This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/X-pw--7v-eVKOMCYhEoBqMvv5i0.roa File: X-pw--7v-eVKOMCYhEoBqMvv5i0.roa (raw, json) Hash identifier: IUeZVsSUCXBqLM3lYzGREGoTqzMuBKPxlh2jySadCOY= Subject key identifier: 5F:EA:70:FB:EE:EF:F9:E5:4A:38:C0:98:84:4A:01:A8:CB:EF:E6:2D Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019BD522FE189F2D2B80013A5D92840D7FF6 Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/X-pw--7v-eVKOMCYhEoBqMvv5i0.roa Signing time: Mon 19 Jan 2026 07:23:18 +0000 ROA not before: Mon 19 Jan 2026 07:23:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213702 IP address blocks: 217.9.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:22:fe:18:9f:2d:2b:80:01:3a:5d:92:84:0d:7f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Jan 19 07:23:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fea70fbeeeff9e54a38c098844a01a8cbefe62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:f0:cb:85:68:34:34:7c:f9:d6:ce:39:cf: 89:1e:26:b1:4e:ce:f9:04:d5:12:c6:9a:a2:29:6b: a0:cd:3c:dd:91:96:54:bd:c6:c5:07:ce:87:52:ae: 07:b8:33:b0:bd:48:ab:1e:82:56:68:bd:9f:4d:7a: db:4d:63:84:cb:ea:1c:70:70:e1:7b:1d:38:c0:03: 6b:b6:4a:5e:cb:aa:b3:85:e0:71:5d:5f:b0:13:96: 6b:e8:e2:36:a0:29:03:b8:1a:46:6d:f6:75:f9:87: 97:b5:dd:88:0c:e3:f0:8e:c2:6a:f7:6a:e0:54:f4: 94:6d:6b:e0:af:2e:e3:21:62:40:e6:14:89:b4:6e: 86:ab:01:02:8d:2d:c1:70:af:fe:ce:5b:58:b4:eb: 24:eb:91:05:69:ec:ef:3b:5e:b0:23:f0:32:6a:b2: 87:af:38:ff:26:a7:47:dc:6f:ee:03:5e:41:f7:cd: 5e:66:70:89:27:6e:e3:81:4d:5c:76:c4:3c:97:bd: ae:86:f8:01:cc:14:28:8f:3f:5c:ed:f5:14:58:1c: d2:43:90:8b:08:94:e8:bf:70:ef:91:a3:70:75:31: 04:7a:33:57:02:1a:e0:c7:9b:7f:70:3a:bf:34:db: 50:b4:bd:ba:a9:b2:d2:b3:a7:b0:97:34:cf:8c:5e: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EA:70:FB:EE:EF:F9:E5:4A:38:C0:98:84:4A:01:A8:CB:EF:E6:2D X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/X-pw--7v-eVKOMCYhEoBqMvv5i0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.9.12.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:a1:4f:38:02:78:4d:2b:8a:48:50:87:99:5c:9e:0d:df:01: d1:0b:5c:cd:73:d4:c9:13:b5:02:f9:21:cc:b7:5d:d8:b2:4c: 58:81:30:44:24:16:c2:7b:43:ed:df:58:df:30:7e:91:e1:ac: f7:90:1c:42:fd:88:9a:79:fa:2e:22:94:ae:98:74:b8:8c:6c: b2:0b:f1:c6:f5:ba:79:98:21:6c:62:0d:1c:34:ff:6d:e7:2a: 7e:f1:b3:85:42:94:3b:e6:9b:25:14:b1:ec:d6:aa:f7:f5:49: d0:99:81:04:93:16:d9:58:3c:00:d2:40:5e:25:f7:de:47:1b: c9:23:1b:f1:33:0d:e0:ca:1f:52:8e:0e:1e:1b:d8:46:89:8b: 8a:e7:69:5b:36:76:fd:a3:6a:6e:09:12:e0:b6:de:c0:94:be: c4:29:2a:44:5b:f5:c0:b4:ee:d5:7d:99:b4:40:f8:43:89:d9: de:97:a7:91:3f:dd:ea:3e:0b:ef:58:69:16:a6:a0:08:76:59: 3a:c0:3c:88:de:6d:f4:5a:3f:63:4c:7e:ea:4b:42:93:c4:14: 5b:c3:e3:65:f9:22:e6:ef:cb:c5:fb:d0:85:95:84:a6:d9:a0: d2:22:99:ef:8d:6d:90:a2:9f:4b:88:d6:7d:04:72:ce:ad:dc: f5:50:15:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvVIv4Yny0rgAE6XZKEDX/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjYwMTE5MDcyMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmVhNzBmYmVlZWZmOWU1NGEzOGMwOTg4NDRhMDFhOGNiZWZlNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIPwy4VoNDR8+dbOOc+JHiaxTs75 BNUSxpqiKWugzTzdkZZUvcbFB86HUq4HuDOwvUirHoJWaL2fTXrbTWOEy+occHDh ex04wANrtkpey6qzheBxXV+wE5Zr6OI2oCkDuBpGbfZ1+YeXtd2IDOPwjsJq92rg VPSUbWvgry7jIWJA5hSJtG6GqwECjS3BcK/+zltYtOsk65EFaezvO16wI/AyarKH rzj/JqdH3G/uA15B981eZnCJJ27jgU1cdsQ8l72uhvgBzBQojz9c7fUUWBzSQ5CL CJTov3DvkaNwdTEEejNXAhrgx5t/cDq/NNtQtL26qbLSs6ewlzTPjF6xrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/qcPvu7/nlSjjAmIRKAajL7+YtMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvWC1wdy0tN3YtZVZLT01DWWhFb0JxTXZ2NWkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QkMMA0G CSqGSIb3DQEBCwUAA4IBAQBMoU84AnhNK4pIUIeZXJ4N3wHRC1zNc9TJE7UC+SHM t13YskxYgTBEJBbCe0Pt31jfMH6R4az3kBxC/YiaefouIpSumHS4jGyyC/HG9bp5 mCFsYg0cNP9t5yp+8bOFQpQ75pslFLHs1qr39UnQmYEEkxbZWDwA0kBeJffeRxvJ IxvxMw3gyh9Sjg4eG9hGiYuK52lbNnb9o2puCRLgtt7AlL7EKSpEW/XAtO7VfZm0 QPhDidnel6eRP93qPgvvWGkWpqAIdlk6wDyI3m30Wj9jTH7qS0KTxBRbw+Nl+SLm 78vF+9CFlYSm2aDSIpnvjW2Qop9LiNZ9BHLOrdz1UBWG -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:26 2026 by rpki-client