This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Xyhzu1ZalXxQm1cgPMu_9Bo2HGU.roa File: Xyhzu1ZalXxQm1cgPMu_9Bo2HGU.roa (raw, json) Hash identifier: zJOPciXMS/VpK0LQJb6/mNd6CgHu6MtAs/q1HA7p8zk= Subject key identifier: 5F:28:73:BB:56:5A:95:7C:50:9B:57:20:3C:CB:BF:F4:1A:36:1C:65 Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019B7C13532BAC0A7D198325EF2A4776DD29 Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Xyhzu1ZalXxQm1cgPMu_9Bo2HGU.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8368 IP address blocks: 217.22.240.0/23 maxlen: 23 217.22.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:53:2b:ac:0a:7d:19:83:25:ef:2a:47:76:dd:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f2873bb565a957c509b57203ccbbff41a361c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:f5:34:43:36:65:51:92:38:40:9b:c8:82: 44:50:52:a3:69:2c:c1:80:72:ad:1c:e5:92:0e:0f: c3:7f:af:92:c4:7b:21:26:f5:7e:c7:e5:6f:01:ee: 24:cd:c5:39:6a:46:5a:57:10:d7:21:94:48:2b:3a: a9:9a:f8:2c:e1:07:df:2d:d7:80:61:d5:21:16:90: 4e:e7:da:39:31:47:70:04:34:40:a6:6c:17:99:cf: b1:8c:90:22:f4:b8:47:10:9b:d9:14:0b:27:e8:b4: 8c:7f:cf:9f:0a:80:ca:14:f6:ad:10:3a:a2:6b:65: f0:60:9e:e9:af:24:aa:4c:b3:61:e5:48:4f:dd:dc: ed:34:9e:56:4b:e2:d8:85:e7:7a:ac:47:4a:2a:9b: fe:93:dd:8c:3e:7d:d5:7b:86:5f:09:bd:58:c8:8f: bd:61:7d:cc:b2:dc:df:f1:94:1c:d3:15:d4:46:c1: 10:3b:41:d9:47:03:3d:57:d8:ac:76:e7:fb:78:71: dc:1d:d0:5f:95:e3:b4:6e:e8:c9:d3:74:ff:7e:65: 5d:1a:ef:83:cb:e5:49:81:41:34:1f:f4:00:28:db: 11:fc:96:a1:c3:e2:62:f5:2f:56:83:f0:53:d8:db: 9b:a0:71:d7:63:f8:c3:f7:da:69:9b:b3:ec:76:8b: 8a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:28:73:BB:56:5A:95:7C:50:9B:57:20:3C:CB:BF:F4:1A:36:1C:65 X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Xyhzu1ZalXxQm1cgPMu_9Bo2HGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.22.240.0/23 217.22.248.0/23 Signature Algorithm: sha256WithRSAEncryption 57:45:27:69:ff:63:aa:c4:34:62:c7:64:6e:04:fe:d6:bd:9e: 1f:e4:44:e0:c9:4e:95:e6:2d:90:06:45:bf:2e:71:c1:44:ee: 43:b6:b8:19:17:68:45:88:40:32:9e:9b:a4:1b:86:56:7b:d7: d0:ab:54:c8:9e:cc:7d:ff:79:bf:f8:5f:6c:1c:c8:d6:b1:73: e2:11:f0:52:c6:75:53:56:03:82:3d:d2:8f:b2:63:b7:b6:6b: 9b:cc:20:94:1e:f0:12:20:e7:a2:73:b2:15:ed:0b:30:1c:0c: 76:10:95:86:ce:0c:d5:2c:b2:eb:90:0a:e2:05:ef:9a:61:e9: f7:14:22:8c:8b:35:84:7a:5e:27:fe:eb:16:89:79:e3:2d:b0: 04:f0:38:3b:b2:68:e0:0a:b8:20:10:e1:7a:f1:8f:39:e7:25: fd:3d:14:5e:e6:54:1d:b5:ac:d5:81:28:51:c1:10:9b:66:1f: 9a:0e:3e:ff:d1:0d:86:48:7d:6a:fb:20:5f:01:f3:cc:50:c3: cb:3f:e5:04:a0:4a:44:88:2b:d2:52:45:cb:b5:ce:c5:bd:4f: 4f:e0:a3:d5:4f:bf:ee:16:8c:f9:67:5e:bf:83:67:67:62:fb: ed:7e:a8:4c:a4:d4:38:9a:85:84:92:1e:1f:4b:58:e1:5e:c7: a8:8f:d2:1b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E1MrrAp9GYMl7ypHdt0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjI4NzNiYjU2NWE5NTdjNTA5YjU3MjAzY2NiYmZmNDFhMzYxYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j71NEM2ZVGSOECbyIJEUFKjaSzB gHKtHOWSDg/Df6+SxHshJvV+x+VvAe4kzcU5akZaVxDXIZRIKzqpmvgs4QffLdeA YdUhFpBO59o5MUdwBDRApmwXmc+xjJAi9LhHEJvZFAsn6LSMf8+fCoDKFPatEDqi a2XwYJ7prySqTLNh5UhP3dztNJ5WS+LYhed6rEdKKpv+k92MPn3Ve4ZfCb1YyI+9 YX3Mstzf8ZQc0xXURsEQO0HZRwM9V9isduf7eHHcHdBfleO0bujJ03T/fmVdGu+D y+VJgUE0H/QAKNsR/Jahw+Ji9S9Wg/BT2NuboHHXY/jD99ppm7PsdouKHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF8oc7tWWpV8UJtXIDzLv/QaNhxlMB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEvWHloenUxWmFsWHhRbTFjZ1BNdV85Qm8ySEdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB2RbwAwQB 2Rb4MA0GCSqGSIb3DQEBCwUAA4IBAQBXRSdp/2OqxDRix2RuBP7WvZ4f5ETgyU6V 5i2QBkW/LnHBRO5DtrgZF2hFiEAynpukG4ZWe9fQq1TInsx9/3m/+F9sHMjWsXPi EfBSxnVTVgOCPdKPsmO3tmubzCCUHvASIOeic7IV7QswHAx2EJWGzgzVLLLrkAri Be+aYen3FCKMizWEel4n/usWiXnjLbAE8Dg7smjgCrggEOF68Y855yX9PRRe5lQd tazVgShRwRCbZh+aDj7/0Q2GSH1q+yBfAfPMUMPLP+UEoEpEiCvSUkXLtc7FvU9P 4KPVT7/uFoz5Z16/g2dnYvvtfqhMpNQ4moWEkh4fS1jhXseoj9Ib -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:56 2026 by rpki-client