This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/x56h9tcos85B1GRIcAFe51PxycM.roa File: x56h9tcos85B1GRIcAFe51PxycM.roa (raw, json) Hash identifier: E0vDq4JGL5zs+Qct4zd8Yb26ru7mAf/uadMth0Go+t0= Subject key identifier: C7:9E:A1:F6:D7:28:B3:CE:41:D4:64:48:70:01:5E:E7:53:F1:C9:C3 Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072 Certificate serial: 019B7F15F3893A3708B3E29D0836F5456D2F Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/x56h9tcos85B1GRIcAFe51PxycM.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48383 IP address blocks: 217.12.32.0/22 maxlen: 22 217.12.36.0/24 maxlen: 24 217.12.39.0/24 maxlen: 24 217.12.42.0/23 maxlen: 23 217.12.44.0/23 maxlen: 23 217.12.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f3:89:3a:37:08:b3:e2:9d:08:36:f5:45:6d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b82433ffe94bf3536fec327543d396158202072 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c79ea1f6d728b3ce41d4644870015ee753f1c9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:61:1a:55:c5:14:33:8e:b5:5a:b0:27:25:ce: d7:cd:bf:74:52:b8:62:73:25:56:16:63:e3:5b:1e: 6d:2d:15:25:6a:98:fc:6c:7c:53:d5:8a:3a:4c:88: e9:04:69:74:11:76:4c:9c:d2:15:3f:80:ba:67:1a: b1:f5:c8:9e:8f:71:89:51:93:7a:e2:85:ab:bf:cf: 06:53:ee:ca:10:f9:c8:5c:94:7d:03:d8:d7:2b:74: ab:9b:d1:ed:6f:ac:c8:35:5c:0c:7f:22:95:42:3b: bf:bf:88:7a:14:74:8b:15:81:5e:54:e0:85:74:dc: 19:f9:40:3c:18:30:00:81:e5:e9:96:c5:79:11:3f: 40:64:a9:95:2f:42:1d:80:ab:d1:5f:39:32:7d:b7: 6d:af:11:df:c6:28:81:f7:4c:ae:59:e0:ad:2e:33: 57:c5:fd:d2:ec:99:78:e2:2c:e8:fa:ec:22:d1:71: 9e:f3:2d:c4:da:8c:ad:2a:a5:ec:ea:93:b0:de:25: 45:07:33:49:2b:6f:76:16:a2:fc:8e:4c:c3:60:0d: 5f:16:80:b3:30:ee:b5:fd:90:e8:7c:ba:e0:f7:82: 76:be:f8:e9:21:90:bb:e7:ab:c0:b5:ff:c2:30:22: bb:2f:f8:7e:b8:d4:b2:d0:db:28:ec:fa:eb:bc:34: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9E:A1:F6:D7:28:B3:CE:41:D4:64:48:70:01:5E:E7:53:F1:C9:C3 X509v3 Authority Key Identifier: keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/x56h9tcos85B1GRIcAFe51PxycM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.12.32.0-217.12.36.255 217.12.39.0/24 217.12.42.0-217.12.47.255 Signature Algorithm: sha256WithRSAEncryption cd:73:23:12:2f:e1:db:58:4d:33:d1:bd:ac:0e:80:10:05:3d: 54:14:72:7a:4f:e9:56:1d:78:d4:2c:04:c7:63:14:90:2f:e7: 23:19:b2:31:7c:93:b0:9e:8e:b8:0c:eb:3f:cc:85:67:27:6d: 7e:74:0c:9b:59:a1:7b:a0:5c:f7:c4:3e:46:31:f6:24:eb:7f: b5:5b:90:88:34:f5:ac:95:5f:38:93:7f:0f:33:2b:33:b4:47: f1:05:4b:8d:af:98:fc:10:14:4a:6d:b1:7c:d0:65:29:c8:8f: ab:c4:42:9f:b9:5d:e6:b1:64:f5:e7:a4:e0:06:76:ba:8d:7d: ee:3d:33:cd:46:dd:bc:40:de:5e:c8:99:bb:ed:86:9f:ba:7d: ae:f6:10:e7:9c:a9:fa:99:d8:94:a0:e8:d2:f7:9e:5d:46:dc: 8d:5d:a2:02:8a:3b:17:08:c9:29:ae:81:c1:2e:4e:4c:a1:4d: ed:3a:0c:1f:cf:cf:48:17:1f:16:2d:3c:6c:e1:a1:fc:97:c6: 08:08:55:a8:82:b1:65:45:63:48:f9:dc:a2:6b:dd:e9:5d:b6: 70:91:71:e4:94:c7:40:9b:58:71:15:28:ff:b1:8e:9f:74:15: a8:c6:05:dd:8b:19:b6:64:be:a4:cd:68:05:5f:ec:91:19:7a: b6:3a:0a:d9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/FfOJOjcIs+KdCDb1RW0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy MDIwNzIwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzllYTFmNmQ3MjhiM2NlNDFkNDY0NDg3MDAxNWVlNzUzZjFjOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGEaVcUUM461WrAnJc7Xzb90Urhi cyVWFmPjWx5tLRUlapj8bHxT1Yo6TIjpBGl0EXZMnNIVP4C6Zxqx9ciej3GJUZN6 4oWrv88GU+7KEPnIXJR9A9jXK3Srm9Htb6zINVwMfyKVQju/v4h6FHSLFYFeVOCF dNwZ+UA8GDAAgeXplsV5ET9AZKmVL0IdgKvRXzkyfbdtrxHfxiiB90yuWeCtLjNX xf3S7Jl44izo+uwi0XGe8y3E2oytKqXs6pOw3iVFBzNJK292FqL8jkzDYA1fFoCz MO61/ZDofLrg94J2vvjpIZC756vAtf/CMCK7L/h+uNSy0Nso7PrrvDS3BwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMeeofbXKLPOQdRkSHABXudT8cnDMB8GA1UdIwQY MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEveDU2aDl0Y29zODVCMUdSSWNBRmU1MVB4eWNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAXZDCAD BADZDCQDBADZDCcwDAMEAdkMKgMEBNkMIDANBgkqhkiG9w0BAQsFAAOCAQEAzXMj Ei/h21hNM9G9rA6AEAU9VBRyek/pVh141CwEx2MUkC/nIxmyMXyTsJ6OuAzrP8yF ZydtfnQMm1mhe6Bc98Q+RjH2JOt/tVuQiDT1rJVfOJN/DzMrM7RH8QVLja+Y/BAU Sm2xfNBlKciPq8RCn7ld5rFk9eek4AZ2uo197j0zzUbdvEDeXsiZu+2Gn7p9rvYQ 55yp+pnYlKDo0veeXUbcjV2iAoo7FwjJKa6BwS5OTKFN7ToMH8/PSBcfFi08bOGh /JfGCAhVqIKxZUVjSPncomvd6V22cJFx5JTHQJtYcRUo/7GOn3QVqMYF3YsZtmS+ pM1oBV/skRl6tjoK2Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:15 2026 by rpki-client