This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/24bqS1nUjEa-SWJ2ZtFx5ElbqB4.roa File: 24bqS1nUjEa-SWJ2ZtFx5ElbqB4.roa (raw, json) Hash identifier: aZJOy0CyZGrP4yrwBkGXYusHSlYLrLzIGIdzThr5g3M= Subject key identifier: DB:86:EA:4B:59:D4:8C:46:BE:49:62:76:66:D1:71:E4:49:5B:A8:1E Certificate issuer: /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b Certificate serial: 019B7E3901BC4AC321EC1A8B168F4C1844F1 Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/24bqS1nUjEa-SWJ2ZtFx5ElbqB4.roa Signing time: Fri 02 Jan 2026 10:20:23 +0000 ROA not before: Fri 02 Jan 2026 10:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43510 IP address blocks: 109.239.0.0/20 maxlen: 20 109.239.0.0/23 maxlen: 23 109.239.2.0/24 maxlen: 24 109.239.3.0/24 maxlen: 24 109.239.4.0/24 maxlen: 24 109.239.5.0/24 maxlen: 24 109.239.6.0/24 maxlen: 24 109.239.7.0/24 maxlen: 24 109.239.8.0/24 maxlen: 24 109.239.9.0/24 maxlen: 24 109.239.10.0/24 maxlen: 24 109.239.11.0/24 maxlen: 24 109.239.12.0/24 maxlen: 24 109.239.13.0/24 maxlen: 24 109.239.14.0/24 maxlen: 24 109.239.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 13:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:01:bc:4a:c3:21:ec:1a:8b:16:8f:4c:18:44:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db86ea4b59d48c46be49627666d171e4495ba81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e7:f2:4a:e8:20:f0:23:e3:62:a6:18:cc:a8: 57:ec:57:77:75:0c:65:83:61:be:05:3b:93:dc:97: a5:d5:f6:a2:7e:ca:9e:50:26:78:05:0a:fd:44:ec: 98:9a:1c:fa:49:fe:b1:60:84:6b:d4:a2:5a:2c:ee: 97:af:52:61:3d:b2:3e:e8:82:e7:85:72:cf:65:0d: 13:a4:19:a8:94:f8:ef:78:09:c7:64:d3:3e:1d:e3: 8e:c5:ca:53:5c:11:89:83:89:e2:48:5e:90:15:00: 68:77:69:02:52:6b:b7:94:23:60:f7:4c:d6:eb:25: c1:2d:a6:1f:2a:2b:99:ed:6a:93:df:2b:84:07:dd: 90:68:4b:49:2c:b1:b6:ee:fb:51:88:26:74:de:28: 93:b0:23:91:cd:78:0c:be:d3:c6:b6:ab:ad:f1:4d: bc:0c:10:3f:ef:9b:a6:de:89:9e:a5:da:5b:72:45: 75:e7:73:be:ac:9b:70:31:7e:1a:1e:7b:3e:9c:18: b8:ed:38:20:5a:8e:8d:b6:a5:62:43:53:94:59:42: 02:be:70:26:a6:95:50:ea:9b:69:57:cf:d4:95:ac: c9:db:82:ee:55:ef:df:2e:d8:59:37:19:87:67:5c: 25:81:13:2e:46:1f:3b:0f:d4:6b:7c:37:d1:c3:ec: 21:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:86:EA:4B:59:D4:8C:46:BE:49:62:76:66:D1:71:E4:49:5B:A8:1E X509v3 Authority Key Identifier: keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/24bqS1nUjEa-SWJ2ZtFx5ElbqB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.239.0.