This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/w818UNgiJrFN1D1IoPDuKd4M764.roa File: w818UNgiJrFN1D1IoPDuKd4M764.roa (raw, json) Hash identifier: gMK6tkt0U2r1Lty9lNZm5R+OZM4kxyxVWTTrP5mmzto= Subject key identifier: C3:CD:7C:50:D8:22:26:B1:4D:D4:3D:48:A0:F0:EE:29:DE:0C:EF:AE Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75386D01898F82B80B917634680DF Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/w818UNgiJrFN1D1IoPDuKd4M764.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3267 IP address blocks: 217.107.75.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:53:86:d0:18:98:f8:2b:80:b9:17:63:46:80:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3cd7c50d82226b14dd43d48a0f0ee29de0cefae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:ca:a6:05:cd:09:e0:8a:bf:b6:b6:3a:69: f5:fd:8f:b9:42:64:71:f5:a4:de:ba:97:bc:43:54: ea:10:01:39:68:bf:d5:85:41:af:b1:fd:50:2b:dc: df:8a:af:dc:e3:99:70:07:b4:d7:be:eb:38:f2:96: 73:62:e3:81:72:8e:c0:93:f4:1b:ce:90:18:74:15: 23:c1:1f:87:a2:83:b6:b8:77:b3:bc:50:5e:78:27: 1b:5a:96:d6:da:82:62:21:86:95:08:09:9c:89:5b: df:26:28:3a:b4:57:13:0e:27:95:23:cb:4b:55:61: c5:7c:87:02:6c:41:3b:10:bb:ed:d8:5d:a2:9c:9b: 5f:8c:1a:f3:80:a5:71:2e:33:2b:5b:b9:1c:47:b2: b5:5c:a4:3b:9d:d7:73:3c:7a:e0:92:5c:2e:99:1f: 73:84:ae:9e:55:49:0e:58:c5:e1:57:62:f2:08:18: bc:6b:bd:77:44:34:70:fd:bc:d2:99:6b:b1:be:88: b2:84:26:17:ff:ef:6e:94:e6:54:2f:5c:d5:e5:84: 9c:d5:5b:60:79:32:b1:1d:4a:01:9d:ca:c5:3f:4b: b4:c3:39:db:fc:84:5b:de:67:70:81:4c:e8:b0:28: c5:27:ea:2a:f9:cd:35:61:2a:c8:50:23:4e:6d:69: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CD:7C:50:D8:22:26:B1:4D:D4:3D:48:A0:F0:EE:29:DE:0C:EF:AE X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/w818UNgiJrFN1D1IoPDuKd4M764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.107.75.0/25 Signature Algorithm: sha256WithRSAEncryption 35:90:6f:b1:31:fc:d7:9a:1e:92:e9:e6:44:f6:d5:44:9e:78: 76:45:94:de:b6:df:72:a8:1d:ad:01:a9:da:96:2b:5c:ae:e0: de:50:ab:dd:1a:47:bc:56:9a:a5:9e:65:02:60:d3:3a:2d:51: a3:71:de:94:fa:a7:a3:d6:39:ca:f4:14:fe:f9:ea:45:dd:00: dc:f7:39:a5:d3:f6:26:3b:90:a0:79:97:be:db:4b:2a:26:9d: 68:c9:a1:4d:90:ed:73:bc:39:8f:d4:68:a0:32:64:11:24:d4: 85:f6:f8:c4:a0:5b:78:d5:a3:1c:4e:1a:c7:32:d1:03:82:b2: 07:f9:86:52:68:6e:ac:e0:6a:0f:59:85:23:40:50:85:e5:ec: dd:61:36:63:94:b5:d3:dc:2a:30:e9:28:c7:8e:2f:7d:55:c8: 2c:78:5b:bf:47:f6:39:23:9c:9c:ad:cd:83:3c:19:fa:5b:fa: 4c:c1:b5:93:63:71:d9:a3:0b:ed:9f:53:2d:b5:15:e5:59:88: db:3a:68:5d:c1:d1:62:c3:00:9d:6d:cd:57:32:37:1b:0e:a4: eb:25:09:6f:c8:0d:b8:77:ac:55:d9:2d:c5:af:a8:9c:c9:d6: 47:f8:6a:39:89:a8:59:63:9a:e8:8d:e5:d3:61:de:9e:a6:46: 60:9a:21:7c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+p1OG0BiY+CuAuRdjRoDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2NkN2M1MGQ4MjIyNmIxNGRkNDNkNDhhMGYwZWUyOWRlMGNlZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug7KpgXNCeCKv7a2Omn1/Y+5QmRx 9aTeupe8Q1TqEAE5aL/VhUGvsf1QK9zfiq/c45lwB7TXvus48pZzYuOBco7Ak/Qb zpAYdBUjwR+HooO2uHezvFBeeCcbWpbW2oJiIYaVCAmciVvfJig6tFcTDieVI8tL VWHFfIcCbEE7ELvt2F2inJtfjBrzgKVxLjMrW7kcR7K1XKQ7nddzPHrgklwumR9z hK6eVUkOWMXhV2LyCBi8a713RDRw/bzSmWuxvoiyhCYX/+9ulOZUL1zV5YSc1Vtg eTKxHUoBncrFP0u0wznb/IRb3mdwgUzosCjFJ+oq+c01YSrIUCNObWnyYwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMPNfFDYIiaxTdQ9SKDw7ineDO+uMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvdzgxOFVOZ2lKckZOMUQxSW9QRHVLZDRNNzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUH2WtLADAN BgkqhkiG9w0BAQsFAAOCAQEANZBvsTH815oekunmRPbVRJ54dkWU3rbfcqgdrQGp 2pYrXK7g3lCr3RpHvFaapZ5lAmDTOi1Ro3HelPqno9Y5yvQU/vnqRd0A3Pc5pdP2 JjuQoHmXvttLKiadaMmhTZDtc7w5j9RooDJkESTUhfb4xKBbeNWjHE4axzLRA4Ky B/mGUmhurOBqD1mFI0BQheXs3WE2Y5S109wqMOkox44vfVXILHhbv0f2OSOcnK3N gzwZ+lv6TMG1k2Nx2aML7Z9TLbUV5VmI2zpoXcHRYsMAnW3NVzI3Gw6k6yUJb8gN uHesVdktxa+onMnWR/hqOYmoWWOa6I3l02HenqZGYJohfA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:52 2026 by rpki-client