This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/7ctbrqVxCRbHrUzJk44x6mMUfjw.roa File: 7ctbrqVxCRbHrUzJk44x6mMUfjw.roa (raw, json) Hash identifier: hwOpHB+DpLevykjKwsf5ChWyNAUq7TbSytnqlDGmM0c= Subject key identifier: ED:CB:5B:AE:A5:71:09:16:C7:AD:4C:C9:93:8E:31:EA:63:14:7E:3C Certificate issuer: /CN=12e28039646dcc32eceb58428f97cc994b998577 Certificate serial: 019B78A2ED0FF14D136EC50740E7BFBC456A Authority key identifier: 12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/7ctbrqVxCRbHrUzJk44x6mMUfjw.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 217.117.97.0/24 maxlen: 24 217.117.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ed:0f:f1:4d:13:6e:c5:07:40:e7:bf:bc:45:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12e28039646dcc32eceb58428f97cc994b998577 Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edcb5baea5710916c7ad4cc9938e31ea63147e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:18:60:5b:76:40:e3:43:6b:8f:81:cd:ea: 09:39:fd:96:a6:9c:f1:b4:d4:4d:5d:99:6a:5a:08: 15:ce:c8:59:b3:77:4c:a1:4c:d1:12:28:25:09:6f: ec:48:6a:18:c3:d5:da:ec:51:53:85:cd:ff:fa:fa: a6:42:7e:32:70:c7:04:8c:27:aa:58:36:07:c7:1a: 17:72:83:a5:37:0a:73:ce:73:cd:fb:df:0c:ab:d5: a5:4a:fd:3c:29:2b:eb:d4:b8:5f:85:c8:2d:b4:e9: 61:ab:7b:33:8e:a6:5a:56:6a:b8:28:7d:55:73:6c: 42:d9:1d:56:16:b0:a1:93:f0:58:e1:1f:04:83:c7: c1:0d:fb:27:a4:2f:2d:cf:72:e4:fc:68:4d:65:67: 23:ef:2c:c7:64:0d:36:62:a6:0f:4c:1f:a8:81:ca: ea:5b:f7:e3:04:7e:23:da:9f:cb:70:fa:1a:9e:70: ac:82:30:1a:bb:d5:fc:7b:f0:0e:72:dd:7c:18:98: ca:46:3b:45:9f:93:8a:c4:91:40:46:f0:58:f9:c3: a2:17:61:45:d0:a6:ff:2d:79:81:9b:16:ad:60:3b: 57:13:d8:a0:88:9f:2a:56:05:ba:7e:d9:10:10:3f: 51:49:59:87:de:b1:2a:08:a0:1b:cb:33:99:9b:ac: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CB:5B:AE:A5:71:09:16:C7:AD:4C:C9:93:8E:31:EA:63:14:7E:3C X509v3 Authority Key Identifier: keyid:12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/7ctbrqVxCRbHrUzJk44x6mMUfjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.117.97.0-217.117.98.255 Signature Algorithm: sha256WithRSAEncryption 95:ec:de:fa:af:7a:8d:de:73:cf:cc:95:08:18:86:25:aa:62: ce:c6:65:ac:94:4b:e4:af:bf:3f:cd:97:5b:fa:ef:5d:b4:04: 18:2c:4b:1e:45:3a:2a:63:18:6c:df:32:ad:38:a0:cf:ab:9d: 89:9d:79:8c:4b:57:48:36:98:d4:d8:61:8b:aa:37:18:3d:69: bd:03:0b:49:12:9b:08:0d:57:01:9a:99:4e:98:22:b9:f6:02: d3:48:fa:4f:49:37:15:1b:fb:76:15:24:3b:46:1e:17:a5:17: ec:a3:18:90:2c:8a:5e:f7:1d:31:53:8a:97:db:03:89:04:a1: 74:1c:83:b6:60:37:12:29:2e:92:83:da:a1:08:ad:af:20:86: 42:b3:8c:55:c5:62:0b:e5:63:aa:39:c3:42:94:2d:26:8b:a1: d4:a9:f2:66:ae:b7:05:06:4f:97:83:21:a8:d2:3e:e9:47:36: f3:66:d2:6f:1a:f9:f2:a0:31:50:6c:f9:a0:ce:b4:40:23:cb: 7d:1d:39:12:22:67:e3:2f:06:cf:63:80:04:a5:63:f0:4e:ac: 8c:5f:54:8c:85:d8:8b:19:a4:1f:10:90:4c:b2:9d:73:98:89: 46:33:06:10:82:25:33:02:45:45:9a:61:15:9d:52:fb:83:9b: 4d:54:f9:f7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4ou0P8U0TbsUHQOe/vEVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZTI4MDM5NjQ2ZGNjMzJlY2ViNTg0MjhmOTdjYzk5NGI5 OTg1NzcwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGNiNWJhZWE1NzEwOTE2YzdhZDRjYzk5MzhlMzFlYTYzMTQ3ZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiIYYFt2QONDa4+BzeoJOf2Wppzx tNRNXZlqWggVzshZs3dMoUzREiglCW/sSGoYw9Xa7FFThc3/+vqmQn4ycMcEjCeq WDYHxxoXcoOlNwpzznPN+98Mq9WlSv08KSvr1LhfhcgttOlhq3szjqZaVmq4KH1V c2xC2R1WFrChk/BY4R8Eg8fBDfsnpC8tz3Lk/GhNZWcj7yzHZA02YqYPTB+ogcrq W/fjBH4j2p/LcPoannCsgjAau9X8e/AOct18GJjKRjtFn5OKxJFARvBY+cOiF2FF 0Kb/LXmBmxatYDtXE9igiJ8qVgW6ftkQED9RSVmH3rEqCKAbyzOZm6zRPQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFO3LW66lcQkWx61MyZOOMepjFH48MB8GA1UdIwQY MBaAFBLigDlkbcwy7OtYQo+XzJlLmYV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXVLQU9XUnR6RExzNjFoQ2o1Zk1tVXVaaFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YWIxZTAtNmQ3ZC00NGZkLThkMjAt MzZkOTFkYmNmYzQxLzEvN2N0YnJxVnhDUmJIclV6Sms0NHg2bU1VZmp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80YWIxZTAtNmQ3ZC00NGZkLThkMjAtMzZkOTFkYmNmYzQx LzEvRXVLQU9XUnR6RExzNjFoQ2o1Zk1tVXVaaFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADZdWED BADZdWIwDQYJKoZIhvcNAQELBQADggEBAJXs3vqveo3ec8/MlQgYhiWqYs7GZayU S+Svvz/Nl1v67120BBgsSx5FOipjGGzfMq04oM+rnYmdeYxLV0g2mNTYYYuqNxg9 ab0DC0kSmwgNVwGamU6YIrn2AtNI+k9JNxUb+3YVJDtGHhelF+yjGJAsil73HTFT ipfbA4kEoXQcg7ZgNxIpLpKD2qEIra8ghkKzjFXFYgvlY6o5w0KULSaLodSp8mau twUGT5eDIajSPulHNvNm0m8a+fKgMVBs+aDOtEAjy30dORIiZ+MvBs9jgASlY/BO rIxfVIyF2IsZpB8QkEyynXOYiUYzBhCCJTMCRUWaYRWdUvuDm01U+fc= -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:55 2026 by rpki-client