This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/8JeUl0gwKBaZ43vH7iblm5PR0rs.roa File: 8JeUl0gwKBaZ43vH7iblm5PR0rs.roa (raw, json) Hash identifier: 1jsQ41jOwm0SLnU0Qv592bRuhGGbd2WMpr/SEYaEF9o= Subject key identifier: F0:97:94:97:48:30:28:16:99:E3:7B:C7:EE:26:E5:9B:93:D1:D2:BB Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019B7B41063384D5AD0BFDB1CCD2D452DF25 Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/8JeUl0gwKBaZ43vH7iblm5PR0rs.roa Signing time: Thu 01 Jan 2026 20:30:17 +0000 ROA not before: Thu 01 Jan 2026 20:30:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 217.9.1.0/24 maxlen: 24 217.9.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:41:06:33:84:d5:ad:0b:fd:b1:cc:d2:d4:52:df:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Jan 1 20:30:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f09794974830281699e37bc7ee26e59b93d1d2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:4b:7a:49:ba:6e:45:63:55:54:9a:99:5b: 74:40:39:0f:6f:d8:95:48:92:d1:12:bf:b5:a9:eb: 54:9c:a5:28:63:d4:9d:57:77:13:59:90:44:a3:a1: 1b:82:2a:83:bd:1b:3d:98:b0:96:7c:bb:c6:47:8e: 41:17:81:b7:f4:0c:00:b8:21:1f:c0:0e:48:fa:b3: 32:68:70:b3:8f:75:8b:b2:42:cb:2d:54:93:06:4c: c8:5f:61:ca:89:b8:9b:12:5f:02:d3:9c:a9:af:74: fb:d5:e7:e4:5a:01:1c:62:db:7d:4a:6c:2a:68:c5: 88:fb:33:1f:4c:c8:ee:ae:3a:14:fe:8f:fb:13:d3: e7:f8:87:ce:dd:82:82:c1:f9:40:1b:dc:c0:c2:2a: 6e:f6:e4:4a:cb:5f:78:bc:68:d2:63:71:e5:d0:c0: 5d:57:37:be:50:00:28:10:83:5b:dc:d5:c4:f3:bf: a6:81:2c:4b:4e:e4:ac:ca:3b:03:fe:ec:d5:47:18: 67:0e:9c:b6:72:90:6d:40:e3:5b:b1:81:4e:7d:11: f8:de:00:58:d4:6b:b5:39:1b:60:84:44:10:f5:3e: 44:40:fa:49:c7:25:54:ae:81:6e:50:9f:16:5a:0b: 7f:57:9b:cb:d0:66:6a:45:2a:da:80:4d:cd:08:fc: 6c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:97:94:97:48:30:28:16:99:E3:7B:C7:EE:26:E5:9B:93:D1:D2:BB X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/8JeUl0gwKBaZ43vH7iblm5PR0rs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.9.1.0-217.9.2.255 Signature Algorithm: sha256WithRSAEncryption 28:40:d3:d7:4e:af:29:23:df:96:d5:2b:d2:c8:08:17:a4:18: 76:35:8f:51:b8:4e:3e:2c:ab:5e:02:82:6d:1d:89:7c:9c:5a: 2b:29:89:93:5f:d6:55:57:82:89:44:f1:ec:c9:7d:ab:5b:1c: 59:af:06:e0:20:53:06:77:45:3f:30:f9:49:8e:1e:2c:94:cc: d5:18:d8:22:06:10:73:b9:5f:7c:c9:37:6d:db:c7:b7:4e:b1: 65:d1:53:12:9f:ba:14:ac:1d:69:df:10:ac:f3:21:6e:ae:a8: eb:80:86:10:79:ce:13:1a:f5:84:0c:97:ed:1f:75:68:4c:ca: f3:7f:39:1d:df:1c:03:14:63:a1:76:8a:73:85:24:44:32:0c: 1d:2c:b5:e1:4f:ce:cb:c0:95:8e:4c:75:e6:23:ff:e1:f3:60: 56:5c:19:fb:73:74:74:e5:82:db:7a:d5:9d:8a:ce:b2:7c:a0: 2d:43:59:7c:a1:fe:ba:39:48:0b:21:09:37:e1:47:21:11:37: c5:e0:92:a5:a3:dc:6f:e9:f5:9c:b7:94:3b:80:2b:ed:17:22: f5:eb:e8:3e:ad:26:c1:09:3c:cd:ab:df:31:dc:3a:6a:4d:7c: db:ad:b6:12:7b:20:dd:7e:25:74:35:93:4f:61:bf:c5:bb:84: f4:53:7f:78 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7QQYzhNWtC/2xzNLUUt8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjYwMTAxMjAzMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDk3OTQ5NzQ4MzAyODE2OTllMzdiYzdlZTI2ZTU5YjkzZDFkMmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGpLekm6bkVjVVSamVt0QDkPb9iV SJLREr+1qetUnKUoY9SdV3cTWZBEo6EbgiqDvRs9mLCWfLvGR45BF4G39AwAuCEf wA5I+rMyaHCzj3WLskLLLVSTBkzIX2HKibibEl8C05ypr3T71efkWgEcYtt9Smwq aMWI+zMfTMjurjoU/o/7E9Pn+IfO3YKCwflAG9zAwipu9uRKy194vGjSY3Hl0MBd Vze+UAAoEINb3NXE87+mgSxLTuSsyjsD/uzVRxhnDpy2cpBtQONbsYFOfRH43gBY 1Gu1ORtghEQQ9T5EQPpJxyVUroFuUJ8WWgt/V5vL0GZqRSragE3NCPxsTwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPCXlJdIMCgWmeN7x+4m5ZuT0dK7MB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvOEplVWwwZ3dLQmFaNDN2SDdpYmxtNVBSMHJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADZCQED BADZCQIwDQYJKoZIhvcNAQELBQADggEBAChA09dOrykj35bVK9LICBekGHY1j1G4 Tj4sq14Cgm0diXycWispiZNf1lVXgolE8ezJfatbHFmvBuAgUwZ3RT8w+UmOHiyU zNUY2CIGEHO5X3zJN23bx7dOsWXRUxKfuhSsHWnfEKzzIW6uqOuAhhB5zhMa9YQM l+0fdWhMyvN/OR3fHAMUY6F2inOFJEQyDB0steFPzsvAlY5MdeYj/+HzYFZcGftz dHTlgtt61Z2KzrJ8oC1DWXyh/ro5SAshCTfhRyERN8XgkqWj3G/p9Zy3lDuAK+0X IvXr6D6tJsEJPM2r3zHcOmpNfNutthJ7IN1+JXQ1k09hv8W7hPRTf3g= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:42 2026 by rpki-client