This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ci3wqyDprqwbhq0cWz8ci3-6Cao.roa File: ci3wqyDprqwbhq0cWz8ci3-6Cao.roa (raw, json) Hash identifier: licFYzWIjztrfnZ7+8ryd0A2Wh1SW3GkTCtGQYIfjxc= Subject key identifier: 72:2D:F0:AB:20:E9:AE:AC:1B:86:AD:1C:5B:3F:1C:8B:7F:BA:09:AA Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D212CBBBA07E0D37147543F7F4EB3 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ci3wqyDprqwbhq0cWz8ci3-6Cao.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59448 IP address blocks: 217.20.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:21:2c:bb:ba:07:e0:d3:71:47:54:3f:7f:4e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=722df0ab20e9aeac1b86ad1c5b3f1c8b7fba09aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:0a:23:d6:99:1b:60:9b:a3:84:54:10:13: a3:dc:5c:cf:de:0c:bf:c2:29:aa:5c:37:e0:dd:ad: 51:e7:b4:68:cd:5b:4d:03:99:f6:bc:18:97:55:ec: cf:14:f4:20:2b:c1:1f:4a:6c:db:c7:8c:88:ee:b1: cf:07:ac:6e:46:2f:4b:c9:7a:77:c0:1f:8f:51:8b: 74:f0:07:f8:bc:68:b8:54:3c:43:f3:c4:3c:14:0e: bf:c3:19:5c:26:00:1c:ea:ed:71:ea:69:8d:06:cd: 9f:44:8f:c7:13:d6:f9:d6:9e:fc:dc:01:28:2a:8c: d1:11:ae:f3:73:d9:2a:ac:a1:9d:eb:49:c4:9e:a4: 16:a1:6d:71:7e:9d:10:ff:61:b9:32:dc:05:c6:99: 1d:fd:be:af:b1:6a:8f:45:22:c2:32:1f:ba:51:81: 19:4e:62:95:82:fc:61:7e:08:29:66:52:66:4c:b3: 36:c0:58:bb:de:28:81:0b:39:ac:e0:da:3f:92:0e: 1f:4d:78:12:1f:39:1e:ba:c3:48:e0:16:2a:3e:14: 22:67:3a:f1:1e:80:db:15:9a:fb:8f:83:3b:f2:41: a8:e4:a9:bb:4d:61:fe:ae:88:86:2e:61:96:f4:16: 34:23:9f:01:33:31:b0:c4:23:c7:b7:d2:42:d9:6c: 18:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2D:F0:AB:20:E9:AE:AC:1B:86:AD:1C:5B:3F:1C:8B:7F:BA:09:AA X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ci3wqyDprqwbhq0cWz8ci3-6Cao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.20.128.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:a4:c2:87:98:ab:95:0c:d3:e6:f4:87:fe:3e:e9:48:cb:40: 80:88:1e:44:a5:32:5d:52:0b:49:d5:c6:8c:3e:93:70:d2:86: 81:20:dd:f4:78:ef:5d:34:b2:30:74:d4:67:60:06:f3:82:15: a9:3c:f8:e2:e2:a9:e6:b6:c3:f1:b6:0b:3e:b5:07:e7:d9:f7: 87:c0:80:17:14:42:55:cc:6e:17:99:96:e2:45:06:85:42:b7: 45:ef:b2:1c:6e:eb:e3:3e:84:dc:83:e7:ff:cd:4a:a9:50:74: b1:d9:80:17:21:bc:d3:65:93:29:e1:11:ab:60:33:0e:94:6b: c4:6d:fe:04:7d:65:2d:93:26:12:0f:4c:3f:44:43:e6:48:9f: 32:f0:e1:40:29:60:78:f7:0c:13:8a:45:b4:55:66:e9:92:bb: 10:17:5c:21:41:af:df:8f:b3:ae:ee:78:f8:39:6c:f2:4b:0a: 13:33:5a:92:5e:f1:22:3e:4d:a9:46:e1:81:c7:00:d7:e6:73: 33:26:7d:1c:79:26:d7:0e:b9:8a:e9:4d:9b:3f:4d:71:d1:79: bd:b3:7b:1d:8b:46:d5:e3:ce:30:f2:60:38:8a:c8:7f:4d:ce: fb:2f:d3:08:4c:2b:10:c6:e1:b5:9a:35:3c:1e:1a:9a:a5:9a: 56:ce:13:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XSEsu7oH4NNxR1Q/f06zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjJkZjBhYjIwZTlhZWFjMWI4NmFkMWM1YjNmMWM4YjdmYmEwOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw8KI9aZG2Cbo4RUEBOj3FzP3gy/ wimqXDfg3a1R57RozVtNA5n2vBiXVezPFPQgK8EfSmzbx4yI7rHPB6xuRi9LyXp3 wB+PUYt08Af4vGi4VDxD88Q8FA6/wxlcJgAc6u1x6mmNBs2fRI/HE9b51p783AEo KozREa7zc9kqrKGd60nEnqQWoW1xfp0Q/2G5MtwFxpkd/b6vsWqPRSLCMh+6UYEZ TmKVgvxhfggpZlJmTLM2wFi73iiBCzms4No/kg4fTXgSHzkeusNI4BYqPhQiZzrx HoDbFZr7j4M78kGo5Km7TWH+roiGLmGW9BY0I58BMzGwxCPHt9JC2WwYxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHIt8Ksg6a6sG4atHFs/HIt/ugmqMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvY2kzd3F5RHBycXdiaHEwY1d6OGNpMy02Q2FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RSAMA0G CSqGSIb3DQEBCwUAA4IBAQA8pMKHmKuVDNPm9If+PulIy0CAiB5EpTJdUgtJ1caM PpNw0oaBIN30eO9dNLIwdNRnYAbzghWpPPji4qnmtsPxtgs+tQfn2feHwIAXFEJV zG4XmZbiRQaFQrdF77IcbuvjPoTcg+f/zUqpUHSx2YAXIbzTZZMp4RGrYDMOlGvE bf4EfWUtkyYSD0w/REPmSJ8y8OFAKWB49wwTikW0VWbpkrsQF1whQa/fj7Ou7nj4 OWzySwoTM1qSXvEiPk2pRuGBxwDX5nMzJn0ceSbXDrmK6U2bP01x0Xm9s3sdi0bV 484w8mA4ish/Tc77L9MITCsQxuG1mjU8HhqapZpWzhO/ -----END CERTIFICATE-----Generated at Sun Jan 25 15:35:49 2026 by rpki-client