This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f4e7aXIA7PmRlwJTPHx-DAKOehw.roa File: f4e7aXIA7PmRlwJTPHx-DAKOehw.roa (raw, json) Hash identifier: 5byhnx8FYwW0KggbY5+PxBwIaVjsmb/CEdTUsGXkYEE= Subject key identifier: 7F:87:BB:69:72:00:EC:F9:91:97:02:53:3C:7C:7E:0C:02:8E:7A:1C Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F149D81C1CEC517618FE33F69FBD999 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f4e7aXIA7PmRlwJTPHx-DAKOehw.roa Signing time: Fri 02 Jan 2026 14:20:15 +0000 ROA not before: Fri 02 Jan 2026 14:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 217.8.216.0/24 maxlen: 24 217.8.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:9d:81:c1:ce:c5:17:61:8f:e3:3f:69:fb:d9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f87bb697200ecf9919702533c7c7e0c028e7a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:e5:c3:3c:92:e7:28:9d:8f:1a:9c:d0:e4: e1:b2:e2:3f:0a:28:19:64:fa:20:ec:bd:d8:bb:23: 51:f9:3c:b5:89:70:4c:df:73:d8:a7:18:20:13:16: de:40:2f:5c:7a:61:99:f8:91:da:6e:37:47:04:40: 11:40:18:d2:c9:5d:34:79:33:36:f8:89:55:f9:92: fd:3b:bc:74:9d:67:0b:49:94:91:f6:fa:e9:65:0e: 20:7d:7f:33:4b:1a:68:9c:aa:da:67:bf:ca:9d:e9: 97:36:36:6c:76:fc:08:e1:8c:50:03:50:36:47:47: a9:a3:0d:28:f9:9d:cb:23:ea:e4:be:35:bd:70:ee: 74:27:ef:f2:c2:08:c1:56:7d:35:bf:74:65:9b:53: 37:83:c6:41:81:9c:08:a5:f5:83:29:6b:bf:ff:5a: 79:eb:24:03:49:2a:81:d9:29:52:30:f2:94:43:6b: 28:f0:c3:d0:15:15:f6:07:ea:19:f6:f6:12:12:b3: f8:74:cf:cf:c8:08:61:2d:cd:d2:46:31:b7:62:fb: 15:34:f1:3b:8a:18:23:a7:a5:93:20:dd:6a:4d:50: ca:af:b6:73:5a:f0:ff:89:a0:d7:8f:ae:a4:a4:f3: 8f:df:b1:ce:5a:3d:49:7e:d6:07:c0:85:b6:d8:67: 28:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:87:BB:69:72:00:EC:F9:91:97:02:53:3C:7C:7E:0C:02:8E:7A:1C X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f4e7aXIA7PmRlwJTPHx-DAKOehw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.8.216.0/23 Signature Algorithm: sha256WithRSAEncryption b8:5b:9b:57:e1:b0:09:f4:2d:8c:f7:f6:dd:75:a0:f2:94:9d: 99:4e:38:03:c3:d0:21:a3:64:be:42:4f:0c:20:9b:af:6f:da: f6:51:13:d1:6c:76:b2:d6:b0:3f:34:e0:28:28:1d:21:94:e4: c5:f4:1d:50:80:f7:a3:4a:77:fa:11:33:e9:22:e0:f5:b2:97: 27:8d:60:86:02:e6:a7:2e:77:b3:f4:46:78:fa:ba:18:dd:07: 5b:32:38:61:52:71:88:99:8c:fe:3b:b3:9b:05:c8:a8:68:db: 6d:dd:cd:16:98:d9:a4:50:fe:6a:71:4a:31:24:f7:3a:90:f0: d0:a2:c8:70:b5:2f:1e:eb:09:68:5b:79:cc:57:a2:7b:de:97: de:26:18:c7:2f:81:a0:92:f8:b3:18:70:d5:61:75:15:35:ba: 79:af:6c:a1:c2:c1:4d:b1:a9:79:30:88:13:9b:39:47:b8:50: 5c:a4:9a:ad:b5:fe:c6:d2:a4:44:7c:27:51:33:40:a6:29:0e: 83:4f:6f:6f:7e:29:6d:e8:cf:4a:b0:76:95:f5:0f:bf:cf:1a: 79:0b:1a:8d:88:c8:eb:67:2a:07:5c:97:81:a5:e3:11:37:cb: 36:8e:4c:54:06:bc:50:c2:f6:c4:bb:4e:b4:8d:e8:a9:60:39: e2:f4:4d:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FJ2Bwc7FF2GP4z9p+9mZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Zjg3YmI2OTcyMDBlY2Y5OTE5NzAyNTMzYzdjN2UwYzAyOGU3YTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr67lwzyS5yidjxqc0OThsuI/CigZ ZPog7L3YuyNR+Ty1iXBM33PYpxggExbeQC9cemGZ+JHabjdHBEARQBjSyV00eTM2 +IlV+ZL9O7x0nWcLSZSR9vrpZQ4gfX8zSxponKraZ7/KnemXNjZsdvwI4YxQA1A2 R0epow0o+Z3LI+rkvjW9cO50J+/ywgjBVn01v3Rlm1M3g8ZBgZwIpfWDKWu//1p5 6yQDSSqB2SlSMPKUQ2so8MPQFRX2B+oZ9vYSErP4dM/PyAhhLc3SRjG3YvsVNPE7 ihgjp6WTIN1qTVDKr7ZzWvD/iaDXj66kpPOP37HOWj1JftYHwIW22GconwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+Hu2lyAOz5kZcCUzx8fgwCjnocMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvZjRlN2FYSUE3UG1SbHdKVFBIeC1EQUtPZWh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2QjYMA0G CSqGSIb3DQEBCwUAA4IBAQC4W5tX4bAJ9C2M9/bddaDylJ2ZTjgDw9Aho2S+Qk8M IJuvb9r2URPRbHay1rA/NOAoKB0hlOTF9B1QgPejSnf6ETPpIuD1spcnjWCGAuan Lnez9EZ4+roY3QdbMjhhUnGImYz+O7ObBcioaNtt3c0WmNmkUP5qcUoxJPc6kPDQ oshwtS8e6wloW3nMV6J73pfeJhjHL4GgkvizGHDVYXUVNbp5r2yhwsFNsal5MIgT mzlHuFBcpJqttf7G0qREfCdRM0CmKQ6DT29vfilt6M9KsHaV9Q+/zxp5CxqNiMjr ZyoHXJeBpeMRN8s2jkxUBrxQwvbEu060jeipYDni9E3A -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:49 2026 by rpki-client