This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/pT934VNJ3AMuBtw1OvPsef5GcL8.roa File: pT934VNJ3AMuBtw1OvPsef5GcL8.roa (raw, json) Hash identifier: YEhxknuMfas7ZSD0apT4oiAfK0Ur3wP1S00e6UGV60Y= Subject key identifier: A5:3F:77:E1:53:49:DC:03:2E:06:DC:35:3A:F3:EC:79:FE:46:70:BF Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7832E75E910F415ABC37421F49BE9 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/pT934VNJ3AMuBtw1OvPsef5GcL8.roa Signing time: Fri 02 Jan 2026 12:21:05 +0000 ROA not before: Fri 02 Jan 2026 12:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199377 IP address blocks: 109.62.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:83:2e:75:e9:10:f4:15:ab:c3:74:21:f4:9b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a53f77e15349dc032e06dc353af3ec79fe4670bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:a8:58:35:a6:f6:fa:ef:39:87:99:1e:2a: 20:a3:8c:2c:88:fe:9a:13:6b:11:b4:7e:b1:bb:e9: b3:4a:8e:0e:f3:a0:5b:2b:50:d5:6e:2b:70:b9:1c: f2:cf:e1:9b:2e:04:ba:20:ae:a1:32:82:3c:17:64: df:a9:71:89:df:ae:39:14:18:19:6c:5c:e4:ae:f8: 49:4c:33:3c:f5:b3:48:3a:6e:5c:60:a2:3b:12:a7: ed:7a:17:cd:0c:d4:e3:25:3a:15:81:4b:30:25:56: 48:04:9a:43:05:b8:95:de:b3:69:27:48:18:16:77: e2:fe:6c:e8:b3:9d:b1:a1:39:6e:8c:d6:7f:7a:57: d5:08:8b:32:d5:2d:d8:bd:77:1d:24:68:b3:e4:4e: 9e:e1:58:a3:c2:1c:1b:14:2f:96:36:9e:cb:1e:c2: c2:31:e4:0e:9a:8b:31:6e:3c:12:d5:a4:24:83:f2: db:d7:80:3d:b6:0b:ea:bb:b3:c7:4d:5c:f5:23:7a: 7b:e4:5e:03:ba:4b:c2:db:2a:34:77:ac:07:57:9a: 3b:e7:72:c6:24:ee:eb:37:33:8c:76:17:a1:5b:81: b2:d6:ed:62:87:b9:3c:6e:3d:6d:28:e2:7a:3c:f6: 7d:19:c5:a8:4c:a4:45:48:71:b1:8d:c0:72:18:b7: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3F:77:E1:53:49:DC:03:2E:06:DC:35:3A:F3:EC:79:FE:46:70:BF X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/pT934VNJ3AMuBtw1OvPsef5GcL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.62.255.0/24 Signature Algorithm: sha256WithRSAEncryption 65:06:bd:67:4c:6c:60:7e:c1:5b:5f:55:d9:c3:3b:04:e3:ef: 51:1a:4b:3c:11:60:0b:b0:a7:f4:3f:63:9b:1b:e2:d8:4c:5e: 64:71:67:16:48:7e:6d:9f:09:65:13:3d:8f:64:11:7f:a9:3b: 48:9e:59:b1:5b:49:e2:42:75:cc:b8:f8:96:c8:92:89:ef:cd: af:32:3b:8d:84:96:b2:03:34:91:39:22:77:59:30:c6:82:0d: 62:fc:1d:30:38:de:f1:e2:8e:3c:cb:17:74:a8:07:71:3e:a1: 7a:58:c2:41:71:c6:0d:d7:04:94:0f:04:a4:42:f4:dd:cc:eb: 6f:04:02:6f:92:25:44:a0:59:06:fc:e8:61:88:3c:08:0c:80: 3d:53:af:44:4d:6d:5e:dd:97:3d:01:6b:84:f1:cb:ad:5f:54: 46:0b:57:37:af:d6:9d:fe:f9:55:b3:a1:82:a2:5b:72:f2:a5: 21:54:a5:ea:26:0b:61:c0:fe:65:50:b9:0e:65:f0:9c:1f:6b: 2c:97:04:01:51:d7:c9:56:22:c9:c9:90:be:52:8d:d1:f3:b4: b3:32:14:6a:60:4e:86:d7:95:6c:e0:7f:da:64:5c:42:70:1d: 5f:c9:00:1f:45:d7:20:e8:b9:f0:62:6a:c0:d2:54:13:bb:c0: 50:60:ed:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4MudekQ9BWrw3Qh9JvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTNmNzdlMTUzNDlkYzAzMmUwNmRjMzUzYWYzZWM3OWZlNDY3MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCeoWDWm9vrvOYeZHiogo4wsiP6a E2sRtH6xu+mzSo4O86BbK1DVbitwuRzyz+GbLgS6IK6hMoI8F2TfqXGJ3645FBgZ bFzkrvhJTDM89bNIOm5cYKI7EqftehfNDNTjJToVgUswJVZIBJpDBbiV3rNpJ0gY Fnfi/mzos52xoTlujNZ/elfVCIsy1S3YvXcdJGiz5E6e4VijwhwbFC+WNp7LHsLC MeQOmosxbjwS1aQkg/Lb14A9tgvqu7PHTVz1I3p75F4DukvC2yo0d6wHV5o753LG JO7rNzOMdhehW4Gy1u1ih7k8bj1tKOJ6PPZ9GcWoTKRFSHGxjcByGLebAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKU/d+FTSdwDLgbcNTrz7Hn+RnC/MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvcFQ5MzRWTkozQU11QnR3MU92UHNlZjVHY0w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbT7/MA0G CSqGSIb3DQEBCwUAA4IBAQBlBr1nTGxgfsFbX1XZwzsE4+9RGks8EWALsKf0P2Ob G+LYTF5kcWcWSH5tnwllEz2PZBF/qTtInlmxW0niQnXMuPiWyJKJ782vMjuNhJay AzSROSJ3WTDGgg1i/B0wON7x4o48yxd0qAdxPqF6WMJBccYN1wSUDwSkQvTdzOtv BAJvkiVEoFkG/OhhiDwIDIA9U69ETW1e3Zc9AWuE8cutX1RGC1c3r9ad/vlVs6GC olty8qUhVKXqJgthwP5lULkOZfCcH2sslwQBUdfJViLJyZC+Uo3R87SzMhRqYE6G 15Vs4H/aZFxCcB1fyQAfRdcg6LnwYmrA0lQTu8BQYO0v -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:26 2026 by rpki-client