This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa File: U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa (raw, json) Hash identifier: h4vlRYblnFE5NeXhaGifoUzHbL8gvX60WPtBD/isPek= Subject key identifier: 53:5E:C8:83:B4:C7:DC:77:FD:BB:41:E3:BA:0E:01:F0:5A:9B:69:E3 Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Certificate serial: 019B7DCB65A14398A41B9AF0AA3F3BCBCE5C Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 89.104.206.0/24 maxlen: 24 185.195.0.0/22 maxlen: 24 2a01:77c0:1619::/48 maxlen: 48 2a01:77c0:7135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:65:a1:43:98:a4:1b:9a:f0:aa:3f:3b:cb:ce:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=535ec883b4c7dc77fdbb41e3ba0e01f05a9b69e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:b4:e8:21:d1:78:59:88:9a:de:55:3d:6a: 62:50:65:fe:e7:dd:86:37:58:e0:b4:89:00:42:0a: 3a:80:1a:2c:ff:20:5d:ac:0e:a7:f1:a1:6e:c6:75: af:8b:50:01:b7:e2:82:05:f5:bf:b8:97:58:7b:9c: e8:b4:45:66:c4:fb:17:cf:27:36:c2:1b:23:02:ca: 41:6d:37:b1:22:ba:6f:ea:99:a4:24:b8:9d:d3:60: a6:99:02:30:ed:b6:80:40:2a:7d:27:db:8e:96:37: a5:43:c3:c8:7d:7b:5a:84:ec:e9:1b:5b:a5:ed:c1: 37:df:d4:4c:28:4e:ae:ee:a0:66:3f:e9:d9:ed:e2: 22:e8:1e:8e:e5:37:9d:5c:d7:38:0e:17:da:19:fc: 4c:d9:83:f0:ee:92:15:c2:4f:ee:e9:55:14:67:08: b8:35:67:31:f6:43:41:6e:79:57:06:c9:79:fb:a0: 61:fa:b4:c3:7c:2e:46:e7:e8:59:69:39:d1:df:1e: 07:ad:b9:77:9d:05:2f:04:8c:f0:58:fc:8f:ee:81: 64:00:6e:87:31:60:3c:c2:0f:27:10:e2:86:01:a1: 3e:53:00:53:70:dc:5b:b6:5b:d7:ba:07:ff:20:8e: 0e:eb:8d:dd:0a:fd:06:74:ba:c5:7d:21:01:bc:f6: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5E:C8:83:B4:C7:DC:77:FD:BB:41:E3:BA:0E:01:F0:5A:9B:69:E3 X509v3 Authority Key Identifier: keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.104.206.0/24 185.195.0.0/22 IPv6: 2a01:77c0:1619::/48 2a01:77c0:7135::/48 Signature Algorithm: sha256WithRSAEncryption 8f:27:83:e6:de:ec:0b:cf:3d:25:88:fd:d8:b5:cf:3b:0e:f2: 24:2c:e9:1e:cf:3a:3d:7e:8d:d7:f2:ec:6e:bf:b8:b2:eb:8e: b5:a4:bf:ba:91:14:53:c8:8d:cc:f8:af:11:c2:4a:a2:22:88: a7:a0:a8:ab:29:df:59:05:83:91:78:a3:23:03:54:d2:45:48: 6d:44:c1:4f:9c:73:a2:9b:14:26:b5:28:23:84:a8:84:38:26: bd:55:6c:2a:f5:e5:92:39:98:dd:5b:f7:f0:53:70:2d:f4:08: c3:14:ae:b8:e9:11:3f:61:d3:e1:2d:78:4f:1e:db:3d:67:62: f0:7b:57:04:7d:c5:db:ac:a2:5b:64:b0:24:5c:80:65:b0:04: 22:e8:d9:6f:8e:5e:36:d7:18:18:d7:ee:42:e0:bc:f3:b0:2b: 9b:08:fb:cf:8e:5f:1f:ae:0d:bb:29:20:ba:22:1e:c4:dc:11: 3f:67:e8:48:f5:0b:8d:53:7b:08:b3:4d:48:12:a5:d8:9c:c5: f3:62:3b:1e:63:42:ea:e8:10:23:68:95:70:bb:2d:92:63:69: 26:d3:5f:be:35:21:51:a2:31:23:97:6b:92:3a:72:36:18:ba: 7d:c0:52:9e:4c:ce:68:e6:70:c5:cb:1b:69:ef:ac:a1:5a:aa: 05:2e:7c:2d -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9y2WhQ5ikG5rwqj87y85cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyN2FmMTdmMDQ5OTYyN2U0YjNjOGNjNWMzMzNlYzRiOGU3 NjM1ZTAwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzVlYzg4M2I0YzdkYzc3ZmRiYjQxZTNiYTBlMDFmMDVhOWI2OWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoee06CHReFmImt5VPWpiUGX+592G N1jgtIkAQgo6gBos/yBdrA6n8aFuxnWvi1ABt+KCBfW/uJdYe5zotEVmxPsXzyc2 whsjAspBbTexIrpv6pmkJLid02CmmQIw7baAQCp9J9uOljelQ8PIfXtahOzpG1ul 7cE339RMKE6u7qBmP+nZ7eIi6B6O5TedXNc4DhfaGfxM2YPw7pIVwk/u6VUUZwi4 NWcx9kNBbnlXBsl5+6Bh+rTDfC5G5+hZaTnR3x4Hrbl3nQUvBIzwWPyP7oFkAG6H MWA8wg8nEOKGAaE+UwBTcNxbtlvXugf/II4O643dCv0GdLrFfSEBvPah3wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFFNeyIO0x9x3/btB47oOAfBam2njMB8GA1UdIwQY MBaAFIJ68X8EmWJ+SzyMxcMz7EuOdjXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgt NzMxM2M3ZjNjYTNmLzEvVTE3SWc3VEgzSGY5dTBIanVnNEI4RnFiYWVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgtNzMxM2M3ZjNjYTNm LzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAWWjOAwQC ucMAMBgEAgACMBIDBwAqAXfAFhkDBwAqAXfAcTUwDQYJKoZIhvcNAQELBQADggEB AI8ng+be7AvPPSWI/di1zzsO8iQs6R7POj1+jdfy7G6/uLLrjrWkv7qRFFPIjcz4 rxHCSqIiiKegqKsp31kFg5F4oyMDVNJFSG1EwU+cc6KbFCa1KCOEqIQ4Jr1VbCr1 5ZI5mN1b9/BTcC30CMMUrrjpET9h0+EteE8e2z1nYvB7VwR9xdusoltksCRcgGWw BCLo2W+OXjbXGBjX7kLgvPOwK5sI+8+OXx+uDbspILoiHsTcET9n6Ej1C41Tewiz TUgSpdicxfNiOx5jQuroECNolXC7LZJjaSbTX741IVGiMSOXa5I6cjYYun3AUp5M zmjmcMXLG2nvrKFaqgUufC0= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:41 2026 by rpki-client