This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rtLM2zS6nbxN5Zl36aO-CimL6ts.roa File: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (raw, json) Hash identifier: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk= Subject key identifier: AE:D2:CC:DB:34:BA:9D:BC:4D:E5:99:77:E9:A3:BE:0A:29:8B:EA:DB Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B7BA3D80446F11D3BA5957F8FA47DD579 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rtLM2zS6nbxN5Zl36aO-CimL6ts.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 217.67.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d8:04:46:f1:1d:3b:a5:95:7f:8f:a4:7d:d5:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aed2ccdb34ba9dbc4de59977e9a3be0a298beadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:15:0f:bf:dc:70:46:f6:8b:82:88:90:c9: 57:98:57:4d:f3:59:13:54:03:cf:d8:c0:0c:95:b8: 2c:bc:28:59:2b:e8:cd:64:72:88:fe:4f:ce:8c:c3: 17:34:0c:25:3d:04:af:bb:36:be:59:15:cc:16:43: f9:fd:7a:6b:5e:3e:58:33:6a:aa:c8:8c:ff:f2:5b: 73:d4:62:b4:60:05:bb:b3:10:39:3c:be:52:34:3b: 84:ed:09:87:39:d2:12:64:c8:9a:8b:cc:32:22:ce: 82:70:a0:1e:83:84:44:11:da:09:d5:17:9a:fd:16: 43:67:3e:b5:f9:f2:b8:7d:42:ab:1d:24:b6:72:f4: d2:58:2d:eb:cf:76:a6:6d:4b:0e:14:09:c8:69:14: a1:28:a5:82:96:9c:4a:63:fa:a4:38:86:2a:7a:c3: 2b:3b:fe:1a:f4:c4:fa:f4:aa:b6:22:95:9d:5b:4e: 45:a0:82:b2:4f:a9:a8:b0:7f:4e:59:f3:d2:6c:95: 74:37:f0:59:84:20:71:09:ec:94:52:87:99:6a:6d: 38:23:9b:86:49:74:47:f8:ec:90:e0:c3:e2:7e:c9: be:9a:17:17:63:6a:87:db:94:7a:34:13:79:65:2e: fd:60:88:e5:58:e1:5d:29:a0:04:c7:7f:e2:ef:1f: ae:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D2:CC:DB:34:BA:9D:BC:4D:E5:99:77:E9:A3:BE:0A:29:8B:EA:DB X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rtLM2zS6nbxN5Zl36aO-CimL6ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.67.64.0/22 Signature Algorithm: sha256WithRSAEncryption 22:29:9e:fd:cd:07:2b:f4:de:7d:31:20:1d:a6:aa:9c:04:77: c3:aa:90:55:64:76:ec:b9:dc:ed:ce:27:8e:64:0b:ef:a7:a1: a5:ae:a6:de:a4:55:43:03:7f:88:58:67:3c:1d:df:80:49:34: c7:bb:e9:2a:1c:b1:2c:d8:3f:b1:5b:bf:67:6e:af:30:52:c8: 5b:60:08:a7:8c:21:3f:8f:62:38:76:44:84:5a:98:08:4d:ba: 82:d7:55:17:60:20:ef:65:c7:b9:f5:10:bc:ef:70:c8:f2:d8: 70:38:b1:ff:7a:3b:e9:85:2c:7e:b8:31:75:ef:97:a1:87:7a: 33:42:49:da:c6:4b:50:db:a0:f1:9c:9b:6c:8d:48:8d:31:8c: f8:91:f2:c2:ef:46:3b:3d:c0:9f:14:32:47:1f:03:5b:9e:c6: 15:62:6f:ce:af:10:8a:64:01:d6:e8:ea:f2:7f:8b:f1:3d:82: be:f8:b9:9a:ba:9b:88:d6:4a:95:f0:02:7c:b9:42:42:c9:c5: b7:26:79:8f:61:89:d5:e2:dd:4b:68:a3:bb:c0:0e:f4:f1:9a: 03:0f:1c:f4:79:fc:5f:fc:43:14:13:90:6a:f2:19:21:5b:0a: 41:ba:a0:c5:23:ac:4d:b5:a6:1f:88:3f:ca:c0:c7:a6:96:2e: e5:a9:35:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9gERvEdO6WVf4+kfdV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWQyY2NkYjM0YmE5ZGJjNGRlNTk5NzdlOWEzYmUwYTI5OGJlYWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyegVD7/ccEb2i4KIkMlXmFdN81kT VAPP2MAMlbgsvChZK+jNZHKI/k/OjMMXNAwlPQSvuza+WRXMFkP5/XprXj5YM2qq yIz/8ltz1GK0YAW7sxA5PL5SNDuE7QmHOdISZMiai8wyIs6CcKAeg4REEdoJ1Rea /RZDZz61+fK4fUKrHSS2cvTSWC3rz3ambUsOFAnIaRShKKWClpxKY/qkOIYqesMr O/4a9MT69Kq2IpWdW05FoIKyT6mosH9OWfPSbJV0N/BZhCBxCeyUUoeZam04I5uG SXRH+OyQ4MPifsm+mhcXY2qH25R6NBN5ZS79YIjlWOFdKaAEx3/i7x+u8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK7SzNs0up28TeWZd+mjvgopi+rbMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvcnRMTTJ6UzZuYnhONVpsMzZhTy1DaW1MNnRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2UNAMA0G CSqGSIb3DQEBCwUAA4IBAQAiKZ79zQcr9N59MSAdpqqcBHfDqpBVZHbsudztzieO ZAvvp6GlrqbepFVDA3+IWGc8Hd+ASTTHu+kqHLEs2D+xW79nbq8wUshbYAinjCE/ j2I4dkSEWpgITbqC11UXYCDvZce59RC873DI8thwOLH/ejvphSx+uDF175ehh3oz QknaxktQ26DxnJtsjUiNMYz4kfLC70Y7PcCfFDJHHwNbnsYVYm/OrxCKZAHW6Ory f4vxPYK++LmaupuI1kqV8AJ8uUJCycW3JnmPYYnV4t1LaKO7wA708ZoDDxz0efxf /EMUE5Bq8hkhWwpBuqDFI6xNtaYfiD/KwMemli7lqTXN -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:05 2026 by rpki-client