This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/cJZ1eCq8wNMXKNwTEszQ8TczfTc.roa File: cJZ1eCq8wNMXKNwTEszQ8TczfTc.roa (raw, json) Hash identifier: 0VY9Ph5RNw4cSf706jloXuKMKAZqhCe3Ib9xhrKBEjQ= Subject key identifier: 70:96:75:78:2A:BC:C0:D3:17:28:DC:13:12:CC:D0:F1:37:33:7D:37 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019B7F83AB7C33F2312E28C7CFF21C877792 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/cJZ1eCq8wNMXKNwTEszQ8TczfTc.roa Signing time: Fri 02 Jan 2026 16:21:34 +0000 ROA not before: Fri 02 Jan 2026 16:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 217.194.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ab:7c:33:f2:31:2e:28:c7:cf:f2:1c:87:77:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Jan 2 16:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=709675782abcc0d31728dc1312ccd0f137337d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:8c:af:3e:63:ba:34:52:d6:eb:46:90:9c: 02:2f:cb:ff:66:1b:4c:2b:4b:22:9d:f0:c9:5d:b3: 30:cc:8f:f0:84:30:6e:9f:44:fa:c8:63:c5:13:2d: a8:67:bb:9c:26:b1:93:ef:60:6d:c5:0b:43:e5:35: 15:1f:95:9b:f3:fc:d6:7e:aa:32:98:e8:4e:08:2f: 95:27:0e:31:27:b3:9e:30:1f:55:af:ae:22:6b:78: 79:c8:f4:12:7f:64:74:20:75:07:f8:ae:0b:cd:6b: f1:ba:e0:9c:d3:67:7a:bb:4e:59:b5:00:d6:e5:5f: 99:60:1a:38:b6:5b:83:02:03:be:bc:38:14:c5:c5: 0c:4f:bb:7f:3e:c4:42:d9:97:5e:6c:e5:13:c2:f5: 24:32:f7:5d:92:b4:4a:71:37:18:ba:23:58:4c:c1: 80:a2:e4:13:4c:80:e8:7a:45:05:0f:63:5c:f9:7c: d9:e3:2e:c9:1a:43:e1:e6:89:80:57:16:fb:ea:76: 37:a7:66:74:45:f2:83:51:a4:0a:ff:67:4a:02:a8: 97:61:38:cf:1a:67:ab:fe:01:b9:68:4f:42:8d:4e: dd:f7:d4:ac:64:a7:19:e9:38:1d:61:eb:9c:0d:6e: e7:c1:65:23:36:a8:89:6f:29:0f:d6:e5:9d:11:a1: 53:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:96:75:78:2A:BC:C0:D3:17:28:DC:13:12:CC:D0:F1:37:33:7D:37 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/cJZ1eCq8wNMXKNwTEszQ8TczfTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.194.153.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:98:7a:0d:ff:20:b6:02:b2:e8:a7:9b:b4:ab:f8:da:f8:1f: 30:3c:50:05:81:13:60:d4:f9:f5:67:73:5e:d2:92:55:c0:5c: f9:8f:6c:3f:b0:99:35:09:07:41:78:37:36:ea:69:3e:0b:c1: fd:76:c7:24:5e:c1:65:cc:ab:66:ab:83:ef:8b:2e:bd:e1:c4: e4:0e:ae:32:aa:7e:38:30:3d:c4:3f:15:bc:4a:7f:04:43:b0: 1d:8f:8c:65:b7:67:99:6e:01:e0:30:3d:6a:56:96:73:83:2f: 91:ef:53:6a:59:83:17:21:15:f5:c5:d2:76:db:b0:64:01:aa: b8:58:dd:2a:83:dd:9e:82:fb:35:80:d5:2e:14:c1:ba:76:74: 1a:eb:3f:96:15:b7:95:6f:3b:83:7e:fb:6f:67:1f:c8:7a:8f: e5:7b:31:e9:43:f1:09:cb:21:c2:18:54:5a:17:0b:af:dd:94: 4c:4b:ec:b8:b5:60:ca:49:bc:44:2c:29:1b:5d:1a:a4:4b:0a: 88:70:e2:dc:08:ac:4c:2f:df:d5:e1:24:bb:cc:49:9f:56:2a: 23:20:9b:ad:25:04:93:66:08:33:38:1e:4d:3c:38:51:6f:44: d5:5b:6d:7f:b9:d7:1f:53:94:5a:37:71:21:b0:8e:1e:e6:45: f2:83:b9:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6t8M/IxLijHz/Ich3eSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjYwMTAyMTYyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDk2NzU3ODJhYmNjMGQzMTcyOGRjMTMxMmNjZDBmMTM3MzM3ZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1uMrz5jujRS1utGkJwCL8v/ZhtM K0sinfDJXbMwzI/whDBun0T6yGPFEy2oZ7ucJrGT72BtxQtD5TUVH5Wb8/zWfqoy mOhOCC+VJw4xJ7OeMB9Vr64ia3h5yPQSf2R0IHUH+K4LzWvxuuCc02d6u05ZtQDW 5V+ZYBo4tluDAgO+vDgUxcUMT7t/PsRC2ZdebOUTwvUkMvddkrRKcTcYuiNYTMGA ouQTTIDoekUFD2Nc+XzZ4y7JGkPh5omAVxb76nY3p2Z0RfKDUaQK/2dKAqiXYTjP Gmer/gG5aE9CjU7d99SsZKcZ6TgdYeucDW7nwWUjNqiJbykP1uWdEaFTVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHCWdXgqvMDTFyjcExLM0PE3M303MB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY0paMWVDcTh3Tk1YS053VEVzelE4VGN6ZlRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cKZMA0G CSqGSIb3DQEBCwUAA4IBAQA9mHoN/yC2ArLop5u0q/ja+B8wPFAFgRNg1Pn1Z3Ne 0pJVwFz5j2w/sJk1CQdBeDc26mk+C8H9dsckXsFlzKtmq4Pviy694cTkDq4yqn44 MD3EPxW8Sn8EQ7Adj4xlt2eZbgHgMD1qVpZzgy+R71NqWYMXIRX1xdJ227BkAaq4 WN0qg92egvs1gNUuFMG6dnQa6z+WFbeVbzuDfvtvZx/Ieo/lezHpQ/EJyyHCGFRa Fwuv3ZRMS+y4tWDKSbxELCkbXRqkSwqIcOLcCKxML9/V4SS7zEmfViojIJutJQST ZggzOB5NPDhRb0TVW21/udcfU5RaN3EhsI4e5kXyg7l6 -----END CERTIFICATE-----Generated at Wed Jan 21 08:30:16 2026 by rpki-client