This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa File: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (raw, json) Hash identifier: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0= Subject key identifier: 17:6A:9E:1D:04:CF:DD:82:94:7F:2A:0C:27:62:3A:70:7C:AB:20:19 Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019B783545045DCDFD28C899226F28BCAEC8 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa Signing time: Thu 01 Jan 2026 06:18:35 +0000 ROA not before: Thu 01 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 83.217.9.0/24 maxlen: 24 83.217.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:45:04:5d:cd:fd:28:c8:99:22:6f:28:bc:ae:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=176a9e1d04cfdd82947f2a0c27623a707cab2019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:10:f0:d0:dc:4c:a7:fb:38:ea:12:c3:56:a6: 58:21:fc:cf:97:ca:9e:ae:51:94:de:60:92:6d:ec: 69:bc:86:03:88:67:01:9c:b4:ba:24:60:1b:ae:3c: d4:99:c9:ee:f0:a1:f1:0b:4b:df:75:a1:1b:21:7b: 73:8a:07:b7:2f:4e:00:7c:94:96:45:41:d0:f8:2c: af:2b:60:62:0b:32:91:3e:2b:17:c1:0f:de:fc:1c: ea:e1:80:5a:66:b5:d7:04:f1:76:c4:8f:aa:73:5b: c9:4a:ef:74:67:ff:52:03:9c:14:7f:73:2c:4a:2b: 0c:bd:d5:d7:7e:a2:5e:25:3c:e2:0f:d1:e8:c4:4f: b1:ab:b6:b8:ee:f8:7a:9e:3e:5e:73:87:da:8f:23: cc:f8:13:4d:b3:ca:bb:2d:57:80:4f:a4:fc:af:f2: f4:3b:3d:21:70:9e:ae:8e:96:0e:93:44:93:10:db: f0:48:59:1e:15:63:4f:34:94:53:cd:58:a5:b9:2a: 0a:98:ae:83:36:ad:6e:79:77:f3:04:8c:de:1e:af: bb:0c:55:e9:4e:f3:6a:0a:6b:93:2b:38:b0:89:c0: c3:d2:9b:9e:29:a6:25:ba:b2:ba:39:14:a1:16:cd: 7c:b9:45:9b:6a:e0:af:6b:b2:4f:33:e2:46:28:b3: 24:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6A:9E:1D:04:CF:DD:82:94:7F:2A:0C:27:62:3A:70:7C:AB:20:19 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.217.9.0/24 83.217.11.0/24 Signature Algorithm: sha256WithRSAEncryption 13:38:f4:c4:ea:4b:2f:97:65:5e:9e:86:cd:80:9a:d5:a1:74: c0:ce:41:ab:17:7a:12:47:e5:37:c6:19:48:11:04:53:21:de: b3:2e:e2:33:71:bb:72:d8:24:06:e8:fa:11:71:ea:a5:fe:97: 5b:9f:24:62:4a:9a:d1:70:9a:6b:f5:9f:ca:52:44:08:bd:4e: 76:d6:6b:ff:b6:2d:de:e3:32:8c:1c:99:5b:fb:e3:31:f7:63: c0:15:ea:5c:e8:ca:44:3c:a9:67:e6:2a:24:48:cf:e2:6f:5a: 07:9e:6c:6e:b9:63:78:b3:de:0b:5c:9d:28:4f:f3:ba:ed:63: 06:c4:9c:9b:83:7e:ab:07:b6:c9:ed:b4:d5:a9:28:b9:9f:0f: 75:1b:38:f4:33:a9:95:00:32:37:08:a8:59:55:5b:a4:ab:9f: 1b:73:18:dc:c2:f6:f2:5e:9b:7a:0b:3b:9f:e0:de:63:53:df: 6d:f4:e0:eb:19:60:ee:4c:1b:f5:46:89:b4:ff:05:a4:e3:7b: 3c:82:4c:b4:d8:ab:eb:75:81:0b:6a:01:29:ca:95:f0:3e:51: 1b:76:1f:0f:d2:68:fa:c4:24:25:e1:12:e1:43:a2:b9:5a:6e: 92:d7:be:aa:2a:a0:31:41:00:d5:84:f3:8f:7e:1b:ce:1e:2e: 70:a3:df:0f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NUUEXc39KMiZIm8ovK7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzZhOWUxZDA0Y2ZkZDgyOTQ3ZjJhMGMyNzYyM2E3MDdjYWIyMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hDw0NxMp/s46hLDVqZYIfzPl8qe rlGU3mCSbexpvIYDiGcBnLS6JGAbrjzUmcnu8KHxC0vfdaEbIXtzige3L04AfJSW RUHQ+CyvK2BiCzKRPisXwQ/e/Bzq4YBaZrXXBPF2xI+qc1vJSu90Z/9SA5wUf3Ms SisMvdXXfqJeJTziD9HoxE+xq7a47vh6nj5ec4fajyPM+BNNs8q7LVeAT6T8r/L0 Oz0hcJ6ujpYOk0STENvwSFkeFWNPNJRTzViluSoKmK6DNq1ueXfzBIzeHq+7DFXp TvNqCmuTKziwicDD0pueKaYlurK6ORShFs18uUWbauCva7JPM+JGKLMkewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBdqnh0Ez92ClH8qDCdiOnB8qyAZMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvRjJxZUhRVFAzWUtVZnlvTUoySTZjSHlySUJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU9kJAwQA U9kLMA0GCSqGSIb3DQEBCwUAA4IBAQATOPTE6ksvl2VenobNgJrVoXTAzkGrF3oS R+U3xhlIEQRTId6zLuIzcbty2CQG6PoRceql/pdbnyRiSprRcJpr9Z/KUkQIvU52 1mv/ti3e4zKMHJlb++Mx92PAFepc6MpEPKln5iokSM/ib1oHnmxuuWN4s94LXJ0o T/O67WMGxJybg36rB7bJ7bTVqSi5nw91Gzj0M6mVADI3CKhZVVukq58bcxjcwvby Xpt6Czuf4N5jU99t9ODrGWDuTBv1Rom0/wWk43s8gky02KvrdYELagEpypXwPlEb dh8P0mj6xCQl4RLhQ6K5Wm6S176qKqAxQQDVhPOPfhvOHi5wo98P -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:36 2026 by rpki-client