This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/017yR2AH3nhtreOuYgsNpqkrBt0.roa File: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (raw, json) Hash identifier: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224= Subject key identifier: D3:5E:F2:47:60:07:DE:78:6D:AD:E3:AE:62:0B:0D:A6:A9:2B:06:DD Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Certificate serial: 019B7D5C1A512686C85E8C9D6D30F8F5C640 Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/017yR2AH3nhtreOuYgsNpqkrBt0.roa Signing time: Fri 02 Jan 2026 06:19:06 +0000 ROA not before: Fri 02 Jan 2026 06:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47264 IP address blocks: 80.247.95.0/24 maxlen: 24 185.95.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:1a:51:26:86:c8:5e:8c:9d:6d:30:f8:f5:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Validity Not Before: Jan 2 06:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d35ef2476007de786dade3ae620b0da6a92b06dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:f5:9f:6d:87:cd:e0:82:4e:24:bb:23:6b: 0c:12:99:9a:7d:9e:db:ba:a9:29:95:10:77:e5:1b: 2e:1e:49:4c:b3:db:99:13:85:57:36:0b:a6:85:87: 4d:10:dc:67:ab:68:55:be:e1:2e:87:52:ca:58:65: 89:0c:a2:8e:98:21:d7:3c:1a:2a:ad:31:7c:64:a7: ec:ae:09:d6:27:24:1d:d2:c9:68:ad:d7:f4:ec:b9: 52:83:21:7d:01:08:aa:c1:57:38:bc:07:1b:73:1b: d6:3a:36:8e:f5:91:99:43:39:2b:a4:c3:1f:b0:48: 3a:cc:4e:c2:10:e5:70:2d:03:1c:4f:9c:c0:f2:8e: 97:16:d8:d9:fc:00:8e:8b:8b:eb:f7:65:70:9f:1d: 9b:f2:a4:34:f0:a3:f7:89:c9:38:12:f1:cd:bb:0d: 12:bf:7e:aa:e3:c3:27:0b:ff:17:e9:92:ac:e4:ca: 87:c2:bc:7a:ca:a8:7e:5b:f8:05:b6:23:b4:8f:4c: 34:e9:f8:9a:ae:36:52:8f:78:f7:9a:52:92:18:2e: a1:03:57:d6:a3:d5:f8:46:4c:e5:c2:48:bf:e5:9b: 4f:36:78:0d:69:d1:a8:1b:11:25:46:51:f7:7d:f4: db:3d:f2:f3:a1:51:60:6d:dd:3d:8a:a6:3d:3b:c8: 89:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5E:F2:47:60:07:DE:78:6D:AD:E3:AE:62:0B:0D:A6:A9:2B:06:DD X509v3 Authority Key Identifier: keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/017yR2AH3nhtreOuYgsNpqkrBt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.247.95.0/24 185.95.48.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:b2:29:c2:e1:17:f3:e6:41:7c:af:cf:f9:33:04:28:e2:9e: 3f:d4:d2:42:59:ce:14:9e:7c:18:cb:b5:18:3c:1c:69:6d:85: b9:8b:71:79:af:73:c3:5a:01:49:3d:cc:b8:68:eb:71:d5:d3: 65:fc:88:b1:1f:1f:e5:f7:4a:da:5f:f8:31:2d:25:e3:79:a3: d2:10:15:18:ab:af:14:41:ea:53:50:2c:a8:c5:cd:5b:02:bc: 28:bb:1b:ce:0f:f3:0b:3b:27:3d:c5:0c:5c:bc:02:19:7e:92: 22:f6:ea:26:4e:1c:30:4b:3c:17:e9:f6:8a:33:35:02:6f:0b: a6:a2:85:53:f7:bd:80:52:dc:a5:9e:b5:29:50:6d:62:c4:d2: be:57:fb:e6:76:5c:65:e6:1c:5d:c6:32:4c:53:68:0d:01:07: e9:cc:ed:63:88:1d:ae:6a:31:37:82:c3:1e:7e:97:fd:fe:45: 1e:e8:6f:fe:1e:e6:bb:95:a1:4b:56:e8:46:bf:87:82:42:3c: 0d:58:b4:54:04:35:29:df:71:22:97:64:7a:07:9d:4e:a8:55: 53:52:4c:48:f9:50:95:74:a7:35:59:2d:9b:1b:1e:54:a3:50: 58:60:f4:f9:66:5f:80:04:04:37:75:f9:7a:1a:d1:6c:26:98: 28:17:27:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XBpRJobIXoydbTD49cZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi OWNiOTMwHhcNMjYwMTAyMDYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzVlZjI0NzYwMDdkZTc4NmRhZGUzYWU2MjBiMGRhNmE5MmIwNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG31n22HzeCCTiS7I2sMEpmafZ7b uqkplRB35RsuHklMs9uZE4VXNgumhYdNENxnq2hVvuEuh1LKWGWJDKKOmCHXPBoq rTF8ZKfsrgnWJyQd0slordf07LlSgyF9AQiqwVc4vAcbcxvWOjaO9ZGZQzkrpMMf sEg6zE7CEOVwLQMcT5zA8o6XFtjZ/ACOi4vr92Vwnx2b8qQ08KP3ick4EvHNuw0S v36q48MnC/8X6ZKs5MqHwrx6yqh+W/gFtiO0j0w06fiarjZSj3j3mlKSGC6hA1fW o9X4Rkzlwki/5ZtPNngNadGoGxElRlH3ffTbPfLzoVFgbd09iqY9O8iJZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNNe8kdgB954ba3jrmILDaapKwbdMB8GA1UdIwQY MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt MmU5ZGUyNTJkMWY2LzEvMDE3eVIyQUgzbmh0cmVPdVlnc05wcWtyQnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2 LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPdfAwQC uV8wMA0GCSqGSIb3DQEBCwUAA4IBAQAusinC4Rfz5kF8r8/5MwQo4p4/1NJCWc4U nnwYy7UYPBxpbYW5i3F5r3PDWgFJPcy4aOtx1dNl/IixHx/l90raX/gxLSXjeaPS EBUYq68UQepTUCyoxc1bArwouxvOD/MLOyc9xQxcvAIZfpIi9uomThwwSzwX6faK MzUCbwumooVT972AUtylnrUpUG1ixNK+V/vmdlxl5hxdxjJMU2gNAQfpzO1jiB2u ajE3gsMefpf9/kUe6G/+Hua7laFLVuhGv4eCQjwNWLRUBDUp33Eil2R6B51OqFVT UkxI+VCVdKc1WS2bGx5Uo1BYYPT5Zl+ABAQ3dfl6GtFsJpgoFydl -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:11 2026 by rpki-client