This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/eCUldEuVJ_0jxDI76Og1yPBef88.roa File: eCUldEuVJ_0jxDI76Og1yPBef88.roa (raw, json) Hash identifier: O2xOPoQw7tP8dZhDbm7zmCq1owEVKxiXzBZzEk+JuX8= Subject key identifier: 78:25:25:74:4B:95:27:FD:23:C4:32:3B:E8:E8:35:C8:F0:5E:7F:CF Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95 Certificate serial: 019B7F154A5FBE57EEE29CF910E1C2EF1E9C Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/eCUldEuVJ_0jxDI76Og1yPBef88.roa Signing time: Fri 02 Jan 2026 14:21:00 +0000 ROA not before: Fri 02 Jan 2026 14:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205185 IP address blocks: 212.125.140.0/24 maxlen: 24 212.125.141.0/24 maxlen: 24 2a14:2940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:4a:5f:be:57:ee:e2:9c:f9:10:e1:c2:ef:1e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=782525744b9527fd23c4323be8e835c8f05e7fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:23:b4:7e:94:36:3a:e1:73:a3:00:21:8a: 03:51:e7:f9:48:3c:ff:7c:eb:f4:35:51:2c:e1:5a: 45:6a:e1:ce:03:2e:23:4c:26:aa:4c:b8:ed:d9:1d: 04:df:96:09:5f:b3:3d:6d:ee:30:87:45:a3:e5:1b: 6e:e3:27:41:10:7f:c2:d0:c1:fa:de:39:60:73:64: d7:37:3e:88:b8:cc:fa:d4:a4:eb:f3:b5:bb:33:38: 0b:63:e2:9b:cb:19:e0:3a:fc:1f:7e:52:01:1b:2a: af:2f:cc:fd:89:48:42:dd:46:63:b5:d0:57:46:ef: bc:7d:52:aa:f6:5f:df:ac:48:61:65:3d:82:5d:f2: ca:52:d8:fa:57:bf:cc:b3:98:10:35:50:09:37:65: fb:05:b3:77:56:f4:dd:3b:b6:99:77:30:af:ed:e4: a1:51:e7:8f:16:85:54:d4:c1:b4:70:d9:72:d6:10: ca:f0:cd:25:4b:5b:74:36:90:ff:42:a4:ca:75:77: 64:8c:30:82:65:79:c8:47:dd:69:47:4a:55:0c:c0: 19:4e:bc:44:ad:bc:1f:71:e9:fd:c8:ff:17:4e:d5: 79:01:ee:42:7b:d6:1c:72:75:29:56:95:07:c9:26: 7f:60:c6:6c:86:5d:80:15:a5:83:71:12:74:a0:80: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:25:25:74:4B:95:27:FD:23:C4:32:3B:E8:E8:35:C8:F0:5E:7F:CF X509v3 Authority Key Identifier: keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/eCUldEuVJ_0jxDI76Og1yPBef88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.125.140.0/23 IPv6: 2a14:2940::/29 Signature Algorithm: sha256WithRSAEncryption 51:36:b9:fa:30:14:c8:34:d7:fd:fe:bd:85:4d:e7:71:2d:93: 13:39:ee:b8:8d:d3:6d:c9:b6:fd:cb:2c:a8:67:23:e2:f4:84: 74:17:e1:db:e7:d8:82:2f:d2:84:8b:be:97:a7:27:2b:3d:32: d5:2f:b1:78:df:30:77:22:e7:1b:8b:c3:bb:08:d8:df:f3:7f: 67:92:d6:3c:34:c2:d7:9d:af:ff:17:ca:b1:c1:fa:70:4f:f8: 64:84:b1:d3:a8:17:87:a0:b7:2c:42:57:1e:74:1a:40:48:09: c7:2d:d6:4a:51:1a:69:e3:12:83:4e:c8:2f:df:9c:62:cb:d6: cb:05:8e:bf:85:d9:ce:80:aa:cd:83:45:b7:14:48:e9:21:80: 8d:b1:67:07:cd:f6:7f:82:9d:fe:45:5f:69:14:49:cf:68:ba: 01:cd:7f:64:a5:e1:6e:d3:f1:ae:95:ca:85:e8:bd:e7:34:5b: 35:38:32:97:4e:cb:db:bb:20:38:21:08:94:91:13:39:69:5c: e8:af:cd:c9:b0:81:01:a3:d4:c9:3a:0a:47:86:c5:96:33:96: 42:6e:c5:c1:e3:d7:48:e1:e7:44:31:0f:43:84:d4:99:8a:04: be:f8:7a:1c:12:a8:7b:94:88:e9:fd:03:58:39:dc:d5:c5:b3: 2b:a3:5e:a7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FUpfvlfu4pz5EOHC7x6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDJjYzllMGI4MTg2YjYwYjI3MDMxM2NkOTY4MjEwMjJk MDRiOTUwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODI1MjU3NDRiOTUyN2ZkMjNjNDMyM2JlOGU4MzVjOGYwNWU3ZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDMjtH6UNjrhc6MAIYoDUef5SDz/ fOv0NVEs4VpFauHOAy4jTCaqTLjt2R0E35YJX7M9be4wh0Wj5Rtu4ydBEH/C0MH6 3jlgc2TXNz6IuMz61KTr87W7MzgLY+KbyxngOvwfflIBGyqvL8z9iUhC3UZjtdBX Ru+8fVKq9l/frEhhZT2CXfLKUtj6V7/Ms5gQNVAJN2X7BbN3VvTdO7aZdzCv7eSh UeePFoVU1MG0cNly1hDK8M0lS1t0NpD/QqTKdXdkjDCCZXnIR91pR0pVDMAZTrxE rbwfcen9yP8XTtV5Ae5Ce9YccnUpVpUHySZ/YMZshl2AFaWDcRJ0oIA+ewIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHglJXRLlSf9I8QyO+joNcjwXn/PMB8GA1UdIwQY MBaAFBfSzJ4LgYa2CycDE82WghAi0EuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjIt ZGZiYjZlYzM0MzBlLzEvZUNVbGRFdVZKXzBqeERJNzZPZzF5UEJlZjg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjItZGZiYjZlYzM0MzBl LzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQB1H2MMA0E AgACMAcDBQMqFClAMA0GCSqGSIb3DQEBCwUAA4IBAQBRNrn6MBTINNf9/r2FTedx LZMTOe64jdNtybb9yyyoZyPi9IR0F+Hb59iCL9KEi76XpycrPTLVL7F43zB3Iucb i8O7CNjf839nktY8NMLXna//F8qxwfpwT/hkhLHTqBeHoLcsQlcedBpASAnHLdZK URpp4xKDTsgv35xiy9bLBY6/hdnOgKrNg0W3FEjpIYCNsWcHzfZ/gp3+RV9pFEnP aLoBzX9kpeFu0/GulcqF6L3nNFs1ODKXTsvbuyA4IQiUkRM5aVzor83JsIEBo9TJ OgpHhsWWM5ZCbsXB49dI4edEMQ9DhNSZigS++HocEqh7lIjp/QNYOdzVxbMro16n -----END CERTIFICATE-----Generated at Mon Jan 26 09:54:18 2026 by rpki-client