This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/7Iz6U-UbML_bHt2iBpNhyMsUex4.roa File: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (raw, json) Hash identifier: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs= Subject key identifier: EC:8C:FA:53:E5:1B:30:BF:DB:1E:DD:A2:06:93:61:C8:CB:14:7B:1E Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B7C12B9788D41917BB2B32BC3DBFB6A74 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/7Iz6U-UbML_bHt2iBpNhyMsUex4.roa Signing time: Fri 02 Jan 2026 00:19:20 +0000 ROA not before: Fri 02 Jan 2026 00:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213245 IP address blocks: 84.17.69.0/24 maxlen: 24 84.17.72.0/24 maxlen: 24 84.17.76.0/24 maxlen: 24 84.17.79.0/24 maxlen: 24 84.17.88.0/24 maxlen: 24 84.17.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b9:78:8d:41:91:7b:b2:b3:2b:c3:db:fb:6a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec8cfa53e51b30bfdb1edda2069361c8cb147b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:29:f3:92:3e:bb:ce:0a:c9:70:57:df:a1: 97:ff:f9:9c:ea:4b:94:f6:2f:c8:83:98:57:28:96: cd:b5:c9:1a:71:9a:44:18:c1:0c:a0:69:30:e6:29: 30:4f:c7:d3:ad:12:47:23:f2:b1:25:50:99:57:3b: 6a:aa:98:bc:af:99:f7:38:15:24:d1:d7:56:74:6a: 6d:a6:c4:fa:39:8e:57:cf:55:95:3a:c6:34:2a:58: 48:61:53:e7:a3:81:6d:d1:66:ca:18:3d:5d:2f:80: 7d:6b:c1:f2:d2:53:cd:09:f9:88:2a:76:73:02:0e: c3:1f:e9:64:c6:b4:44:c8:3c:66:f4:67:e3:c1:39: 10:a2:65:a3:29:9c:84:62:e4:c5:2d:c0:99:94:eb: c8:22:0e:53:13:6a:39:05:b3:5d:06:b0:0e:f7:1b: 5c:fb:e3:1e:14:a9:53:a6:83:20:1c:6e:02:72:de: 0b:79:9c:41:d3:aa:7d:5d:f6:46:9d:b8:48:5c:25: e0:b3:82:c1:13:1e:d9:f4:c4:62:7a:19:01:70:56: 06:14:1d:ac:9e:9e:0b:94:f1:35:4b:9e:ef:a3:73: fb:88:14:c1:92:e5:f9:0b:b7:1a:16:11:b2:df:2d: 7c:19:90:33:c0:8e:a8:e0:6f:e7:9c:e8:ea:15:36: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8C:FA:53:E5:1B:30:BF:DB:1E:DD:A2:06:93:61:C8:CB:14:7B:1E X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/7Iz6U-UbML_bHt2iBpNhyMsUex4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.17.69.0/24 84.17.72.0/24 84.17.76.0/24 84.17.79.0/24 84.17.88.0/24 84.17.95.0/24 Signature Algorithm: sha256WithRSAEncryption 40:f4:3f:57:eb:79:48:11:bf:16:6a:38:83:8a:8d:c7:9a:2e: dc:b0:c5:89:cd:5d:5a:8e:ed:fc:87:36:61:18:c1:96:b7:2a: 37:ca:f3:94:b9:4a:26:5b:53:66:37:f3:5e:67:87:c6:ad:95: dc:3b:8d:2d:a1:2d:e8:37:58:6c:cd:69:ed:b2:60:f7:ea:0c: 86:63:a7:05:3d:b9:0c:05:3f:50:6c:6f:2b:34:28:7a:c4:ea: 25:72:ad:f6:c2:d8:a6:4e:e9:d8:a6:ed:cf:c3:bc:68:eb:ba: 84:2e:a4:40:37:ed:ac:06:40:6c:ba:4b:a3:3b:f5:e4:28:73: 3e:04:1b:b7:2d:21:a5:9d:b7:18:6e:f5:88:98:20:d1:e4:dd: 10:2d:52:95:43:94:34:f7:22:81:73:c8:32:ff:51:5a:3d:56: 72:31:40:ab:49:7e:18:0a:30:51:ca:f4:4f:f7:e4:b0:fc:db: 00:1a:3f:bf:e1:1b:cb:0d:50:56:16:b6:47:ba:17:a0:d8:73: e4:fe:52:09:52:be:35:9a:4c:e4:92:d2:e5:78:e3:29:c6:1e: 1c:90:4a:25:0e:bf:b2:e4:4a:73:cd:96:fb:fd:d7:d2:c8:b3: d2:1c:7e:31:69:36:89:b1:e0:2e:e7:54:9e:ac:88:63:36:8e: 33:80:bc:45 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8Erl4jUGRe7KzK8Pb+2p0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzhjZmE1M2U1MWIzMGJmZGIxZWRkYTIwNjkzNjFjOGNiMTQ3YjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpUp85I+u84KyXBX36GX//mc6kuU 9i/Ig5hXKJbNtckacZpEGMEMoGkw5ikwT8fTrRJHI/KxJVCZVztqqpi8r5n3OBUk 0ddWdGptpsT6OY5Xz1WVOsY0KlhIYVPno4Ft0WbKGD1dL4B9a8Hy0lPNCfmIKnZz Ag7DH+lkxrREyDxm9GfjwTkQomWjKZyEYuTFLcCZlOvIIg5TE2o5BbNdBrAO9xtc ++MeFKlTpoMgHG4Cct4LeZxB06p9XfZGnbhIXCXgs4LBEx7Z9MRiehkBcFYGFB2s np4LlPE1S57vo3P7iBTBkuX5C7caFhGy3y18GZAzwI6o4G/nnOjqFTaJpwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFOyM+lPlGzC/2x7dogaTYcjLFHseMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvN0l6NlUtVWJNTF9iSHQyaUJwTmh5TXNVZXg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVBFFAwQA VBFIAwQAVBFMAwQAVBFPAwQAVBFYAwQAVBFfMA0GCSqGSIb3DQEBCwUAA4IBAQBA 9D9X63lIEb8WajiDio3Hmi7csMWJzV1aju38hzZhGMGWtyo3yvOUuUomW1NmN/Ne Z4fGrZXcO40toS3oN1hszWntsmD36gyGY6cFPbkMBT9QbG8rNCh6xOolcq32wtim TunYpu3Pw7xo67qELqRAN+2sBkBsukujO/XkKHM+BBu3LSGlnbcYbvWImCDR5N0Q LVKVQ5Q09yKBc8gy/1FaPVZyMUCrSX4YCjBRyvRP9+Sw/NsAGj+/4RvLDVBWFrZH uheg2HPk/lIJUr41mkzkktLleOMpxh4ckEolDr+y5EpzzZb7/dfSyLPSHH4xaTaJ seAu51SerIhjNo4zgLxF -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:30 2026 by rpki-client