This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/z-inaxwrvJs1oxgCxNQXnQdfehc.roa File: z-inaxwrvJs1oxgCxNQXnQdfehc.roa (raw, json) Hash identifier: VicYDfT1aPg+7iG+UGRqa9JBtnXLtpt68Z96P8gbKzI= Subject key identifier: CF:E8:A7:6B:1C:2B:BC:9B:35:A3:18:02:C4:D4:17:9D:07:5F:7A:17 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E38187F2CCD5C2453ECAED43F220045 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/z-inaxwrvJs1oxgCxNQXnQdfehc.roa Signing time: Fri 02 Jan 2026 10:19:24 +0000 ROA not before: Fri 02 Jan 2026 10:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8492 IP address blocks: 5.8.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:18:7f:2c:cd:5c:24:53:ec:ae:d4:3f:22:00:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfe8a76b1c2bbc9b35a31802c4d4179d075f7a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:d9:94:af:52:1f:31:f5:2d:0f:76:63:52: f8:81:27:44:1e:d2:91:12:26:bd:fa:83:d6:da:ca: a9:eb:21:1e:bf:70:4b:be:4c:25:4d:08:f2:ff:1e: 4c:72:30:e7:e7:e5:10:00:e8:80:63:01:15:ed:58: cf:ba:56:5b:68:c7:ee:80:37:dd:41:fd:e5:a0:03: e5:9c:99:7f:4e:30:95:35:37:11:57:9e:3f:d2:31: b2:c3:3b:3c:49:a3:ed:a1:60:96:6a:fd:33:d9:3a: 9e:f2:98:98:ff:b7:26:88:68:9e:88:b8:68:ec:69: f6:e9:04:1c:88:66:ba:b6:4c:c5:26:4c:07:78:5d: b9:fa:0d:8b:02:f1:5e:d5:de:6c:0e:18:66:12:30: 19:1b:fb:1e:86:1d:da:92:e6:b2:3b:c0:1d:0d:a7: 4a:16:13:37:a8:4b:1b:66:4e:b9:67:32:60:72:a2: 86:7d:ba:41:6f:a8:64:47:f2:80:89:70:ea:de:da: 68:c8:bd:9d:3a:c8:3a:13:f4:11:66:4b:27:56:11: 89:6d:3f:a5:33:84:8e:67:f0:3f:f6:5e:8f:f1:81: 01:08:1e:8b:a2:09:ca:ba:11:dc:7c:b6:5f:2d:5f: 32:59:ff:58:28:6c:ab:24:8f:52:a3:e9:44:6a:7b: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E8:A7:6B:1C:2B:BC:9B:35:A3:18:02:C4:D4:17:9D:07:5F:7A:17 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/z-inaxwrvJs1oxgCxNQXnQdfehc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.17.0/24 Signature Algorithm: sha256WithRSAEncryption 59:55:ce:4a:39:15:c5:3a:f9:18:fe:05:18:b9:d3:38:26:1e: b8:99:3a:e5:73:fa:de:2e:a6:b6:cb:5a:5a:fa:ac:dd:83:b6: df:7a:b8:ab:87:51:fe:30:74:38:3f:fa:c7:93:ef:56:56:b8: 96:d7:ec:2c:82:7b:0d:1c:27:ae:de:0b:9e:dd:73:ca:92:d7: 7b:a8:92:64:d5:f5:5f:0a:58:44:0c:8b:d5:c9:60:81:88:d7: 6b:2c:c2:7d:d3:b7:6c:2f:9b:bd:c3:08:d8:5a:de:9d:3f:98: 6f:24:b4:a0:c7:85:38:f9:60:59:40:5a:9d:3a:f7:ad:26:ad: 32:46:91:f6:a4:81:29:ef:e2:68:76:ad:f0:ff:8f:0c:ad:27: fe:f0:7c:44:bb:3d:b1:7b:f0:15:1d:ce:02:c1:49:8f:af:1c: 37:e1:8f:84:9e:1b:62:0a:d4:0d:4e:d0:0c:70:ab:72:6b:09: da:c0:66:32:dd:f1:ec:29:26:71:49:f7:ea:ad:68:c2:7e:62: 5c:91:62:d4:16:2f:e7:2a:ce:46:af:83:f0:93:33:1c:17:6f: f6:6c:22:11:05:68:09:80:b5:10:e1:ab:d6:c7:14:00:75:8e: e9:76:33:8f:ce:44:c2:d0:c4:de:18:92:76:c1:f2:ad:89:6b: 41:b5:fa:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBh/LM1cJFPsrtQ/IgBFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmU4YTc2YjFjMmJiYzliMzVhMzE4MDJjNGQ0MTc5ZDA3NWY3YTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJvZlK9SHzH1LQ92Y1L4gSdEHtKR Eia9+oPW2sqp6yEev3BLvkwlTQjy/x5McjDn5+UQAOiAYwEV7VjPulZbaMfugDfd Qf3loAPlnJl/TjCVNTcRV54/0jGywzs8SaPtoWCWav0z2Tqe8piY/7cmiGieiLho 7Gn26QQciGa6tkzFJkwHeF25+g2LAvFe1d5sDhhmEjAZG/sehh3akuayO8AdDadK FhM3qEsbZk65ZzJgcqKGfbpBb6hkR/KAiXDq3tpoyL2dOsg6E/QRZksnVhGJbT+l M4SOZ/A/9l6P8YEBCB6LognKuhHcfLZfLV8yWf9YKGyrJI9So+lEant5KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/op2scK7ybNaMYAsTUF50HX3oXMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvei1pbmF4d3J2SnMxb3hnQ3hOUVhuUWRmZWhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQgRMA0G CSqGSIb3DQEBCwUAA4IBAQBZVc5KORXFOvkY/gUYudM4Jh64mTrlc/reLqa2y1pa +qzdg7bferirh1H+MHQ4P/rHk+9WVriW1+wsgnsNHCeu3gue3XPKktd7qJJk1fVf ClhEDIvVyWCBiNdrLMJ907dsL5u9wwjYWt6dP5hvJLSgx4U4+WBZQFqdOvetJq0y RpH2pIEp7+Jodq3w/48MrSf+8HxEuz2xe/AVHc4CwUmPrxw34Y+EnhtiCtQNTtAM cKtyawnawGYy3fHsKSZxSffqrWjCfmJckWLUFi/nKs5Gr4PwkzMcF2/2bCIRBWgJ gLUQ4avWxxQAdY7pdjOPzkTC0MTeGJJ2wfKtiWtBtfrx -----END CERTIFICATE-----Generated at Tue Jan 20 09:23:09 2026 by rpki-client