This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_hpXRDy0EUFzfhN_aHdFdymXiIA.roa File: _hpXRDy0EUFzfhN_aHdFdymXiIA.roa (raw, json) Hash identifier: HAN6zvmeqHdwoZfGyxOd38E87FHJX9YZiFoBibK2IOk= Subject key identifier: FE:1A:57:44:3C:B4:11:41:73:7E:13:7F:68:77:45:77:29:97:88:80 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F10FFAF226668315525774CB000E Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_hpXRDy0EUFzfhN_aHdFdymXiIA.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201363 IP address blocks: 217.113.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f1:0f:fa:f2:26:66:83:15:52:57:74:cb:00:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe1a57443cb41141737e137f6877457729978880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:dc:b7:7e:84:5a:7d:95:4c:06:15:59:25: 37:1f:9d:63:d4:61:96:85:fb:1d:a7:a2:0b:d9:fa: ea:7c:77:52:ad:6e:e1:f8:ef:fe:00:92:79:93:35: 69:6c:07:40:1f:a9:e0:1f:97:42:58:61:9b:80:ac: a7:ed:23:00:f3:64:e2:c1:e4:10:31:8c:bd:9a:3b: e9:31:31:a4:11:49:8b:88:23:6a:38:94:b4:be:29: 3f:16:f2:10:c3:0d:27:73:2f:d1:4a:f3:4c:db:c1: 5d:b1:5e:d3:9f:aa:22:c4:88:22:7e:31:72:90:fd: 7a:22:10:3f:94:57:3f:0b:a6:bd:63:69:c3:44:77: a6:f1:42:98:54:d2:50:ba:73:0f:49:54:dd:00:5f: 04:47:e7:33:aa:bf:cd:29:2f:a8:4a:88:60:9c:9b: 9e:f9:48:19:ab:65:1e:1c:4d:6a:32:f2:db:f7:0b: 8e:54:b8:e9:bd:44:21:1c:8c:e5:8f:fa:de:17:60: 21:3e:fc:1b:48:22:93:91:40:bc:fe:65:66:11:8d: ad:9c:01:83:6e:77:c9:eb:b3:ae:35:7b:9b:7d:ba: 80:05:41:cf:03:f7:d7:fe:74:30:c3:ee:de:29:e4: 20:92:2a:65:d8:97:cd:fb:d9:6a:81:93:a0:8b:67: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1A:57:44:3C:B4:11:41:73:7E:13:7F:68:77:45:77:29:97:88:80 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_hpXRDy0EUFzfhN_aHdFdymXiIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.113.17.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:10:f0:d9:a0:20:46:e5:f2:20:e9:53:30:53:d6:91:81:30: 3c:bd:29:02:b4:5f:0e:93:b4:18:3e:53:71:b6:97:c7:d9:61: af:4a:8d:d1:78:90:0c:ad:8d:d6:a2:6d:19:e7:50:9d:7d:5c: cc:de:04:78:d5:97:28:30:fa:51:47:b3:7d:69:1f:7d:51:f7: c0:2d:2a:af:d1:97:ee:f5:d8:db:da:95:b1:c4:15:52:31:b7: 1c:b6:0f:2b:a7:e8:0f:c2:8c:b1:61:86:a5:16:d4:da:94:4a: 90:63:90:14:05:5e:23:67:75:53:fa:86:94:2c:b4:2e:3a:8c: cd:12:e8:25:2e:72:99:22:2b:01:11:01:39:27:61:a9:ca:96: da:64:02:80:7f:76:06:c7:8e:c3:72:f9:01:39:e2:60:86:3e: e5:c8:c3:e8:85:24:c0:4e:c4:92:79:a4:ca:b6:6e:90:42:db: 15:a0:3e:c2:70:77:0e:a4:2d:da:b5:25:b7:23:cb:7c:14:05: 97:cd:98:a3:bf:8c:4a:18:e9:1a:86:29:c2:bc:37:d6:b1:b0: 8c:6c:16:99:d6:42:a0:31:d9:ef:ab:09:03:f7:8c:b5:e4:03: 96:b0:cc:74:94:b9:61:17:90:ea:ea:38:2d:11:24:f9:2b:42: d4:a7:49:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPEP+vImZoMVUld0ywAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTFhNTc0NDNjYjQxMTQxNzM3ZTEzN2Y2ODc3NDU3NzI5OTc4ODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu/ct36EWn2VTAYVWSU3H51j1GGW hfsdp6IL2frqfHdSrW7h+O/+AJJ5kzVpbAdAH6ngH5dCWGGbgKyn7SMA82TiweQQ MYy9mjvpMTGkEUmLiCNqOJS0vik/FvIQww0ncy/RSvNM28FdsV7Tn6oixIgifjFy kP16IhA/lFc/C6a9Y2nDRHem8UKYVNJQunMPSVTdAF8ER+czqr/NKS+oSohgnJue +UgZq2UeHE1qMvLb9wuOVLjpvUQhHIzlj/reF2AhPvwbSCKTkUC8/mVmEY2tnAGD bnfJ67OuNXubfbqABUHPA/fX/nQww+7eKeQgkipl2JfN+9lqgZOgi2f+rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP4aV0Q8tBFBc34Tf2h3RXcpl4iAMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvX2hwWFJEeTBFVUZ6ZmhOX2FIZEZkeW1YaUlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XERMA0G CSqGSIb3DQEBCwUAA4IBAQBdEPDZoCBG5fIg6VMwU9aRgTA8vSkCtF8Ok7QYPlNx tpfH2WGvSo3ReJAMrY3Wom0Z51CdfVzM3gR41ZcoMPpRR7N9aR99UffALSqv0Zfu 9djb2pWxxBVSMbcctg8rp+gPwoyxYYalFtTalEqQY5AUBV4jZ3VT+oaULLQuOozN EuglLnKZIisBEQE5J2GpypbaZAKAf3YGx47DcvkBOeJghj7lyMPohSTATsSSeaTK tm6QQtsVoD7CcHcOpC3atSW3I8t8FAWXzZijv4xKGOkahinCvDfWsbCMbBaZ1kKg MdnvqwkD94y15AOWsMx0lLlhF5Dq6jgtEST5K0LUp0nX -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:04 2026 by rpki-client