This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/R711lM7FnDieI5pgKPwgP6Qn9_Y.roa File: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (raw, json) Hash identifier: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI= Subject key identifier: 47:BD:75:94:CE:C5:9C:38:9E:23:9A:60:28:FC:20:3F:A4:27:F7:F6 Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9 Certificate serial: 019B797E42849A76312ACBE47457C2B9785A Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/R711lM7FnDieI5pgKPwgP6Qn9_Y.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216266 IP address blocks: 192.207.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:42:84:9a:76:31:2a:cb:e4:74:57:c2:b9:78:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47bd7594cec59c389e239a6028fc203fa427f7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:ab:77:ec:df:53:67:48:fe:e8:77:a0:33: 92:c7:1b:dc:d2:ab:19:4a:d2:31:1c:82:f6:23:7c: 50:eb:90:b0:d8:a5:8a:12:c9:5f:c6:91:37:82:9f: 45:08:e8:39:7e:3c:82:01:21:db:51:db:8f:cd:41: 21:49:f4:22:b1:a1:f6:60:98:12:f6:e4:7d:49:40: d4:76:f1:67:ed:81:ef:36:90:d6:6e:f1:af:90:d7: 0f:4a:f7:e8:c1:96:f5:22:b1:2d:ad:a7:b1:a0:d8: fb:0a:be:eb:15:0d:46:5c:59:58:6c:b5:58:dc:ab: 3b:68:2d:76:82:ee:e1:db:e8:8d:6d:6f:ab:bd:58: 38:6c:7e:4b:c2:f6:7c:51:ff:9c:e2:37:6d:f9:21: 52:fc:86:86:ca:90:51:91:f4:f8:df:f5:24:5e:e9: 29:15:1d:0c:a6:ca:b9:a1:ce:a6:4e:2d:6a:e6:19: dd:2d:1a:90:2c:46:b0:91:0b:84:77:ea:65:2e:fa: 24:98:13:14:56:b0:51:d4:8f:8d:b9:9b:b7:e8:62: 25:0f:2c:aa:89:66:e0:cc:5b:17:c3:68:f6:33:06: 00:e2:bb:f6:15:97:6b:6f:84:34:d6:a5:a3:3b:78: 0a:dc:6e:47:06:44:45:61:bf:c6:54:9e:b9:9c:39: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BD:75:94:CE:C5:9C:38:9E:23:9A:60:28:FC:20:3F:A4:27:F7:F6 X509v3 Authority Key Identifier: keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/R711lM7FnDieI5pgKPwgP6Qn9_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.207.47.0/24 Signature Algorithm: sha256WithRSAEncryption 86:6f:33:c3:c9:a4:11:f6:26:aa:de:bb:20:3b:60:56:91:73: 38:c5:26:1f:2e:2e:1c:cd:c5:ab:52:aa:cb:6c:64:e4:8e:b2: 78:f9:47:b3:c7:05:3e:84:0f:c0:0d:86:ac:66:03:4c:d6:55: 3e:a7:8c:09:a9:9e:97:78:97:b8:1a:cd:83:e0:80:c4:4b:6f: 47:3e:3e:24:13:cb:61:75:3a:b6:b7:64:71:ef:df:f2:5d:bf: b8:7c:97:31:86:a8:3e:08:5c:59:41:21:b4:25:6a:59:82:e1: fe:6a:27:c7:25:19:0c:d9:de:73:b4:20:17:89:e6:c1:28:6c: 1e:98:b8:86:44:e8:b5:50:92:53:e7:bb:3e:8e:f3:2c:a8:a0: 7e:a8:46:fa:09:fa:31:7f:33:8d:64:a2:0f:29:42:c2:d5:48: 07:1f:0d:94:54:50:ab:a4:56:80:44:67:c8:88:78:ae:54:0b: a0:5c:92:0c:9b:aa:85:11:72:cf:80:69:ae:71:ff:1e:36:fc: 38:f0:3d:91:9d:c5:29:65:f8:75:88:a5:02:f0:e6:a3:f9:91: 93:0b:fa:86:8d:8d:a5:cd:79:c0:0e:a6:49:79:98:37:d0:91: fa:f3:5e:ef:54:d7:6a:4b:29:97:fb:d3:cc:2d:a3:d4:8d:83: 33:56:f6:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkKEmnYxKsvkdFfCuXhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzA3MTZjOGRkODNlNGZlYjA1ZjY1NDM0M2MxMjBhNzZi ZGIzYjkwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2JkNzU5NGNlYzU5YzM4OWUyMzlhNjAyOGZjMjAzZmE0MjdmN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru2rd+zfU2dI/uh3oDOSxxvc0qsZ StIxHIL2I3xQ65Cw2KWKEslfxpE3gp9FCOg5fjyCASHbUduPzUEhSfQisaH2YJgS 9uR9SUDUdvFn7YHvNpDWbvGvkNcPSvfowZb1IrEtraexoNj7Cr7rFQ1GXFlYbLVY 3Ks7aC12gu7h2+iNbW+rvVg4bH5LwvZ8Uf+c4jdt+SFS/IaGypBRkfT43/UkXukp FR0Mpsq5oc6mTi1q5hndLRqQLEawkQuEd+plLvokmBMUVrBR1I+NuZu36GIlDyyq iWbgzFsXw2j2MwYA4rv2FZdrb4Q01qWjO3gK3G5HBkRFYb/GVJ65nDkYGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEe9dZTOxZw4niOaYCj8ID+kJ/f2MB8GA1UdIwQY MBaAFBRwcWyN2D5P6wX2VDQ8Egp2vbO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgt NmEyMzhiYTE3OWNkLzEvUjcxMWxNN0ZuRGllSTVwZ0tQd2dQNlFuOV9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgtNmEyMzhiYTE3OWNk LzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM8vMA0G CSqGSIb3DQEBCwUAA4IBAQCGbzPDyaQR9iaq3rsgO2BWkXM4xSYfLi4czcWrUqrL bGTkjrJ4+UezxwU+hA/ADYasZgNM1lU+p4wJqZ6XeJe4Gs2D4IDES29HPj4kE8th dTq2t2Rx79/yXb+4fJcxhqg+CFxZQSG0JWpZguH+aifHJRkM2d5ztCAXiebBKGwe mLiGROi1UJJT57s+jvMsqKB+qEb6CfoxfzONZKIPKULC1UgHHw2UVFCrpFaARGfI iHiuVAugXJIMm6qFEXLPgGmucf8eNvw48D2RncUpZfh1iKUC8Oaj+ZGTC/qGjY2l zXnADqZJeZg30JH6817vVNdqSymX+9PMLaPUjYMzVvZB -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:25 2026 by rpki-client