This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_93efxQgrZmoM7LY7A8dASmPXFM.roa File: _93efxQgrZmoM7LY7A8dASmPXFM.roa (raw, json) Hash identifier: iJkW4dVpgkk39bS1bRdj8dysS+u4EOLDejwkKagLJFc= Subject key identifier: FF:DD:DE:7F:14:20:AD:99:A8:33:B2:D8:EC:0F:1D:01:29:8F:5C:53 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF1731540C7FB18C8D97186C2480A09 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_93efxQgrZmoM7LY7A8dASmPXFM.roa Signing time: Fri 02 Jan 2026 18:21:28 +0000 ROA not before: Fri 02 Jan 2026 18:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395517 IP address blocks: 207.244.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:73:15:40:c7:fb:18:c8:d9:71:86:c2:48:0a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffddde7f1420ad99a833b2d8ec0f1d01298f5c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:32:ec:13:b9:ed:86:57:a1:19:e5:75:4b: 84:85:e8:3a:99:38:e9:3d:aa:b2:67:83:e4:73:54: 6c:22:c0:d8:74:4c:43:c0:f4:5c:6c:5a:ce:4e:f3: 1e:88:81:d3:b5:17:b8:65:c2:03:ba:1e:77:bc:10: 48:8d:a1:a7:f9:1f:b0:73:8b:da:29:e1:2d:8b:f1: 80:46:d0:f7:ed:59:21:ac:f4:ba:28:6d:ea:0f:28: 06:d6:e8:ac:cf:0d:fe:8c:db:f6:99:71:75:53:20: 4c:ae:e3:06:83:58:37:cc:6d:f9:1b:b1:5d:1b:76: 3a:c6:33:cc:0c:75:18:e1:ac:76:a6:6d:d7:41:b1: ed:f5:a1:4e:b5:81:32:b9:86:89:b2:16:b2:7d:16: 65:32:81:b6:de:94:f4:3c:c6:72:02:82:08:18:64: db:4b:dd:bb:d2:ae:9e:d7:2a:0c:b8:e1:4f:52:64: 60:76:4a:a4:0f:4c:2b:eb:f2:43:43:e0:a0:a2:83: e0:0a:ca:83:81:ac:28:f2:26:d8:dc:23:2a:dc:76: c2:a8:29:c6:b1:ff:05:e1:7c:76:2e:3c:3e:65:07: 8b:e1:83:8f:e1:2b:41:07:14:06:c6:65:fa:9b:e5: dd:da:22:b6:33:d1:68:59:70:c5:98:37:99:08:ad: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DD:DE:7F:14:20:AD:99:A8:33:B2:D8:EC:0F:1D:01:29:8F:5C:53 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_93efxQgrZmoM7LY7A8dASmPXFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.244.208.0/24 Signature Algorithm: sha256WithRSAEncryption 78:84:9a:34:95:02:02:92:38:31:26:fe:69:f7:92:cb:80:75: d6:0a:63:2a:ae:b4:63:d8:9f:e5:9b:22:c3:fe:86:4e:a6:d5: 55:34:58:db:b7:ee:ca:0b:ae:85:87:de:c2:27:9f:1f:5c:90: 6d:29:7a:45:48:23:e1:c2:25:68:14:10:4b:9d:1f:a4:86:d5: 01:18:08:59:6a:fa:b8:84:77:71:24:62:2f:cb:2b:0a:71:b7: fb:9d:92:9e:8c:72:51:c2:44:9c:de:9c:f4:d5:6e:47:b5:4f: 5a:aa:6c:40:40:0c:10:9b:dc:4a:4c:3d:24:da:f0:fa:03:0b: 47:63:cc:fd:01:d7:1f:d8:62:2c:02:53:58:f7:6a:4d:b3:ab: dc:25:32:01:11:21:f5:db:b8:7f:25:58:f3:ee:54:74:47:32: 2c:aa:c7:4b:e9:0f:81:fd:48:b2:76:83:3a:de:81:fe:10:66: 7c:04:ec:65:00:1f:97:18:70:95:88:61:5c:31:f3:07:c5:fc: 60:4d:40:d5:a3:77:8d:93:9b:a1:93:07:cd:08:3d:15:a6:12: 99:26:ed:48:17:c7:e6:60:40:0a:9a:20:7f:b4:d3:21:cb:9f: 58:77:82:6f:e7:2a:76:28:6b:92:45:16:5b:37:b3:cb:8c:96: 66:07:47:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8XMVQMf7GMjZcYbCSAoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmRkZGU3ZjE0MjBhZDk5YTgzM2IyZDhlYzBmMWQwMTI5OGY1YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+wy7BO57YZXoRnldUuEheg6mTjp PaqyZ4Pkc1RsIsDYdExDwPRcbFrOTvMeiIHTtRe4ZcIDuh53vBBIjaGn+R+wc4va KeEti/GARtD37VkhrPS6KG3qDygG1uiszw3+jNv2mXF1UyBMruMGg1g3zG35G7Fd G3Y6xjPMDHUY4ax2pm3XQbHt9aFOtYEyuYaJshayfRZlMoG23pT0PMZyAoIIGGTb S9270q6e1yoMuOFPUmRgdkqkD0wr6/JDQ+CgooPgCsqDgawo8ibY3CMq3HbCqCnG sf8F4Xx2Ljw+ZQeL4YOP4StBBxQGxmX6m+Xd2iK2M9FoWXDFmDeZCK2yRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/d3n8UIK2ZqDOy2OwPHQEpj1xTMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvXzkzZWZ4UWdyWm1vTTdMWTdBOGRBU21QWEZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/TQMA0G CSqGSIb3DQEBCwUAA4IBAQB4hJo0lQICkjgxJv5p95LLgHXWCmMqrrRj2J/lmyLD /oZOptVVNFjbt+7KC66Fh97CJ58fXJBtKXpFSCPhwiVoFBBLnR+khtUBGAhZavq4 hHdxJGIvyysKcbf7nZKejHJRwkSc3pz01W5HtU9aqmxAQAwQm9xKTD0k2vD6AwtH Y8z9Adcf2GIsAlNY92pNs6vcJTIBESH127h/JVjz7lR0RzIsqsdL6Q+B/UiydoM6 3oH+EGZ8BOxlAB+XGHCViGFcMfMHxfxgTUDVo3eNk5uhkwfNCD0VphKZJu1IF8fm YEAKmiB/tNMhy59Yd4Jv5yp2KGuSRRZbN7PLjJZmB0fK -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:21 2026 by rpki-client