This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/z4qebrlxoCTWKQYs_5DhTFQmnbQ.roa File: z4qebrlxoCTWKQYs_5DhTFQmnbQ.roa (raw, json) Hash identifier: vmqtsShBDwyvuz3COzl63zKiNkUIbp3VBuhBqO6QmVQ= Subject key identifier: CF:8A:9E:6E:B9:71:A0:24:D6:29:06:2C:FF:90:E1:4C:54:26:9D:B4 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F37D2C9576C6096966AF8FB6911E Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/z4qebrlxoCTWKQYs_5DhTFQmnbQ.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209778 IP address blocks: 217.113.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f3:7d:2c:95:76:c6:09:69:66:af:8f:b6:91:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf8a9e6eb971a024d629062cff90e14c54269db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cd:17:30:cb:e7:9c:57:91:ef:c5:9e:b8:ea: 1e:80:f8:f9:4a:9c:df:ed:f1:2e:03:a3:c9:0f:f3: 27:81:30:a1:53:1b:58:24:25:ab:e2:9a:3d:07:aa: 44:95:82:70:fe:e0:93:ff:0a:82:7d:0d:24:16:33: bd:b0:be:05:e3:e4:46:71:e6:7b:2c:6a:78:6d:6b: 9d:94:23:bb:0f:e5:4a:66:a6:da:46:3e:7f:86:d5: dd:3d:be:ad:bb:24:9f:b8:14:de:83:b0:1e:db:36: 67:38:ed:2b:76:b2:2a:a1:bb:02:7b:44:67:3d:9f: ea:c6:88:53:50:77:67:68:25:d1:81:a3:f6:68:e5: 72:40:3e:e3:d6:3f:e2:1f:b3:dc:62:41:d2:c7:b8: d4:0c:33:e1:38:25:4d:c3:43:5a:aa:91:ec:5d:c7: 4f:45:30:d5:15:d9:3b:f7:69:e5:56:2f:fc:0d:2b: 34:66:2f:1c:34:93:b9:f2:02:b3:93:87:0d:a2:04: cd:83:a0:45:c0:a7:87:89:7a:2a:54:74:bb:a6:1e: 84:b6:79:3f:f1:c8:3e:5f:4c:ea:55:65:2c:1d:bc: 5f:d7:57:4c:ee:53:35:0e:14:c2:3c:d0:6c:8b:a9: e0:20:27:0f:0c:13:75:2f:6b:66:54:56:16:3e:e8: 75:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8A:9E:6E:B9:71:A0:24:D6:29:06:2C:FF:90:E1:4C:54:26:9D:B4 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/z4qebrlxoCTWKQYs_5DhTFQmnbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.113.24.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:a8:94:23:cd:38:53:19:3a:84:5f:2b:75:14:6f:d2:b4:f6: 1e:a4:0b:f6:a0:6a:a1:ea:a3:aa:3e:e4:e3:6e:b7:05:4c:2c: f2:c4:d2:b5:33:9d:be:29:a8:d1:a7:54:c1:f5:6d:28:3b:46: c3:10:7b:8c:fd:b9:da:6a:47:aa:d3:44:89:06:80:67:5a:01: 9f:39:09:32:84:fa:6e:0e:ff:ec:a4:ec:3a:2b:14:a0:15:14: 86:f5:a3:72:9b:1d:82:9a:32:47:6a:73:29:1e:7e:f4:44:dd: 60:e1:c6:bc:a8:35:f2:26:c4:a8:df:56:a1:97:7b:cd:d4:b3: 8b:ca:61:a1:81:8b:2b:ad:92:7d:db:78:e2:42:e8:2d:b8:d5: 6c:1c:aa:86:64:31:23:1b:38:d9:e3:80:6a:dc:8d:a4:e5:9e: 1c:92:36:13:b3:ae:c9:7b:20:22:47:4c:d0:82:ec:7a:9a:52: 2b:ca:9b:8c:c2:67:7c:ec:43:61:5d:ca:3c:07:e5:d6:90:bb: e3:ec:f4:ad:d2:5b:9d:bf:8e:a0:2c:06:7e:c0:0e:2b:95:54: 59:47:d7:96:5a:e5:95:bd:7d:eb:8e:07:39:cc:a8:67:a7:16: a7:0f:68:6e:f0:0f:6c:eb:a0:fb:ec:fe:4d:42:e8:53:c6:dc: 47:2a:02:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPN9LJV2xglpZq+PtpEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjhhOWU2ZWI5NzFhMDI0ZDYyOTA2MmNmZjkwZTE0YzU0MjY5ZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA780XMMvnnFeR78WeuOoegPj5Spzf 7fEuA6PJD/MngTChUxtYJCWr4po9B6pElYJw/uCT/wqCfQ0kFjO9sL4F4+RGceZ7 LGp4bWudlCO7D+VKZqbaRj5/htXdPb6tuySfuBTeg7Ae2zZnOO0rdrIqobsCe0Rn PZ/qxohTUHdnaCXRgaP2aOVyQD7j1j/iH7PcYkHSx7jUDDPhOCVNw0NaqpHsXcdP RTDVFdk792nlVi/8DSs0Zi8cNJO58gKzk4cNogTNg6BFwKeHiXoqVHS7ph6Etnk/ 8cg+X0zqVWUsHbxf11dM7lM1DhTCPNBsi6ngICcPDBN1L2tmVFYWPuh1awIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM+Knm65caAk1ikGLP+Q4UxUJp20MB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvejRxZWJybHhvQ1RXS1FZc181RGhURlFtbmJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XEYMA0G CSqGSIb3DQEBCwUAA4IBAQAuqJQjzThTGTqEXyt1FG/StPYepAv2oGqh6qOqPuTj brcFTCzyxNK1M52+KajRp1TB9W0oO0bDEHuM/bnaakeq00SJBoBnWgGfOQkyhPpu Dv/spOw6KxSgFRSG9aNymx2CmjJHanMpHn70RN1g4ca8qDXyJsSo31ahl3vN1LOL ymGhgYsrrZJ923jiQugtuNVsHKqGZDEjGzjZ44Bq3I2k5Z4ckjYTs67JeyAiR0zQ gux6mlIrypuMwmd87ENhXco8B+XWkLvj7PSt0ludv46gLAZ+wA4rlVRZR9eWWuWV vX3rjgc5zKhnpxanD2hu8A9s66D77P5NQuhTxtxHKgKg -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:17 2026 by rpki-client