This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa File: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (raw, json) Hash identifier: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E= Subject key identifier: BB:83:57:EA:12:99:BC:48:7F:F9:33:16:9C:1E:42:E9:FE:5E:CC:F9 Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019B791075F68E3F8CB31392F37BCA02732B Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209155 IP address blocks: 217.147.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:75:f6:8e:3f:8c:b3:13:92:f3:7b:ca:02:73:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb8357ea1299bc487ff933169c1e42e9fe5eccf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:dd:5c:26:79:a2:42:a8:f4:67:35:71:f0: d8:9d:b9:da:64:83:5c:c0:3b:ee:e0:3c:4c:d0:6f: 1e:b8:0c:bc:e7:fb:ea:c6:bc:7e:58:c8:52:f5:94: a9:06:8c:72:3b:52:d4:f6:39:61:03:09:a1:a6:6b: dd:ce:b7:5c:09:dc:fa:c6:f7:d7:8a:1d:3f:a6:88: a9:f2:10:3c:36:b6:97:be:3e:19:71:05:12:4e:16: da:37:90:50:93:a9:4e:13:8d:c1:3d:22:ae:f9:c0: e7:d6:dc:89:65:de:5a:09:06:c4:67:5d:26:75:a3: 25:60:46:58:1b:e8:82:04:8b:25:b8:52:fe:8a:2e: ba:a5:d3:0e:2f:d7:1f:93:50:d5:f1:6d:96:15:8b: bc:60:b0:47:2f:ad:dd:0e:19:fd:3a:b8:79:0f:fc: 55:41:a9:4f:fe:2a:5a:d5:b2:92:fc:ed:0e:8d:26: 13:c6:c2:9d:a6:c8:e8:aa:38:a1:7d:03:d2:70:42: dc:c6:81:b9:1a:90:da:48:46:68:85:6f:c4:b9:13: 08:3b:1b:e9:82:f9:65:0a:94:1b:12:a7:07:53:08: 65:be:ce:6b:ac:67:18:0a:5b:87:6d:04:c9:c7:bb: 5c:19:4a:1b:0a:48:fd:c4:0f:e6:77:c7:45:09:ab: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:83:57:EA:12:99:BC:48:7F:F9:33:16:9C:1E:42:E9:FE:5E:CC:F9 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.172.0/24 Signature Algorithm: sha256WithRSAEncryption d6:0b:e1:59:36:3c:4a:23:d8:bb:bd:42:98:7f:c4:c7:ae:fb: 89:4a:fd:91:23:b2:f6:ea:b2:49:16:a5:4e:ae:36:38:6a:f6: 12:ce:28:4b:01:95:26:52:d0:a4:0a:10:e8:75:e7:30:b5:55: a4:ce:c9:26:80:a3:d7:23:6d:37:58:fb:52:c3:49:66:40:78: b4:3e:8e:f6:cd:94:f5:d4:a9:44:2d:6f:88:cb:86:65:a3:e9: 72:22:da:cf:6d:c0:ed:63:3a:74:91:b5:83:e3:94:17:74:9f: cb:12:2f:4f:6d:00:25:a9:1a:89:40:12:08:37:b4:bd:9b:b8: c7:cb:74:47:8a:b7:fe:38:f1:a3:ce:12:0a:82:b3:b3:88:0a: 7e:fd:50:40:18:b6:ed:6d:57:e8:94:c1:7a:71:d3:36:21:6c: b7:36:2a:f4:85:7f:9d:c4:7e:35:ff:df:da:44:c9:bd:f9:8f: 50:51:b5:18:44:fa:8b:d2:17:52:f6:2b:d9:15:80:06:e6:00: 5c:68:a4:10:45:56:69:9a:08:1e:ff:73:35:a5:f7:dc:a2:32: 0d:8a:8a:00:39:13:9e:29:62:91:b4:1b:52:38:51:e0:d0:be: 17:84:4b:b6:02:60:1d:18:51:cb:bb:8f:95:29:88:4d:57:64: ae:ca:98:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHX2jj+MsxOS83vKAnMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjgzNTdlYTEyOTliYzQ4N2ZmOTMzMTY5YzFlNDJlOWZlNWVjY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAHdXCZ5okKo9Gc1cfDYnbnaZINc wDvu4DxM0G8euAy85/vqxrx+WMhS9ZSpBoxyO1LU9jlhAwmhpmvdzrdcCdz6xvfX ih0/poip8hA8NraXvj4ZcQUSThbaN5BQk6lOE43BPSKu+cDn1tyJZd5aCQbEZ10m daMlYEZYG+iCBIsluFL+ii66pdMOL9cfk1DV8W2WFYu8YLBHL63dDhn9Orh5D/xV QalP/ipa1bKS/O0OjSYTxsKdpsjoqjihfQPScELcxoG5GpDaSEZohW/EuRMIOxvp gvllCpQbEqcHUwhlvs5rrGcYCluHbQTJx7tcGUobCkj9xA/md8dFCaviNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuDV+oSmbxIf/kzFpweQun+Xsz5MB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvdTROWDZoS1p2RWhfLVRNV25CNUM2ZjVlelBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZOsMA0G CSqGSIb3DQEBCwUAA4IBAQDWC+FZNjxKI9i7vUKYf8THrvuJSv2RI7L26rJJFqVO rjY4avYSzihLAZUmUtCkChDodecwtVWkzskmgKPXI203WPtSw0lmQHi0Po72zZT1 1KlELW+Iy4Zlo+lyItrPbcDtYzp0kbWD45QXdJ/LEi9PbQAlqRqJQBIIN7S9m7jH y3RHirf+OPGjzhIKgrOziAp+/VBAGLbtbVfolMF6cdM2IWy3Nir0hX+dxH41/9/a RMm9+Y9QUbUYRPqL0hdS9ivZFYAG5gBcaKQQRVZpmgge/3M1pffcojINiooAOROe KWKRtBtSOFHg0L4XhEu2AmAdGFHLu4+VKYhNV2Suypis -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:39 2026 by rpki-client