This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/FzaSctWTm436xTaHu7cLIoR3zuI.roa File: FzaSctWTm436xTaHu7cLIoR3zuI.roa (raw, json) Hash identifier: ZWQNCmBRzSOXikzbY8uxPHONXN2ergkv72vrvK6pGEg= Subject key identifier: 17:36:92:72:D5:93:9B:8D:FA:C5:36:87:BB:B7:0B:22:84:77:CE:E2 Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20 Certificate serial: 019B7F83384485F5D4FE9BB9F881E0A34499 Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/FzaSctWTm436xTaHu7cLIoR3zuI.roa Signing time: Fri 02 Jan 2026 16:21:04 +0000 ROA not before: Fri 02 Jan 2026 16:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 139.17.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:38:44:85:f5:d4:fe:9b:b9:f8:81:e0:a3:44:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20 Validity Not Before: Jan 2 16:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17369272d5939b8dfac53687bbb70b228477cee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3d:63:c6:48:68:ee:c2:c4:76:1e:95:65:06: fc:e9:b9:bd:a8:6e:ff:b5:06:0b:80:0b:3b:22:62: 38:b7:4e:6c:61:d6:27:09:66:9a:78:bb:88:8a:80: 5e:93:5b:63:65:04:7b:c4:e0:32:b2:15:c1:10:1c: 5d:3a:98:a4:a3:88:07:2f:c8:fa:9d:c7:2f:4e:77: 32:0c:61:e6:2e:d3:00:c8:7d:dc:13:99:38:3c:e3: a9:89:90:88:1e:c7:01:26:e7:68:af:4c:cf:5a:94: cd:2c:78:73:85:72:56:07:1f:ca:bd:c3:98:72:f3: a0:4d:6f:49:65:40:9a:d9:60:9a:1c:7d:b8:b7:e6: fb:b5:47:6b:21:42:3d:70:e8:be:eb:ac:3e:d9:ab: 77:9c:d9:42:16:be:3b:d1:98:e2:1d:7f:d9:0c:fc: 1c:dc:4d:1b:88:5a:ba:6d:77:d8:b0:17:14:63:c8: 9c:b8:b9:90:3c:db:90:4a:76:e9:67:32:52:99:6a: 28:7c:02:89:59:0b:52:29:1b:15:39:c5:29:1c:e9: 5f:d8:1e:29:2d:33:cc:75:f2:ed:f7:1e:70:31:94: 87:99:05:28:26:db:6e:05:1d:59:fa:ce:86:13:4c: 1b:5f:8d:48:13:58:f8:a8:d0:97:a6:9e:da:86:03: 4e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:36:92:72:D5:93:9B:8D:FA:C5:36:87:BB:B7:0B:22:84:77:CE:E2 X509v3 Authority Key Identifier: keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/FzaSctWTm436xTaHu7cLIoR3zuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:4a:0e:38:9c:ab:d6:27:f9:90:bd:dc:e5:04:24:84:82:3c: 6d:6b:ef:ce:35:96:d5:7b:b9:2c:32:c7:63:ba:30:f9:a5:17: 97:34:6d:2f:03:72:06:f9:e1:56:3d:ea:19:14:cc:44:18:7b: c9:44:8b:0c:ff:0c:18:a3:87:77:2f:fb:74:6e:41:7d:47:be: c0:01:55:fa:cf:e2:6e:b5:f2:e4:6b:fa:14:bb:06:1b:85:47: b7:ef:ac:01:74:99:7a:2b:b1:8c:cd:5e:8f:9c:5e:57:6a:10: eb:d6:c2:fd:67:1c:2b:28:d5:34:b7:ec:4c:d9:20:1f:36:0d: f8:50:50:35:12:e4:4d:40:2b:67:a7:a9:6a:d7:f5:c2:4b:3c: b8:a5:e7:53:e9:0e:69:63:cb:dc:58:51:2c:8d:18:41:b9:4d: 00:d6:d5:ab:e7:88:af:be:d1:e5:e8:08:b1:cb:72:c2:be:81: 1b:f8:b7:ba:06:7e:04:a6:95:4b:19:3b:c6:7e:fc:74:67:5f: 85:6b:00:c3:9d:b4:9f:8c:db:86:40:18:2a:16:2c:e1:29:5b: 2f:dc:26:f0:1a:25:8b:f4:e3:10:87:ed:53:07:bb:4d:3d:d3: 73:ae:88:c7:7e:1c:1b:64:b3:3a:2b:dd:3a:4b:87:d3:7f:fc: 3b:47:c8:4f -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt/gzhEhfXU/pu5+IHgo0SZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZjc4NDc3MzdlNzQ5NDJiMmJlNzRiOTNmZDAyZDkwMGQz MDliMjAwHhcNMjYwMTAyMTYyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzM2OTI3MmQ1OTM5YjhkZmFjNTM2ODdiYmI3MGIyMjg0NzdjZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD1jxkho7sLEdh6VZQb86bm9qG7/ tQYLgAs7ImI4t05sYdYnCWaaeLuIioBek1tjZQR7xOAyshXBEBxdOpiko4gHL8j6 nccvTncyDGHmLtMAyH3cE5k4POOpiZCIHscBJudor0zPWpTNLHhzhXJWBx/KvcOY cvOgTW9JZUCa2WCaHH24t+b7tUdrIUI9cOi+66w+2at3nNlCFr470ZjiHX/ZDPwc 3E0biFq6bXfYsBcUY8icuLmQPNuQSnbpZzJSmWoofAKJWQtSKRsVOcUpHOlf2B4p LTPMdfLt9x5wMZSHmQUoJttuBR1Z+s6GE0wbX41IE1j4qNCXpp7ahgNOywIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFBc2knLVk5uN+sU2h7u3CyKEd87iMB8GA1UdIwQY MBaAFIr3hHc350lCsr50uT/QLZANMJsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXZlRWR6Zm5TVUt5dm5TNVA5QXRrQTB3bXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81MjM4NGItZTdhNC00MjY5LWEwY2Mt N2VmYzI4MDhkMTI1LzEvRnphU2N0V1RtNDM2eFRhSHU3Y0xJb1IzenVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81MjM4NGItZTdhNC00MjY5LWEwY2MtN2VmYzI4MDhkMTI1 LzEvaXZlRWR6Zm5TVUt5dm5TNVA5QXRrQTB3bXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAixEwDQYJ KoZIhvcNAQELBQADggEBAK9KDjicq9Yn+ZC93OUEJISCPG1r7841ltV7uSwyx2O6 MPmlF5c0bS8Dcgb54VY96hkUzEQYe8lEiwz/DBijh3cv+3RuQX1HvsABVfrP4m61 8uRr+hS7BhuFR7fvrAF0mXorsYzNXo+cXldqEOvWwv1nHCso1TS37EzZIB82DfhQ UDUS5E1AK2enqWrX9cJLPLil51PpDmljy9xYUSyNGEG5TQDW1avniK++0eXoCLHL csK+gRv4t7oGfgSmlUsZO8Z+/HRnX4VrAMOdtJ+M24ZAGCoWLOEpWy/cJvAaJYv0 4xCH7VMHu00903OuiMd+HBtkszor3TpLh9N//DtHyE8= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:56 2026 by rpki-client