This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/P0ADEoMBwNu5ihq9oTFhh5_jFZg.roa File: P0ADEoMBwNu5ihq9oTFhh5_jFZg.roa (raw, json) Hash identifier: LbJcliWjxyfMysePIZ1L8MSr6AjLJjCi6E5I0PKLL9w= Subject key identifier: 3F:40:03:12:83:01:C0:DB:B9:8A:1A:BD:A1:31:61:87:9F:E3:15:98 Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Certificate serial: 019B7C111BF500E0E9E9A949FE2384148047 Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/P0ADEoMBwNu5ihq9oTFhh5_jFZg.roa Signing time: Fri 02 Jan 2026 00:17:34 +0000 ROA not before: Fri 02 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212830 IP address blocks: 217.67.164.0/24 maxlen: 24 217.67.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:1b:f5:00:e0:e9:e9:a9:49:fe:23:84:14:80:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Validity Not Before: Jan 2 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f4003128301c0dbb98a1abda13161879fe31598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:3b:30:0e:24:16:7b:66:d9:7e:0b:52:3b: 75:3f:d2:41:4f:61:7d:c3:37:e0:15:6a:be:51:2d: e9:03:f6:ac:5f:ec:08:5d:b2:fd:ec:62:eb:2e:dd: 6f:99:2f:77:6c:88:e1:a6:19:32:24:dd:05:af:67: 54:45:56:4f:80:65:9f:da:49:53:b0:7b:84:ff:df: fe:44:30:59:b7:c0:15:5c:43:ea:58:30:f7:18:ec: ab:04:9f:88:84:6d:bb:34:d7:90:03:a7:ff:25:bd: f6:78:f9:33:29:46:35:ad:1c:58:65:ca:5f:f4:29: e1:ea:a7:0e:d6:d9:d4:6c:5f:04:a7:4f:69:28:ac: 67:48:ba:81:1a:5f:c2:da:2b:39:67:c5:14:5e:d1: ec:e5:12:fa:88:27:bb:4b:2e:b4:7b:3f:01:e9:fb: 74:62:14:9e:c0:6a:22:6d:1f:ba:e3:08:47:3e:3a: c3:73:66:78:2c:a9:54:bf:81:ab:7d:e7:a2:fd:12: 4f:cb:7c:b5:2d:72:d0:2c:f2:2e:92:ac:f7:40:6c: 22:4f:3a:3a:9b:35:ee:70:28:ee:c5:23:26:47:48: b1:07:16:8b:d9:cf:ee:3e:ac:31:b4:fa:48:06:5b: 24:d4:91:2b:e2:4c:b8:de:7e:58:fc:e4:30:19:5b: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:40:03:12:83:01:C0:DB:B9:8A:1A:BD:A1:31:61:87:9F:E3:15:98 X509v3 Authority Key Identifier: keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/P0ADEoMBwNu5ihq9oTFhh5_jFZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.67.164.0/24 217.67.172.0/22 Signature Algorithm: sha256WithRSAEncryption 50:05:c8:80:d6:24:4f:54:be:41:f9:13:a3:7c:11:6e:dd:59: 16:29:20:67:d4:f2:70:27:bf:a3:4b:bb:31:d6:7c:55:4c:a5: f6:c6:2f:64:a3:aa:14:c1:64:81:aa:33:a6:2f:af:db:b7:58: ef:ef:59:28:d3:01:d8:3d:7a:dd:05:e5:0d:db:b3:1a:5e:c3: 22:07:d5:7f:1f:97:55:8b:72:bf:b8:00:7e:56:8a:c4:6f:e3: e9:58:cd:52:e3:71:90:b5:71:d3:52:2b:7b:b7:71:d4:5c:c7: 77:9e:2d:1c:cf:f8:66:e2:8d:9c:15:c2:2f:25:0e:00:3e:bc: b0:26:7f:5d:a8:89:c8:cc:53:fd:ad:0a:91:31:c4:b8:5f:d1: 01:37:5b:d2:ac:45:3c:5b:85:18:2e:13:0b:9c:25:d3:19:ad: 6f:7d:6f:07:ab:77:53:67:b5:e5:14:bc:e3:de:28:56:cb:7b: 86:2d:ea:5f:bd:e7:9d:7b:dc:16:6a:e6:a8:12:78:7c:1f:06: 34:24:4d:65:f1:35:b0:ad:d1:0b:c7:6e:2f:a3:3f:c9:66:ec: e0:df:18:8b:92:f1:0e:d4:2a:35:c8:1d:0f:91:3c:1c:bb:9b: 6a:a6:c3:a9:9b:91:5e:0f:ed:18:e1:78:d2:ad:6a:a6:20:6b: 90:48:fe:c8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8ERv1AODp6alJ/iOEFIBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj MDc0ODkwHhcNMjYwMTAyMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjQwMDMxMjgzMDFjMGRiYjk4YTFhYmRhMTMxNjE4NzlmZTMxNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1To7MA4kFntm2X4LUjt1P9JBT2F9 wzfgFWq+US3pA/asX+wIXbL97GLrLt1vmS93bIjhphkyJN0Fr2dURVZPgGWf2klT sHuE/9/+RDBZt8AVXEPqWDD3GOyrBJ+IhG27NNeQA6f/Jb32ePkzKUY1rRxYZcpf 9Cnh6qcO1tnUbF8Ep09pKKxnSLqBGl/C2is5Z8UUXtHs5RL6iCe7Sy60ez8B6ft0 YhSewGoibR+64whHPjrDc2Z4LKlUv4Grfeei/RJPy3y1LXLQLPIukqz3QGwiTzo6 mzXucCjuxSMmR0ixBxaL2c/uPqwxtPpIBlsk1JEr4ky43n5Y/OQwGVuJ1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD9AAxKDAcDbuYoavaExYYef4xWYMB8GA1UdIwQY MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt YTA0NWZmOGUyYWMwLzEvUDBBREVvTUJ3TnU1aWhxOW9URmhoNV9qRlpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2UOkAwQC 2UOsMA0GCSqGSIb3DQEBCwUAA4IBAQBQBciA1iRPVL5B+ROjfBFu3VkWKSBn1PJw J7+jS7sx1nxVTKX2xi9ko6oUwWSBqjOmL6/bt1jv71ko0wHYPXrdBeUN27MaXsMi B9V/H5dVi3K/uAB+VorEb+PpWM1S43GQtXHTUit7t3HUXMd3ni0cz/hm4o2cFcIv JQ4APrywJn9dqInIzFP9rQqRMcS4X9EBN1vSrEU8W4UYLhMLnCXTGa1vfW8Hq3dT Z7XlFLzj3ihWy3uGLepfveede9wWauaoEnh8HwY0JE1l8TWwrdELx24voz/JZuzg 3xiLkvEO1Co1yB0PkTwcu5tqpsOpm5FeD+0Y4XjSrWqmIGuQSP7I -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:55 2026 by rpki-client