This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/9fPFGinDfGempONBNKKR85QTrY4.roa File: 9fPFGinDfGempONBNKKR85QTrY4.roa (raw, json) Hash identifier: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg= Subject key identifier: F5:F3:C5:1A:29:C3:7C:67:A6:A4:E3:41:34:A2:91:F3:94:13:AD:8E Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECC2E26A3FE5795A0639FD495382E9 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/9fPFGinDfGempONBNKKR85QTrY4.roa Signing time: Thu 01 Jan 2026 14:18:38 +0000 ROA not before: Thu 01 Jan 2026 14:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203661 IP address blocks: 212.7.217.0/24 maxlen: 24 2a01:6e80:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c2:e2:6a:3f:e5:79:5a:06:39:fd:49:53:82:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5f3c51a29c37c67a6a4e34134a291f39413ad8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:2f:cb:2a:13:8c:3a:d0:91:8b:c8:f0:49: 36:97:a8:02:58:08:62:7b:db:ee:0e:36:4a:cc:30: 1e:ce:bb:c5:49:21:7b:b8:62:b2:6d:41:f0:24:77: 8f:dd:2d:46:18:68:a0:6b:af:e7:1a:93:3e:b2:f8: 1a:ca:e2:ca:13:12:35:81:a1:1e:43:b3:4c:95:46: 57:5b:0c:e4:3e:fb:60:05:f3:84:ea:25:ca:5c:20: 61:a7:76:4a:80:d3:96:a5:fb:c7:af:df:43:32:f2: 8c:5f:d8:9e:81:73:79:06:fb:23:32:2b:c9:52:36: 7d:89:49:fe:3c:3d:22:e8:9c:a2:60:ef:c9:d2:87: b7:9b:56:05:fa:fd:b7:12:e4:37:e9:4e:0e:d6:25: ab:30:ec:bc:2f:df:ff:5c:23:16:64:26:3d:ff:fa: b7:2e:a3:43:e2:00:ea:8f:cb:3b:83:92:b2:c4:54: 64:ef:80:3f:8e:a9:22:e6:59:30:d0:56:52:07:67: 05:79:06:07:2b:a4:8e:c1:73:9c:0a:e1:04:7e:0c: 8e:44:e2:eb:76:44:42:96:fa:d7:38:de:c9:f2:b7: 05:d4:23:34:e9:af:f1:bc:cf:65:eb:ef:bb:a5:59: 6c:16:78:32:6d:46:cb:9c:44:29:9f:bf:dc:66:03: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F3:C5:1A:29:C3:7C:67:A6:A4:E3:41:34:A2:91:F3:94:13:AD:8E X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/9fPFGinDfGempONBNKKR85QTrY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.7.217.0/24 IPv6: 2a01:6e80:a::/48 Signature Algorithm: sha256WithRSAEncryption 7b:16:a7:44:e7:ec:2b:45:9a:4a:73:38:6f:60:27:d0:28:07: e8:80:82:98:f7:7e:27:cf:fe:07:e9:1a:02:21:36:5f:23:da: 0a:ae:5b:9a:6f:ff:3c:e8:00:23:0b:b9:aa:e6:e1:b0:6c:4d: 1a:f7:4a:29:f1:40:b1:75:a9:24:36:8d:24:b6:d9:9a:90:38: 18:b7:d7:4e:30:5f:c1:65:7d:22:2e:bf:9a:c0:8a:04:97:79: ee:46:85:6b:75:77:70:14:0d:83:88:b6:6f:96:fb:5a:ea:fb: 0b:c8:ee:55:32:88:75:0d:13:24:2d:82:36:a6:34:71:49:ba: 31:a2:23:40:9e:0e:9e:3d:48:f5:e0:13:82:1b:b3:64:68:ca: 35:bd:e8:1c:16:b8:c1:bb:00:71:a3:59:93:b3:8a:24:de:ce: e4:aa:e2:ff:86:3b:de:19:e4:f5:46:5a:87:b2:d9:64:a7:a1: 5d:fd:da:b4:b4:00:4c:94:c8:db:13:ec:c7:ec:6d:f3:5b:82: 53:6f:76:b1:15:a0:48:4c:d1:97:aa:2d:09:c9:50:ea:d2:be: 72:81:1c:06:9e:be:1d:8e:c3:e5:5c:04:3f:c9:d1:a2:fd:94: a0:ba:8e:11:e6:65:0b:db:83:f6:4c:1e:cf:b1:58:59:47:fd: 32:59:32:66 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57MLiaj/leVoGOf1JU4LpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWYzYzUxYTI5YzM3YzY3YTZhNGUzNDEzNGEyOTFmMzk0MTNhZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7EvyyoTjDrQkYvI8Ek2l6gCWAhi e9vuDjZKzDAezrvFSSF7uGKybUHwJHeP3S1GGGiga6/nGpM+svgayuLKExI1gaEe Q7NMlUZXWwzkPvtgBfOE6iXKXCBhp3ZKgNOWpfvHr99DMvKMX9iegXN5BvsjMivJ UjZ9iUn+PD0i6JyiYO/J0oe3m1YF+v23EuQ36U4O1iWrMOy8L9//XCMWZCY9//q3 LqND4gDqj8s7g5KyxFRk74A/jqki5lkw0FZSB2cFeQYHK6SOwXOcCuEEfgyOROLr dkRClvrXON7J8rcF1CM06a/xvM9l6++7pVlsFngybUbLnEQpn7/cZgODbwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPXzxRopw3xnpqTjQTSikfOUE62OMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvOWZQRkdpbkRmR2VtcE9OQk5LS1I4NVFUclk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1AfZMA8E AgACMAkDBwAqAW6AAAowDQYJKoZIhvcNAQELBQADggEBAHsWp0Tn7CtFmkpzOG9g J9AoB+iAgpj3fifP/gfpGgIhNl8j2gquW5pv/zzoACMLuarm4bBsTRr3SinxQLF1 qSQ2jSS22ZqQOBi3104wX8FlfSIuv5rAigSXee5GhWt1d3AUDYOItm+W+1rq+wvI 7lUyiHUNEyQtgjamNHFJujGiI0CeDp49SPXgE4Ibs2RoyjW96BwWuMG7AHGjWZOz iiTezuSq4v+GO94Z5PVGWoey2WSnoV392rS0AEyUyNsT7MfsbfNbglNvdrEVoEhM 0ZeqLQnJUOrSvnKBHAaevh2Ow+VcBD/J0aL9lKC6jhHmZQvbg/ZMHs+xWFlH/TJZ MmY= -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:42 2026 by rpki-client