This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0s7eCjRMhz_DC_CZI_sn-ll1xB8.roa File: 0s7eCjRMhz_DC_CZI_sn-ll1xB8.roa (raw, json) Hash identifier: Mj3Xc3Wvzr/2xXRAmoalb5aM9MjK20E9wvfjEhr2rAU= Subject key identifier: D2:CE:DE:0A:34:4C:87:3F:C3:0B:F0:99:23:FB:27:FA:59:75:C4:1F Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB710EBA0F130B95CFE3DC0E79F2B Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0s7eCjRMhz_DC_CZI_sn-ll1xB8.roa Signing time: Thu 01 Jan 2026 16:18:44 +0000 ROA not before: Thu 01 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199415 IP address blocks: 217.145.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b7:10:eb:a0:f1:30:b9:5c:fe:3d:c0:e7:9f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2cede0a344c873fc30bf09923fb27fa5975c41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:a9:d9:cc:7c:0d:74:b6:69:ee:65:e1:ba: a1:92:6f:62:fe:a1:19:c0:3f:01:87:35:20:0b:d0: ef:32:2e:0b:41:2a:af:6f:d6:80:cf:da:16:f6:6d: 1f:06:a3:d5:8e:19:f2:40:62:85:97:d1:03:09:cf: 27:92:03:02:e5:22:14:6e:e4:83:45:63:64:c3:eb: 49:7f:ed:6d:59:e1:ee:c9:27:66:2a:65:9f:a4:8b: f1:bd:fa:55:95:15:09:d9:cb:a0:f9:14:92:40:91: 2d:c8:2d:f1:ce:da:e1:0a:36:33:f1:c3:9a:14:c3: 12:3a:bf:21:7b:92:13:e0:9c:c6:62:40:1a:50:90: 7c:b3:fb:7d:fa:7a:83:27:3b:a1:ec:45:15:3c:b9: bc:73:4d:bf:55:e7:1c:ba:b3:9f:29:a3:88:01:5c: 84:ac:2b:86:7b:ce:42:9f:52:7c:c6:bf:53:23:f8: 8a:46:c9:49:81:41:b9:d5:77:8c:54:a1:52:b8:8a: ee:96:54:5d:e0:23:be:ad:13:6d:cc:aa:2d:6c:62: b6:a8:14:f1:a0:46:07:5e:d9:71:b8:55:96:a9:1d: 0e:b4:be:e1:a6:92:05:01:8f:77:4a:9e:4a:4a:34: dd:c0:0a:2d:14:a8:cf:81:15:db:0e:b5:bc:b8:3c: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CE:DE:0A:34:4C:87:3F:C3:0B:F0:99:23:FB:27:FA:59:75:C4:1F X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0s7eCjRMhz_DC_CZI_sn-ll1xB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.72.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:fa:d1:32:05:91:e6:c9:d8:44:b3:e9:e6:81:51:e3:ab:6e: df:83:95:35:b8:5e:4b:21:1c:2b:f5:15:12:ed:bc:b7:dd:b3: 61:05:48:3d:cc:13:70:dd:da:c2:a1:92:fd:d5:dc:e2:19:71: be:d7:77:6a:07:01:2c:12:e1:59:eb:9d:99:8c:d3:4d:91:1f: b8:21:d6:b4:46:5e:83:b6:0e:63:d8:be:c1:50:e8:88:4c:35: b0:b0:50:0b:5f:e0:89:55:03:d4:27:71:0b:cb:ac:65:8b:41: 2b:3e:c0:e8:64:26:54:21:8f:72:4a:36:ec:e8:ac:3f:07:ec: 99:3d:27:a7:9b:7f:16:66:83:22:c8:36:4a:00:e1:85:65:4b: 8d:8a:d3:53:d5:9f:b4:c6:4d:6a:73:b5:a4:e1:d6:54:f0:75: d5:78:c2:12:a2:fc:54:cf:83:05:e3:f0:b6:e8:b0:6d:c5:a2: d5:40:ba:18:5d:74:1a:e8:3a:60:40:8b:10:37:ed:1e:55:16: 4a:ef:81:c6:1b:e0:d0:0f:5b:30:3c:5f:8c:04:64:22:fa:d8: 17:63:ec:15:e0:3d:1e:2c:c7:7f:c2:84:83:01:5b:85:1e:9d: 9a:f4:f6:ad:4f:8a:3c:6a:df:71:5c:81:85:a3:f5:c5:0e:78: 97:04:cf:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrcQ66DxMLlc/j3A558rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmNlZGUwYTM0NGM4NzNmYzMwYmYwOTkyM2ZiMjdmYTU5NzVjNDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08Sp2cx8DXS2ae5l4bqhkm9i/qEZ wD8BhzUgC9DvMi4LQSqvb9aAz9oW9m0fBqPVjhnyQGKFl9EDCc8nkgMC5SIUbuSD RWNkw+tJf+1tWeHuySdmKmWfpIvxvfpVlRUJ2cug+RSSQJEtyC3xztrhCjYz8cOa FMMSOr8he5IT4JzGYkAaUJB8s/t9+nqDJzuh7EUVPLm8c02/VeccurOfKaOIAVyE rCuGe85Cn1J8xr9TI/iKRslJgUG51XeMVKFSuIrullRd4CO+rRNtzKotbGK2qBTx oEYHXtlxuFWWqR0OtL7hppIFAY93Sp5KSjTdwAotFKjPgRXbDrW8uDwWFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNLO3go0TIc/wwvwmSP7J/pZdcQfMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMHM3ZUNqUk1oel9EQ19DWklfc24tbGwxeEI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZFIMA0G CSqGSIb3DQEBCwUAA4IBAQBu+tEyBZHmydhEs+nmgVHjq27fg5U1uF5LIRwr9RUS 7by33bNhBUg9zBNw3drCoZL91dziGXG+13dqBwEsEuFZ652ZjNNNkR+4Ida0Rl6D tg5j2L7BUOiITDWwsFALX+CJVQPUJ3ELy6xli0ErPsDoZCZUIY9ySjbs6Kw/B+yZ PSenm38WZoMiyDZKAOGFZUuNitNT1Z+0xk1qc7Wk4dZU8HXVeMISovxUz4MF4/C2 6LBtxaLVQLoYXXQa6DpgQIsQN+0eVRZK74HGG+DQD1swPF+MBGQi+tgXY+wV4D0e LMd/woSDAVuFHp2a9PatT4o8at9xXIGFo/XFDniXBM8p -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:33 2026 by rpki-client