This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/5IBvYreu6crx1ZEw8lgWXelcFW4.roa File: 5IBvYreu6crx1ZEw8lgWXelcFW4.roa (raw, json) Hash identifier: QsG1NiQkvSH7jCRwmv7r4phufcd3rAtf4NV7t9+hYtM= Subject key identifier: E4:80:6F:62:B7:AE:E9:CA:F1:D5:91:30:F2:58:16:5D:E9:5C:15:6E Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF21EBB579D8FC00C0833D5725617 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/5IBvYreu6crx1ZEw8lgWXelcFW4.roa Signing time: Thu 01 Jan 2026 14:17:44 +0000 ROA not before: Thu 01 Jan 2026 14:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13171 IP address blocks: 217.21.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f2:1e:bb:57:9d:8f:c0:0c:08:33:d5:72:56:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4806f62b7aee9caf1d59130f258165de95c156e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0b:10:9e:ab:67:e6:a0:91:2a:2b:ae:ca:66: f5:9c:4b:19:47:77:68:a5:83:54:fd:75:d3:c9:e1: 5e:dd:88:10:d7:5d:5e:20:6d:c2:2d:50:1d:fd:9d: a3:f4:c8:c6:1d:c3:2c:b8:a6:95:dc:d4:c6:f8:73: 74:e9:a6:cc:87:c7:24:06:0a:8b:3a:76:6a:2c:3a: 5e:bd:50:aa:74:3b:3d:8b:88:4b:1c:95:10:8a:aa: f3:b4:7b:7f:d3:f0:17:8f:d4:49:31:b6:ef:8b:ff: b1:b0:65:d2:e5:d2:03:dc:fd:8d:ab:eb:fb:76:97: 06:6e:2b:97:86:2b:66:59:47:d4:04:dd:32:18:86: ec:84:71:1d:64:26:4a:51:5c:57:27:f0:bb:04:d1: 67:ea:a4:1e:c2:95:43:39:94:b0:a5:32:fa:d6:d7: bd:e4:74:87:94:da:d8:c2:68:eb:14:27:16:3f:4d: 7a:68:4a:97:a0:18:79:f3:a3:92:cc:e1:c3:3a:e9: 8f:c0:26:8b:6a:27:ee:c2:21:44:fb:e3:ee:22:b9: ad:01:5b:53:cc:13:ae:8d:db:1e:ae:4d:af:dd:54: 2f:38:a6:80:71:ac:06:2e:a0:42:ff:40:f4:a5:ff: 90:90:b8:9c:b8:d7:e4:18:e1:97:94:39:7c:6a:0a: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:80:6F:62:B7:AE:E9:CA:F1:D5:91:30:F2:58:16:5D:E9:5C:15:6E X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/5IBvYreu6crx1ZEw8lgWXelcFW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.21.43.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:28:b7:b5:ac:f9:55:20:48:75:19:90:8c:53:36:e2:eb:80: 7f:06:17:36:9e:fa:b1:7e:51:07:75:e6:5c:f7:f0:fa:e0:33: 15:dc:09:56:85:0a:df:72:5e:f5:c5:54:c9:4f:92:73:1c:d0: ef:a9:53:d1:a5:70:7a:f9:e8:d0:67:9a:23:c5:a1:ed:ad:34: 17:48:ab:6f:d5:2e:0f:cb:e2:5e:51:ef:76:51:fd:84:06:75: a4:56:1e:05:0f:d5:b6:f9:50:8d:8f:18:08:68:88:8f:6f:2d: 32:12:c0:df:8e:a2:45:65:d7:42:b5:05:4b:33:4a:ea:b9:31: 8a:3c:2a:64:e3:d3:cb:5d:df:2f:9d:6f:68:c8:3c:07:e6:4c: a7:3b:ab:65:51:37:b2:e9:b0:29:99:47:b6:77:8a:8e:cb:b9: fb:26:be:e1:69:aa:e1:72:e9:87:c4:50:9e:e5:6c:93:73:5d: 81:53:89:91:b3:61:e6:33:14:6f:e4:48:80:c5:c6:95:45:16: 14:26:46:df:2d:9a:b8:34:b7:df:44:b4:82:0a:b1:eb:b5:84: 68:0d:8c:2e:4f:02:2f:f4:f4:ce:2d:16:3b:2f:77:53:bc:1a: fe:4b:b7:49:38:5f:b0:22:af:2e:06:f7:2d:60:c5:d5:99:43: ed:e7:eb:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56/Ieu1edj8AMCDPVclYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDgwNmY2MmI3YWVlOWNhZjFkNTkxMzBmMjU4MTY1ZGU5NWMxNTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wsQnqtn5qCRKiuuymb1nEsZR3do pYNU/XXTyeFe3YgQ111eIG3CLVAd/Z2j9MjGHcMsuKaV3NTG+HN06abMh8ckBgqL OnZqLDpevVCqdDs9i4hLHJUQiqrztHt/0/AXj9RJMbbvi/+xsGXS5dID3P2Nq+v7 dpcGbiuXhitmWUfUBN0yGIbshHEdZCZKUVxXJ/C7BNFn6qQewpVDOZSwpTL61te9 5HSHlNrYwmjrFCcWP016aEqXoBh586OSzOHDOumPwCaLaifuwiFE++PuIrmtAVtT zBOujdserk2v3VQvOKaAcawGLqBC/0D0pf+QkLicuNfkGOGXlDl8ago/mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOSAb2K3runK8dWRMPJYFl3pXBVuMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvNUlCdllyZXU2Y3J4MVpFdzhsZ1dYZWxjRlc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RUrMA0G CSqGSIb3DQEBCwUAA4IBAQBsKLe1rPlVIEh1GZCMUzbi64B/Bhc2nvqxflEHdeZc 9/D64DMV3AlWhQrfcl71xVTJT5JzHNDvqVPRpXB6+ejQZ5ojxaHtrTQXSKtv1S4P y+JeUe92Uf2EBnWkVh4FD9W2+VCNjxgIaIiPby0yEsDfjqJFZddCtQVLM0rquTGK PCpk49PLXd8vnW9oyDwH5kynO6tlUTey6bApmUe2d4qOy7n7Jr7haarhcumHxFCe 5WyTc12BU4mRs2HmMxRv5EiAxcaVRRYUJkbfLZq4NLffRLSCCrHrtYRoDYwuTwIv 9PTOLRY7L3dTvBr+S7dJOF+wIq8uBvctYMXVmUPt5+tX -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:26 2026 by rpki-client