This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/600lLjQN8NaUtu9vwfIFMpqTNQc.roa File: 600lLjQN8NaUtu9vwfIFMpqTNQc.roa (raw, json) Hash identifier: MUp+FLIccBAFPNwMS4Gw63hQ+b8ZEvvsOZeWkDj1pdQ= Subject key identifier: EB:4D:25:2E:34:0D:F0:D6:94:B6:EF:6F:C1:F2:05:32:9A:93:35:07 Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Certificate serial: 019B797E587BF285FA431B4B8CC45167B05B Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/600lLjQN8NaUtu9vwfIFMpqTNQc.roa Signing time: Thu 01 Jan 2026 12:18:01 +0000 ROA not before: Thu 01 Jan 2026 12:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 217.145.160.0/20 maxlen: 24 217.145.162.0/24 maxlen: 24 217.145.164.0/24 maxlen: 24 217.145.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:58:7b:f2:85:fa:43:1b:4b:8c:c4:51:67:b0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Validity Not Before: Jan 1 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb4d252e340df0d694b6ef6fc1f205329a933507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:1c:e5:0f:c3:c3:27:86:44:bd:f5:1a:ab: b9:37:41:03:e2:46:fe:c2:b8:fa:5a:e3:66:11:88: d7:9a:17:28:00:f8:56:6e:a9:6d:dd:bc:b3:35:0e: 42:ff:4a:25:87:fa:1e:c0:3c:d7:43:2d:21:d9:34: 94:2a:66:b4:b2:d8:bf:e8:b7:6c:e3:59:14:c0:b3: 8e:01:7a:29:3f:94:15:61:2a:48:f5:c1:a6:d1:be: eb:50:bb:07:a7:a6:e3:d8:1d:ad:f2:87:94:57:58: 41:8e:13:c8:3a:07:f8:c1:ec:6d:f7:44:d9:bf:01: 0e:08:d2:08:0f:4d:a8:c5:de:46:39:63:71:84:1a: 6e:0a:fa:cf:5b:55:0d:35:c8:39:cb:1f:56:f1:d8: 3e:b9:05:dc:bb:48:64:9e:82:c0:00:79:d6:a3:03: c2:29:9c:7e:5f:c6:43:5a:a6:a4:13:17:28:5d:d6: dd:72:9c:51:92:a8:02:ac:58:4a:08:eb:9f:21:80: 0b:2f:be:c1:1f:4d:6c:7a:b7:70:ff:7e:fa:13:72: 1a:69:00:8e:8c:99:d8:58:9c:b8:4c:d1:d9:84:5e: 03:6d:f7:ec:3e:c1:77:39:dd:4a:a2:e6:a8:5b:1b: 58:ad:60:b3:d6:48:94:ed:3f:38:20:18:12:21:54: 51:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4D:25:2E:34:0D:F0:D6:94:B6:EF:6F:C1:F2:05:32:9A:93:35:07 X509v3 Authority Key Identifier: keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/600lLjQN8NaUtu9vwfIFMpqTNQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.160.0/20 Signature Algorithm: sha256WithRSAEncryption a9:10:51:15:58:e9:57:87:67:80:c7:6a:cc:ce:4b:51:29:56: 1d:bf:17:51:71:83:d9:82:c4:d0:66:78:4a:87:f0:81:e5:c9: c0:8e:91:66:22:55:d9:c3:c1:39:c4:89:9e:d1:8a:ec:2d:24: 54:93:fa:b9:ca:59:1d:cf:31:56:72:b2:7e:60:1e:34:3f:3c: e1:7d:26:9b:7f:f7:9f:d8:86:84:d5:da:f7:b4:e2:c8:4c:21: a0:4a:bd:73:4b:bf:4a:c6:47:ca:91:55:4e:06:da:8d:e4:da: f3:b1:05:71:1d:b2:55:79:54:7f:ed:d6:85:7f:3e:27:4e:e2: 11:03:88:09:01:22:5e:1a:01:c8:28:ca:32:6c:be:3d:fc:90: 3e:2c:01:a0:a1:f8:55:70:bb:b1:c7:4a:d5:0e:f2:0f:1c:e6: 32:5a:0c:34:c1:91:2d:58:70:9f:cb:e8:87:b4:dd:9c:64:fd: b4:12:40:8e:6e:c2:de:c1:26:6b:ed:cc:e4:63:56:69:ef:4e: 4f:1c:41:21:d7:61:d2:e0:df:0f:79:f5:f8:8d:c1:50:95:3b: 91:7f:4a:47:da:b1:21:f9:f3:0b:b9:4f:b0:c3:d8:d4:2b:fa: db:60:4e:18:65:fa:b3:c2:1b:c7:90:aa:72:cd:aa:e6:a2:c7: d9:af:a3:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5flh78oX6QxtLjMRRZ7BbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZWQxZDYwNjZmNGU0NjU0ZWY1ZjNjYzcwYTVkOTA1YTlh ZjgyOTAwHhcNMjYwMTAxMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjRkMjUyZTM0MGRmMGQ2OTRiNmVmNmZjMWYyMDUzMjlhOTMzNTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtoc5Q/DwyeGRL31Gqu5N0ED4kb+ wrj6WuNmEYjXmhcoAPhWbqlt3byzNQ5C/0olh/oewDzXQy0h2TSUKma0sti/6Lds 41kUwLOOAXopP5QVYSpI9cGm0b7rULsHp6bj2B2t8oeUV1hBjhPIOgf4wext90TZ vwEOCNIID02oxd5GOWNxhBpuCvrPW1UNNcg5yx9W8dg+uQXcu0hknoLAAHnWowPC KZx+X8ZDWqakExcoXdbdcpxRkqgCrFhKCOufIYALL77BH01serdw/376E3IaaQCO jJnYWJy4TNHZhF4DbffsPsF3Od1KouaoWxtYrWCz1kiU7T84IBgSIVRR3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtNJS40DfDWlLbvb8HyBTKakzUHMB8GA1UdIwQY MBaAFLLtHWBm9ORlTvXzzHCl2QWpr4KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYt NDZiNDZmYzBlNDk2LzEvNjAwbExqUU44TmFVdHU5dndmSUZNcHFUTlFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYtNDZiNDZmYzBlNDk2 LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ZGgMA0G CSqGSIb3DQEBCwUAA4IBAQCpEFEVWOlXh2eAx2rMzktRKVYdvxdRcYPZgsTQZnhK h/CB5cnAjpFmIlXZw8E5xIme0YrsLSRUk/q5ylkdzzFWcrJ+YB40PzzhfSabf/ef 2IaE1dr3tOLITCGgSr1zS79KxkfKkVVOBtqN5NrzsQVxHbJVeVR/7daFfz4nTuIR A4gJASJeGgHIKMoybL49/JA+LAGgofhVcLuxx0rVDvIPHOYyWgw0wZEtWHCfy+iH tN2cZP20EkCObsLewSZr7czkY1Zp705PHEEh12HS4N8PefX4jcFQlTuRf0pH2rEh +fMLuU+ww9jUK/rbYE4YZfqzwhvHkKpyzarmosfZr6Nj -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:42 2026 by rpki-client