This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa File: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (raw, json) Hash identifier: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU= Subject key identifier: 8D:BF:52:74:E0:B7:B3:E2:F5:B5:0C:7D:60:3F:5D:4B:0C:78:96:6E Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC790751428F7569EB9F4F56EFB9020 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50530 IP address blocks: 109.125.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:90:75:14:28:f7:56:9e:b9:f4:f5:6e:fb:90:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dbf5274e0b7b3e2f5b50c7d603f5d4b0c78966e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:62:9d:84:98:49:5a:e1:1e:f1:88:e0:38:6b: 6e:16:2c:a3:a9:60:36:93:2d:61:74:00:38:ae:78: ff:e4:a6:b6:8e:a0:d5:91:e8:16:ba:9b:07:c1:e3: e9:6e:e9:bf:b8:cf:fb:00:60:24:2d:28:8d:2f:84: 3e:dc:87:32:b7:8c:f9:af:3a:27:14:41:0e:a1:03: cf:47:a1:e3:43:54:f7:5e:f8:46:84:dd:62:c4:c8: 3c:13:c1:fd:e1:11:45:69:72:35:9f:62:e3:82:13: ea:6f:a0:52:e7:cf:50:97:2d:9e:49:56:a1:d7:cc: f2:b4:86:9e:c8:23:8d:e8:47:99:ad:b5:47:f0:e9: 87:77:3d:76:d6:c8:6d:cf:69:31:62:6e:91:51:69: 1c:76:8f:0a:f4:17:14:dd:fa:b2:10:c3:ce:41:dd: 54:03:3c:de:1f:2c:7a:36:1a:b4:52:3d:ec:3d:20: c1:e6:4f:c7:4e:92:72:51:cd:e8:0e:e5:25:be:74: 0c:7a:c3:c5:93:c7:e9:fc:fd:93:ec:b5:24:ce:d8: 5e:92:a7:be:66:72:67:1a:a7:b0:d7:4d:fd:81:6e: 0a:d5:65:1a:4b:63:70:2a:04:e7:c2:2e:0d:c9:2a: 4d:70:29:41:0e:4a:4d:19:c8:ee:43:58:6a:ca:1d: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BF:52:74:E0:B7:B3:E2:F5:B5:0C:7D:60:3F:5D:4B:0C:78:96:6E X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.125.180.0/23 Signature Algorithm: sha256WithRSAEncryption 87:c0:c6:94:ab:7f:fb:f3:03:2d:25:2d:40:a8:9f:d5:b6:b0: 78:86:74:02:f0:30:c8:77:40:3b:c9:3e:ad:77:0e:b1:3c:a1: 5e:48:dd:9c:1d:50:5b:02:2a:ba:85:55:e2:dc:45:51:6f:30: 5c:64:f8:72:56:c8:4f:eb:ac:2b:25:16:29:9c:21:ee:0a:68: ad:b8:15:04:be:8a:85:e1:24:33:e7:d6:00:ee:17:15:62:bd: 14:0e:e3:4e:58:e7:37:9e:1e:d8:7c:7c:b6:01:79:c1:8f:a4: 81:77:78:ee:ee:90:de:0d:b0:8c:ea:cd:de:57:a6:57:39:6e: 91:13:88:bb:6e:78:d8:54:c4:0e:9c:c7:b6:a8:fa:63:bc:ad: 4c:89:94:61:cb:5a:e8:b0:3d:97:26:d9:7f:17:13:7f:a9:9b: ca:ae:17:64:13:be:d6:7c:1f:7f:04:33:1b:8a:cc:83:c4:c8: f7:33:1a:a1:49:07:6a:47:ba:a3:3c:b8:f8:00:5c:83:f2:b3: 3d:5a:82:6c:bc:1e:b7:c6:ca:23:55:94:3f:33:fc:ea:2e:84: d5:f1:7a:b7:27:3b:7d:25:14:05:7f:8f:00:14:b7:1e:22:9c: 2a:e0:6d:8b:4a:d7:d1:dc:21:7c:52:c3:8c:fc:39:3b:7f:9f: 54:bd:be:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5B1FCj3Vp659PVu+5AgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGJmNTI3NGUwYjdiM2UyZjViNTBjN2Q2MDNmNWQ0YjBjNzg5NjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mKdhJhJWuEe8YjgOGtuFiyjqWA2 ky1hdAA4rnj/5Ka2jqDVkegWupsHwePpbum/uM/7AGAkLSiNL4Q+3Icyt4z5rzon FEEOoQPPR6HjQ1T3XvhGhN1ixMg8E8H94RFFaXI1n2LjghPqb6BS589Qly2eSVah 18zytIaeyCON6EeZrbVH8OmHdz121shtz2kxYm6RUWkcdo8K9BcU3fqyEMPOQd1U AzzeHyx6Nhq0Uj3sPSDB5k/HTpJyUc3oDuUlvnQMesPFk8fp/P2T7LUkzthekqe+ ZnJnGqew1039gW4K1WUaS2NwKgTnwi4NySpNcClBDkpNGcjuQ1hqyh0Y+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI2/UnTgt7Pi9bUMfWA/XUsMeJZuMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvamI5U2RPQzNzLUwxdFF4OVlEOWRTd3g0bG00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbX20MA0G CSqGSIb3DQEBCwUAA4IBAQCHwMaUq3/78wMtJS1AqJ/VtrB4hnQC8DDId0A7yT6t dw6xPKFeSN2cHVBbAiq6hVXi3EVRbzBcZPhyVshP66wrJRYpnCHuCmituBUEvoqF 4SQz59YA7hcVYr0UDuNOWOc3nh7YfHy2AXnBj6SBd3ju7pDeDbCM6s3eV6ZXOW6R E4i7bnjYVMQOnMe2qPpjvK1MiZRhy1rosD2XJtl/FxN/qZvKrhdkE77WfB9/BDMb isyDxMj3MxqhSQdqR7qjPLj4AFyD8rM9WoJsvB63xsojVZQ/M/zqLoTV8Xq3Jzt9 JRQFf48AFLceIpwq4G2LStfR3CF8UsOM/Dk7f59Uvb56 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:56 2026 by rpki-client