This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/cTuhdpevc1eybDKGr-5paq7rNBY.roa File: cTuhdpevc1eybDKGr-5paq7rNBY.roa (raw, json) Hash identifier: 0R89TelMBEcIxjJLa5l3VBfuRB8kZipMMgzEmnO6Cho= Subject key identifier: 71:3B:A1:76:97:AF:73:57:B2:6C:32:86:AF:EE:69:6A:AE:EB:34:16 Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453 Certificate serial: 019B7D5C0817653C5BDF77846E5C1A46B66A Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/cTuhdpevc1eybDKGr-5paq7rNBY.roa Signing time: Fri 02 Jan 2026 06:19:01 +0000 ROA not before: Fri 02 Jan 2026 06:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 209.16.144.0/24 maxlen: 24 209.16.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:08:17:65:3c:5b:df:77:84:6e:5c:1a:46:b6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453 Validity Not Before: Jan 2 06:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=713ba17697af7357b26c3286afee696aaeeb3416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b7:ad:0d:a4:39:99:2e:11:0e:03:96:04:9e: 82:cb:15:ca:0a:68:90:9b:99:63:3b:37:a3:2e:29: 4d:2f:fa:ca:b1:e9:25:ee:b9:87:0f:5d:03:1c:58: f6:6a:c5:17:64:2e:15:08:83:8e:ea:bd:9d:ef:00: 75:3f:e9:43:14:72:83:60:7c:5a:3b:c2:52:20:a6: a1:fb:5a:3d:fd:12:7e:ca:f5:59:8a:10:1c:f8:4e: 4f:96:f8:c6:9d:a3:1b:9e:43:08:95:9e:05:5a:8d: c7:44:8a:a6:5b:1f:9e:73:89:e7:12:9e:86:16:39: 29:7b:dd:84:16:53:3c:cc:a0:48:1d:c2:43:35:b2: 8e:c9:49:7b:32:d4:e0:dd:24:79:78:ee:84:f1:37: ee:1c:32:4b:da:cd:5b:5d:46:e0:b3:ce:75:85:d1: 8e:ae:84:c2:3a:0c:64:87:3b:68:2c:cd:74:5d:9f: a6:0a:6a:06:96:d7:ea:fc:96:8f:29:5f:98:af:f2: 34:6e:d3:9b:7a:55:aa:36:0e:38:cc:0e:78:b3:01: 55:8f:d5:4c:cd:d3:8f:ab:2d:f3:ca:9e:aa:ed:3b: 32:d3:63:3a:95:b2:87:a4:c4:c0:d2:bb:e0:fd:11: 7e:43:e5:01:88:2e:b8:6b:bf:ad:1e:28:01:27:0f: fa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3B:A1:76:97:AF:73:57:B2:6C:32:86:AF:EE:69:6A:AE:EB:34:16 X509v3 Authority Key Identifier: keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/cTuhdpevc1eybDKGr-5paq7rNBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.16.144.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:0d:54:02:15:98:8a:d2:14:68:d7:f9:5b:36:ce:0e:65:42: 18:3b:d5:6e:a3:92:b3:f9:b4:be:b1:00:19:8a:ad:88:e5:be: 2f:d8:f5:6e:c3:3d:00:08:46:dc:4a:3f:8f:f3:63:be:0b:c8: d0:4c:38:13:22:e8:f5:a4:68:39:67:85:ae:f5:69:fc:da:5f: aa:a4:43:5d:2e:cb:fd:31:8f:c8:2c:ef:b0:6b:a7:da:6d:68: af:bd:20:1f:fb:88:7a:7c:74:fc:0c:48:16:fb:05:e7:c5:dc: b4:48:ec:61:34:de:9c:83:3b:c9:81:77:5b:51:bc:2e:a4:c3: 6b:9f:0a:c2:c8:4e:6c:9e:00:0f:59:54:26:41:d9:10:a4:ef: 90:85:af:0c:b4:05:de:82:70:ff:c3:b9:02:cb:88:24:9b:b5: 8b:82:f8:e7:51:57:37:69:bb:e5:ef:1b:a1:6e:c5:3a:3c:4b: e3:b0:21:1f:2a:db:98:c6:04:ad:cb:50:5a:29:8d:d6:ec:d3: 7f:5c:81:67:db:53:f8:e8:9b:d6:b4:81:1f:73:f9:77:ba:8d: 10:2b:a7:ea:f9:16:79:14:66:cc:51:b7:98:cf:e7:1c:22:54: d3:ee:6a:4c:d0:0a:f3:ba:b4:4d:f5:a7:39:06:98:2e:c3:cb: 1d:ca:2d:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XAgXZTxb33eEblwaRrZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmM2Y5ZDg1YmNiM2E0MTM2MzYyYzU3NzNlOWQxNGUzOWU1 Mjk0NTMwHhcNMjYwMTAyMDYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTNiYTE3Njk3YWY3MzU3YjI2YzMyODZhZmVlNjk2YWFlZWIzNDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtretDaQ5mS4RDgOWBJ6CyxXKCmiQ m5ljOzejLilNL/rKsekl7rmHD10DHFj2asUXZC4VCIOO6r2d7wB1P+lDFHKDYHxa O8JSIKah+1o9/RJ+yvVZihAc+E5PlvjGnaMbnkMIlZ4FWo3HRIqmWx+ec4nnEp6G Fjkpe92EFlM8zKBIHcJDNbKOyUl7MtTg3SR5eO6E8TfuHDJL2s1bXUbgs851hdGO roTCOgxkhztoLM10XZ+mCmoGltfq/JaPKV+Yr/I0btObelWqNg44zA54swFVj9VM zdOPqy3zyp6q7Tsy02M6lbKHpMTA0rvg/RF+Q+UBiC64a7+tHigBJw/6RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHE7oXaXr3NXsmwyhq/uaWqu6zQWMB8GA1UdIwQY MBaAFI8/nYW8s6QTY2LFdz6dFOOeUpRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDIt Nzk5NWJmNjA4MDNiLzEvY1R1aGRwZXZjMWV5YkRLR3ItNXBhcTdyTkJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDItNzk5NWJmNjA4MDNi LzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RCQMA0G CSqGSIb3DQEBCwUAA4IBAQAbDVQCFZiK0hRo1/lbNs4OZUIYO9Vuo5Kz+bS+sQAZ iq2I5b4v2PVuwz0ACEbcSj+P82O+C8jQTDgTIuj1pGg5Z4Wu9Wn82l+qpENdLsv9 MY/ILO+wa6fabWivvSAf+4h6fHT8DEgW+wXnxdy0SOxhNN6cgzvJgXdbUbwupMNr nwrCyE5sngAPWVQmQdkQpO+Qha8MtAXegnD/w7kCy4gkm7WLgvjnUVc3abvl7xuh bsU6PEvjsCEfKtuYxgSty1BaKY3W7NN/XIFn21P46JvWtIEfc/l3uo0QK6fq+RZ5 FGbMUbeYz+ccIlTT7mpM0ArzurRN9ac5Bpguw8sdyi3z -----END CERTIFICATE-----Generated at Tue Feb 3 06:38:34 2026 by rpki-client