This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/0hS-dXastI13cpwFNDpfMzpMJMo.roa File: 0hS-dXastI13cpwFNDpfMzpMJMo.roa (raw, json) Hash identifier: /PWpz2GpXrpBSZf2HusroGndm5V0a7tNkaagb+MoyqQ= Subject key identifier: D2:14:BE:75:76:AC:B4:8D:77:72:9C:05:34:3A:5F:33:3A:4C:24:CA Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1 Certificate serial: 019B7E392D09C993DA52D25B52ED44506938 Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/0hS-dXastI13cpwFNDpfMzpMJMo.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213777 IP address blocks: 109.70.79.0/24 maxlen: 24 2a14:e800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2d:09:c9:93:da:52:d2:5b:52:ed:44:50:69:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d214be7576acb48d77729c05343a5f333a4c24ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:81:34:a4:59:f1:50:0f:44:01:ca:17:6a: 60:81:84:9d:1e:ac:4c:b8:a1:53:96:f9:4d:ec:48: d6:95:8a:67:b0:e4:ec:94:a1:7a:2b:e1:91:aa:28: 97:69:1b:d9:97:55:83:86:ea:d6:f2:20:00:19:db: e3:84:c3:88:dc:c2:32:aa:ce:49:d7:ad:da:87:3b: 39:0d:77:ed:b5:df:6e:54:ad:9e:60:3d:7f:e2:5c: e9:6d:1b:d0:c2:98:48:61:d4:75:99:b6:7e:ec:76: 4c:03:35:99:79:3f:5a:b0:c8:c8:0c:04:58:68:62: 00:9b:b6:a1:3f:03:7d:a5:0d:16:73:06:fb:5b:f7: 12:22:2f:0e:12:80:bd:b9:f6:b1:a5:72:d5:75:33: 4f:2c:7e:b8:a1:2f:8c:59:8a:16:00:9b:d6:81:f0: 43:29:06:af:a7:94:1e:68:93:25:4a:3f:c6:df:1b: 43:44:8d:ce:0a:6c:f5:13:ac:8e:c1:65:47:69:e9: 38:45:ad:c7:aa:c0:05:85:da:1e:ed:8b:f7:44:12: 48:0d:dd:9f:36:9b:2d:46:2d:fa:5e:08:59:bc:04: b6:8a:41:a4:13:d5:1c:dd:72:e8:da:d7:ff:91:ab: 9b:28:b0:d2:c5:e0:8e:22:ee:3d:cf:71:fd:c7:8a: 7a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:14:BE:75:76:AC:B4:8D:77:72:9C:05:34:3A:5F:33:3A:4C:24:CA X509v3 Authority Key Identifier: keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/0hS-dXastI13cpwFNDpfMzpMJMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.70.79.0/24 IPv6: 2a14:e800::/29 Signature Algorithm: sha256WithRSAEncryption 11:7a:34:82:62:78:a5:de:8b:84:e9:78:cb:7e:22:35:dc:ba: 57:6a:81:6e:41:ca:0a:7e:d3:4b:e2:0e:6b:31:7f:f0:50:dc: ff:e9:56:9f:97:f4:d9:d2:d2:f3:f4:41:8f:92:55:ec:2c:07: c1:e7:5e:7d:d5:3d:fa:26:b6:ac:b6:dc:bf:4d:5d:06:58:5b: 43:cf:94:3c:84:ae:80:05:7a:b0:65:95:0b:68:5e:2b:f7:0b: 55:14:bb:26:5b:66:06:b0:65:54:1b:dc:dc:e9:17:01:2a:06: 18:09:dd:00:6d:b0:6a:ec:88:3f:18:96:fd:6b:4c:6c:97:18: d4:3b:5f:6d:ee:5d:a4:60:be:7e:1a:c1:72:49:cf:86:b9:6c: 08:c3:56:34:3c:a9:c5:7e:ce:a4:54:39:14:06:2f:bc:ca:72: 29:0f:cc:db:90:30:6b:d9:05:97:b6:ea:de:73:95:31:17:3f: ca:f1:fc:84:1c:bd:46:59:b6:2b:6c:65:32:62:ff:82:f2:8d: 7b:f6:46:46:eb:a3:4a:59:93:ac:0c:81:3a:d0:83:01:14:5a: d3:6f:33:c6:ab:da:1e:30:59:5c:91:5b:40:ac:73:56:de:c1: 8a:81:9d:c1:9e:01:b2:c7:62:80:72:12:2d:4c:4c:f7:78:c9: 84:86:d1:c1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OS0JyZPaUtJbUu1EUGk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZTBkMjNhMTE0NzBlMjQzMGY1MmUxYmUyZTAzMDE0ZTJi ODRlZTEwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjE0YmU3NTc2YWNiNDhkNzc3MjljMDUzNDNhNWYzMzNhNGMyNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohGBNKRZ8VAPRAHKF2pggYSdHqxM uKFTlvlN7EjWlYpnsOTslKF6K+GRqiiXaRvZl1WDhurW8iAAGdvjhMOI3MIyqs5J 163ahzs5DXfttd9uVK2eYD1/4lzpbRvQwphIYdR1mbZ+7HZMAzWZeT9asMjIDARY aGIAm7ahPwN9pQ0Wcwb7W/cSIi8OEoC9ufaxpXLVdTNPLH64oS+MWYoWAJvWgfBD KQavp5QeaJMlSj/G3xtDRI3OCmz1E6yOwWVHaek4Ra3HqsAFhdoe7Yv3RBJIDd2f NpstRi36XghZvAS2ikGkE9Uc3XLo2tf/kaubKLDSxeCOIu49z3H9x4p6XwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNIUvnV2rLSNd3KcBTQ6XzM6TCTKMB8GA1UdIwQY MBaAFH3g0joRRw4kMPUuG+LgMBTiuE7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAt MGNlOTgxM2Q0OTI1LzEvMGhTLWRYYXN0STEzY3B3Rk5EcGZNenBNSk1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAtMGNlOTgxM2Q0OTI1 LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAbUZPMA0E AgACMAcDBQMqFOgAMA0GCSqGSIb3DQEBCwUAA4IBAQARejSCYnil3ouE6XjLfiI1 3LpXaoFuQcoKftNL4g5rMX/wUNz/6Vafl/TZ0tLz9EGPklXsLAfB51591T36Jras tty/TV0GWFtDz5Q8hK6ABXqwZZULaF4r9wtVFLsmW2YGsGVUG9zc6RcBKgYYCd0A bbBq7Ig/GJb9a0xslxjUO19t7l2kYL5+GsFySc+GuWwIw1Y0PKnFfs6kVDkUBi+8 ynIpD8zbkDBr2QWXturec5UxFz/K8fyEHL1GWbYrbGUyYv+C8o179kZG66NKWZOs DIE60IMBFFrTbzPGq9oeMFlckVtArHNW3sGKgZ3BngGyx2KAchItTEz3eMmEhtHB -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:34 2026 by rpki-client