This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/c7D8z87seThahzJGV1xxzUC68yM.roa File: c7D8z87seThahzJGV1xxzUC68yM.roa (raw, json) Hash identifier: lEtNJalbVark+w9kQtFPEtaaKlnnHtxsb3MXywog3UE= Subject key identifier: 73:B0:FC:CF:CE:EC:79:38:5A:87:32:46:57:5C:71:CD:40:BA:F3:23 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA29F269BF980FB3E87A0FAB6FE1E6 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/c7D8z87seThahzJGV1xxzUC68yM.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29209 IP address blocks: 217.66.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:29:f2:69:bf:98:0f:b3:e8:7a:0f:ab:6f:e1:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73b0fccfceec79385a873246575c71cd40baf323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:e7:64:83:ef:41:bc:6e:d5:08:98:8f:94: 03:50:a1:ca:51:98:63:65:5c:2c:9d:a7:03:7b:3a: dc:00:3c:d8:72:ed:91:ca:89:64:6f:79:cf:06:bb: bc:07:57:f2:f2:1b:cc:ad:55:1d:cb:7d:a3:9d:ab: ff:e4:b7:95:df:03:04:fc:9e:a3:95:1f:2a:24:14: 11:3c:ff:81:0f:2b:5f:8f:f9:f7:15:86:d4:d9:bd: e2:8c:33:f1:ef:31:72:92:c8:2e:5c:a7:e8:83:b6: 39:d5:ca:e6:e4:e5:50:4f:21:a0:e5:1d:98:8c:32: 77:68:cf:70:80:22:8f:b8:5c:df:64:f1:13:fc:0c: b7:ff:42:e4:d6:da:36:3c:11:6f:e9:57:06:2f:8b: 6b:69:46:ab:27:68:0b:ce:f6:8b:4f:75:fc:a2:af: 3d:1a:55:27:35:b6:45:31:5b:c9:16:f7:8c:ac:73: 63:3e:5c:bc:b2:16:3a:1d:1b:6a:93:17:c7:06:b3: d6:e7:db:0d:ad:73:99:7b:8d:43:a9:1d:e2:ba:8b: 5c:f4:25:b3:cf:0c:23:85:70:4e:cb:bd:d7:ec:a4: 4d:66:19:dc:74:03:c0:74:2c:b6:6a:4c:70:3a:2b: 1f:cb:5a:6d:ef:32:27:de:c9:78:e8:0d:8d:56:4c: 2d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B0:FC:CF:CE:EC:79:38:5A:87:32:46:57:5C:71:CD:40:BA:F3:23 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/c7D8z87seThahzJGV1xxzUC68yM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.66.144.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:66:62:84:f8:a0:3d:52:57:9e:e4:8c:c3:27:bf:3b:d9:58: 24:24:4b:e4:86:fb:8e:67:e4:ba:99:6c:fb:f7:76:1d:6f:2b: a1:99:61:b6:62:32:e1:9d:9d:74:07:2a:40:8f:f1:0f:cc:08: 55:45:81:76:91:62:a3:f0:d4:80:ee:48:e8:50:b3:67:15:3e: 14:e8:bd:b9:12:18:f2:d6:da:f4:c5:ae:a5:ce:41:28:f4:4c: 55:04:f2:ad:88:1f:49:d0:63:02:87:43:81:0d:ae:db:78:ac: aa:a5:81:d8:62:44:ca:4b:12:72:ea:1a:fa:69:f0:95:35:e3: 22:1a:b0:c3:11:3b:3a:80:d6:ec:cd:77:dc:99:01:e0:6f:59: f8:0f:e0:ed:c9:e7:85:3b:eb:4b:67:6b:43:5e:70:f5:3f:85: 28:13:5d:a3:5f:10:48:ba:45:3b:3f:b5:61:d6:fe:b4:08:65: 71:df:e3:7a:28:2e:88:34:dd:bd:08:7d:7e:51:ed:fd:6a:12: 9c:6e:7f:c0:08:b2:4f:60:de:5d:64:aa:2b:4a:17:29:4e:ae: 45:de:de:c4:f5:db:a5:f9:14:e4:96:30:60:02:5b:cd:d5:6b: 24:65:3a:00:67:83:c5:84:e3:b7:6e:be:00:75:af:4a:ed:cf: 21:9a:39:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yinyab+YD7Poeg+rb+HmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2IwZmNjZmNlZWM3OTM4NWE4NzMyNDY1NzVjNzFjZDQwYmFmMzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqprnZIPvQbxu1QiYj5QDUKHKUZhj ZVwsnacDezrcADzYcu2Ryolkb3nPBru8B1fy8hvMrVUdy32jnav/5LeV3wME/J6j lR8qJBQRPP+BDytfj/n3FYbU2b3ijDPx7zFyksguXKfog7Y51crm5OVQTyGg5R2Y jDJ3aM9wgCKPuFzfZPET/Ay3/0Lk1to2PBFv6VcGL4traUarJ2gLzvaLT3X8oq89 GlUnNbZFMVvJFveMrHNjPly8shY6HRtqkxfHBrPW59sNrXOZe41DqR3iuotc9CWz zwwjhXBOy73X7KRNZhncdAPAdCy2akxwOisfy1pt7zIn3sl46A2NVkwt/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHOw/M/O7Hk4WocyRldccc1AuvMjMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvYzdEOHo4N3NlVGhhaHpKR1YxeHh6VUM2OHlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2UKQMA0G CSqGSIb3DQEBCwUAA4IBAQArZmKE+KA9Ulee5IzDJ7872VgkJEvkhvuOZ+S6mWz7 93YdbyuhmWG2YjLhnZ10BypAj/EPzAhVRYF2kWKj8NSA7kjoULNnFT4U6L25Ehjy 1tr0xa6lzkEo9ExVBPKtiB9J0GMCh0OBDa7beKyqpYHYYkTKSxJy6hr6afCVNeMi GrDDETs6gNbszXfcmQHgb1n4D+DtyeeFO+tLZ2tDXnD1P4UoE12jXxBIukU7P7Vh 1v60CGVx3+N6KC6INN29CH1+Ue39ahKcbn/ACLJPYN5dZKorShcpTq5F3t7E9dul +RTkljBgAlvN1WskZToAZ4PFhOO3br4Ada9K7c8hmjkR -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:56 2026 by rpki-client