This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/zHnDEFfooX5eWswmYMgnmUr239Q.roa File: zHnDEFfooX5eWswmYMgnmUr239Q.roa (raw, json) Hash identifier: 6sSrtzj+rZgcnikGhRhQB2rZMRHaUhRbv8S7ikZnZx0= Subject key identifier: CC:79:C3:10:57:E8:A1:7E:5E:5A:CC:26:60:C8:27:99:4A:F6:DF:D4 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5CFE240F88FC83789E60F8FEE7631A Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/zHnDEFfooX5eWswmYMgnmUr239Q.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34254 IP address blocks: 217.8.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fe:24:0f:88:fc:83:78:9e:60:f8:fe:e7:63:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc79c31057e8a17e5e5acc2660c827994af6dfd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:37:f2:52:4f:fa:6c:0e:00:03:0d:f6:6d: 4c:33:60:a9:a7:d0:57:5d:5e:28:d2:54:6e:ee:9c: ed:89:bb:29:93:17:97:e9:3b:68:fb:df:23:45:d1: b6:48:83:13:2d:da:74:da:f8:6e:84:98:15:ab:a1: c3:a5:bc:c7:da:0f:a8:89:c5:d0:92:46:fc:f1:74: e4:9d:aa:01:f1:f8:dc:cd:a5:26:43:eb:1c:44:af: 33:1a:5c:0e:1c:c5:f5:d9:69:56:fd:1e:68:01:1a: 30:e5:95:b2:5b:d6:37:2c:95:f3:66:82:d1:a5:4e: 17:45:ba:00:f5:b3:af:a7:e9:09:5d:db:c3:60:5f: f6:05:ed:1f:75:bc:21:d6:6a:32:f0:1c:8f:c4:7c: d1:78:90:b0:18:b7:b6:0b:52:95:21:03:d2:84:0b: 34:bf:db:c6:64:ec:b4:b5:d9:c2:4c:6b:74:e5:69: d1:43:27:5b:76:87:89:9c:2b:8a:11:4d:b8:ba:e8: 92:cf:14:2f:b8:db:7c:7f:6c:1b:d4:45:64:dd:22: 78:6e:0b:56:58:bd:0c:a8:74:d3:38:bd:42:86:cb: a6:cf:7a:a7:1e:11:ed:29:55:c8:85:22:99:7e:3d: 41:c5:ac:aa:1c:c5:23:f4:e1:e0:52:af:fc:80:65: bf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:79:C3:10:57:E8:A1:7E:5E:5A:CC:26:60:C8:27:99:4A:F6:DF:D4 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/zHnDEFfooX5eWswmYMgnmUr239Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.8.175.0/24 Signature Algorithm: sha256WithRSAEncryption 28:be:2b:90:0d:11:96:98:79:7f:c0:8f:5f:36:e6:64:14:7b: 82:55:9a:29:21:e0:9c:31:cf:21:08:26:a8:f5:05:e0:6f:7c: ea:bc:4d:62:82:4c:ae:3e:a1:99:81:02:ca:0f:16:93:ca:ad: f2:60:9a:7d:21:28:f8:be:47:f7:16:c8:1b:c0:84:8b:bf:da: b9:f3:4c:19:dd:42:ed:d1:69:d7:7f:2a:6a:a9:4f:b0:76:a6: 50:b1:9c:4e:bc:7b:66:d5:bb:36:ad:38:a8:ae:50:1b:97:4c: 88:e4:f4:c8:c8:92:8c:47:2e:ad:64:9b:e4:3c:f5:9d:47:20: c8:f9:a8:39:6c:66:53:6f:41:40:f6:97:dc:06:51:ba:19:64: 75:74:fd:61:df:43:e4:12:5f:26:41:ef:02:fe:84:25:94:8a: 31:fc:2b:43:2c:f1:ce:05:30:dc:db:58:98:fb:a1:a7:64:ab: 97:37:ef:b3:a8:5c:b5:cc:82:71:95:32:65:74:a9:c5:83:45: 68:5f:79:95:d7:8f:a0:d1:c2:3f:30:52:5c:ed:48:ac:6d:60: f6:bf:f8:79:20:9a:ca:e8:de:0b:0e:4c:11:ae:07:b0:68:fe: 6b:83:6f:cf:75:11:95:38:a5:8c:18:9f:ac:51:46:f9:1a:77: e9:5e:16:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XP4kD4j8g3ieYPj+52MaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzc5YzMxMDU3ZThhMTdlNWU1YWNjMjY2MGM4Mjc5OTRhZjZkZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKo38lJP+mwOAAMN9m1MM2Cpp9BX XV4o0lRu7pztibspkxeX6Tto+98jRdG2SIMTLdp02vhuhJgVq6HDpbzH2g+oicXQ kkb88XTknaoB8fjczaUmQ+scRK8zGlwOHMX12WlW/R5oARow5ZWyW9Y3LJXzZoLR pU4XRboA9bOvp+kJXdvDYF/2Be0fdbwh1moy8ByPxHzReJCwGLe2C1KVIQPShAs0 v9vGZOy0tdnCTGt05WnRQydbdoeJnCuKEU24uuiSzxQvuNt8f2wb1EVk3SJ4bgtW WL0MqHTTOL1Chsumz3qnHhHtKVXIhSKZfj1BxayqHMUj9OHgUq/8gGW/8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMx5wxBX6KF+XlrMJmDIJ5lK9t/UMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvekhuREVGZm9vWDVlV3N3bVlNZ25tVXIyMzlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QivMA0G CSqGSIb3DQEBCwUAA4IBAQAoviuQDRGWmHl/wI9fNuZkFHuCVZopIeCcMc8hCCao 9QXgb3zqvE1igkyuPqGZgQLKDxaTyq3yYJp9ISj4vkf3FsgbwISLv9q580wZ3ULt 0WnXfypqqU+wdqZQsZxOvHtm1bs2rTiorlAbl0yI5PTIyJKMRy6tZJvkPPWdRyDI +ag5bGZTb0FA9pfcBlG6GWR1dP1h30PkEl8mQe8C/oQllIox/CtDLPHOBTDc21iY +6GnZKuXN++zqFy1zIJxlTJldKnFg0VoX3mV14+g0cI/MFJc7UisbWD2v/h5IJrK 6N4LDkwRrgewaP5rg2/PdRGVOKWMGJ+sUUb5GnfpXhbx -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:40 2026 by rpki-client