This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ik11WQbJNvvWpK475SVbSPW1xWQ.roa File: ik11WQbJNvvWpK475SVbSPW1xWQ.roa (raw, json) Hash identifier: pYxqS3E1b9le8gTO9wmhVG91hbDXBvo4s48MqPWMoTI= Subject key identifier: 8A:4D:75:59:06:C9:36:FB:D6:A4:AE:3B:E5:25:5B:48:F5:B5:C5:64 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B4017A3F29496C039D8317CDA479C3C4C Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ik11WQbJNvvWpK475SVbSPW1xWQ.roa Signing time: Sun 21 Dec 2025 08:47:29 +0000 ROA not before: Sun 21 Dec 2025 08:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57974 IP address blocks: 109.122.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:17:a3:f2:94:96:c0:39:d8:31:7c:da:47:9c:3c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Dec 21 08:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8a4d755906c936fbd6a4ae3be5255b48f5b5c564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:de:20:c4:9e:d0:66:a7:a7:b3:49:8e:8d: df:1d:db:26:cf:ff:56:3d:86:18:6d:43:93:02:df: 52:86:3c:bc:23:2f:7b:95:34:50:87:80:96:23:44: d4:21:b3:e9:81:e6:9e:11:9a:42:60:b9:4a:35:2d: 7b:c8:e7:76:1c:5d:db:91:04:f6:97:66:c6:ae:9a: bc:24:71:9c:99:d6:ec:d7:73:ac:65:fd:b3:07:2d: 68:76:f0:18:75:a0:12:56:32:34:67:86:78:a0:a2: f4:11:3e:3a:38:92:bf:4b:bf:33:a2:ca:5b:f1:84: 69:95:ce:49:ab:58:33:fe:66:48:d9:a6:19:33:29: 4e:b1:e3:52:ec:21:b3:67:2e:5b:6b:b7:0e:be:33: 86:e1:c0:fc:b6:ac:8b:40:b6:dc:11:36:c9:60:f3: bf:70:c2:11:45:e7:8d:1a:d0:8d:8b:0f:de:85:bc: d8:e7:f1:5c:3f:42:d7:ee:e0:8a:1f:be:61:0c:0b: 8f:eb:7b:83:dd:26:d6:66:1d:d1:00:ab:98:77:a2: de:87:d9:8d:aa:45:85:99:06:01:40:9c:f9:69:64: 7d:26:e1:fd:d2:78:a6:c3:cb:96:11:0e:55:08:e8: fc:34:da:06:f6:a6:9f:7f:0c:8a:57:2e:9e:a8:07: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4D:75:59:06:C9:36:FB:D6:A4:AE:3B:E5:25:5B:48:F5:B5:C5:64 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ik11WQbJNvvWpK475SVbSPW1xWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.21.0/24 Signature Algorithm: sha256WithRSAEncryption 47:c8:b1:19:30:e9:8a:b6:1d:71:14:26:76:10:6e:3b:cd:9a: fd:ff:84:ff:25:b6:12:c8:18:d1:05:a5:46:d8:c4:b0:0f:b5: 14:5d:fd:e2:02:c8:be:45:88:c6:17:8d:a2:11:1c:2b:c2:c3: 3e:a4:4b:8a:1d:82:77:66:47:40:06:44:48:76:ff:b4:82:34: e6:c7:f6:87:3a:69:79:fa:ca:0e:8f:2f:fc:45:78:f1:96:9d: 25:23:f3:5c:32:b3:b9:47:b5:39:48:9b:4f:2e:5d:d8:4c:cc: 0e:d1:bd:e6:07:35:9c:fb:ec:89:ec:2b:7f:4b:95:53:5b:c4: 0f:7b:10:44:c1:c4:f9:e2:7e:cb:a8:1e:4c:ac:dd:c1:48:5e: 1f:87:38:1b:d5:08:cf:72:ee:92:4a:63:b1:85:e8:4f:ba:0e: 03:64:80:2a:e2:f5:0d:05:2c:64:23:87:78:6f:86:11:94:e9: c2:b9:cc:26:b0:71:b4:0c:61:ed:66:d1:ee:2e:6c:26:33:71: 3a:57:c0:a2:06:22:33:2b:6b:ed:2f:2d:43:c1:ec:6d:18:af: 50:87:ad:7f:4a:50:f8:9e:15:59:7c:18:6e:c3:cd:3f:55:28: 7c:ea:40:37:94:1f:b7:fc:17:cc:7f:69:5a:20:0b:58:94:2b: d4:54:38:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtAF6PylJbAOdgxfNpHnDxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjUxMjIxMDg0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTRkNzU1OTA2YzkzNmZiZDZhNGFlM2JlNTI1NWI0OGY1YjVjNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ffeIMSe0Ganp7NJjo3fHdsmz/9W PYYYbUOTAt9Shjy8Iy97lTRQh4CWI0TUIbPpgeaeEZpCYLlKNS17yOd2HF3bkQT2 l2bGrpq8JHGcmdbs13OsZf2zBy1odvAYdaASVjI0Z4Z4oKL0ET46OJK/S78zospb 8YRplc5Jq1gz/mZI2aYZMylOseNS7CGzZy5ba7cOvjOG4cD8tqyLQLbcETbJYPO/ cMIRReeNGtCNiw/ehbzY5/FcP0LX7uCKH75hDAuP63uD3SbWZh3RAKuYd6Leh9mN qkWFmQYBQJz5aWR9JuH90nimw8uWEQ5VCOj8NNoG9qaffwyKVy6eqAeOawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIpNdVkGyTb71qSuO+UlW0j1tcVkMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvaWsxMVdRYkpOdnZXcEs0NzVTVmJTUFcxeFdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoVMA0G CSqGSIb3DQEBCwUAA4IBAQBHyLEZMOmKth1xFCZ2EG47zZr9/4T/JbYSyBjRBaVG 2MSwD7UUXf3iAsi+RYjGF42iERwrwsM+pEuKHYJ3ZkdABkRIdv+0gjTmx/aHOml5 +soOjy/8RXjxlp0lI/NcMrO5R7U5SJtPLl3YTMwO0b3mBzWc++yJ7Ct/S5VTW8QP exBEwcT54n7LqB5MrN3BSF4fhzgb1QjPcu6SSmOxhehPug4DZIAq4vUNBSxkI4d4 b4YRlOnCucwmsHG0DGHtZtHuLmwmM3E6V8CiBiIzK2vtLy1DwextGK9Qh61/SlD4 nhVZfBhuw80/VSh86kA3lB+3/BfMf2laIAtYlCvUVDjy -----END CERTIFICATE-----Generated at Mon Dec 22 09:39:07 2025 by rpki-client