This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/8Z1Fe41TwalLVZHgkQPApervv24.roa File: 8Z1Fe41TwalLVZHgkQPApervv24.roa (raw, json) Hash identifier: F/UZEYLq5oXVVtK0yybX3uC3qwDitsO1X4zzo9SB4hs= Subject key identifier: F1:9D:45:7B:8D:53:C1:A9:4B:55:91:E0:91:03:C0:A5:EA:EF:BF:6E Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1 Certificate serial: 019B797DD3FFCC2016FC27958D8F2F56357A Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/8Z1Fe41TwalLVZHgkQPApervv24.roa Signing time: Thu 01 Jan 2026 12:17:27 +0000 ROA not before: Thu 01 Jan 2026 12:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16253 IP address blocks: 217.142.0.0/20 maxlen: 20 2a03:f0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d3:ff:cc:20:16:fc:27:95:8d:8f:2f:56:35:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1 Validity Not Before: Jan 1 12:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f19d457b8d53c1a94b5591e09103c0a5eaefbf6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:bf:02:43:6a:61:68:9c:a8:2f:e2:d8:8f: 1d:ef:03:10:e7:69:d5:f4:21:ca:1f:2b:49:72:ed: ae:9d:4a:d6:32:95:35:b8:bd:e2:2a:d2:31:af:a7: e5:7a:f5:b8:4c:f8:ce:07:1b:46:e7:21:b5:54:52: 6e:10:56:fe:c5:39:24:ad:5a:2a:71:78:dc:d0:16: d4:48:2e:87:81:9e:ed:c8:67:54:da:e7:d9:97:92: f2:6d:f4:a6:9a:4d:0f:fc:a9:8d:20:da:84:7b:ff: b8:32:be:cf:03:96:75:49:57:82:80:8a:c5:5e:7b: 83:0d:b4:6d:7d:7b:a5:d3:5e:90:a5:b2:7e:7e:48: b1:58:c2:40:52:10:b3:2d:8b:6a:49:92:17:c8:ef: b7:3d:ac:db:50:e0:40:03:cd:89:6a:4e:00:72:6c: cf:55:65:ab:d0:77:41:f9:c5:cc:71:02:70:92:3b: 0e:5f:c7:db:b1:bd:de:99:7c:91:60:ad:ac:0d:cd: 4f:7a:0d:5f:9a:f7:52:9a:15:ce:8d:ce:1f:23:91: ed:e7:97:f3:d3:5d:e3:7c:f3:c3:f9:dd:cb:55:7c: d3:48:10:47:61:6f:16:a1:46:f5:40:58:2b:bf:ec: de:d9:6c:95:05:71:ad:65:33:b4:11:d9:b5:f7:43: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9D:45:7B:8D:53:C1:A9:4B:55:91:E0:91:03:C0:A5:EA:EF:BF:6E X509v3 Authority Key Identifier: keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/8Z1Fe41TwalLVZHgkQPApervv24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.142.0.0/20 IPv6: 2a03:f0c0::/32 Signature Algorithm: sha256WithRSAEncryption 74:42:52:7c:3c:30:e4:8b:4d:93:25:74:21:32:32:17:d0:99: 43:95:03:a0:ef:9d:54:1a:23:43:14:93:fc:ad:02:ef:6a:25: 54:fd:38:f7:c5:7b:ab:b8:3f:2a:aa:f3:c2:00:f4:b0:77:36: c2:9a:c0:01:f2:8d:ea:a3:33:24:2b:cd:0a:c6:6d:b7:11:13: a5:3c:be:2a:73:3d:3f:43:15:08:e2:da:a0:9a:09:9a:fa:d2: 42:20:ee:0b:bf:5a:dc:5f:fc:af:d9:54:5d:9b:4d:82:ee:c2: a5:ec:9a:b4:5b:57:09:c7:da:e5:07:64:d5:a5:67:0d:9c:5b: db:24:5e:d1:b1:62:b7:09:ba:79:8a:15:98:a6:3d:b1:7a:fd: 5e:5f:2f:a5:13:94:51:2e:de:bc:3c:b9:e7:09:1a:c8:8c:f0: 42:88:2a:0f:4c:bd:68:63:cc:a3:a7:9d:b8:8d:0f:1c:2f:3f: 93:50:c6:aa:a1:c3:29:a5:74:b2:f0:6d:76:e0:ea:f4:0e:f5: 63:b8:b9:15:8d:4a:54:81:d2:0e:b0:24:12:1c:5b:2c:a8:5c: c1:b6:9d:9e:0e:7a:d9:b9:06:c9:8c:84:d8:bf:91:3e:59:07: b5:6b:22:6c:e3:0d:68:df:48:56:dd:22:b5:cc:6f:a9:34:7d: 38:95:cb:2a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fdP/zCAW/CeVjY8vVjV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NDc4NTUwMDY4YmY3ODIyMDQwOGMyNWQ2MTJiYzJmYjAy NDYwYzEwHhcNMjYwMTAxMTIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTlkNDU3YjhkNTNjMWE5NGI1NTkxZTA5MTAzYzBhNWVhZWZiZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7a/AkNqYWicqC/i2I8d7wMQ52nV 9CHKHytJcu2unUrWMpU1uL3iKtIxr6flevW4TPjOBxtG5yG1VFJuEFb+xTkkrVoq cXjc0BbUSC6HgZ7tyGdU2ufZl5LybfSmmk0P/KmNINqEe/+4Mr7PA5Z1SVeCgIrF XnuDDbRtfXul016QpbJ+fkixWMJAUhCzLYtqSZIXyO+3PazbUOBAA82Jak4AcmzP VWWr0HdB+cXMcQJwkjsOX8fbsb3emXyRYK2sDc1Peg1fmvdSmhXOjc4fI5Ht55fz 013jfPPD+d3LVXzTSBBHYW8WoUb1QFgrv+ze2WyVBXGtZTO0Edm190ON7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPGdRXuNU8GpS1WR4JEDwKXq779uMB8GA1UdIwQY MBaAFOdHhVAGi/eCIECMJdYSvC+wJGDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzkt N2RhM2NkMjUzYmY2LzEvOFoxRmU0MVR3YWxMVlpIZ2tRUEFwZXJ2djI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzktN2RhM2NkMjUzYmY2 LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2Y4AMA0E AgACMAcDBQAqA/DAMA0GCSqGSIb3DQEBCwUAA4IBAQB0QlJ8PDDki02TJXQhMjIX 0JlDlQOg751UGiNDFJP8rQLvaiVU/Tj3xXuruD8qqvPCAPSwdzbCmsAB8o3qozMk K80Kxm23EROlPL4qcz0/QxUI4tqgmgma+tJCIO4Lv1rcX/yv2VRdm02C7sKl7Jq0 W1cJx9rlB2TVpWcNnFvbJF7RsWK3Cbp5ihWYpj2xev1eXy+lE5RRLt68PLnnCRrI jPBCiCoPTL1oY8yjp524jQ8cLz+TUMaqocMppXSy8G124Or0DvVjuLkVjUpUgdIO sCQSHFssqFzBtp2eDnrZuQbJjITYv5E+WQe1ayJs4w1o30hW3SK1zG+pNH04lcsq -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:32 2026 by rpki-client