This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/Rz5cTnyBnWFT9EVmAO2DToTzqjQ.roa File: Rz5cTnyBnWFT9EVmAO2DToTzqjQ.roa (raw, json) Hash identifier: QpdiNDmZNmo6MHI5am+4nY2x4KnJNC1wE1cSZK19vOY= Subject key identifier: 47:3E:5C:4E:7C:81:9D:61:53:F4:45:66:00:ED:83:4E:84:F3:AA:34 Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Certificate serial: 019B7E37674D80A80E542F8A063FC423E228 Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/Rz5cTnyBnWFT9EVmAO2DToTzqjQ.roa Signing time: Fri 02 Jan 2026 10:18:38 +0000 ROA not before: Fri 02 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3292 IP address blocks: 217.28.160.0/23 maxlen: 23 217.28.162.0/24 maxlen: 24 217.28.164.0/22 maxlen: 22 217.28.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:67:4d:80:a8:0e:54:2f:8a:06:3f:c4:23:e2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Validity Not Before: Jan 2 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=473e5c4e7c819d6153f4456600ed834e84f3aa34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:f7:17:c4:b7:7c:5f:83:b9:e4:cc:c3:52: 6a:5e:d1:37:e0:61:92:02:7f:bb:44:5c:5a:5d:d9: 01:b0:52:c6:e8:b1:45:cb:28:73:02:b8:b3:8e:22: b8:46:63:f3:88:93:35:f8:65:9b:9e:cd:28:f6:72: 2c:20:7f:56:cb:51:2e:9c:d5:ba:84:40:7b:cc:af: d5:3e:14:70:34:51:30:67:f5:c4:a4:b9:52:17:e0: 07:40:a8:ed:88:53:bd:8e:1a:33:68:2a:17:8a:8d: 9c:71:b1:47:26:37:3e:e8:35:c6:45:d8:1d:21:da: 82:1b:06:01:7c:26:69:46:05:fb:82:c4:df:ba:fc: e0:b7:bc:c6:b4:30:4f:ed:a9:98:a1:cc:20:8c:f1: 3e:af:44:a4:ca:92:56:13:52:65:c3:19:16:a8:22: 5f:94:b0:31:7f:3f:c1:a3:02:58:3e:3f:9b:29:ad: 84:ab:94:6a:5b:d9:d2:83:7e:de:c8:84:92:00:1e: df:bd:ff:4f:0e:cf:24:ac:66:a5:f3:17:6b:6f:f3: 5c:f6:1d:02:f3:96:58:17:99:96:2b:b9:56:cc:ed: 91:33:61:40:4f:52:9a:f8:4d:b3:f3:50:b4:86:ab: 8d:d5:15:a3:e3:f2:a3:ac:dd:ca:00:07:1c:68:53: 81:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3E:5C:4E:7C:81:9D:61:53:F4:45:66:00:ED:83:4E:84:F3:AA:34 X509v3 Authority Key Identifier: keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/Rz5cTnyBnWFT9EVmAO2DToTzqjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.28.160.0-217.28.162.255 217.28.164.0-217.28.175.255 Signature Algorithm: sha256WithRSAEncryption 5d:d9:f0:d6:f4:fb:8f:46:00:a0:3b:82:e7:a2:9a:0e:68:72: 77:9c:3e:8b:4c:52:a7:cc:28:d4:6d:a8:ea:5b:7d:09:1f:bf: ca:dd:46:fe:7b:a9:a1:3a:f5:84:5f:c3:67:75:1b:fb:2f:1d: 19:46:bf:f1:18:a3:eb:a3:8e:2c:9d:cd:a0:7b:31:d2:fc:4f: 22:a0:a2:0f:71:38:f1:cb:1d:ec:a8:a4:60:fd:e6:3e:23:4f: 66:fa:3d:f2:58:08:53:6b:6b:c1:46:f3:33:29:42:e2:b7:20: 0d:36:d8:ca:5f:c3:b9:d6:b3:50:8d:16:b3:0e:11:88:83:9e: 37:28:23:18:54:e4:23:0c:e3:d9:de:aa:98:3c:21:3a:c3:5d: e8:3a:77:ff:b4:1c:76:70:16:34:ee:3b:7e:2b:3f:80:35:90: 74:5c:1c:68:6e:06:47:0d:23:62:5c:59:26:29:db:68:6a:f2: f7:82:53:9c:bc:6b:74:6e:7b:8f:2e:09:9d:f9:22:cf:c6:a3: 69:13:fa:2c:b3:8d:3f:27:60:0a:3f:f3:81:54:7e:e1:21:b3: 9e:8d:85:48:1f:ba:01:b8:55:ce:f6:b1:59:f0:f7:00:26:81: 0e:b4:ff:16:65:00:44:bc:94:2d:a0:91:93:ee:f8:7e:d7:86: ee:09:8b:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt+N2dNgKgOVC+KBj/EI+IoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2ZkNWQzMzA2MWE5ZGU5MjBhZjFjMmExMzUxM2Q0NmRk MjQ2MTIwHhcNMjYwMTAyMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzNlNWM0ZTdjODE5ZDYxNTNmNDQ1NjYwMGVkODM0ZTg0ZjNhYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaP3F8S3fF+DueTMw1JqXtE34GGS An+7RFxaXdkBsFLG6LFFyyhzArizjiK4RmPziJM1+GWbns0o9nIsIH9Wy1EunNW6 hEB7zK/VPhRwNFEwZ/XEpLlSF+AHQKjtiFO9jhozaCoXio2ccbFHJjc+6DXGRdgd IdqCGwYBfCZpRgX7gsTfuvzgt7zGtDBP7amYocwgjPE+r0SkypJWE1JlwxkWqCJf lLAxfz/BowJYPj+bKa2Eq5RqW9nSg37eyISSAB7fvf9PDs8krGal8xdrb/Nc9h0C 85ZYF5mWK7lWzO2RM2FAT1Ka+E2z81C0hquN1RWj4/KjrN3KAAccaFOBMwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFEc+XE58gZ1hU/RFZgDtg06E86o0MB8GA1UdIwQY MBaAFO9/1dMwYanekgrxwqE1E9Rt0kYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgt YTEwMmJlMzgyZTUxLzEvUno1Y1RueUJuV0ZUOUVWbUFPMkRUb1R6cWpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgtYTEwMmJlMzgyZTUx LzEvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAXZHKAD BADZHKIwDAMEAtkcpAMEBNkcoDANBgkqhkiG9w0BAQsFAAOCAQEAXdnw1vT7j0YA oDuC56KaDmhyd5w+i0xSp8wo1G2o6lt9CR+/yt1G/nupoTr1hF/DZ3Ub+y8dGUa/ 8Rij66OOLJ3NoHsx0vxPIqCiD3E48csd7KikYP3mPiNPZvo98lgIU2trwUbzMylC 4rcgDTbYyl/DudazUI0Wsw4RiIOeNygjGFTkIwzj2d6qmDwhOsNd6Dp3/7QcdnAW NO47fis/gDWQdFwcaG4GRw0jYlxZJinbaGry94JTnLxrdG57jy4Jnfkiz8ajaRP6 LLONPydgCj/zgVR+4SGzno2FSB+6AbhVzvaxWfD3ACaBDrT/FmUARLyULaCRk+74 fteG7gmLeQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:36 2026 by rpki-client