This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zM7bb3oEHINoYMOeQRk-XYW9EkU.roa File: zM7bb3oEHINoYMOeQRk-XYW9EkU.roa (raw, json) Hash identifier: RdFq0JyIVgelxWsJ1/n+o94CMLBqw3yV+IpTMdt32Uo= Subject key identifier: CC:CE:DB:6F:7A:04:1C:83:68:60:C3:9E:41:19:3E:5D:85:BD:12:45 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F1E6502EC9D64AC71B42AC05025C Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zM7bb3oEHINoYMOeQRk-XYW9EkU.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206783 IP address blocks: 217.113.26.0/23 maxlen: 24 217.113.26.0/24 maxlen: 24 217.113.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f1:e6:50:2e:c9:d6:4a:c7:1b:42:ac:05:02:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cccedb6f7a041c836860c39e41193e5d85bd1245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:a9:53:9a:1a:ef:c0:ab:31:c2:23:af:3b: 83:9d:61:58:36:11:f3:48:3e:8a:5c:58:1c:7e:83: 42:8f:44:24:ee:37:3c:eb:2f:b0:fb:cd:16:c1:ba: 42:a2:53:e1:16:7a:03:fc:6c:16:e8:45:92:66:f5: 73:46:3b:5d:a7:00:55:ac:60:6b:de:24:00:d6:c4: fa:af:f1:5a:47:38:10:91:6c:6c:9f:4d:3c:73:5a: af:29:ce:f2:eb:1e:1a:a0:65:7d:80:f0:45:60:90: 15:98:22:5a:e6:42:c3:b3:9d:c5:c7:87:96:02:5a: 92:60:c8:40:c6:e4:ad:62:83:46:cf:ab:b7:de:c1: 3c:22:cb:6e:10:fa:3f:63:f4:44:41:f1:31:b2:82: df:34:a3:58:8b:78:cf:21:ab:6d:f6:67:ae:ca:0a: 5f:26:5d:9d:85:ad:a5:6c:3e:f1:0f:71:f9:52:ba: 2e:d1:da:9b:95:20:6e:b7:e6:99:75:9d:47:63:88: 1c:3a:18:0b:c3:38:41:95:40:8f:bf:61:99:f3:7f: aa:0e:5c:93:41:b7:53:58:1a:50:99:55:76:16:d1: d9:d8:51:d6:9a:ad:40:68:b7:4c:63:75:84:de:ee: 20:dc:e1:1a:ee:79:02:1e:13:1a:a3:74:91:6f:89: 48:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CE:DB:6F:7A:04:1C:83:68:60:C3:9E:41:19:3E:5D:85:BD:12:45 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zM7bb3oEHINoYMOeQRk-XYW9EkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.113.26.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:fa:a1:ca:97:e1:cd:6e:5e:cf:20:5f:c3:f5:7e:65:0d:90: 4c:10:e7:18:ef:16:36:7b:87:de:f3:ab:8e:b3:d1:30:e8:36: 51:62:a7:15:b3:4a:87:93:4e:cf:88:1c:90:07:28:d3:a7:91: b4:1d:96:32:38:ea:64:10:d8:b9:ca:3a:5b:d9:18:22:77:86: 1d:10:54:26:61:ff:50:64:60:d2:7a:19:61:22:2d:a9:b6:1c: eb:cc:c7:8e:2e:34:d1:2f:61:6c:9a:9a:91:96:32:df:9a:d8: 2f:c1:87:1d:9c:d6:10:7c:6b:b1:65:23:36:83:f9:f8:b9:fd: a2:f9:7d:12:72:4b:79:97:4a:91:60:42:b3:d8:18:2b:07:5c: 83:09:96:e6:68:75:5e:ad:8f:9e:ea:e8:f3:cd:5c:68:4f:e5: b4:81:bb:a3:b4:64:0d:bb:51:a4:b5:48:64:64:34:5f:b1:77: d3:e4:19:84:cf:88:c8:4e:37:82:2b:04:83:d5:5d:62:a5:42: e2:8c:35:db:a7:3e:7c:e7:cb:4b:d3:a7:35:2f:db:15:b3:23: 30:df:a3:f7:18:5b:de:45:92:68:51:b5:50:49:9d:65:11:47: cb:b3:46:ac:e3:67:c8:b1:5d:4d:7a:c4:34:e5:a2:d8:79:18: 3e:fe:fc:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPHmUC7J1krHG0KsBQJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2NlZGI2ZjdhMDQxYzgzNjg2MGMzOWU0MTE5M2U1ZDg1YmQxMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OypU5oa78CrMcIjrzuDnWFYNhHz SD6KXFgcfoNCj0Qk7jc86y+w+80WwbpColPhFnoD/GwW6EWSZvVzRjtdpwBVrGBr 3iQA1sT6r/FaRzgQkWxsn008c1qvKc7y6x4aoGV9gPBFYJAVmCJa5kLDs53Fx4eW AlqSYMhAxuStYoNGz6u33sE8IstuEPo/Y/REQfExsoLfNKNYi3jPIatt9meuygpf Jl2dha2lbD7xD3H5Urou0dqblSBut+aZdZ1HY4gcOhgLwzhBlUCPv2GZ83+qDlyT QbdTWBpQmVV2FtHZ2FHWmq1AaLdMY3WE3u4g3OEa7nkCHhMao3SRb4lIkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMzO2296BByDaGDDnkEZPl2FvRJFMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvek03YmIzb0VISU5vWU1PZVFSay1YWVc5RWtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2XEaMA0G CSqGSIb3DQEBCwUAA4IBAQBt+qHKl+HNbl7PIF/D9X5lDZBMEOcY7xY2e4fe86uO s9Ew6DZRYqcVs0qHk07PiByQByjTp5G0HZYyOOpkENi5yjpb2Rgid4YdEFQmYf9Q ZGDSehlhIi2pthzrzMeOLjTRL2FsmpqRljLfmtgvwYcdnNYQfGuxZSM2g/n4uf2i +X0Sckt5l0qRYEKz2BgrB1yDCZbmaHVerY+e6ujzzVxoT+W0gbujtGQNu1GktUhk ZDRfsXfT5BmEz4jITjeCKwSD1V1ipULijDXbpz5858tL06c1L9sVsyMw36P3GFve RZJoUbVQSZ1lEUfLs0as42fIsV1NesQ05aLYeRg+/vyX -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:20 2026 by rpki-client