This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/PAfdDZa_q4OBNia-hpvp6zen1_k.roa File: PAfdDZa_q4OBNia-hpvp6zen1_k.roa (raw, json) Hash identifier: CDSvDD8trVlggYqZfiozMlnzeaU5M68yhDEEERt7r6s= Subject key identifier: 3C:07:DD:0D:96:BF:AB:83:81:36:26:BE:86:9B:E9:EB:37:A7:D7:F9 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14B898E0AE9DE909B6AEDEECF6754F Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/PAfdDZa_q4OBNia-hpvp6zen1_k.roa Signing time: Fri 02 Jan 2026 14:20:23 +0000 ROA not before: Fri 02 Jan 2026 14:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59729 IP address blocks: 217.8.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:b8:98:e0:ae:9d:e9:09:b6:ae:de:ec:f6:75:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c07dd0d96bfab83813626be869be9eb37a7d7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:d5:be:52:ed:3e:c3:bc:69:cc:a6:ec:a6: 8a:cd:82:b1:82:6d:a1:6d:e8:f3:0a:08:5c:9c:e7: a7:6f:9f:31:f5:03:29:84:c6:7d:e5:21:8e:d1:4e: 4a:29:a7:14:2a:9b:8b:5c:4b:10:3f:ca:f9:74:33: f2:31:fc:bd:b5:df:ed:cf:9a:4f:a2:e9:c2:82:aa: 1c:1e:94:dd:38:cc:e0:a3:32:bd:39:ae:c0:c0:78: a0:08:2d:01:13:5c:2f:84:43:52:87:36:81:2e:82: 5d:e4:5c:d4:21:d8:d1:0a:cb:37:8f:b1:bd:92:ad: 50:07:6b:2f:28:63:7a:5b:c9:d1:96:0c:bf:a8:6c: 6a:78:77:13:36:44:14:13:96:e4:13:c3:ef:c8:dd: 71:58:b3:4b:4c:71:b9:5d:8c:0e:f0:4b:be:c8:a6: 2f:28:a0:8e:6a:b3:fa:e9:0f:6e:88:11:0b:c6:7b: 63:38:1a:ed:a5:f2:9a:d8:64:1e:3a:86:71:f2:b9: 2a:9f:40:cd:e2:86:c1:5e:44:cb:8b:14:16:00:a5: be:b0:1e:f7:bb:9a:28:71:ef:49:86:df:f2:4c:62: 48:47:3f:1f:eb:38:77:22:37:3c:ea:31:aa:5b:d5: 88:03:7a:57:a7:0f:04:02:45:e4:0b:75:0c:8e:37: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:07:DD:0D:96:BF:AB:83:81:36:26:BE:86:9B:E9:EB:37:A7:D7:F9 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/PAfdDZa_q4OBNia-hpvp6zen1_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.8.216.0/24 Signature Algorithm: sha256WithRSAEncryption c6:10:8d:f4:64:77:10:93:0c:11:32:d2:01:e1:e9:7b:6b:8e: 17:8c:dd:3f:e0:b6:12:a5:d2:b0:c5:5b:0a:4c:9f:77:8d:f8: 67:b9:f7:b4:59:e3:2c:8c:2c:3d:13:d2:b6:61:6f:a9:e8:d2: 9c:58:9f:50:6e:d3:e3:5d:0b:86:1a:46:4e:22:2b:2b:be:66: 77:52:a3:84:37:33:de:d1:65:54:d7:30:cf:a7:9c:77:2f:bc: 03:1f:e3:15:e9:3a:fa:44:b4:2a:cf:a4:0f:77:2e:29:b1:bb: d9:35:27:5a:9f:70:2d:a6:30:a5:f0:ec:4e:4b:c7:29:55:49: 5d:2b:f8:44:f5:f2:dc:d4:22:29:50:dd:f6:4d:73:c9:38:5f: a0:f8:3a:76:fd:0d:2d:e7:c4:ee:af:7a:56:69:8a:18:67:a4: 3e:6f:c0:5c:e8:26:b3:35:52:31:c8:0a:44:86:20:28:86:e9: 39:e9:15:08:01:80:d4:b4:32:60:1f:ca:ce:5b:82:1c:2d:0b: 99:63:4d:c2:87:e3:ea:5d:0e:09:6f:23:cf:58:7a:7c:07:de: 1e:56:e9:e0:97:1d:29:07:07:39:23:94:aa:2a:f3:e7:34:de: 37:6b:6c:4d:19:ec:e2:1f:97:cc:87:3e:66:ef:e1:71:89:4b: 67:be:d9:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FLiY4K6d6Qm2rt7s9nVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzA3ZGQwZDk2YmZhYjgzODEzNjI2YmU4NjliZTllYjM3YTdkN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJTVvlLtPsO8acym7KaKzYKxgm2h bejzCghcnOenb58x9QMphMZ95SGO0U5KKacUKpuLXEsQP8r5dDPyMfy9td/tz5pP ounCgqocHpTdOMzgozK9Oa7AwHigCC0BE1wvhENShzaBLoJd5FzUIdjRCss3j7G9 kq1QB2svKGN6W8nRlgy/qGxqeHcTNkQUE5bkE8PvyN1xWLNLTHG5XYwO8Eu+yKYv KKCOarP66Q9uiBELxntjOBrtpfKa2GQeOoZx8rkqn0DN4obBXkTLixQWAKW+sB73 u5ooce9Jht/yTGJIRz8f6zh3Ijc86jGqW9WIA3pXpw8EAkXkC3UMjjc4swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDwH3Q2Wv6uDgTYmvoab6es3p9f5MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvUEFmZERaYV9xNE9CTmlhLWhwdnA2emVuMV9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QjYMA0G CSqGSIb3DQEBCwUAA4IBAQDGEI30ZHcQkwwRMtIB4el7a44XjN0/4LYSpdKwxVsK TJ93jfhnufe0WeMsjCw9E9K2YW+p6NKcWJ9QbtPjXQuGGkZOIisrvmZ3UqOENzPe 0WVU1zDPp5x3L7wDH+MV6Tr6RLQqz6QPdy4psbvZNSdan3AtpjCl8OxOS8cpVUld K/hE9fLc1CIpUN32TXPJOF+g+Dp2/Q0t58Tur3pWaYoYZ6Q+b8Bc6CazNVIxyApE hiAohuk56RUIAYDUtDJgH8rOW4IcLQuZY03Ch+PqXQ4JbyPPWHp8B94eVunglx0p Bwc5I5SqKvPnNN43a2xNGeziH5fMhz5m7+FxiUtnvtl4 -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:10 2026 by rpki-client