This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/A6iNMP0GraSgW6_j4orJfWQjE0o.roa File: A6iNMP0GraSgW6_j4orJfWQjE0o.roa (raw, json) Hash identifier: lSRG12LN2giLsE/xo290FIB2nk9ZuI4BSXvCilXtaZM= Subject key identifier: 03:A8:8D:30:FD:06:AD:A4:A0:5B:AF:E3:E2:8A:C9:7D:64:23:13:4A Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9 Certificate serial: 019B7C8027FA089A57B7889075A9645CA5B9 Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/A6iNMP0GraSgW6_j4orJfWQjE0o.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 217.73.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:27:fa:08:9a:57:b7:88:90:75:a9:64:5c:a5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03a88d30fd06ada4a05bafe3e28ac97d6423134a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7e:a7:1e:77:23:97:e3:22:1e:ea:a8:0e:13: c7:33:1f:35:73:3b:92:db:c2:ce:b4:8f:fc:ff:f2: 08:e8:a4:b3:94:4d:b2:29:94:17:86:aa:86:e3:6b: 5f:62:01:7b:f3:f7:fd:4c:3e:fe:69:40:22:b8:79: b1:08:c0:32:6f:dd:ff:98:07:db:aa:17:23:a7:ac: be:2a:90:2a:5f:2f:56:9e:71:5c:f6:6b:3c:49:26: 68:a6:a4:82:6a:1d:66:33:cf:0d:d3:7f:9a:34:76: 4b:3f:bb:6c:39:55:69:da:1a:40:ff:80:a5:cd:db: 8a:21:50:f5:94:ae:ab:79:be:1f:b1:78:7a:a0:1d: 26:b3:5f:3d:2d:33:26:c8:a8:eb:fb:f3:2b:00:b2: be:19:23:f0:9f:30:01:b4:20:e4:a3:d7:42:a8:b4: 21:d9:de:81:e6:7f:d7:99:de:89:7f:95:8c:3a:29: 13:03:47:b9:28:e9:f5:a3:39:f3:49:1b:09:40:f3: 3c:5d:e4:d6:6d:14:ce:b1:37:e8:ab:c4:f6:e3:3f: 35:7e:88:b7:2a:ab:90:75:e8:55:2b:d6:48:3e:66: 4f:da:11:83:f4:64:38:93:f3:61:3f:26:8e:c9:cc: 0c:c5:ed:fe:01:24:0b:ad:76:75:d9:f9:15:ef:3c: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A8:8D:30:FD:06:AD:A4:A0:5B:AF:E3:E2:8A:C9:7D:64:23:13:4A X509v3 Authority Key Identifier: keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/A6iNMP0GraSgW6_j4orJfWQjE0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.73.79.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:1d:14:97:0e:29:2a:48:7f:95:d5:fa:0a:82:12:e2:b5:4a: df:df:fb:54:62:81:63:c6:c5:f5:ca:8c:24:e4:b7:e2:25:7a: da:8a:af:da:87:97:ad:f1:50:e4:d4:33:61:7d:4c:0c:26:74: d1:b4:6f:cc:a4:15:a6:22:1e:c3:0e:5e:5f:a2:55:2f:fe:ed: 03:6d:27:6b:5f:2c:2b:6f:1f:aa:7b:07:6e:c9:c0:0e:b6:54: 80:48:27:75:40:df:8a:c6:18:a8:8a:53:99:50:67:a6:ac:f9: 6b:b4:9d:44:90:61:01:36:b8:3f:30:f7:59:8b:67:61:10:d4: 99:be:22:85:f2:86:5e:3d:82:d3:3d:39:73:62:ac:8f:62:87: 91:9f:aa:73:22:30:24:ff:91:3a:7c:9c:ac:78:60:b6:4d:74: 30:79:e3:de:de:75:bc:84:be:84:75:cb:c8:20:ea:e5:bc:f2: 06:12:85:69:6d:66:5a:22:3a:d1:ac:8b:17:57:5f:de:f5:c3: c9:19:f7:4a:b5:55:a7:ec:8a:94:3e:dc:18:80:54:7c:86:a1: b9:f8:47:8c:6c:63:13:dd:11:d0:02:e0:fa:fa:7b:27:da:40: 9b:a7:29:ac:51:4d:a2:08:aa:1b:55:9f:59:87:1c:58:1f:c3: fd:41:c8:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCf6CJpXt4iQdalkXKW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMTAxNDlmZDEyMTMwYjNjZGNmMzU4NjJiMGRjZGI5OGE5 NDcxYzkwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2E4OGQzMGZkMDZhZGE0YTA1YmFmZTNlMjhhYzk3ZDY0MjMxMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX6nHncjl+MiHuqoDhPHMx81czuS 28LOtI/8//II6KSzlE2yKZQXhqqG42tfYgF78/f9TD7+aUAiuHmxCMAyb93/mAfb qhcjp6y+KpAqXy9WnnFc9ms8SSZopqSCah1mM88N03+aNHZLP7tsOVVp2hpA/4Cl zduKIVD1lK6reb4fsXh6oB0ms189LTMmyKjr+/MrALK+GSPwnzABtCDko9dCqLQh 2d6B5n/Xmd6Jf5WMOikTA0e5KOn1oznzSRsJQPM8XeTWbRTOsTfoq8T24z81foi3 KquQdehVK9ZIPmZP2hGD9GQ4k/NhPyaOycwMxe3+ASQLrXZ12fkV7zyamwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAOojTD9Bq2koFuv4+KKyX1kIxNKMB8GA1UdIwQY MBaAFIEQFJ/RITCzzc81hisNzbmKlHHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OGRiMTAtM2JhOC00ZTgwLWIzZGMt YWIzMWVhY2JmZmNhLzEvQTZpTk1QMEdyYVNnVzZfajRvckpmV1FqRTBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OGRiMTAtM2JhOC00ZTgwLWIzZGMtYWIzMWVhY2JmZmNh LzEvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UlPMA0G CSqGSIb3DQEBCwUAA4IBAQB/HRSXDikqSH+V1foKghLitUrf3/tUYoFjxsX1yowk 5LfiJXraiq/ah5et8VDk1DNhfUwMJnTRtG/MpBWmIh7DDl5folUv/u0DbSdrXywr bx+qewduycAOtlSASCd1QN+KxhioilOZUGemrPlrtJ1EkGEBNrg/MPdZi2dhENSZ viKF8oZePYLTPTlzYqyPYoeRn6pzIjAk/5E6fJyseGC2TXQweePe3nW8hL6EdcvI IOrlvPIGEoVpbWZaIjrRrIsXV1/e9cPJGfdKtVWn7IqUPtwYgFR8hqG5+EeMbGMT 3RHQAuD6+nsn2kCbpymsUU2iCKobVZ9ZhxxYH8P9Qch+ -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:41 2026 by rpki-client