This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/0srnwmqHjJ7wt6SmCtQCMFzqvs0.roa File: 0srnwmqHjJ7wt6SmCtQCMFzqvs0.roa (raw, json) Hash identifier: 2PcsF5G0Mq3lPMeGvxmpYXNXSdp0a4eMQFAaAmAvtYY= Subject key identifier: D2:CA:E7:C2:6A:87:8C:9E:F0:B7:A4:A6:0A:D4:02:30:5C:EA:BE:CD Certificate issuer: /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a Certificate serial: 019B7B35C1D7E111E2974CC9B4BD6F13C631 Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/0srnwmqHjJ7wt6SmCtQCMFzqvs0.roa Signing time: Thu 01 Jan 2026 20:17:59 +0000 ROA not before: Thu 01 Jan 2026 20:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 217.196.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c1:d7:e1:11:e2:97:4c:c9:b4:bd:6f:13:c6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2cae7c26a878c9ef0b7a4a60ad402305ceabecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:bb:1b:14:bb:bd:64:4d:5e:90:6a:9f:b1: 97:a7:ff:3d:22:e5:93:03:16:13:ca:4a:5b:e7:ac: 47:5a:c6:09:37:35:95:c2:a9:41:39:63:54:d6:1c: 5b:ff:89:2f:b1:35:cb:0a:86:16:7d:9b:5b:40:5d: 51:d8:c0:4b:7b:6f:35:f0:3d:0f:7e:97:f2:32:d5: 26:dc:82:38:49:5b:07:0d:e2:4a:73:24:95:41:29: 7b:45:95:d2:0a:3f:4a:9d:d1:3b:ce:9f:ac:49:a9: c1:57:4e:b8:ed:e4:f0:9b:6e:31:74:ac:db:97:0d: a3:a7:e4:7e:6a:f0:51:ed:cb:89:fe:3a:ae:1c:e0: 08:c6:cb:60:22:f5:52:ec:0e:dc:5f:14:7d:97:8f: 57:aa:8f:dc:81:fc:98:c9:59:4a:89:32:a8:9c:92: ba:c6:e5:ca:03:34:87:3d:f8:b4:e7:45:0c:79:72: 4a:25:30:e6:bf:37:83:51:1c:c7:e7:58:b3:6c:dc: 2e:f9:d4:42:69:de:cd:30:a9:d9:50:44:97:cf:69: cc:bb:62:26:bb:47:92:16:01:fe:87:ae:c7:61:b1: 9c:3f:81:d9:d3:f0:f7:1f:f0:a1:10:30:a0:59:68: 33:53:48:aa:ab:14:2e:11:b9:b1:d0:d0:e6:16:aa: 76:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CA:E7:C2:6A:87:8C:9E:F0:B7:A4:A6:0A:D4:02:30:5C:EA:BE:CD X509v3 Authority Key Identifier: keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/0srnwmqHjJ7wt6SmCtQCMFzqvs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.196.142.0/23 Signature Algorithm: sha256WithRSAEncryption 65:88:87:5c:66:ef:dc:00:85:dd:db:57:bf:39:02:0e:21:70: 40:21:e7:d8:3b:1a:61:b9:75:de:da:bc:8d:f9:41:c8:2f:64: 62:8a:b8:ff:63:1b:30:71:39:9c:91:f0:91:31:76:0c:40:1f: 2f:f8:da:0f:67:6a:d5:61:ad:07:a7:db:d7:b0:74:91:f6:35: a2:0f:b8:67:28:c2:86:c8:1a:51:9c:ed:ed:78:c1:0a:51:50: 44:f1:c1:66:f5:8f:dd:6e:8b:80:83:6f:6f:1e:ea:b7:6c:c4: a4:1f:38:e4:7c:50:7a:31:25:d0:a5:3e:79:ae:5a:c6:d5:85: ed:a4:54:4c:00:45:aa:68:01:13:39:67:80:70:1b:8e:5c:0b: 90:5d:33:8d:4f:c2:3a:17:4d:2e:b5:e7:4a:8c:97:ba:93:51: 98:1a:b1:cc:37:43:8d:60:f6:76:5e:7a:0f:19:01:f2:04:e1: 56:91:16:cf:f3:87:69:d8:63:91:09:9c:1d:89:20:de:8b:85: fd:ad:8b:90:2f:63:07:7c:fb:a0:f4:59:e9:74:4e:2e:59:48: 57:49:dd:4d:17:87:0d:ba:a5:9a:e6:f8:62:51:3a:a4:d7:78: 4c:69:c9:84:04:1a:b0:6c:5c:fe:7f:bb:0a:b5:cb:f7:ae:20: 32:7c:8e:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcHX4RHil0zJtL1vE8YxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjI2YmJiN2I2OWVlYzlmNjc5MGIwMzcwNTU0NWI4OTJm YTJlOGEwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmNhZTdjMjZhODc4YzllZjBiN2E0YTYwYWQ0MDIzMDVjZWFiZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfS7GxS7vWRNXpBqn7GXp/89IuWT AxYTykpb56xHWsYJNzWVwqlBOWNU1hxb/4kvsTXLCoYWfZtbQF1R2MBLe2818D0P fpfyMtUm3II4SVsHDeJKcySVQSl7RZXSCj9KndE7zp+sSanBV0647eTwm24xdKzb lw2jp+R+avBR7cuJ/jquHOAIxstgIvVS7A7cXxR9l49Xqo/cgfyYyVlKiTKonJK6 xuXKAzSHPfi050UMeXJKJTDmvzeDURzH51izbNwu+dRCad7NMKnZUESXz2nMu2Im u0eSFgH+h67HYbGcP4HZ0/D3H/ChEDCgWWgzU0iqqxQuEbmx0NDmFqp2/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNLK58Jqh4ye8LekpgrUAjBc6r7NMB8GA1UdIwQY MBaAFM1ia7t7ae7J9nkLA3BVRbiS+i6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDct YzBmODlhZDM2YmNhLzEvMHNybndtcUhqSjd3dDZTbUN0UUNNRnpxdnMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDctYzBmODlhZDM2YmNh LzEveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2cSOMA0G CSqGSIb3DQEBCwUAA4IBAQBliIdcZu/cAIXd21e/OQIOIXBAIefYOxphuXXe2ryN +UHIL2Riirj/YxswcTmckfCRMXYMQB8v+NoPZ2rVYa0Hp9vXsHSR9jWiD7hnKMKG yBpRnO3teMEKUVBE8cFm9Y/dbouAg29vHuq3bMSkHzjkfFB6MSXQpT55rlrG1YXt pFRMAEWqaAETOWeAcBuOXAuQXTONT8I6F00utedKjJe6k1GYGrHMN0ONYPZ2XnoP GQHyBOFWkRbP84dp2GORCZwdiSDei4X9rYuQL2MHfPug9FnpdE4uWUhXSd1NF4cN uqWa5vhiUTqk13hMacmEBBqwbFz+f7sKtcv3riAyfI7H -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:47 2026 by rpki-client