This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/eG6HpNNeD2WlW2-WkUghRp2wqyY.roa File: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (raw, json) Hash identifier: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs= Subject key identifier: 78:6E:87:A4:D3:5E:0F:65:A5:5B:6F:96:91:48:21:46:9D:B0:AB:26 Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043 Certificate serial: 019B7CED34A6EF6109856A6BC564E9A1FCC1 Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/eG6HpNNeD2WlW2-WkUghRp2wqyY.roa Signing time: Fri 02 Jan 2026 04:17:58 +0000 ROA not before: Fri 02 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20529 IP address blocks: 217.147.192.0/20 maxlen: 24 217.147.200.0/23 maxlen: 23 217.147.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:34:a6:ef:61:09:85:6a:6b:c5:64:e9:a1:fc:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043 Validity Not Before: Jan 2 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=786e87a4d35e0f65a55b6f96914821469db0ab26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:19:10:94:e2:81:d2:9d:ee:13:b7:0f:7a: 2b:f6:4f:99:30:5e:ad:fc:d1:9f:9e:a0:05:99:37: 32:09:82:f7:79:c1:21:e9:cc:f9:a3:ad:13:99:1d: 6b:84:de:2f:40:1e:8f:ac:37:d0:75:f6:74:f7:f4: 54:9d:47:a5:60:d2:96:18:68:dc:8e:43:41:6a:f5: 08:94:1c:76:de:e1:b2:77:28:9c:ed:fe:e2:a3:cd: 78:7a:00:c9:57:11:fa:07:c6:a8:be:b3:b4:b0:b9: e1:b6:cf:c7:51:03:d1:c9:13:78:ab:15:04:dd:49: 7a:ca:f8:5b:d1:66:82:0c:c9:9a:a2:9c:bc:c0:31: 42:2d:06:95:50:0d:6d:02:de:1d:12:e5:a2:3b:11: 6f:c4:0f:5b:db:a1:d6:e4:5b:7e:3b:d5:24:78:f1: 97:e5:93:46:f9:a1:e0:f0:46:c2:3f:05:d4:b5:ca: 95:f5:97:b6:85:47:72:48:55:86:d3:cc:1f:f6:cc: 94:39:a6:56:9f:f0:ff:90:35:66:38:27:2e:c2:29: 17:15:bc:66:fd:45:fa:8c:cc:8b:11:61:ce:63:2e: 72:79:9d:32:c8:24:90:44:58:84:f6:78:08:00:12: aa:7b:30:62:ac:b9:87:89:b0:00:44:bc:11:44:42: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6E:87:A4:D3:5E:0F:65:A5:5B:6F:96:91:48:21:46:9D:B0:AB:26 X509v3 Authority Key Identifier: keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/eG6HpNNeD2WlW2-WkUghRp2wqyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.192.0/20 Signature Algorithm: sha256WithRSAEncryption 30:13:da:82:98:1a:fb:45:4a:fe:da:c8:05:ca:e4:73:17:4f: 45:1d:71:f1:e6:f0:cc:24:61:6e:d5:83:28:0b:7e:9c:95:e8: f6:fd:c9:fb:11:e3:36:e9:43:50:d6:35:c3:77:e7:3d:9b:d1: f4:62:66:1b:41:6f:04:13:00:62:89:0f:18:e8:c4:f8:c8:c4: 23:4c:12:f1:19:47:8b:34:da:b6:8f:a3:97:ee:36:6d:39:d1: 08:d8:c8:02:f9:fc:82:69:d7:66:e1:86:b6:56:22:4c:2f:05: b0:b8:41:5e:b9:dc:34:27:3a:ed:fe:d2:e2:7d:b0:5d:b1:d3: e5:b9:46:be:7e:47:7d:4d:76:8e:a3:21:49:4a:04:10:28:07: 54:e1:f5:d3:ab:8e:19:87:e2:65:ba:18:26:eb:f0:5a:10:20: 0d:d6:67:25:b2:80:56:ce:43:f2:b2:4b:05:e4:22:fb:63:ad: 2c:de:79:e4:44:f2:17:e6:79:39:ef:3d:f0:bc:e8:7d:9f:3a: 66:13:67:51:b3:14:fe:77:b3:d1:42:a2:64:03:f5:45:db:46: d6:4f:2d:68:bc:f2:b9:ba:2d:75:33:97:d3:de:b7:75:ed:df: e1:37:cf:54:5c:31:6c:22:0e:21:cb:85:5b:69:4f:10:08:29: f9:b7:0c:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87TSm72EJhWprxWTpofzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTFjNDJkZmE2YWZiYzExZTc4ZWU5ZGUyZTc4NWY4YTIw YjUwNDMwHhcNMjYwMTAyMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODZlODdhNGQzNWUwZjY1YTU1YjZmOTY5MTQ4MjE0NjlkYjBhYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HcZEJTigdKd7hO3D3or9k+ZMF6t /NGfnqAFmTcyCYL3ecEh6cz5o60TmR1rhN4vQB6PrDfQdfZ09/RUnUelYNKWGGjc jkNBavUIlBx23uGydyic7f7io814egDJVxH6B8aovrO0sLnhts/HUQPRyRN4qxUE 3Ul6yvhb0WaCDMmaopy8wDFCLQaVUA1tAt4dEuWiOxFvxA9b26HW5Ft+O9UkePGX 5ZNG+aHg8EbCPwXUtcqV9Ze2hUdySFWG08wf9syUOaZWn/D/kDVmOCcuwikXFbxm /UX6jMyLEWHOYy5yeZ0yyCSQRFiE9ngIABKqezBirLmHibAARLwRREKuPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHhuh6TTXg9lpVtvlpFIIUadsKsmMB8GA1UdIwQY MBaAFMqRxC36avvBHnjuneLnhfiiC1BDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NTFlODQtMmYxYS00Yzc3LWIxZjIt ZDU4NjUwNDFhMTRmLzEvZUc2SHBOTmVEMldsVzItV2tVZ2hScDJ3cXlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NTFlODQtMmYxYS00Yzc3LWIxZjItZDU4NjUwNDFhMTRm LzEveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ZPAMA0G CSqGSIb3DQEBCwUAA4IBAQAwE9qCmBr7RUr+2sgFyuRzF09FHXHx5vDMJGFu1YMo C36clej2/cn7EeM26UNQ1jXDd+c9m9H0YmYbQW8EEwBiiQ8Y6MT4yMQjTBLxGUeL NNq2j6OX7jZtOdEI2MgC+fyCaddm4Ya2ViJMLwWwuEFeudw0Jzrt/tLifbBdsdPl uUa+fkd9TXaOoyFJSgQQKAdU4fXTq44Zh+Jluhgm6/BaECAN1mclsoBWzkPysksF 5CL7Y60s3nnkRPIX5nk57z3wvOh9nzpmE2dRsxT+d7PRQqJkA/VF20bWTy1ovPK5 ui11M5fT3rd17d/hN89UXDFsIg4hy4VbaU8QCCn5twyh -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:59 2026 by rpki-client