2:5e:11:d2: f6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C3:4B:D2:E2:B1:9D:ED:66:00:E2:EF:1E:9F:A4:C7:D6:BC:15:DA X509v3 Authority Key Identifier: keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/0MNL0uKxne1mAOLvHp-kx9a8Fdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.232.92.0/22 IPv6: 2a0b:93c0::/29 Signature Algorithm: sha256WithRSAEncryption 6b:32:ee:6f:f4:3c:1b:27:f0:f3:b4:a9:d4:b8:6c:57:66:5c: d3:b4:7c:ca:6b:b7:eb:c5:97:c7:b1:af:15:20:15:7c:e6:5e: 05:98:ef:aa:37:46:9b:3a:2e:00:6e:f3:63:bd:1c:83:25:86: 5b:e4:e7:b5:45:15:fc:47:96:78:65:9b:a0:7d:fd:b1:68:2c: 44:7a:7c:c8:3c:86:50:24:ac:1d:d3:a4:08:5a:2d:c6:a9:72: 85:ab:a3:2a:bf:5d:56:f9:57:83:8a:0f:a2:2b:8d:cb:bd:31: c0:d2:3a:df:cb:39:74:10:17:c1:51:8d:ca:1d:28:22:53:1b: af:ca:4e:37:23:7c:c6:6e:5b:2f:b5:9d:b9:bf:00:97:2c:06: 3d:77:e9:3e:5c:40:2a:50:08:8e:ef:1c:62:b5:4d:0d:de:6b: 82:ff:df:8b:29:ee:ca:e8:14:4d:b4:27:bd:88:ba:85:8f:2d: 87:4c:3e:3f:67:65:58:d2:71:b3:4e:a9:c1:3f:d6:1d:85:8b: be:06:ee:0e:e2:d4:ba:39:df:21:c3:90:ab:5f:b4:19:2d:54: 88:d4:c6:df:e5:c9:bd:59:4c:e2:99:bf:d7:8b:b9:8b:09:7d: 1f:3a:dc:fe:57:3b:96:a2:b4:e6:9e:73:3f:1e:bc:62:00:61: f4:3b:cc:30 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5foHR9P1U28ke/+lAiTZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWEyZjA4M2Y0NzFkZmI5NTA3YjRjOTczY2I1YzNhY2Q0 OTc1OWQwHhcNMjYwMTAxMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGMzNGJkMmUyYjE5ZGVkNjYwMGUyZWYxZTlmYTRjN2Q2YmMxNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VDjH71URL7V8IIDabGfpHWnj6jV FukujuTW4Sx4iqWfl2ueAk7NFly2/4lb67lPbgtS70SSReb5sW7AuBtHpNYzw0iB ld+O2qZ0AgFcOUoauURTVl10UhdfbJdJoJY0qwPDd3mzQz/nu8CVJLzhETN94Cso YLinv75aCCrxEl9BILlibwIrzwXYCFNuSXK4Yjn692SQQ4xHWuP2hOh1A5Oo2JyK yJFdw7f42u+tZTlE/CLl9t2fKRtg9LCUbUeW9bsnKoW8jmZe31VChD2uCAiIeFTb h2J0tJP7Z282z174P8NV2CQuIgb8UwPhq+VZqa0g/MutvjdkvqJeEdL28QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNDDS9LisZ3tZgDi7x6fpMfWvBXaMB8GA1UdIwQY MBaAFB6aLwg/Rx37lQe0yXPLXDrNSXWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYt MjVkNmU4NjEzZGM0LzEvME1OTDB1S3huZTFtQU9MdkhwLWt4OWE4RmRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYtMjVkNmU4NjEzZGM0 LzEvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCbehcMA0E AgACMAcDBQMqC5PAMA0GCSqGSIb3DQEBCwUAA4IBAQBrMu5v9DwbJ/DztKnUuGxX ZlzTtHzKa7frxZfHsa8VIBV85l4FmO+qN0abOi4AbvNjvRyDJYZb5Oe1RRX8R5Z4 ZZugff2xaCxEenzIPIZQJKwd06QIWi3GqXKFq6Mqv11W+VeDig+iK43LvTHA0jrf yzl0EBfBUY3KHSgiUxuvyk43I3zGblsvtZ25vwCXLAY9d+k+XEAqUAiO7xxitU0N 3muC/9+LKe7K6BRNtCe9iLqFjy2HTD4/Z2VY0nGzTqnBP9YdhYu+Bu4O4tS6Od8h w5CrX7QZLVSI1Mbf5cm9WUzimb/Xi7mLCX0fOtz+VzuWorTmnnM/HrxiAGH0O8ww -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:15 2026 by rpki-client