This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/17xPyZlJEOUx5zEX8ZO8erx4H74.roa File: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (raw, json) Hash identifier: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8= Subject key identifier: D7:BC:4F:C9:99:49:10:E5:31:E7:31:17:F1:93:BC:7A:BC:78:1F:BE Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019B7F8362F5CD9E2A62ACA090C2C98FA737 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/17xPyZlJEOUx5zEX8ZO8erx4H74.roa Signing time: Fri 02 Jan 2026 16:21:15 +0000 ROA not before: Fri 02 Jan 2026 16:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209127 IP address blocks: 31.192.211.0/24 maxlen: 24 2a03:2100:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:62:f5:cd:9e:2a:62:ac:a0:90:c2:c9:8f:a7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jan 2 16:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7bc4fc9994910e531e73117f193bc7abc781fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:75:3a:84:a4:a4:a3:c8:de:ad:5e:0e:db:6c: 64:48:aa:ac:b3:1e:53:63:98:de:23:3c:66:bf:e3: b0:1e:c4:b9:31:ed:a6:33:93:64:36:f3:33:2f:13: 5c:40:57:e8:10:af:a1:df:68:f7:69:f2:76:5a:da: bd:24:3c:10:f6:ba:81:3a:51:04:5e:54:f9:4f:fe: 6f:c7:93:6a:3e:e2:4f:6c:73:38:cb:03:08:ca:a6: ea:65:09:0b:55:de:ce:68:97:7b:0f:de:d3:89:cc: 87:7c:ec:3f:a9:39:be:c6:af:e9:d7:e8:d9:ee:67: f6:f6:61:50:cc:12:d2:27:71:0e:04:89:73:9c:36: a1:3f:eb:48:0c:82:3e:7b:ae:e5:e2:ad:64:15:a0: 0c:37:b3:2c:6d:02:04:c8:30:ef:79:d6:e9:cc:11: 99:e2:ec:f5:87:98:5c:1d:4e:bf:d0:7c:64:76:b4: 47:20:ae:49:b5:44:41:46:d4:16:e3:89:e7:90:f3: 27:32:d5:cc:8b:f1:2e:cd:65:48:e0:63:4b:81:c9: 90:95:cf:2e:ff:a6:d7:0a:7d:a9:c4:1c:83:02:a8: 6b:fd:22:ed:db:1a:73:5e:5d:b8:ae:78:55:60:68: 6a:74:28:e7:5e:ad:44:29:83:ae:6a:55:80:19:61: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BC:4F:C9:99:49:10:E5:31:E7:31:17:F1:93:BC:7A:BC:78:1F:BE X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/17xPyZlJEOUx5zEX8ZO8erx4H74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.192.211.0/24 IPv6: 2a03:2100:31::/48 Signature Algorithm: sha256WithRSAEncryption 09:6a:56:16:24:53:8c:97:6a:65:90:95:ff:c4:93:8e:4b:59: 8e:28:76:be:a1:d5:da:e2:68:bc:63:8b:2d:3e:1e:99:0e:c4: c2:86:07:8a:85:c1:3f:9e:00:21:9c:e8:a7:b8:47:95:37:ce: e5:f7:37:0b:4c:8a:31:ef:c5:08:eb:bb:c7:5d:e3:a1:25:1f: f2:72:ad:c2:d1:a8:3e:51:70:7c:15:25:c4:bd:e4:c2:97:d8: b1:f4:e7:b6:0e:3b:1a:0e:42:0d:05:ae:95:f9:42:69:27:8c: 5c:96:7e:4f:77:35:6d:f8:16:34:11:1a:77:3a:f2:08:dd:3e: 13:41:6f:ae:33:79:13:a1:e5:86:69:53:c2:a8:6e:45:ad:b8: e8:e5:d6:dc:2f:a1:a2:21:7d:44:6b:02:08:d3:a5:1b:9d:52: 97:10:e6:55:b1:f3:20:e3:25:5e:f1:ff:49:f7:68:97:ee:4f: c0:09:de:17:bf:76:04:ba:74:3b:49:44:d3:bb:b1:2f:91:58: b2:65:e6:20:52:42:aa:ea:01:90:ba:07:55:6d:5a:81:9e:1c: 0b:9d:09:17:e8:69:af:a7:03:26:0c:ef:9b:7b:a2:21:f3:8d: e6:01:4e:19:b4:ea:57:68:35:cd:b8:37:33:73:b9:71:da:29: 08:30:6d:8a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/g2L1zZ4qYqygkMLJj6c3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMTAyMTYyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2JjNGZjOTk5NDkxMGU1MzFlNzMxMTdmMTkzYmM3YWJjNzgxZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHU6hKSko8jerV4O22xkSKqssx5T Y5jeIzxmv+OwHsS5Me2mM5NkNvMzLxNcQFfoEK+h32j3afJ2Wtq9JDwQ9rqBOlEE XlT5T/5vx5NqPuJPbHM4ywMIyqbqZQkLVd7OaJd7D97TicyHfOw/qTm+xq/p1+jZ 7mf29mFQzBLSJ3EOBIlznDahP+tIDII+e67l4q1kFaAMN7MsbQIEyDDvedbpzBGZ 4uz1h5hcHU6/0HxkdrRHIK5JtURBRtQW44nnkPMnMtXMi/EuzWVI4GNLgcmQlc8u /6bXCn2pxByDAqhr/SLt2xpzXl24rnhVYGhqdCjnXq1EKYOualWAGWFazwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNe8T8mZSRDlMecxF/GTvHq8eB++MB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvMTd4UHlabEpFT1V4NXpFWDhaTzhlcng0SDc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAH8DTMA8E AgACMAkDBwAqAyEAADEwDQYJKoZIhvcNAQELBQADggEBAAlqVhYkU4yXamWQlf/E k45LWY4odr6h1driaLxjiy0+HpkOxMKGB4qFwT+eACGc6Ke4R5U3zuX3NwtMijHv xQjru8dd46ElH/JyrcLRqD5RcHwVJcS95MKX2LH057YOOxoOQg0FrpX5QmknjFyW fk93NW34FjQRGnc68gjdPhNBb64zeROh5YZpU8KobkWtuOjl1twvoaIhfURrAgjT pRudUpcQ5lWx8yDjJV7x/0n3aJfuT8AJ3he/dgS6dDtJRNO7sS+RWLJl5iBSQqrq AZC6B1VtWoGeHAudCRfoaa+nAyYM75t7oiHzjeYBThm06ldoNc24NzNzuXHaKQgw bYo= -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:40 2026 by rpki-client