This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/roAOVMvnNsfrpVkf2GW7F0kGBAc.roa File: roAOVMvnNsfrpVkf2GW7F0kGBAc.roa (raw, json) Hash identifier: IkSo7h5qyB5UPtAZ0suaOuHLsEp0jVopR3VGK0uOiaE= Subject key identifier: AE:80:0E:54:CB:E7:36:C7:EB:A5:59:1F:D8:65:BB:17:49:06:04:07 Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Certificate serial: 019BDE56FE122569FA069B98B0EA4AF40335 Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/roAOVMvnNsfrpVkf2GW7F0kGBAc.roa Signing time: Wed 21 Jan 2026 02:16:41 +0000 ROA not before: Wed 21 Jan 2026 02:16:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 217.149.108.0/24 maxlen: 24 217.149.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:56:fe:12:25:69:fa:06:9b:98:b0:ea:4a:f4:03:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Validity Not Before: Jan 21 02:16:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae800e54cbe736c7eba5591fd865bb1749060407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:c8:ef:bd:65:d8:2b:8f:e2:e9:3a:89:f2: 1c:0e:bc:4d:f2:9c:21:3f:96:21:37:44:16:fe:67: 97:7d:92:15:44:ac:07:0d:bd:28:46:71:38:5d:b2: ca:12:d7:83:ba:b3:ae:cc:62:3e:f0:c9:fa:f6:38: 75:a0:59:4e:40:fc:40:03:e6:a6:44:74:8c:59:c6: fd:c0:bb:dd:b2:4b:08:23:88:93:79:4e:f7:27:f5: a0:c0:3e:69:1f:2c:bd:33:3d:da:31:25:e4:63:a4: 23:9a:94:57:94:3c:ff:7d:ac:15:e3:41:05:0e:cd: e2:bb:39:e7:02:83:ac:12:a4:de:29:ca:c9:21:c0: 0e:7c:06:64:b3:33:5c:5d:e5:bf:d9:de:ec:32:3a: 1d:22:0e:0d:93:52:8c:11:a9:d6:d3:6c:0d:99:df: cb:3a:2b:7d:85:3d:69:e1:c3:fa:9b:cb:ee:25:85: f5:7b:6f:dc:fe:87:b8:3b:5d:01:5a:6f:0d:cc:f9: 05:da:9f:ce:63:66:f3:61:01:ba:fd:d1:1e:39:92: bd:54:ff:43:ff:dd:9c:51:b1:2d:c8:8c:aa:03:5f: a3:79:19:5a:02:0e:45:73:d4:1e:84:68:ae:3b:38: 02:0d:33:60:c2:fc:32:62:cf:e6:1a:0d:90:de:75: b0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:80:0E:54:CB:E7:36:C7:EB:A5:59:1F:D8:65:BB:17:49:06:04:07 X509v3 Authority Key Identifier: keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/roAOVMvnNsfrpVkf2GW7F0kGBAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.149.108.0/23 Signature Algorithm: sha256WithRSAEncryption a2:c4:0d:b6:c8:3e:5b:6f:8d:ac:36:34:03:b8:55:05:dd:32: 3e:1a:3f:a2:f6:55:df:db:99:9b:4c:14:4d:0d:cb:75:f2:aa: ed:72:07:6a:ca:4d:6e:d8:fa:b1:43:8b:5b:65:aa:15:4a:a3: 8a:2d:57:fd:02:ef:e7:2f:ea:b7:6a:1a:aa:a7:69:8d:30:42: 69:3e:1f:cf:0c:d5:22:17:38:dd:25:fc:d0:e6:cd:47:9e:b1: bd:fc:f8:6d:2a:42:6b:98:e1:99:5a:c0:43:6e:3f:5b:78:f7: 00:0a:d1:cf:54:2b:9e:bb:5b:66:fe:78:b5:7b:bd:19:0c:ae: 81:07:58:35:29:dc:88:58:2f:27:9c:c0:8f:e5:4d:9c:a9:b3: da:3a:e0:32:ce:70:64:5a:29:0b:62:1b:ff:e6:b0:af:7b:77: b3:c1:2e:15:e0:c6:22:ce:3f:99:a1:17:83:42:80:b4:24:83: 73:5b:f2:0d:8b:f3:c7:8b:ae:e4:18:78:9a:59:bf:95:6f:0a: b2:ad:28:c5:46:d1:40:e9:c0:6a:96:75:d4:e2:b0:66:79:05: 73:0c:4b:63:50:7c:01:d3:31:75:54:e7:7d:30:11:b4:f7:ae: c8:fa:db:d9:90:4c:7f:d4:6f:cd:68:b1:19:f5:d1:c6:b8:c1: 85:c1:d3:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZveVv4SJWn6BpuYsOpK9AM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTI2Zjk2MzUxMTg5M2ZhNGQ5ZmJkNWU2NGUwZjhhNDM4 MzdlNDAwHhcNMjYwMTIxMDIxNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTgwMGU1NGNiZTczNmM3ZWJhNTU5MWZkODY1YmIxNzQ5MDYwNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1LI771l2CuP4uk6ifIcDrxN8pwh P5YhN0QW/meXfZIVRKwHDb0oRnE4XbLKEteDurOuzGI+8Mn69jh1oFlOQPxAA+am RHSMWcb9wLvdsksII4iTeU73J/WgwD5pHyy9Mz3aMSXkY6QjmpRXlDz/fawV40EF Ds3iuznnAoOsEqTeKcrJIcAOfAZkszNcXeW/2d7sMjodIg4Nk1KMEanW02wNmd/L Oit9hT1p4cP6m8vuJYX1e2/c/oe4O10BWm8NzPkF2p/OY2bzYQG6/dEeOZK9VP9D /92cUbEtyIyqA1+jeRlaAg5Fc9QehGiuOzgCDTNgwvwyYs/mGg2Q3nWwRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK6ADlTL5zbH66VZH9hluxdJBgQHMB8GA1UdIwQY MBaAFMqSb5Y1EYk/pNn71eZOD4pDg35AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEt MTQ2MDVkYjU0M2QwLzEvcm9BT1ZNdm5Oc2ZycFZrZjJHVzdGMGtHQkFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEtMTQ2MDVkYjU0M2Qw LzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ZVsMA0G CSqGSIb3DQEBCwUAA4IBAQCixA22yD5bb42sNjQDuFUF3TI+Gj+i9lXf25mbTBRN Dct18qrtcgdqyk1u2PqxQ4tbZaoVSqOKLVf9Au/nL+q3ahqqp2mNMEJpPh/PDNUi FzjdJfzQ5s1HnrG9/PhtKkJrmOGZWsBDbj9bePcACtHPVCueu1tm/ni1e70ZDK6B B1g1KdyIWC8nnMCP5U2cqbPaOuAyznBkWikLYhv/5rCve3ezwS4V4MYizj+ZoReD QoC0JINzW/INi/PHi67kGHiaWb+VbwqyrSjFRtFA6cBqlnXU4rBmeQVzDEtjUHwB 0zF1VOd9MBG0967I+tvZkEx/1G/NaLEZ9dHGuMGFwdNS -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:31 2026 by rpki-client