This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/DehND8NWso8fnWINtOcuecHBpxM.roa File: DehND8NWso8fnWINtOcuecHBpxM.roa (raw, json) Hash identifier: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg= Subject key identifier: 0D:E8:4D:0F:C3:56:B2:8F:1F:9D:62:0D:B4:E7:2E:79:C1:C1:A7:13 Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC7984D213737EB48A86F690F5BDF8E Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/DehND8NWso8fnWINtOcuecHBpxM.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203684 IP address blocks: 109.232.0.0/22 maxlen: 22 109.232.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:98:4d:21:37:37:eb:48:a8:6f:69:0f:5b:df:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0de84d0fc356b28f1f9d620db4e72e79c1c1a713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:5e:fd:22:7c:a4:69:30:c0:cb:b4:a6:e3: 97:59:d7:4f:e7:57:d5:ad:b4:0d:fd:b0:1e:b6:18: cf:75:05:89:3d:a9:8d:3c:24:fb:de:46:11:b9:55: 12:02:ff:a1:0c:3c:10:ec:12:a4:e3:92:ed:12:bb: 6d:3b:7a:5f:f1:4b:a0:68:bb:40:81:77:23:2e:90: 39:69:79:0e:17:43:1d:8c:b2:00:68:fe:9c:21:d7: 97:8d:3c:fd:51:de:99:6b:4a:34:cf:ca:18:cd:f5: 3a:db:09:45:65:70:a5:3b:47:bd:4b:ba:ef:9c:3f: 7e:d2:48:c1:14:e4:5d:e2:d0:a6:e9:53:34:37:3b: c2:15:cb:cf:71:6b:6c:b8:23:e8:4f:82:1c:11:29: c5:a5:a0:fc:08:33:1a:08:4d:c8:bf:d1:66:ee:de: a2:f5:8f:bf:c0:ff:e6:6b:3b:2e:cc:e7:57:cf:24: 74:b9:7c:2f:e3:d3:86:8b:a3:14:90:23:98:a1:66: 0c:68:39:9f:31:1d:98:7b:5f:63:3a:e9:ff:2c:73: 68:a9:cc:1a:90:ac:ee:b8:bf:7c:94:6f:76:10:9e: 40:0c:6d:52:7b:13:60:ef:0b:a7:2a:20:2e:bc:42: db:b9:f4:1a:41:80:8d:10:1f:c0:64:97:43:a1:0f: f8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E8:4D:0F:C3:56:B2:8F:1F:9D:62:0D:B4:E7:2E:79:C1:C1:A7:13 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/DehND8NWso8fnWINtOcuecHBpxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.232.0.0-109.232.4.255 Signature Algorithm: sha256WithRSAEncryption 0f:a4:fd:53:a8:78:03:bf:9c:56:46:b9:b7:37:8d:a1:52:1d: 48:d3:25:c6:8c:99:54:e2:21:73:de:f2:8a:9f:f0:24:42:05: db:33:c0:85:e5:bc:14:ed:42:f1:c1:83:dd:03:ff:79:a8:74: 8f:12:b9:37:4f:21:99:ef:8f:4d:b5:64:72:0c:13:40:54:b6: 85:c1:86:31:64:90:c9:95:92:8e:b0:85:2d:a4:8b:d6:17:48: e0:16:a2:ff:e2:63:84:2d:dd:0d:90:37:74:f7:aa:27:4f:c2: 5b:43:82:b6:67:99:bf:79:87:22:e6:cb:e2:f2:a9:44:f1:f8: b4:8f:94:71:a7:87:d8:94:20:9d:f5:24:6c:ab:8c:2c:ef:a2: 3a:6c:f5:1c:77:02:a1:dd:e9:ff:1b:9a:21:0f:1c:67:15:52: 36:0f:14:0b:57:b0:64:c7:c4:e6:93:1d:2f:73:43:db:9c:a7: 9d:f6:e2:6c:ac:2f:cb:46:55:6f:14:09:1f:79:9d:7d:bd:84: c2:dd:0b:8a:38:4d:7a:ab:f9:06:fa:1a:ec:27:05:26:01:45: 4d:69:fa:08:63:4a:5d:2c:0a:35:b3:e7:07:98:48:1e:2a:68: f6:d6:f6:f5:5b:98:a4:8e:4d:b5:b9:33:b0:85:6e:73:25:3e: 1a:ba:2d:97 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt6x5hNITc360iob2kPW9+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGU4NGQwZmMzNTZiMjhmMWY5ZDYyMGRiNGU3MmU3OWMxYzFhNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRJe/SJ8pGkwwMu0puOXWddP51fV rbQN/bAethjPdQWJPamNPCT73kYRuVUSAv+hDDwQ7BKk45LtErttO3pf8UugaLtA gXcjLpA5aXkOF0MdjLIAaP6cIdeXjTz9Ud6Za0o0z8oYzfU62wlFZXClO0e9S7rv nD9+0kjBFORd4tCm6VM0NzvCFcvPcWtsuCPoT4IcESnFpaD8CDMaCE3Iv9Fm7t6i 9Y+/wP/mazsuzOdXzyR0uXwv49OGi6MUkCOYoWYMaDmfMR2Ye19jOun/LHNoqcwa kKzuuL98lG92EJ5ADG1SexNg7wunKiAuvELbufQaQYCNEB/AZJdDoQ/4dQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFA3oTQ/DVrKPH51iDbTnLnnBwacTMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvRGVoTkQ4TldzbzhmbldJTnRPY3VlY0hCcHhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwNt6AME AG3oBDANBgkqhkiG9w0BAQsFAAOCAQEAD6T9U6h4A7+cVka5tzeNoVIdSNMlxoyZ VOIhc97yip/wJEIF2zPAheW8FO1C8cGD3QP/eah0jxK5N08hme+PTbVkcgwTQFS2 hcGGMWSQyZWSjrCFLaSL1hdI4Bai/+JjhC3dDZA3dPeqJ0/CW0OCtmeZv3mHIubL 4vKpRPH4tI+UcaeH2JQgnfUkbKuMLO+iOmz1HHcCod3p/xuaIQ8cZxVSNg8UC1ew ZMfE5pMdL3ND25ynnfbibKwvy0ZVbxQJH3mdfb2Ewt0LijhNeqv5Bvoa7CcFJgFF TWn6CGNKXSwKNbPnB5hIHipo9tb29VuYpI5NtbkzsIVucyU+Grotlw== -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:49 2026 by rpki-client