This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/F9LtIp7aRZvTu10CPCfjgsVeCH4.roa File: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (raw, json) Hash identifier: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA= Subject key identifier: 17:D2:ED:22:9E:DA:45:9B:D3:BB:5D:02:3C:27:E3:82:C5:5E:08:7E Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0 Certificate serial: 019B7BA4D73CADD6AE6482D809E5A685B2BC Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/F9LtIp7aRZvTu10CPCfjgsVeCH4.roa Signing time: Thu 01 Jan 2026 22:19:19 +0000 ROA not before: Thu 01 Jan 2026 22:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12794 IP address blocks: 217.169.192.0/20 maxlen: 24 217.169.192.0/21 maxlen: 21 217.169.192.0/22 maxlen: 22 217.169.192.0/24 maxlen: 24 217.169.193.0/24 maxlen: 24 217.169.194.0/24 maxlen: 24 217.169.195.0/24 maxlen: 24 217.169.196.0/24 maxlen: 24 217.169.197.0/24 maxlen: 24 217.169.198.0/24 maxlen: 24 217.169.199.0/24 maxlen: 24 217.169.200.0/24 maxlen: 24 217.169.201.0/24 maxlen: 24 217.169.203.0/24 maxlen: 24 217.169.204.0/24 maxlen: 24 217.169.205.0/24 maxlen: 24 217.169.206.0/24 maxlen: 24 217.169.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d7:3c:ad:d6:ae:64:82:d8:09:e5:a6:85:b2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0 Validity Not Before: Jan 1 22:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17d2ed229eda459bd3bb5d023c27e382c55e087e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:93:8c:13:e3:2c:d5:43:e5:48:a7:5d:15: d2:ad:76:bb:72:5b:fc:1d:ad:c7:b5:c0:f3:62:59: 5f:0e:b5:2b:cc:de:e2:1b:31:49:70:df:cc:d0:45: c2:14:66:12:27:5f:3a:d8:e2:d4:ed:c5:80:36:c0: 4a:a1:f5:ac:a4:b9:f1:b1:77:99:e9:e5:3b:83:83: a0:e0:25:51:e0:2c:ce:ff:2c:f0:ef:cc:2b:2b:bc: 5f:5c:1c:c8:e4:e8:1d:50:e9:cf:67:26:4d:72:25: c6:61:d2:db:37:77:07:4c:ac:b5:34:c4:05:d0:a7: 38:f6:5b:ba:35:c6:1f:88:f3:48:5a:dc:c0:d5:29: 17:97:e8:55:6c:ff:90:b0:39:4c:c6:49:33:73:24: f4:9a:cb:4d:68:d7:62:43:51:ab:d9:af:5f:09:eb: 55:4d:81:b1:d8:df:b3:88:d2:e1:2b:b3:c1:52:f0: a2:02:fb:b6:58:3e:dd:5b:08:6e:04:e7:29:ee:7e: 8f:d2:62:3d:df:f0:3d:63:e7:6a:4f:74:9d:26:c8: 7e:94:f5:c1:ba:0e:5b:a6:af:29:da:87:f6:24:c8: 11:ae:5e:95:51:6b:4e:bb:d3:0f:e4:dd:e8:10:98: 70:5b:62:7f:3c:17:e6:51:76:c3:f9:d1:33:54:fd: 03:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D2:ED:22:9E:DA:45:9B:D3:BB:5D:02:3C:27:E3:82:C5:5E:08:7E X509v3 Authority Key Identifier: keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/F9LtIp7aRZvTu10CPCfjgsVeCH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.169.192.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:b3:c3:2c:05:9a:a4:9c:38:51:eb:35:11:8e:84:c3:c6:09: 56:1c:de:8a:ad:62:b5:fe:04:1d:33:c2:01:2b:9a:34:06:99: 87:ed:7a:9e:c8:df:69:ad:4f:58:b9:49:2d:e7:38:28:c6:2f: 78:67:cb:36:1e:fb:13:cc:dd:10:bf:54:fc:3c:5f:70:e6:de: d9:be:a1:84:86:69:26:25:54:f6:ea:69:31:90:63:19:3a:d7: 0f:66:5a:aa:42:c5:fe:4f:a7:4f:f8:49:af:96:25:bd:04:7d: b5:85:68:8f:d6:c4:8c:2e:b9:d5:db:d4:6e:1d:c5:2d:a5:ab: 01:4f:41:44:87:7b:92:67:b3:61:f3:55:bd:0b:55:d6:a4:67: 50:b5:79:57:61:fc:17:d6:c8:4d:34:09:59:ac:18:3c:12:9f: 91:ef:3e:74:00:f5:c2:c7:95:4a:14:6a:f1:46:b6:21:e5:98: 78:bc:82:78:5c:0c:d6:77:b1:b1:4e:90:bb:a4:bb:3b:f4:90: 76:e2:cd:fa:20:56:e4:91:0f:3e:a4:bf:8f:a2:49:70:d7:9c: 1d:a0:4a:1d:1d:be:98:c1:22:55:99:7b:89:9c:b4:d6:36:09: 98:92:db:08:35:46:21:4e:50:7c:12:8f:7c:80:64:e1:85:46: a2:6a:e7:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pNc8rdauZILYCeWmhbK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGY0MTNmYjBhZjBiZDhmZTEzMDgyMGQzMDQ5ZDBlNzFl ZDRiYjAwHhcNMjYwMTAxMjIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2QyZWQyMjllZGE0NTliZDNiYjVkMDIzYzI3ZTM4MmM1NWUwODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqSTjBPjLNVD5UinXRXSrXa7clv8 Ha3HtcDzYllfDrUrzN7iGzFJcN/M0EXCFGYSJ1862OLU7cWANsBKofWspLnxsXeZ 6eU7g4Og4CVR4CzO/yzw78wrK7xfXBzI5OgdUOnPZyZNciXGYdLbN3cHTKy1NMQF 0Kc49lu6NcYfiPNIWtzA1SkXl+hVbP+QsDlMxkkzcyT0mstNaNdiQ1Gr2a9fCetV TYGx2N+ziNLhK7PBUvCiAvu2WD7dWwhuBOcp7n6P0mI93/A9Y+dqT3SdJsh+lPXB ug5bpq8p2of2JMgRrl6VUWtOu9MP5N3oEJhwW2J/PBfmUXbD+dEzVP0DPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBfS7SKe2kWb07tdAjwn44LFXgh+MB8GA1UdIwQY MBaAFCIPQT+wrwvY/hMIINMEnQ5x7UuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2Njkt ODJlYmEwY2IzYjBkLzEvRjlMdElwN2FSWnZUdTEwQ1BDZmpnc1ZlQ0g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2NjktODJlYmEwY2IzYjBk LzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2anAMA0G CSqGSIb3DQEBCwUAA4IBAQAts8MsBZqknDhR6zURjoTDxglWHN6KrWK1/gQdM8IB K5o0BpmH7XqeyN9prU9YuUkt5zgoxi94Z8s2HvsTzN0Qv1T8PF9w5t7ZvqGEhmkm JVT26mkxkGMZOtcPZlqqQsX+T6dP+EmvliW9BH21hWiP1sSMLrnV29RuHcUtpasB T0FEh3uSZ7Nh81W9C1XWpGdQtXlXYfwX1shNNAlZrBg8Ep+R7z50APXCx5VKFGrx RrYh5Zh4vIJ4XAzWd7GxTpC7pLs79JB24s36IFbkkQ8+pL+Poklw15wdoEodHb6Y wSJVmXuJnLTWNgmYktsINUYhTlB8Eo98gGThhUaiaueK -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:25 2026 by rpki-client