This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/R8eN-Gsc707Jf_OfiTtz9_9GAXw.roa File: R8eN-Gsc707Jf_OfiTtz9_9GAXw.roa (raw, json) Hash identifier: nQU1BjOZCkDFTHZ5GWt9nYnHvXRxdvBnHniV1Cq7F7M= Subject key identifier: 47:C7:8D:F8:6B:1C:EF:4E:C9:7F:F3:9F:89:3B:73:F7:FF:46:01:7C Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09 Certificate serial: 019B7BA3CBEF7015D346E2ADD6000451D233 Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/R8eN-Gsc707Jf_OfiTtz9_9GAXw.roa Signing time: Thu 01 Jan 2026 22:18:10 +0000 ROA not before: Thu 01 Jan 2026 22:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 171.25.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:cb:ef:70:15:d3:46:e2:ad:d6:00:04:51:d2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09 Validity Not Before: Jan 1 22:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47c78df86b1cef4ec97ff39f893b73f7ff46017c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7a:92:90:a7:14:ab:10:3d:c4:76:6a:63:ab: 7a:11:ef:f1:79:9a:7b:ff:0a:b7:05:31:fc:71:cf: 38:e6:26:ba:83:de:f6:6a:8c:51:a1:b7:86:61:d7: 85:4a:56:4d:fb:3f:22:33:a0:8b:8c:d3:db:db:7f: 29:52:b9:41:00:05:fa:df:06:fc:6d:8a:d1:23:36: 39:87:b5:9a:61:b8:c1:05:23:5f:8b:b7:62:b5:c7: 55:c4:28:71:84:f8:cb:e5:65:a9:b0:86:de:da:d4: 08:d5:05:1e:cf:9d:77:f2:50:11:36:96:9b:da:91: cf:23:de:7e:27:10:58:b9:af:ce:5e:3f:fe:21:5b: bb:73:49:8f:b1:0e:65:ae:72:8e:9f:05:9d:a3:a0: 6d:08:d7:0f:bb:67:86:b4:5c:61:bf:80:83:2c:0b: 16:c1:8a:ab:e1:cd:e5:3f:ac:7d:25:71:88:b8:db: 4b:68:b6:03:3c:c1:75:02:55:57:bc:15:5b:86:a0: 00:94:25:02:6f:37:eb:79:cb:26:46:fe:b6:79:c5: b9:14:04:88:88:26:30:14:64:62:25:98:de:c4:1e: e4:6f:8f:28:14:98:21:2d:72:5e:8a:f9:c0:a9:28: 18:fe:fe:37:e3:c3:bc:8d:cb:db:0d:27:ed:8f:35: 26:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C7:8D:F8:6B:1C:EF:4E:C9:7F:F3:9F:89:3B:73:F7:FF:46:01:7C X509v3 Authority Key Identifier: keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/R8eN-Gsc707Jf_OfiTtz9_9GAXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.216.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:f3:e3:63:7c:2a:fa:0b:f6:f1:c3:7f:80:b0:a8:52:81:6a: 0e:02:0f:a0:ce:6d:6d:a1:86:8d:2c:04:88:9a:57:91:03:3d: 92:2e:47:78:73:e8:49:6b:e3:a8:14:46:3d:fb:fd:52:02:07: 62:ad:58:7a:c5:96:8c:6c:cd:96:25:4f:9f:0b:3a:bf:91:3b: 87:75:fd:aa:3e:d9:c3:61:7f:a7:32:69:f4:de:91:25:1c:7a: 82:84:1a:de:6c:f5:3e:a9:e3:3c:a6:50:93:96:c7:2f:99:71: 5d:da:0e:5d:8e:20:94:45:19:0c:6e:ef:81:c2:06:fe:d3:2d: 71:07:d7:40:35:fa:45:c7:09:83:18:7f:bd:f5:5e:b7:c1:67: ea:27:fc:87:32:4b:46:98:69:d0:c8:24:7f:3c:a2:8b:49:75: 42:39:4b:61:2a:1d:12:fd:23:db:05:d1:5f:f1:c2:7c:f3:92: 29:30:be:13:94:5d:b2:dc:fe:59:ee:fb:10:28:ad:36:3c:54: 10:15:de:84:80:44:ae:43:4f:0c:1c:47:af:cb:d6:a0:0a:4e: 6f:f2:13:48:19:85:3c:86:df:ca:a7:fa:5d:61:53:40:2a:d2: 6b:c6:89:2b:43:41:81:d4:54:5d:7f:1f:bf:7c:d8:bb:d9:f5: 15:48:71:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8vvcBXTRuKt1gAEUdIzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTYyN2I5MjM5ZmVhMzQ1N2NkODdjYjkzN2FiNGM3OTg2 Y2FjMDkwHhcNMjYwMTAxMjIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2M3OGRmODZiMWNlZjRlYzk3ZmYzOWY4OTNiNzNmN2ZmNDYwMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknqSkKcUqxA9xHZqY6t6Ee/xeZp7 /wq3BTH8cc845ia6g972aoxRobeGYdeFSlZN+z8iM6CLjNPb238pUrlBAAX63wb8 bYrRIzY5h7WaYbjBBSNfi7ditcdVxChxhPjL5WWpsIbe2tQI1QUez5138lARNpab 2pHPI95+JxBYua/OXj/+IVu7c0mPsQ5lrnKOnwWdo6BtCNcPu2eGtFxhv4CDLAsW wYqr4c3lP6x9JXGIuNtLaLYDPMF1AlVXvBVbhqAAlCUCbzfrecsmRv62ecW5FASI iCYwFGRiJZjexB7kb48oFJghLXJeivnAqSgY/v4348O8jcvbDSftjzUmCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEfHjfhrHO9OyX/zn4k7c/f/RgF8MB8GA1UdIwQY MBaAFLcWJ7kjn+o0V82Hy5N6tMeYbKwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZTQ2YzEtZjQzYi00ZTEyLWJiN2Qt YTVmZWIzOTczNTEyLzEvUjhlTi1Hc2M3MDdKZl9PZmlUdHo5XzlHQVh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy81ZTQ2YzEtZjQzYi00ZTEyLWJiN2QtYTVmZWIzOTczNTEy LzEvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxnYMA0G CSqGSIb3DQEBCwUAA4IBAQAs8+NjfCr6C/bxw3+AsKhSgWoOAg+gzm1toYaNLASI mleRAz2SLkd4c+hJa+OoFEY9+/1SAgdirVh6xZaMbM2WJU+fCzq/kTuHdf2qPtnD YX+nMmn03pElHHqChBrebPU+qeM8plCTlscvmXFd2g5djiCURRkMbu+Bwgb+0y1x B9dANfpFxwmDGH+99V63wWfqJ/yHMktGmGnQyCR/PKKLSXVCOUthKh0S/SPbBdFf 8cJ885IpML4TlF2y3P5Z7vsQKK02PFQQFd6EgESuQ08MHEevy9agCk5v8hNIGYU8 ht/Kp/pdYVNAKtJrxokrQ0GB1FRdfx+/fNi72fUVSHG+ -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:32 2026 by rpki-client