This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/FoavqWF8jeAMSQlW10lOBirX1-Q.roa File: FoavqWF8jeAMSQlW10lOBirX1-Q.roa (raw, json) Hash identifier: p8z3kmN7e3hhfZrzVOMRMMtYhzpF+J1m/L2uzSJKAM8= Subject key identifier: 16:86:AF:A9:61:7C:8D:E0:0C:49:09:56:D7:49:4E:06:2A:D7:D7:E4 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F3F5236E271A336FEC1315AD268A Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/FoavqWF8jeAMSQlW10lOBirX1-Q.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210147 IP address blocks: 217.113.22.0/23 maxlen: 24 217.113.22.0/24 maxlen: 24 217.113.23.0/24 maxlen: 24 217.113.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f3:f5:23:6e:27:1a:33:6f:ec:13:15:ad:26:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1686afa9617c8de00c490956d7494e062ad7d7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b9:ae:59:6c:03:da:02:d4:c7:88:2e:59:04: 50:1a:60:08:83:3a:29:d6:96:49:2b:44:78:eb:db: 52:06:55:e5:58:98:b0:ca:7d:03:29:4a:95:d0:65: 62:43:10:fc:23:62:fe:1d:10:8e:d5:fa:c4:1b:46: 41:fa:03:80:a6:7e:79:ff:33:05:6d:a8:ea:8b:de: c9:73:3c:fa:d1:bf:26:3d:95:a3:b8:dd:09:87:b1: 49:18:96:db:b4:2f:26:3b:87:1c:9c:cb:8c:81:6a: a7:0d:2e:bb:1e:f8:13:4e:cb:62:a8:73:c2:be:c4: 40:f7:f3:82:ec:5c:41:e8:46:ab:71:d9:75:31:98: c5:63:2a:02:b3:23:0d:fe:29:3d:b4:f1:d5:12:9a: eb:99:2f:5a:89:b8:6f:25:25:4c:f7:0c:0b:6e:d8: 06:27:9c:d7:76:67:95:dd:44:79:78:e4:be:e5:a4: c7:18:e1:51:d4:ee:b3:88:a0:fc:b2:fb:14:3f:be: 46:37:68:ee:c2:16:ad:b2:a0:dc:6b:49:54:c3:a8: 59:e6:9a:fe:77:6c:16:61:e2:d2:37:cf:3e:a6:6e: df:fb:6f:d3:3c:2c:80:85:06:77:bf:80:10:5c:56: 25:60:8b:73:86:ba:3e:c9:97:60:4e:d2:cf:64:d7: 5f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:86:AF:A9:61:7C:8D:E0:0C:49:09:56:D7:49:4E:06:2A:D7:D7:E4 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/FoavqWF8jeAMSQlW10lOBirX1-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.113.22.0/23 217.113.31.0/24 Signature Algorithm: sha256WithRSAEncryption 12:8c:00:b3:07:72:77:6b:7a:6a:6a:58:79:79:7a:ef:a0:74: 57:a1:c4:10:dd:ce:63:c7:1b:b3:cc:79:a0:61:d4:00:7b:cf: 58:4e:6c:e2:ee:e9:eb:ae:1d:eb:11:63:22:1d:73:72:2b:c0: 1d:01:54:f7:e3:8a:33:f7:06:93:d9:bf:25:15:08:fb:e3:bf: 45:fe:00:a5:e3:1c:ed:f6:5f:46:54:30:3d:d9:41:fd:78:1a: ee:ed:b4:59:b4:85:5b:5e:de:43:49:b9:a9:7d:0f:72:9d:33: 2e:3b:68:55:2a:21:99:89:97:94:7c:8b:c4:7b:ed:be:0f:86: ff:88:95:2b:e7:47:ac:ab:2b:a2:19:5c:0a:b7:c9:1e:dd:5c: b9:43:2c:06:49:1a:8b:cb:bb:ed:9c:1a:8c:1c:fb:0e:2e:b7: 87:3e:61:23:cd:ea:2e:c2:d0:68:e4:83:8a:22:33:d5:de:f1: 61:aa:5d:a1:3c:f7:32:56:c2:4d:1d:c0:2a:1a:99:90:28:d0: ff:a2:e3:b7:0f:b5:db:86:30:b8:c2:dd:d3:5b:8e:ae:e8:49: 6c:f0:51:b9:f8:db:12:7e:73:c7:12:b4:a1:fb:54:0d:2b:37: ec:86:4c:70:67:10:e8:6b:1c:a6:06:cb:5a:cc:62:c1:57:42: b8:f7:b1:ca -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WPP1I24nGjNv7BMVrSaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjg2YWZhOTYxN2M4ZGUwMGM0OTA5NTZkNzQ5NGUwNjJhZDdkN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7muWWwD2gLUx4guWQRQGmAIgzop 1pZJK0R469tSBlXlWJiwyn0DKUqV0GViQxD8I2L+HRCO1frEG0ZB+gOApn55/zMF bajqi97Jczz60b8mPZWjuN0Jh7FJGJbbtC8mO4ccnMuMgWqnDS67HvgTTstiqHPC vsRA9/OC7FxB6Earcdl1MZjFYyoCsyMN/ik9tPHVEprrmS9aibhvJSVM9wwLbtgG J5zXdmeV3UR5eOS+5aTHGOFR1O6ziKD8svsUP75GN2juwhatsqDca0lUw6hZ5pr+ d2wWYeLSN88+pm7f+2/TPCyAhQZ3v4AQXFYlYItzhro+yZdgTtLPZNdfowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBaGr6lhfI3gDEkJVtdJTgYq19fkMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvRm9hdnFXRjhqZUFNU1FsVzEwbE9CaXJYMS1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB2XEWAwQA 2XEfMA0GCSqGSIb3DQEBCwUAA4IBAQASjACzB3J3a3pqalh5eXrvoHRXocQQ3c5j xxuzzHmgYdQAe89YTmzi7unrrh3rEWMiHXNyK8AdAVT344oz9waT2b8lFQj7479F /gCl4xzt9l9GVDA92UH9eBru7bRZtIVbXt5DSbmpfQ9ynTMuO2hVKiGZiZeUfIvE e+2+D4b/iJUr50esqyuiGVwKt8ke3Vy5QywGSRqLy7vtnBqMHPsOLreHPmEjzeou wtBo5IOKIjPV3vFhql2hPPcyVsJNHcAqGpmQKND/ouO3D7XbhjC4wt3TW46u6Els 8FG5+NsSfnPHErSh+1QNKzfshkxwZxDoaxymBstazGLBV0K497HK -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:37 2026 by rpki-client