This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/aFlV5hpJi7JGigEHwyiBucsGhaI.roa File: aFlV5hpJi7JGigEHwyiBucsGhaI.roa (raw, json) Hash identifier: q39C+wR27hBq9xoi7AerXmvo+x5GLx6JROaNlM6cM5E= Subject key identifier: 68:59:55:E6:1A:49:8B:B2:46:8A:01:07:C3:28:81:B9:CB:06:85:A2 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA789C1FBCDB320B07E36C9BC0483C0 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/aFlV5hpJi7JGigEHwyiBucsGhaI.roa Signing time: Fri 02 Jan 2026 12:21:07 +0000 ROA not before: Fri 02 Jan 2026 12:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207548 IP address blocks: 109.108.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:89:c1:fb:cd:b3:20:b0:7e:36:c9:bc:04:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=685955e61a498bb2468a0107c32881b9cb0685a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:28:9e:eb:0e:39:de:8d:95:30:48:b0:0f: 0d:50:2b:6b:61:36:3a:f6:59:82:d2:8f:74:3a:95: 8f:58:0c:38:45:30:08:2a:1b:17:3c:c9:0e:1a:71: 57:1f:c8:d1:b4:68:90:37:61:dc:93:71:ee:d8:97: 89:95:bb:6b:b7:de:c8:bc:25:d1:d0:3c:af:ce:45: 5a:0f:33:5a:f6:80:09:b6:8a:40:42:18:01:a5:80: a5:47:ad:f5:71:ac:f0:bc:d0:4a:e0:37:d6:a0:ec: c7:25:f3:13:b5:5d:30:7b:5f:c4:ee:0e:48:9e:61: af:17:ea:54:b6:51:8a:6c:dc:6f:9b:be:8d:e9:a4: 99:53:8c:7c:d2:d6:41:5f:6e:fb:fd:cf:c0:1d:f7: bc:62:d8:a8:c0:71:79:4a:0f:76:4b:cf:eb:fe:7a: 12:7c:cb:e3:ec:79:6d:99:c6:0d:4e:15:4b:47:c5: 3b:af:1c:aa:7b:b4:41:ca:78:b3:3e:6f:3e:b2:ec: c7:55:99:4b:5e:47:2d:0a:5e:1e:f6:46:e5:b3:37: 93:6f:dd:4a:36:7c:be:aa:8e:11:d3:1d:c9:56:f5: ff:cf:69:b8:ab:88:a4:bb:48:ca:aa:f3:d3:05:55: 7d:6d:d5:8a:47:41:2a:37:72:b1:d7:a0:f9:4d:f3: 7f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:59:55:E6:1A:49:8B:B2:46:8A:01:07:C3:28:81:B9:CB:06:85:A2 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/aFlV5hpJi7JGigEHwyiBucsGhaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.108.40.0/24 Signature Algorithm: sha256WithRSAEncryption 01:46:ea:17:b9:85:c5:c9:11:04:72:d0:b6:7d:58:85:54:f7: 16:ad:74:56:fa:dd:43:ab:e6:8f:5e:33:07:ba:93:6c:71:dd: 73:b4:87:90:a1:82:b5:31:cb:00:d8:e9:0a:f1:19:48:6f:9d: 27:b9:55:87:bd:49:5f:40:7c:68:b2:d3:28:b8:2f:bf:8e:58: 18:83:6e:e1:12:86:24:b5:eb:6b:0b:a2:f4:a3:c1:5e:14:3d: b0:66:b3:47:38:92:6b:e8:ff:72:d6:6f:6f:fc:cf:bd:a5:98: b4:be:76:0f:17:41:42:54:e8:5a:b6:0e:e8:77:ac:f9:f6:b8: bd:60:e6:e3:2e:8e:df:e6:97:7e:b7:1e:46:b6:cc:31:9a:49: 9b:de:86:02:ea:24:15:c6:56:03:8b:78:38:59:29:da:62:0f: ed:0c:31:a9:15:7c:3c:83:2a:ea:ee:d4:4d:99:b6:8f:5e:21: 38:f6:2a:6b:9e:21:16:cf:2c:70:10:c9:1d:f6:f8:ea:f4:71: 72:6b:84:1c:e1:79:c5:6d:f0:07:68:f3:06:8c:f5:f9:e9:99: eb:ed:2e:47:16:c0:a7:b8:51:de:c8:53:5e:6f:06:38:36:35: ce:eb:55:b6:02:82:0d:4c:8d:3e:36:ef:8b:77:0e:08:d9:13: a0:86:9e:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4nB+82zILB+Nsm8BIPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODU5NTVlNjFhNDk4YmIyNDY4YTAxMDdjMzI4ODFiOWNiMDY4NWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg8onusOOd6NlTBIsA8NUCtrYTY6 9lmC0o90OpWPWAw4RTAIKhsXPMkOGnFXH8jRtGiQN2Hck3Hu2JeJlbtrt97IvCXR 0DyvzkVaDzNa9oAJtopAQhgBpYClR631cazwvNBK4DfWoOzHJfMTtV0we1/E7g5I nmGvF+pUtlGKbNxvm76N6aSZU4x80tZBX277/c/AHfe8YtiowHF5Sg92S8/r/noS fMvj7HltmcYNThVLR8U7rxyqe7RBynizPm8+suzHVZlLXkctCl4e9kblszeTb91K Nny+qo4R0x3JVvX/z2m4q4iku0jKqvPTBVV9bdWKR0EqN3Kx16D5TfN/YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhZVeYaSYuyRooBB8MogbnLBoWiMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvYUZsVjVocEppN0pHaWdFSHd5aUJ1Y3NHaGFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWwoMA0G CSqGSIb3DQEBCwUAA4IBAQABRuoXuYXFyREEctC2fViFVPcWrXRW+t1Dq+aPXjMH upNscd1ztIeQoYK1McsA2OkK8RlIb50nuVWHvUlfQHxostMouC+/jlgYg27hEoYk tetrC6L0o8FeFD2wZrNHOJJr6P9y1m9v/M+9pZi0vnYPF0FCVOhatg7od6z59ri9 YObjLo7f5pd+tx5Gtswxmkmb3oYC6iQVxlYDi3g4WSnaYg/tDDGpFXw8gyrq7tRN mbaPXiE49iprniEWzyxwEMkd9vjq9HFya4Qc4XnFbfAHaPMGjPX56Znr7S5HFsCn uFHeyFNebwY4NjXO61W2AoINTI0+Nu+Ldw4I2ROghp7u -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:46 2026 by rpki-client