This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/C7uI61q8dQVU_3fsVaMtwm-r8h4.roa File: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (raw, json) Hash identifier: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00= Subject key identifier: 0B:BB:88:EB:5A:BC:75:05:54:FF:77:EC:55:A3:2D:C2:6F:AB:F2:1E Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Certificate serial: 019B77588D9F5E15C6D5F2E8BB4F87DF5927 Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/C7uI61q8dQVU_3fsVaMtwm-r8h4.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197714 IP address blocks: 217.25.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8d:9f:5e:15:c6:d5:f2:e8:bb:4f:87:df:59:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bbb88eb5abc750554ff77ec55a32dc26fabf21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:14:ff:3b:da:f9:0c:3a:d5:f4:7b:fe:8e: 7c:49:17:49:1c:32:b4:aa:77:fa:52:e4:89:da:15: 12:19:db:d4:ff:c8:92:d5:fe:f9:b9:68:69:4c:ff: 48:25:e9:29:cd:a8:4b:94:90:c2:c8:ae:20:a9:27: e5:57:0e:21:8b:86:6e:df:7f:30:3a:4c:85:2b:54: 75:00:ed:d7:75:55:73:47:16:69:71:b5:52:7d:46: 0c:fc:bc:51:f5:ec:1e:7b:41:be:f3:56:5e:8f:05: da:a6:1f:ec:e6:3f:12:1d:7d:7b:8c:40:8f:fb:25: 74:d8:de:78:5a:60:f3:d7:ed:98:29:8f:e5:fc:be: 3f:59:08:d9:79:67:d4:72:4a:cd:d1:01:d5:f6:81: 55:aa:37:84:36:b5:9a:ac:18:ec:a3:c6:ea:9e:41: 94:22:96:b3:ee:4a:df:c0:60:70:10:b2:a8:b3:e2: 5e:6a:d1:2e:7b:39:c1:d4:e6:6a:04:ae:7a:d1:a0: 10:2c:54:a7:46:cf:ae:56:8a:dd:58:53:b0:f1:9a: 19:a9:8f:ae:c2:f2:a4:b3:9d:de:9d:12:59:03:bd: 96:2a:a5:ad:c5:fe:65:32:4d:3f:55:2f:0e:3e:61: 14:c3:6b:ec:73:b5:80:72:05:b1:36:be:64:c3:f6: fc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BB:88:EB:5A:BC:75:05:54:FF:77:EC:55:A3:2D:C2:6F:AB:F2:1E X509v3 Authority Key Identifier: keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/C7uI61q8dQVU_3fsVaMtwm-r8h4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.25.84.0/23 Signature Algorithm: sha256WithRSAEncryption bd:19:93:26:c4:86:b2:ae:dd:44:34:69:29:4e:f6:61:c8:5f: 4f:5a:e5:2e:82:06:1a:29:a7:8e:61:45:4c:c3:bf:f3:17:ae: a3:c5:a7:c4:7f:ee:b5:95:d6:cb:d7:5d:39:06:4b:e2:b2:82: 31:5a:4e:00:99:58:0b:48:23:d8:7a:ec:44:a6:7d:da:2c:f1: c0:cc:99:88:13:c7:c7:b8:b1:2d:8a:8f:03:70:e1:1e:4b:e6: 95:1b:1c:3c:52:15:f6:93:4a:18:3f:f2:14:30:29:d2:f6:fd: fa:23:0f:50:e5:f9:38:34:a9:f2:2f:a6:7f:8f:b3:04:7f:eb: f5:0f:da:7f:50:72:26:c4:b7:d1:6a:f1:73:ed:c3:3d:13:00: 48:62:7d:5c:28:18:40:23:f1:0a:7b:2a:f6:ba:f2:d3:64:64: fb:93:42:8f:8e:ee:6a:9a:da:aa:a2:2b:6d:5b:62:76:63:a5: 2c:e5:a7:17:3d:85:0c:a0:77:b4:a7:fe:18:24:fa:2d:2e:16: ae:14:18:19:70:9e:da:54:19:04:1c:4a:16:cf:2f:27:45:c1: 09:ff:fa:48:9b:fc:ba:73:42:84:12:b2:c2:57:36:29:a2:09: e9:04:19:fb:a8:79:0d:19:22:c3:ec:35:e9:68:b8:1b:fc:f9: dd:28:5e:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WI2fXhXG1fLou0+H31knMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4 YjlkODcwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmJiODhlYjVhYmM3NTA1NTRmZjc3ZWM1NWEzMmRjMjZmYWJmMjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO4U/zva+Qw61fR7/o58SRdJHDK0 qnf6UuSJ2hUSGdvU/8iS1f75uWhpTP9IJekpzahLlJDCyK4gqSflVw4hi4Zu338w OkyFK1R1AO3XdVVzRxZpcbVSfUYM/LxR9ewee0G+81ZejwXaph/s5j8SHX17jECP +yV02N54WmDz1+2YKY/l/L4/WQjZeWfUckrN0QHV9oFVqjeENrWarBjso8bqnkGU Ipaz7krfwGBwELKos+JeatEueznB1OZqBK560aAQLFSnRs+uVordWFOw8ZoZqY+u wvKks53enRJZA72WKqWtxf5lMk0/VS8OPmEUw2vsc7WAcgWxNr5kw/b8GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAu7iOtavHUFVP937FWjLcJvq/IeMB8GA1UdIwQY MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt Y2Q5NzQwNDI2NDlmLzEvQzd1STYxcThkUVZVXzNmc1ZhTXR3bS1yOGg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2RlUMA0G CSqGSIb3DQEBCwUAA4IBAQC9GZMmxIayrt1ENGkpTvZhyF9PWuUuggYaKaeOYUVM w7/zF66jxafEf+61ldbL1105BkvisoIxWk4AmVgLSCPYeuxEpn3aLPHAzJmIE8fH uLEtio8DcOEeS+aVGxw8UhX2k0oYP/IUMCnS9v36Iw9Q5fk4NKnyL6Z/j7MEf+v1 D9p/UHImxLfRavFz7cM9EwBIYn1cKBhAI/EKeyr2uvLTZGT7k0KPju5qmtqqoitt W2J2Y6Us5acXPYUMoHe0p/4YJPotLhauFBgZcJ7aVBkEHEoWzy8nRcEJ//pIm/y6 c0KEErLCVzYpognpBBn7qHkNGSLD7DXpaLgb/PndKF7m -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:24 2026 by rpki-client