This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa File: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (raw, json) Hash identifier: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo= Subject key identifier: 23:FD:AE:06:05:84:62:B6:69:C5:57:DB:1A:FE:09:C7:0C:C2:73:26 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B7BA3D5FD16537EED46803FFFA695C3A9 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 217.67.72.0/23 maxlen: 23 217.67.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d5:fd:16:53:7e:ed:46:80:3f:ff:a6:95:c3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23fdae06058462b669c557db1afe09c70cc27326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e3:bb:96:a9:23:1f:44:06:ad:0d:fb:e8:c5: 5a:79:fe:98:a9:56:e2:8f:5a:9b:b3:df:65:e0:08: f9:18:c8:6c:a8:e5:dd:3e:e3:39:fb:47:06:2f:a4: 3f:e3:a2:c4:6f:e7:14:75:b9:75:a7:ad:3b:aa:1c: 73:0f:7f:18:1e:d3:39:76:78:2e:cb:92:d3:d8:6a: 90:d4:27:f5:d4:f0:03:ef:ac:26:f0:11:d4:a1:8a: 3b:40:a2:73:88:2c:55:af:30:0d:55:66:5f:00:6f: 6c:a4:35:87:62:93:b8:fe:71:9d:ed:8b:0b:6b:23: c9:69:6b:a2:d5:70:2f:23:69:f3:a9:f9:17:02:45: b8:6d:fc:b9:3d:39:27:db:c3:c2:e0:eb:5c:65:0b: cb:51:c5:26:11:b7:ac:19:e2:6f:cc:60:a5:31:fa: a7:27:67:75:90:2b:b5:89:7e:2f:1b:9a:fe:b2:8e: 8a:7e:41:d8:bc:ec:72:e4:f6:de:09:5c:26:00:64: eb:7c:1d:72:9a:b7:29:46:78:75:55:80:37:6c:f6: e3:63:de:57:8f:3a:ff:d7:b5:6d:f8:0f:21:23:61: dd:ab:f7:27:83:05:d0:d6:74:7f:dd:d8:a8:7b:11: c6:f4:2f:bd:06:43:ad:a9:10:0f:a7:8f:f8:35:5e: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FD:AE:06:05:84:62:B6:69:C5:57:DB:1A:FE:09:C7:0C:C2:73:26 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.67.72.0/22 Signature Algorithm: sha256WithRSAEncryption 41:9f:e0:2e:97:97:57:c0:57:5e:99:d4:65:79:de:98:6d:10: 02:9a:f5:a3:f6:c6:21:1e:ec:e1:c0:39:b0:db:b8:9d:01:d2: 8a:e4:15:7a:ce:1b:79:f9:33:4e:f7:21:0b:65:96:d9:6d:3f: 87:b8:6f:0a:70:c9:fb:ea:8e:12:31:75:9f:d2:ba:48:de:0f: c8:8e:d3:2d:50:43:fe:b7:56:b1:58:ff:35:87:da:50:b0:e8: 04:4b:96:93:73:e7:1e:8c:a7:e1:21:68:31:8e:36:ff:1d:cf: 90:52:c8:e4:75:a6:1c:e5:2c:01:8e:b4:20:db:e7:62:3c:0c: 51:42:6c:0e:ba:8f:de:8c:21:ce:42:ca:06:c6:bb:9f:b6:13: 88:c3:2a:83:ee:73:9c:4f:fe:a4:8c:94:c3:57:1d:16:31:f7: 88:be:d5:68:1d:ff:ef:57:d5:97:7b:34:bf:88:7c:86:19:a9: 97:55:18:5b:c3:a9:2c:c8:a1:27:62:36:87:8f:63:ff:7e:30: 10:ec:39:95:58:13:d4:a8:fd:84:f2:54:9e:d1:5d:3a:7a:f2: 8d:a4:eb:6d:62:67:53:8b:d1:da:40:4b:74:6e:ae:e5:e0:44: 0c:f3:89:c3:f0:a0:3c:bf:5c:0f:03:e9:24:54:20:96:24:73: 7f:a4:53:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9X9FlN+7UaAP/+mlcOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2ZkYWUwNjA1ODQ2MmI2NjljNTU3ZGIxYWZlMDljNzBjYzI3MzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OO7lqkjH0QGrQ376MVaef6YqVbi j1qbs99l4Aj5GMhsqOXdPuM5+0cGL6Q/46LEb+cUdbl1p607qhxzD38YHtM5dngu y5LT2GqQ1Cf11PAD76wm8BHUoYo7QKJziCxVrzANVWZfAG9spDWHYpO4/nGd7YsL ayPJaWui1XAvI2nzqfkXAkW4bfy5PTkn28PC4OtcZQvLUcUmEbesGeJvzGClMfqn J2d1kCu1iX4vG5r+so6KfkHYvOxy5PbeCVwmAGTrfB1ymrcpRnh1VYA3bPbjY95X jzr/17Vt+A8hI2Hdq/cngwXQ1nR/3dioexHG9C+9BkOtqRAPp4/4NV6EvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCP9rgYFhGK2acVX2xr+CccMwnMmMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvSV8ydUJnV0VZclpweFZmYkd2NEp4d3pDY3lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2UNIMA0G CSqGSIb3DQEBCwUAA4IBAQBBn+Aul5dXwFdemdRled6YbRACmvWj9sYhHuzhwDmw 27idAdKK5BV6zht5+TNO9yELZZbZbT+HuG8KcMn76o4SMXWf0rpI3g/IjtMtUEP+ t1axWP81h9pQsOgES5aTc+cejKfhIWgxjjb/Hc+QUsjkdaYc5SwBjrQg2+diPAxR QmwOuo/ejCHOQsoGxrufthOIwyqD7nOcT/6kjJTDVx0WMfeIvtVoHf/vV9WXezS/ iHyGGamXVRhbw6ksyKEnYjaHj2P/fjAQ7DmVWBPUqP2E8lSe0V06evKNpOttYmdT i9HaQEt0bq7l4EQM84nD8KA8v1wPA+kkVCCWJHN/pFMA -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:04 2026 by rpki-client