This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/_IilOXVosSGn0xT4w9l86PSQHSg.roa File: _IilOXVosSGn0xT4w9l86PSQHSg.roa (raw, json) Hash identifier: kkKZn8vGZjJeRq+m66DVHW162ognkKyL1mjJjwY8qJs= Subject key identifier: FC:88:A5:39:75:68:B1:21:A7:D3:14:F8:C3:D9:7C:E8:F4:90:1D:28 Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9 Certificate serial: 019B7EA6F69185057E788FA939AAB329CC9F Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/_IilOXVosSGn0xT4w9l86PSQHSg.roa Signing time: Fri 02 Jan 2026 12:20:29 +0000 ROA not before: Fri 02 Jan 2026 12:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25540 IP address blocks: 109.239.114.0/23 maxlen: 24 109.239.114.0/24 maxlen: 24 109.239.115.0/24 maxlen: 24 109.239.124.0/24 maxlen: 24 159.100.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f6:91:85:05:7e:78:8f:a9:39:aa:b3:29:cc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc88a5397568b121a7d314f8c3d97ce8f4901d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d2:58:96:27:91:b5:8e:e5:af:59:2d:fc:72: 22:f6:0e:b6:53:31:d0:ab:dc:43:ec:3f:a4:fc:8f: 61:6e:17:5d:15:8c:f2:18:ab:9c:3c:3d:d5:d7:9a: e9:e4:f7:ee:30:63:f9:e1:11:a8:35:cd:50:76:45: 85:09:d3:32:7a:e6:00:59:1a:4b:37:13:ed:e6:fc: 69:dd:76:d1:70:72:a5:f9:55:67:b0:dd:00:5e:f9: 6a:32:8c:b2:af:01:2f:fc:45:01:99:27:07:f3:0b: 1f:35:b6:f4:00:47:03:b5:62:56:9b:f5:5b:ba:b2: aa:b0:6d:3d:dd:36:1b:e4:6a:9e:92:7d:ce:bb:23: 83:ad:a8:7f:e0:f8:3a:fb:ce:fd:7a:20:61:17:86: a5:f6:c6:34:a2:b2:7d:20:fa:c5:a9:13:e3:5f:3c: 90:59:4a:7a:7f:dc:6e:d9:50:ed:a3:0d:de:1e:51: cc:aa:94:5f:e2:28:d9:3d:9f:72:4c:2a:a2:18:0b: 36:c6:f9:fa:10:b0:83:9f:3e:b0:32:a9:07:b1:b1: 5e:53:d5:c2:b2:e1:3a:f1:5f:c6:7d:ce:a1:5a:22: 54:8c:51:9d:60:7a:fa:63:d9:16:5b:71:e4:d3:b2: 75:6d:17:aa:c1:92:81:e9:e5:7b:b7:ae:35:d2:5c: fe:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:88:A5:39:75:68:B1:21:A7:D3:14:F8:C3:D9:7C:E8:F4:90:1D:28 X509v3 Authority Key Identifier: keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/_IilOXVosSGn0xT4w9l86PSQHSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.239.114.0/23 109.239.124.0/24 159.100.36.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:ab:84:6c:05:be:3e:fe:a2:bb:65:2a:4b:1d:62:5d:ae:a4: 72:a2:2d:e6:61:d0:74:ab:14:5c:8b:9b:ee:e9:5c:92:f8:25: 6c:ce:c1:21:99:57:9f:8e:0b:1b:88:d7:f4:65:34:4c:9c:5e: 6f:95:47:4c:8e:f2:ac:b1:2f:4b:32:5a:59:de:58:70:15:e1: 64:ef:0f:83:8e:93:36:6d:d7:62:a6:1c:0a:af:f1:8b:15:ae: 0d:02:62:d6:13:20:a9:6c:72:f7:e7:a1:d7:79:aa:c0:9f:2d: 4a:18:70:e6:e4:07:6d:1e:ed:49:7c:21:66:c2:3e:ca:80:8f: 8f:3f:e4:c4:87:d0:03:0d:bc:11:4a:d7:62:bf:e9:fe:b2:c8: e2:a3:ae:a3:dd:4b:71:ad:ea:c9:5b:a0:86:a2:d2:2f:71:71: e1:73:e4:2d:43:3c:05:6b:fe:87:e8:c7:fb:63:49:8c:55:d7: 28:7f:b0:4c:1e:cf:2a:0f:06:da:06:83:8b:b1:79:a7:ba:23: 38:43:f7:ef:79:7b:d1:4e:5c:75:09:7d:73:d9:36:ea:04:4a: 0f:57:c5:85:81:49:2b:00:d5:87:76:23:76:06:41:d7:61:84: f6:77:ab:a7:06:c8:16:88:ea:57:5d:b8:40:49:15:39:c1:a1: 47:c1:ff:91 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pvaRhQV+eI+pOaqzKcyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ODRiNTNlYzA2OWUzMDI2MjM1OTZmYjNhYTc5ZjVkNzgy YzA5ZjkwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzg4YTUzOTc1NjhiMTIxYTdkMzE0ZjhjM2Q5N2NlOGY0OTAxZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNJYlieRtY7lr1kt/HIi9g62UzHQ q9xD7D+k/I9hbhddFYzyGKucPD3V15rp5PfuMGP54RGoNc1QdkWFCdMyeuYAWRpL NxPt5vxp3XbRcHKl+VVnsN0AXvlqMoyyrwEv/EUBmScH8wsfNbb0AEcDtWJWm/Vb urKqsG093TYb5Gqekn3OuyODrah/4Pg6+879eiBhF4al9sY0orJ9IPrFqRPjXzyQ WUp6f9xu2VDtow3eHlHMqpRf4ijZPZ9yTCqiGAs2xvn6ELCDnz6wMqkHsbFeU9XC suE68V/Gfc6hWiJUjFGdYHr6Y9kWW3Hk07J1bReqwZKB6eV7t6410lz+XQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPyIpTl1aLEhp9MU+MPZfOj0kB0oMB8GA1UdIwQY MBaAFFSEtT7AaeMCYjWW+zqnn114LAn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODkt Y2U4ZGQ2ODk4YjI3LzEvX0lpbE9YVm9zU0duMHhUNHc5bDg2UFNRSFNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODktY2U4ZGQ2ODk4YjI3 LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBbe9yAwQA be98AwQBn2QkMA0GCSqGSIb3DQEBCwUAA4IBAQB8q4RsBb4+/qK7ZSpLHWJdrqRy oi3mYdB0qxRci5vu6VyS+CVszsEhmVefjgsbiNf0ZTRMnF5vlUdMjvKssS9LMlpZ 3lhwFeFk7w+DjpM2bddiphwKr/GLFa4NAmLWEyCpbHL356HXearAny1KGHDm5Adt Hu1JfCFmwj7KgI+PP+TEh9ADDbwRStdiv+n+ssjio66j3UtxrerJW6CGotIvcXHh c+QtQzwFa/6H6Mf7Y0mMVdcof7BMHs8qDwbaBoOLsXmnuiM4Q/fveXvRTlx1CX1z 2TbqBEoPV8WFgUkrANWHdiN2BkHXYYT2d6unBsgWiOpXXbhASRU5waFHwf+R -----END CERTIFICATE-----Generated at Sun Jan 11 18:13:08 2026 by rpki-client