This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/P7tnseevFfgmSuKuIWR7T1-giX0.roa File: P7tnseevFfgmSuKuIWR7T1-giX0.roa (raw, json) Hash identifier: ojvJdnjtgDrfvRMQCYPhOeHhRoL/uCyx9OSh7NhorVA= Subject key identifier: 3F:BB:67:B1:E7:AF:15:F8:26:4A:E2:AE:21:64:7B:4F:5F:A0:89:7D Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019BDBFB3444BC729E89448C700628651F7B Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/P7tnseevFfgmSuKuIWR7T1-giX0.roa Signing time: Tue 20 Jan 2026 15:17:11 +0000 ROA not before: Tue 20 Jan 2026 15:17:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 268624 IP address blocks: 217.9.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:fb:34:44:bc:72:9e:89:44:8c:70:06:28:65:1f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Jan 20 15:17:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fbb67b1e7af15f8264ae2ae21647b4f5fa0897d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:8e:ce:1c:cb:5e:a8:e4:96:c6:cd:72:5f: 88:20:33:a5:2e:e6:38:41:ec:48:24:b9:3e:b6:6a: 97:85:42:97:b0:7f:0e:38:6e:4b:cb:10:f7:55:63: 37:17:bd:63:27:59:d6:96:f7:4b:2d:43:8a:ee:78: d3:88:94:df:c3:66:fc:f7:9d:55:87:fa:6f:b8:df: 1f:06:a1:a7:f2:35:03:c7:a4:1e:65:2e:08:a8:4a: 56:32:87:8d:24:7e:01:b1:96:45:23:c5:18:b8:49: 32:e8:8a:e8:b6:79:9a:55:87:5d:5c:61:cf:55:03: cc:24:48:39:a4:13:0b:28:10:c4:7c:ab:74:0f:a1: 1e:c3:1e:a6:eb:0f:c8:11:be:eb:0d:f1:e4:76:6b: 5b:fa:7b:44:05:98:61:3c:2b:6e:4b:43:fa:d6:da: 20:be:72:19:be:4c:2e:d5:e2:69:77:e7:02:b1:c5: a7:f5:a5:2c:52:f1:8d:f5:63:d3:fa:10:92:a3:04: 4b:d6:e2:f7:d9:cc:e1:d2:ed:16:65:06:06:47:34: fe:a1:00:d8:ee:b0:58:a2:66:be:d8:7b:51:88:a1: d2:20:ee:d1:fa:03:75:83:a3:78:99:08:91:8c:ca: cd:ee:3c:c5:a2:02:25:98:c9:d3:13:e8:e9:9a:a4: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BB:67:B1:E7:AF:15:F8:26:4A:E2:AE:21:64:7B:4F:5F:A0:89:7D X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/P7tnseevFfgmSuKuIWR7T1-giX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.9.14.0/23 Signature Algorithm: sha256WithRSAEncryption a4:bd:91:24:a2:f8:8f:4b:62:72:a1:40:7d:d7:ba:10:37:43: f2:39:ce:6e:97:99:3e:b2:7f:a8:32:b5:a8:7c:7d:31:a3:4c: 3f:38:28:b9:e5:50:52:4f:f7:1f:29:90:ff:ef:cc:6a:3a:0d: 4b:e7:8d:1a:15:92:ee:35:89:e4:b8:78:38:82:b5:7a:41:af: a1:ca:c8:85:46:62:f7:ed:22:bc:b3:72:6f:2c:63:a5:bb:4f: d2:c6:e7:28:e8:0d:02:31:e6:cb:0b:bd:f5:ee:69:b5:8b:4f: bc:10:01:70:99:30:fe:e2:4f:73:57:9c:8c:50:94:87:0e:4a: a5:84:d1:b9:7f:d3:f5:82:bd:77:c0:48:33:51:08:6b:34:5c: 8e:f7:1e:d4:62:9b:5d:3f:2d:e2:be:b6:8c:78:e5:cd:a9:a0: 2a:8d:bb:22:fe:b0:b8:51:97:9e:4e:2b:96:95:31:14:59:b1: f7:17:3b:c5:a5:13:2f:78:7a:17:eb:0f:e6:5d:88:3c:4d:cd: c2:43:6e:f0:4f:54:54:7e:0a:52:0d:17:f0:3a:96:09:f0:5c: 5d:8b:d1:d9:86:6e:9d:d5:c5:fb:af:11:95:85:db:92:2a:4c: 27:ee:aa:f1:b1:5f:71:13:0f:a2:df:5f:34:75:e4:c3:cd:d2: 3a:5f:ad:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvb+zREvHKeiUSMcAYoZR97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjYwMTIwMTUxNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmJiNjdiMWU3YWYxNWY4MjY0YWUyYWUyMTY0N2I0ZjVmYTA4OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MmOzhzLXqjklsbNcl+IIDOlLuY4 QexIJLk+tmqXhUKXsH8OOG5LyxD3VWM3F71jJ1nWlvdLLUOK7njTiJTfw2b8951V h/pvuN8fBqGn8jUDx6QeZS4IqEpWMoeNJH4BsZZFI8UYuEky6IrotnmaVYddXGHP VQPMJEg5pBMLKBDEfKt0D6Eewx6m6w/IEb7rDfHkdmtb+ntEBZhhPCtuS0P61tog vnIZvkwu1eJpd+cCscWn9aUsUvGN9WPT+hCSowRL1uL32czh0u0WZQYGRzT+oQDY 7rBYoma+2HtRiKHSIO7R+gN1g6N4mQiRjMrN7jzFogIlmMnTE+jpmqROMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD+7Z7HnrxX4JkririFke09foIl9MB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvUDd0bnNlZXZGZmdtU3VLdUlXUjdUMS1naVgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2QkOMA0G CSqGSIb3DQEBCwUAA4IBAQCkvZEkoviPS2JyoUB917oQN0PyOc5ul5k+sn+oMrWo fH0xo0w/OCi55VBST/cfKZD/78xqOg1L540aFZLuNYnkuHg4grV6Qa+hysiFRmL3 7SK8s3JvLGOlu0/Sxuco6A0CMebLC7317mm1i0+8EAFwmTD+4k9zV5yMUJSHDkql hNG5f9P1gr13wEgzUQhrNFyO9x7UYptdPy3ivraMeOXNqaAqjbsi/rC4UZeeTiuW lTEUWbH3FzvFpRMveHoX6w/mXYg8Tc3CQ27wT1RUfgpSDRfwOpYJ8Fxdi9HZhm6d 1cX7rxGVhduSKkwn7qrxsV9xEw+i3180deTDzdI6X631 -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:58 2026 by rpki-client