This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/hI3e7uK5dcpU9lEziXhTJOX8ujo.roa File: hI3e7uK5dcpU9lEziXhTJOX8ujo.roa (raw, json) Hash identifier: jWqaOCgUgQhWBYlF8RKOY20G2OtGLon5g45aLhAiSTk= Subject key identifier: 84:8D:DE:EE:E2:B9:75:CA:54:F6:51:33:89:78:53:24:E5:FC:BA:3A Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491 Certificate serial: 019B7C8048D59FBF48C5CB4B4C51B9BCEBEE Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/hI3e7uK5dcpU9lEziXhTJOX8ujo.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210331 IP address blocks: 217.65.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:48:d5:9f:bf:48:c5:cb:4b:4c:51:b9:bc:eb:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=848ddeeee2b975ca54f6513389785324e5fcba3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c5:a7:28:cd:0f:98:52:20:7c:25:d9:7b:7a: 8f:a1:75:9d:0b:f3:7b:fc:99:48:eb:1b:ab:61:a4: 6d:a0:26:a3:0c:f6:c2:41:44:c6:73:5e:dd:81:24: 45:24:35:df:9e:ee:fe:2c:14:24:f1:3f:f6:83:71: 09:60:d6:fd:3b:f3:00:53:70:86:75:f0:ea:cb:e6: 1c:8e:2e:fc:c7:57:73:7f:d6:44:01:f3:94:69:f8: b9:0c:4b:77:58:c3:78:7c:78:28:b4:d8:0e:dd:be: 91:6e:b1:01:3f:8a:8e:26:87:30:3e:4f:25:b9:f1: 1a:7c:6d:24:00:fb:d0:6d:e3:af:3c:b0:6d:39:6e: cf:c6:84:53:b3:de:04:61:03:11:73:18:bb:8d:cf: 9f:8c:cc:79:68:de:52:b7:38:8f:e8:bb:8e:26:27: 6c:59:5e:46:69:c7:36:c4:c0:12:b1:05:97:ae:77: eb:ff:5a:9e:ce:28:61:c5:89:62:53:cf:f3:3d:82: b7:ba:39:12:0f:d4:73:e5:02:4f:3a:06:5f:9c:4c: c3:f5:d2:69:43:aa:9e:4c:bb:8a:d9:ce:c4:f4:31: 0d:76:77:5a:11:73:c5:87:ab:db:29:aa:a4:d6:a2: f6:8d:5e:24:94:29:2d:3f:1b:62:08:8b:0e:c0:a6: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8D:DE:EE:E2:B9:75:CA:54:F6:51:33:89:78:53:24:E5:FC:BA:3A X509v3 Authority Key Identifier: keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/hI3e7uK5dcpU9lEziXhTJOX8ujo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.65.75.0/24 Signature Algorithm: sha256WithRSAEncryption 09:5a:f0:17:0a:61:6c:f0:4c:e9:4b:0b:7d:5a:83:54:57:8d: 0a:f0:a2:9b:58:93:02:e2:31:4a:c4:67:e6:19:c3:5f:f0:b2: 8b:26:34:4e:cc:af:1c:cd:74:a1:e0:bb:da:b8:1e:98:a6:12: 39:35:e1:2f:e1:f5:09:b8:db:a7:a7:6e:a9:8d:51:16:7e:59: 48:9f:9a:87:98:ef:f8:ce:20:75:69:6c:ed:b8:e5:01:b8:87: 66:8b:c4:6d:d9:03:c1:09:27:a5:ba:d4:08:a4:b7:a2:6b:2e: 1a:90:3f:22:90:bf:0c:bd:39:58:ae:4a:e2:8c:d5:5b:f6:a6: e9:77:6e:d1:00:cb:fe:34:d4:a5:9d:a4:10:01:0e:73:37:9a: 05:3f:8d:39:e0:cd:50:b5:ec:e9:04:b4:6a:37:89:2e:a5:0c: dc:07:04:15:d6:7d:f9:fc:47:0c:73:9a:20:7d:58:58:ca:03: 6f:a0:e9:c0:58:df:60:65:07:e8:5d:7d:4c:f2:a8:30:15:ec: f0:49:a7:a4:f8:60:a4:42:86:06:df:35:d9:ed:59:ff:31:22: d1:4b:c0:33:6a:40:2c:67:fb:61:18:01:74:4c:a1:5e:96:78: 42:fb:28:a3:be:53:84:3a:90:c2:a7:d7:66:d8:05:43:35:b1: a8:4a:89:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEjVn79IxctLTFG5vOvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MDc0NzE0MTQyZjgzOTcwMTQ4ZmFiMGVjM2UyMTE3YzM5 M2M0OTEwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDhkZGVlZWUyYjk3NWNhNTRmNjUxMzM4OTc4NTMyNGU1ZmNiYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MWnKM0PmFIgfCXZe3qPoXWdC/N7 /JlI6xurYaRtoCajDPbCQUTGc17dgSRFJDXfnu7+LBQk8T/2g3EJYNb9O/MAU3CG dfDqy+Ycji78x1dzf9ZEAfOUafi5DEt3WMN4fHgotNgO3b6RbrEBP4qOJocwPk8l ufEafG0kAPvQbeOvPLBtOW7PxoRTs94EYQMRcxi7jc+fjMx5aN5StziP6LuOJids WV5Gacc2xMASsQWXrnfr/1qezihhxYliU8/zPYK3ujkSD9Rz5QJPOgZfnEzD9dJp Q6qeTLuK2c7E9DENdndaEXPFh6vbKaqk1qL2jV4klCktPxtiCIsOwKZjuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISN3u7iuXXKVPZRM4l4UyTl/Lo6MB8GA1UdIwQY MBaAFNQHRxQUL4OXAUj6sOw+IRfDk8SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTkt ZDc5Y2UyZGVlYTcwLzEvaEkzZTd1SzVkY3BVOWxFemlYaFRKT1g4dWpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTktZDc5Y2UyZGVlYTcw LzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UFLMA0G CSqGSIb3DQEBCwUAA4IBAQAJWvAXCmFs8EzpSwt9WoNUV40K8KKbWJMC4jFKxGfm GcNf8LKLJjROzK8czXSh4LvauB6YphI5NeEv4fUJuNunp26pjVEWfllIn5qHmO/4 ziB1aWztuOUBuIdmi8Rt2QPBCSelutQIpLeiay4akD8ikL8MvTlYrkrijNVb9qbp d27RAMv+NNSlnaQQAQ5zN5oFP4054M1QtezpBLRqN4kupQzcBwQV1n35/EcMc5og fVhYygNvoOnAWN9gZQfoXX1M8qgwFezwSaek+GCkQoYG3zXZ7Vn/MSLRS8AzakAs Z/thGAF0TKFelnhC+yijvlOEOpDCp9dm2AVDNbGoSokI -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:39 2026 by rpki-client