This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/Zn43Q78Nd4npeXgeq6wNSmLRWRw.roa File: Zn43Q78Nd4npeXgeq6wNSmLRWRw.roa (raw, json) Hash identifier: uvKtMeK47Xw8lTqqFNn4hlOymDKcJ2vplorcKNU5oNg= Subject key identifier: 66:7E:37:43:BF:0D:77:89:E9:79:78:1E:AB:AC:0D:4A:62:D1:59:1C Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019B97F81EB521229A30339C59E8B61C1208 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/Zn43Q78Nd4npeXgeq6wNSmLRWRw.roa Signing time: Wed 07 Jan 2026 10:19:38 +0000 ROA not before: Wed 07 Jan 2026 10:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 217.147.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:f8:1e:b5:21:22:9a:30:33:9c:59:e8:b6:1c:12:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Jan 7 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=667e3743bf0d7789e979781eabac0d4a62d1591c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:85:c9:97:66:72:2b:23:12:c8:59:57:f5:e5: a0:88:41:eb:f0:ac:f3:7b:24:e5:96:0f:5f:02:2f: da:ed:b5:2d:83:d4:1b:ff:2b:d2:54:95:e8:f6:53: 19:d4:a7:26:f4:06:3d:38:b3:fc:1f:12:94:97:be: a3:0c:68:a7:58:60:5d:3e:ba:9f:43:09:85:34:e9: 3b:32:bd:3f:0c:cd:a2:dc:38:57:8d:78:c5:bd:d6: 58:ca:62:2e:97:d0:70:d2:43:95:77:d9:a2:59:14: 70:66:d8:ca:7d:df:46:0b:58:d4:3b:8f:41:60:fe: 58:22:0e:00:81:2e:44:27:c2:e3:e4:7c:1e:a8:8b: a7:31:20:ad:49:84:f8:d0:d5:92:27:67:7b:38:3c: 40:9f:dd:47:1d:f1:07:48:81:a1:19:a7:05:1d:b0: 0b:4d:54:2c:5e:1a:d2:82:50:ff:3e:f3:83:95:1d: 1f:0c:ab:8c:7a:2e:c5:12:1a:15:1f:c8:86:e8:53: ec:32:e6:98:4f:48:74:c6:bc:49:4f:d6:c6:0f:01: 89:ed:05:03:ca:ce:eb:18:7c:2c:20:cb:37:27:f1: f5:fd:5c:1b:f5:40:d4:33:b8:e0:90:41:20:de:92: 75:5d:6b:3e:12:ea:31:53:04:25:d4:43:83:85:9a: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7E:37:43:BF:0D:77:89:E9:79:78:1E:AB:AC:0D:4A:62:D1:59:1C X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/Zn43Q78Nd4npeXgeq6wNSmLRWRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.168.0/24 Signature Algorithm: sha256WithRSAEncryption 60:a9:09:48:a7:87:a9:87:ba:2c:9b:3c:cf:de:63:d7:a4:15: ee:08:e6:0d:6f:71:de:e3:91:fa:ff:de:e5:b7:5e:40:ac:0f: 3d:ad:3c:b6:5d:e8:e8:9b:28:7c:43:26:4b:72:a0:b3:12:86: 18:32:47:67:62:f9:49:32:b0:5a:07:b9:32:00:6d:a6:55:19: 6e:1d:b4:de:bd:5d:7c:d8:d2:98:f4:6f:47:7a:81:1b:f1:55: c5:59:75:93:5b:e0:cd:4b:d2:92:28:08:76:6d:1d:3b:ce:75: f9:63:75:51:ba:e6:8c:3e:d2:a6:0c:87:8f:d1:23:1d:30:a5: 3e:28:fa:09:53:e0:8e:94:29:48:37:27:a1:4a:4a:aa:c3:a4: 61:d5:9d:88:62:d6:90:2b:d9:a1:49:3e:d7:84:e8:fd:21:48: 64:43:ce:63:66:9e:b1:b4:bb:fe:c3:d8:cc:f0:2a:88:7f:a6: 06:1c:ea:0c:6e:d0:36:e6:ab:7d:3f:99:30:28:2d:19:7b:8c: 21:74:b0:d0:30:bb:a5:84:f9:6a:5f:92:ef:f8:be:b5:f6:42: 9b:d2:09:40:d8:18:db:22:56:8a:d1:7f:c4:36:e2:4b:4a:67: da:86:6c:0e:5e:39:86:4c:fd:b6:ce:ed:7b:bd:e4:cc:14:90: 84:f0:3b:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuX+B61ISKaMDOcWei2HBIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwMTA3MTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjdlMzc0M2JmMGQ3Nzg5ZTk3OTc4MWVhYmFjMGQ0YTYyZDE1OTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YXJl2ZyKyMSyFlX9eWgiEHr8Kzz eyTllg9fAi/a7bUtg9Qb/yvSVJXo9lMZ1Kcm9AY9OLP8HxKUl76jDGinWGBdPrqf QwmFNOk7Mr0/DM2i3DhXjXjFvdZYymIul9Bw0kOVd9miWRRwZtjKfd9GC1jUO49B YP5YIg4AgS5EJ8Lj5HweqIunMSCtSYT40NWSJ2d7ODxAn91HHfEHSIGhGacFHbAL TVQsXhrSglD/PvODlR0fDKuMei7FEhoVH8iG6FPsMuaYT0h0xrxJT9bGDwGJ7QUD ys7rGHwsIMs3J/H1/Vwb9UDUM7jgkEEg3pJ1XWs+EuoxUwQl1EODhZonEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGZ+N0O/DXeJ6Xl4HqusDUpi0VkcMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvWm40M1E3OE5kNG5wZVhnZXE2d05TbUxSV1J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZOoMA0G CSqGSIb3DQEBCwUAA4IBAQBgqQlIp4eph7osmzzP3mPXpBXuCOYNb3He45H6/97l t15ArA89rTy2Xejomyh8QyZLcqCzEoYYMkdnYvlJMrBaB7kyAG2mVRluHbTevV18 2NKY9G9HeoEb8VXFWXWTW+DNS9KSKAh2bR07znX5Y3VRuuaMPtKmDIeP0SMdMKU+ KPoJU+COlClINyehSkqqw6Rh1Z2IYtaQK9mhST7XhOj9IUhkQ85jZp6xtLv+w9jM 8CqIf6YGHOoMbtA25qt9P5kwKC0Ze4whdLDQMLulhPlqX5Lv+L619kKb0glA2Bjb IlaK0X/ENuJLSmfahmwOXjmGTP22zu17veTMFJCE8DsF -----END CERTIFICATE-----Generated at Sun Jan 25 11:02:05 2026 by rpki-client