This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/nf1SgFBUZCq1g5bffJRLfEK0Wy4.roa File: nf1SgFBUZCq1g5bffJRLfEK0Wy4.roa (raw, json) Hash identifier: WIZOSDt0Es9Gm8CvqlkZaoIujiZBkOCxPKGB1dEZdbA= Subject key identifier: 9D:FD:52:80:50:54:64:2A:B5:83:96:DF:7C:94:4B:7C:42:B4:5B:2E Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6A7E9CACA9B889A6E84BB74240A7A Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/nf1SgFBUZCq1g5bffJRLfEK0Wy4.roa Signing time: Fri 02 Jan 2026 12:20:09 +0000 ROA not before: Fri 02 Jan 2026 12:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57310 IP address blocks: 217.71.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a7:e9:ca:ca:9b:88:9a:6e:84:bb:74:24:0a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dfd52805054642ab58396df7c944b7c42b45b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:d5:69:e9:00:ad:15:44:93:a9:c2:e2:55: ec:0b:e8:ad:68:69:cf:5a:29:ad:09:5f:20:22:46: 38:fd:96:ad:90:33:b3:9b:f5:e6:a5:aa:b2:d7:10: 95:4e:3a:7c:48:4c:8c:c0:c4:a2:fb:8d:d2:ba:35: ec:aa:2d:89:98:48:b7:35:09:3c:7f:83:6b:5b:17: a9:58:ce:fe:8b:eb:2f:18:31:ba:2b:e6:bc:18:84: eb:88:7c:3a:6a:f7:d4:d5:70:94:34:98:07:d3:c5: b0:04:37:ed:53:c1:48:3a:48:5e:ba:69:d4:b0:a0: 48:86:83:95:ad:8f:72:84:0e:86:c1:bf:63:52:cb: 15:43:75:e7:b3:cc:aa:d1:19:ae:68:46:3b:eb:09: c9:07:dc:17:7e:f9:60:79:77:c5:6d:87:9c:e1:14: 84:63:25:d8:7d:d0:96:03:5b:62:54:1e:0f:4b:2d: c6:8b:4e:18:3d:44:26:14:d8:3f:6a:26:a2:ee:ad: 65:be:f5:88:cd:9c:07:9e:ba:89:ee:2f:5d:ba:eb: 4c:0f:1f:ec:c9:03:d5:d0:24:ab:71:74:87:1e:4b: 06:3d:58:1a:3b:c3:69:82:af:f9:3a:46:46:be:68: 26:bb:75:a3:85:02:8d:f2:78:a5:87:75:0d:5e:41: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FD:52:80:50:54:64:2A:B5:83:96:DF:7C:94:4B:7C:42:B4:5B:2E X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/nf1SgFBUZCq1g5bffJRLfEK0Wy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.71.113.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:eb:00:86:dc:10:f6:42:db:0c:96:1e:a6:12:c1:a6:6c:fc: d0:d6:67:a8:d4:97:4e:f9:f5:3e:a5:28:00:82:86:1b:4b:ee: e2:35:fd:6a:50:90:77:0a:af:23:4a:8a:e6:16:f6:5f:58:40: b1:0d:6f:d2:af:50:0c:11:af:71:0a:32:6f:8a:2a:f0:07:b8: bc:3d:26:d6:38:7f:9a:9c:1f:6a:69:d7:22:83:b0:64:16:b4: 57:74:af:f4:95:18:55:8d:0e:01:8d:74:fa:28:fe:91:f1:c2: 21:b0:71:1d:d4:a5:b2:66:bd:af:0e:68:1d:b0:e9:d2:88:ae: 0f:a4:40:cf:fb:98:6b:f1:36:62:cf:7d:5a:4c:cc:38:50:a9: 51:b7:d0:3a:a6:f9:e6:9c:17:8e:a2:d9:8c:85:a8:b7:5b:f5: 93:fa:20:4b:2a:86:9d:12:59:4c:3e:8d:30:2e:79:e2:cb:8b: 93:b9:e1:83:2a:38:1c:3f:0e:88:a5:bf:9e:5b:da:2c:5f:1b: 4e:d3:47:9c:40:22:d1:5b:d3:e2:5f:ce:5b:30:ad:f0:94:47: 89:5e:39:85:44:75:4c:e6:fb:5c:fb:c4:ad:e8:5d:ef:76:de: 1c:6e:78:d7:32:d9:e3:c3:39:60:cf:18:4a:c8:ac:90:1c:db: c4:f8:e9:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqfpysqbiJpuhLt0JAp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGZkNTI4MDUwNTQ2NDJhYjU4Mzk2ZGY3Yzk0NGI3YzQyYjQ1YjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDbVaekArRVEk6nC4lXsC+itaGnP WimtCV8gIkY4/ZatkDOzm/Xmpaqy1xCVTjp8SEyMwMSi+43SujXsqi2JmEi3NQk8 f4NrWxepWM7+i+svGDG6K+a8GITriHw6avfU1XCUNJgH08WwBDftU8FIOkheumnU sKBIhoOVrY9yhA6Gwb9jUssVQ3Xns8yq0RmuaEY76wnJB9wXfvlgeXfFbYec4RSE YyXYfdCWA1tiVB4PSy3Gi04YPUQmFNg/aiai7q1lvvWIzZwHnrqJ7i9duutMDx/s yQPV0CSrcXSHHksGPVgaO8Npgq/5OkZGvmgmu3WjhQKN8nilh3UNXkGCewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ39UoBQVGQqtYOW33yUS3xCtFsuMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvbmYxU2dGQlVaQ3ExZzViZmZKUkxmRUswV3k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UdxMA0G CSqGSIb3DQEBCwUAA4IBAQB66wCG3BD2QtsMlh6mEsGmbPzQ1meo1JdO+fU+pSgA goYbS+7iNf1qUJB3Cq8jSormFvZfWECxDW/Sr1AMEa9xCjJviirwB7i8PSbWOH+a nB9qadcig7BkFrRXdK/0lRhVjQ4BjXT6KP6R8cIhsHEd1KWyZr2vDmgdsOnSiK4P pEDP+5hr8TZiz31aTMw4UKlRt9A6pvnmnBeOotmMhai3W/WT+iBLKoadEllMPo0w Lnniy4uTueGDKjgcPw6Ipb+eW9osXxtO00ecQCLRW9PiX85bMK3wlEeJXjmFRHVM 5vtc+8St6F3vdt4cbnjXMtnjwzlgzxhKyKyQHNvE+OlZ -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:26 2026 by rpki-client