This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa File: 1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa (raw, json) Hash identifier: uRHVp/iNbMxJaaaPObGWSNEIFbTXLqpiK+JCvtnSoQ4= Subject key identifier: F8:3C:F3:86:E4:1A:73:26:DA:BC:8D:09:10:52:7F:3F:1C:BB:92:DE Certificate issuer: /CN=7c99016af748a48fce84f63f5e3a89331427dd8c Certificate serial: 019B7BA53064587A00F89B840777414B2081 Authority key identifier: 7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209894 IP address blocks: 217.70.1.0/24 maxlen: 24 2a14:440::/30 maxlen: 30 2a14:440:1000::/36 maxlen: 36 2a14:440:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:30:64:58:7a:00:f8:9b:84:07:77:41:4b:20:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c99016af748a48fce84f63f5e3a89331427dd8c Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f83cf386e41a7326dabc8d0910527f3f1cbb92de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:ed:62:4e:35:48:50:b1:d1:b5:30:9d:08: d1:4b:2f:0b:3d:61:aa:ec:97:c1:ed:09:69:17:4c: c1:94:68:e1:da:ec:f5:5a:28:55:ae:ec:e2:ff:30: e3:0f:3a:a2:ae:96:0a:9d:72:91:e2:d4:e7:d7:e3: c1:ac:98:28:f7:84:be:91:dc:ed:e4:f3:89:f7:0f: 52:54:17:26:f4:8d:c9:1c:df:2b:a1:16:f6:e2:16: f3:b0:f0:0e:d0:46:2c:60:54:f4:15:22:36:28:f8: 93:7b:15:b5:72:65:9f:e1:8b:06:78:a3:52:cc:3f: 55:2a:14:c9:6e:22:f8:2e:e1:0a:86:f2:e0:b1:6c: 84:01:b9:32:8f:66:b9:1b:0e:89:18:42:79:3e:d9: a6:3b:0e:67:6e:3f:21:73:01:38:58:75:c2:d6:a3: d1:0d:f1:c7:d1:98:b2:3f:b1:ae:bb:08:d1:f8:76: a4:a8:04:bc:12:e8:b5:b5:23:96:e4:ff:82:08:fe: a9:e0:11:0a:74:97:12:c8:fc:f8:fa:d9:d8:2d:67: 87:8c:17:5d:99:ad:36:75:78:f8:97:22:85:6e:1f: 49:c5:cf:ca:d1:3d:95:bc:2b:c6:ff:c7:25:34:2f: 01:09:35:55:3d:f6:c1:00:b8:37:50:c5:8c:e1:16: af:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3C:F3:86:E4:1A:73:26:DA:BC:8D:09:10:52:7F:3F:1C:BB:92:DE X509v3 Authority Key Identifier: keyid:7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.70.1.0/24 IPv6: 2a14:440::/30 Signature Algorithm: sha256WithRSAEncryption 33:84:00:cf:cd:54:09:c1:07:00:55:cf:47:e5:a4:90:74:bf: 97:cb:ed:46:d8:f6:73:70:7f:ca:7d:ec:8d:5a:4e:72:09:f8: 7e:fa:6b:de:32:09:78:31:44:5e:32:4a:50:aa:cd:1a:14:b5: 0b:f2:a9:53:33:3e:04:94:bf:f9:1e:c7:63:62:5d:d8:67:18: 89:a3:d5:e0:34:aa:aa:af:8e:67:b8:d5:73:0f:50:c2:d0:67: 3a:2d:9d:1d:45:12:90:43:63:ae:3f:c9:4f:15:81:13:aa:97: aa:a3:64:8d:37:9f:c2:e1:db:14:9f:72:7c:e9:a1:1d:52:b1: d5:7e:ee:90:d6:5a:a7:52:98:0b:21:a3:f4:7a:f2:d1:ba:e9: c9:86:9a:c4:1e:f7:58:5d:22:70:3b:24:c5:22:89:96:de:df: 37:8d:35:92:34:09:05:56:72:4e:af:d5:93:ae:e6:b1:cd:66: 3d:b6:9c:b6:50:39:29:0e:90:38:38:dd:de:2c:a3:4f:52:0b: 88:3f:79:b1:b7:e3:45:b0:00:17:fd:51:0c:37:01:e7:79:58: da:e3:ef:e6:79:78:f1:05:be:eb:60:86:a8:7b:3a:ca:b6:21: 3a:bd:d9:22:24:99:4e:c7:54:08:54:6e:cc:87:a2:f8:e0:20: e7:c6:ac:0b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt7pTBkWHoA+JuEB3dBSyCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjOTkwMTZhZjc0OGE0OGZjZTg0ZjYzZjVlM2E4OTMzMTQy N2RkOGMwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODNjZjM4NmU0MWE3MzI2ZGFiYzhkMDkxMDUyN2YzZjFjYmI5MmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnXtYk41SFCx0bUwnQjRSy8LPWGq 7JfB7QlpF0zBlGjh2uz1WihVruzi/zDjDzqirpYKnXKR4tTn1+PBrJgo94S+kdzt 5POJ9w9SVBcm9I3JHN8roRb24hbzsPAO0EYsYFT0FSI2KPiTexW1cmWf4YsGeKNS zD9VKhTJbiL4LuEKhvLgsWyEAbkyj2a5Gw6JGEJ5PtmmOw5nbj8hcwE4WHXC1qPR DfHH0ZiyP7GuuwjR+HakqAS8Eui1tSOW5P+CCP6p4BEKdJcSyPz4+tnYLWeHjBdd ma02dXj4lyKFbh9Jxc/K0T2VvCvG/8clNC8BCTVVPfbBALg3UMWM4RavAwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPg884bkGnMm2ryNCRBSfz8cu5LeMB8GA1UdIwQY MBaAFHyZAWr3SKSPzoT2P146iTMUJ92MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkprQmF2ZElwSV9PaFBZX1hqcUpNeFFuM1l3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zZjcyZDctYjViNS00ZGMyLTlmMDIt MTU1NGYxZDNiOWI2LzEvMS1EenpodVFhY3liYXZJMEpFRkpfUHh5N2t0NC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDUvM2Y3MmQ3LWI1YjUtNGRjMi05ZjAyLTE1NTRmMWQzYjli Ni8xL2ZKa0JhdmRJcElfT2hQWV9YanFKTXhRbjNZdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEANlGATAN BAIAAjAHAwUCKhQEQDANBgkqhkiG9w0BAQsFAAOCAQEAM4QAz81UCcEHAFXPR+Wk kHS/l8vtRtj2c3B/yn3sjVpOcgn4fvpr3jIJeDFEXjJKUKrNGhS1C/KpUzM+BJS/ +R7HY2Jd2GcYiaPV4DSqqq+OZ7jVcw9QwtBnOi2dHUUSkENjrj/JTxWBE6qXqqNk jTefwuHbFJ9yfOmhHVKx1X7ukNZap1KYCyGj9Hry0brpyYaaxB73WF0icDskxSKJ lt7fN401kjQJBVZyTq/Vk67msc1mPbactlA5KQ6QODjd3iyjT1ILiD95sbfjRbAA F/1RDDcB53lY2uPv5nl48QW+62CGqHs6yrYhOr3ZIiSZTsdUCFRuzIei+OAg58as Cw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:30 2026 by rpki-client