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:47:ef:f7:a7:4e:a1:e4:24:4c:8d:8e:18:2d:7d:61:d6:9d: 3b:d8:fd:6c:55:dd:89:7a:67:9b:2c:a5:9c:e1:2b:1a:74:2b: b0:bc:c8:48:46:e1:01:9f:bf:fb:cb:ac:35:7c:d9:36:05:0a: 59:a8:19:49:b6:5a:50:ed:16:b1:78:ed:df:30:f7:06:ab:ec: 06:9b:77:30:2d:54:fd:b5:4b:6a:a1:4a:ce:54:e0:4c:e8:e0: 1d:6f:36:25:ef:1d:1d:3c:62:6f:19:68:8f:9e:e3:76:a1:c6: 23:b3:39:b8:72:11:ed:17:9c:86:8c:69:d7:33:9e:7d:1b:4d: c6:f4:ac:37:3c:66:8b:af:4a:bb:fb:cb:e9:80:8d:4b:66:84: a3:f9:d3:60:a3:26:78:65:f1:77:94:13:33:72:f7:e9:f5:8a: bc:cc:60:07:84:93:bc:a1:78:41:c1:8d:3a:2e:2c:9b:cb:c2: fa:1e:cc:b0:a1:c4:3d:f8:3b:f7:63:4b:ea:89:69:73:4b:ea: 6d:5b:ed:b5:92:c7:3f:66:08:30:1a:77:48:b3:68:70:85:67: e9:69:dc:38:16:e7:00:ac:37:da:40:1f:93:52:71:b4:bc:e9: fd:17:6f:fb:0a:09:8e:94:ed:4b:1a:4b:4e:21:0c:37:d4:aa: 0b:64:4a:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQG8SsMh7BqLFo9MGETxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjJmOTk3NWE5MWU3MTM3OWRhMTAwZWM4NGJkNDRhMGEy ODBkOWIwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjg2ZWE0YjU5ZDQ4YzQ2YmU0OTYyNzY2NmQxNzFlNDQ5NWJhODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+fySugg8CPjYqYYzKhX7Fd3dQxl g2G+BTuT3Jel1faifsqeUCZ4BQr9ROyYmhz6Sf6xYIRr1KJaLO6Xr1JhPbI+6ILn hXLPZQ0TpBmolPjveAnHZNM+HeOOxcpTXBGJg4niSF6QFQBod2kCUmu3lCNg90zW 6yXBLaYfKiuZ7WqT3yuEB92QaEtJLLG27vtRiCZ03iiTsCORzXgMvtPGtqut8U28 DBA/75um3omepdpbckV153O+rJtwMX4aHns+nBi47TggWo6NtqViQ1OUWUICvnAm ppVQ6ptpV8/UlazJ24LuVe/fLthZNxmHZ1wlgRMuRh87D9RrfDfRw+wh+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNuG6ktZ1IxGvklidmbRceRJW6geMB8GA1UdIwQY MBaAFJqy+ZdakecTedoQDshL1EoKKA2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzkt MTVmZTA2ZmZmOGJjLzEvMjRicVMxblVqRWEtU1dKMlp0Rng1RWxicUI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzktMTVmZTA2ZmZmOGJj LzEvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbe8AMA0G CSqGSIb3DQEBCwUAA4IBAQB9R+/3p06h5CRMjY4YLX1h1p072P1sVd2JemebLKWc 4SsadCuwvMhIRuEBn7/7y6w1fNk2BQpZqBlJtlpQ7RaxeO3fMPcGq+wGm3cwLVT9 tUtqoUrOVOBM6OAdbzYl7x0dPGJvGWiPnuN2ocYjszm4chHtF5yGjGnXM559G03G 9Kw3PGaLr0q7+8vpgI1LZoSj+dNgoyZ4ZfF3lBMzcvfp9Yq8zGAHhJO8oXhBwY06 Liyby8L6HsywocQ9+Dv3Y0vqiWlzS+ptW+21ksc/ZggwGndIs2hwhWfpadw4FucA rDfaQB+TUnG0vOn9F2/7CgmOlO1LGktOIQw31KoLZErT -----END CERTIFICATE-----Generated at Mon Jan 12 22:56:34 2026 by rpki-client