This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/UPey1Iuc4KMtyO1x8bek9due93Y.roa File: UPey1Iuc4KMtyO1x8bek9due93Y.roa (raw, json) Hash identifier: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4= Subject key identifier: 50:F7:B2:D4:8B:9C:E0:A3:2D:C8:ED:71:F1:B7:A4:F5:DB:9E:F7:76 Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0 Certificate serial: 019B7BA4D66FD6D96D8A82A0CABC48B1C9E3 Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/UPey1Iuc4KMtyO1x8bek9due93Y.roa Signing time: Thu 01 Jan 2026 22:19:18 +0000 ROA not before: Thu 01 Jan 2026 22:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 217.169.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d6:6f:d6:d9:6d:8a:82:a0:ca:bc:48:b1:c9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0 Validity Not Before: Jan 1 22:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50f7b2d48b9ce0a32dc8ed71f1b7a4f5db9ef776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:28:8c:66:15:4c:0c:7e:5b:30:5f:b2:f4: b0:1e:60:8e:3a:c0:0e:6c:a2:a6:fb:6a:09:bc:f6: 61:f1:56:b7:ac:38:b0:90:a9:08:04:b7:41:00:12: e2:65:69:87:c8:2d:3b:d3:81:f5:44:c5:1a:53:a7: 33:29:5f:41:16:2a:aa:28:1d:97:66:26:52:b9:34: 0f:1f:4d:6f:19:c5:4b:84:f0:ac:c8:57:8c:84:dc: d4:12:f9:1e:7e:fb:10:f4:60:b6:7c:fb:09:d2:58: c3:2f:c4:fe:b5:65:6b:b8:5e:34:fb:f2:d5:2d:1f: 00:0d:4b:ee:57:7c:ff:96:f3:b7:af:78:24:24:2f: 17:70:8c:9b:0a:6a:4e:8a:38:d6:e3:68:10:10:30: f2:51:0a:0a:15:3b:35:33:74:f8:5f:d8:52:8e:23: dd:59:be:45:39:1a:da:70:b5:85:9f:ec:2f:f7:b9: 2f:1b:ac:55:26:97:bf:29:c0:59:d1:d4:26:10:7a: b7:24:f5:a7:41:82:ba:d0:68:3b:7a:59:c6:f1:ea: 1f:92:98:db:7b:d6:21:19:8c:3c:1b:14:f5:ec:df: 59:6f:68:f4:35:96:35:5d:2f:7b:a2:94:7c:cd:a1: 24:f0:fb:52:0e:e1:7d:0f:da:16:59:5d:6e:4a:af: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F7:B2:D4:8B:9C:E0:A3:2D:C8:ED:71:F1:B7:A4:F5:DB:9E:F7:76 X509v3 Authority Key Identifier: keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/UPey1Iuc4KMtyO1x8bek9due93Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.169.202.0/24 Signature Algorithm: sha256WithRSAEncryption c3:94:46:c0:c7:8f:e9:c0:fb:54:bc:17:e4:9d:65:5d:4a:88: 21:2c:78:d4:e7:7e:90:08:94:15:f7:8c:f4:a1:50:3e:09:cb: 03:7e:79:2c:08:43:be:f2:9e:78:4c:38:2b:ad:8b:f3:55:25: 23:16:ee:78:a4:0e:d3:0e:6b:0c:c5:9e:58:35:11:cf:09:a9: 69:28:be:b4:1c:bd:ba:59:57:a7:02:49:46:e8:47:f0:73:18: 62:5f:ba:69:4b:4b:48:09:0b:74:e9:69:c0:ab:01:c5:ab:f7: a8:76:ca:9f:8c:36:b0:10:7d:f9:f2:d0:ea:d1:52:7e:d9:59: ec:29:24:e6:87:c8:87:41:a1:f5:39:fd:0b:79:af:27:42:ba: 2a:2e:c8:92:34:c4:fc:5d:0e:27:ae:b4:32:74:91:ad:0c:d4: df:37:01:0b:35:94:45:19:8b:48:15:9e:22:37:3a:17:1d:99: 60:37:55:47:ec:b2:61:37:65:26:ff:64:dd:a9:5a:89:bc:28: 26:79:99:1e:f8:dd:7d:02:ba:58:74:7b:30:3a:bd:6f:01:db: 83:15:8d:eb:a4:5e:89:29:da:cf:8e:39:b0:70:b9:8b:a2:8b: 5f:a8:68:f1:e1:db:d5:5e:18:9c:3c:b5:91:f1:9d:4e:da:db: b0:45:d0:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pNZv1tltioKgyrxIscnjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGY0MTNmYjBhZjBiZDhmZTEzMDgyMGQzMDQ5ZDBlNzFl ZDRiYjAwHhcNMjYwMTAxMjIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGY3YjJkNDhiOWNlMGEzMmRjOGVkNzFmMWI3YTRmNWRiOWVmNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZwojGYVTAx+WzBfsvSwHmCOOsAO bKKm+2oJvPZh8Va3rDiwkKkIBLdBABLiZWmHyC0704H1RMUaU6czKV9BFiqqKB2X ZiZSuTQPH01vGcVLhPCsyFeMhNzUEvkefvsQ9GC2fPsJ0ljDL8T+tWVruF40+/LV LR8ADUvuV3z/lvO3r3gkJC8XcIybCmpOijjW42gQEDDyUQoKFTs1M3T4X9hSjiPd Wb5FORracLWFn+wv97kvG6xVJpe/KcBZ0dQmEHq3JPWnQYK60Gg7elnG8eofkpjb e9YhGYw8GxT17N9Zb2j0NZY1XS97opR8zaEk8PtSDuF9D9oWWV1uSq/M0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFD3stSLnOCjLcjtcfG3pPXbnvd2MB8GA1UdIwQY MBaAFCIPQT+wrwvY/hMIINMEnQ5x7UuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2Njkt ODJlYmEwY2IzYjBkLzEvVVBleTFJdWM0S010eU8xeDhiZWs5ZHVlOTNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2NjktODJlYmEwY2IzYjBk LzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2anKMA0G CSqGSIb3DQEBCwUAA4IBAQDDlEbAx4/pwPtUvBfknWVdSoghLHjU536QCJQV94z0 oVA+CcsDfnksCEO+8p54TDgrrYvzVSUjFu54pA7TDmsMxZ5YNRHPCalpKL60HL26 WVenAklG6EfwcxhiX7ppS0tICQt06WnAqwHFq/eodsqfjDawEH358tDq0VJ+2Vns KSTmh8iHQaH1Of0Lea8nQroqLsiSNMT8XQ4nrrQydJGtDNTfNwELNZRFGYtIFZ4i NzoXHZlgN1VH7LJhN2Um/2TdqVqJvCgmeZke+N19ArpYdHswOr1vAduDFY3rpF6J KdrPjjmwcLmLootfqGjx4dvVXhicPLWR8Z1O2tuwRdCf -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:01 2026 by rpki-client