This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/G7sgYRFoJFayuqOiJkT4SvmLSC0.roa File: G7sgYRFoJFayuqOiJkT4SvmLSC0.roa (raw, json) Hash identifier: s14deS72G3vc/Z7LgUYqSMvuXanb2Xca7svdma5VBoI= Subject key identifier: 1B:BB:20:61:11:68:24:56:B2:BA:A3:A2:26:44:F8:4A:F9:8B:48:2D Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d Certificate serial: 019B7C123D7C5ED6BB46F12BCFC94EE4E08F Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/G7sgYRFoJFayuqOiJkT4SvmLSC0.roa Signing time: Fri 02 Jan 2026 00:18:48 +0000 ROA not before: Fri 02 Jan 2026 00:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31346 IP address blocks: 217.145.177.0/24 maxlen: 24 217.145.178.0/24 maxlen: 24 217.145.180.0/24 maxlen: 24 217.145.181.0/24 maxlen: 24 217.145.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3d:7c:5e:d6:bb:46:f1:2b:cf:c9:4e:e4:e0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d Validity Not Before: Jan 2 00:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bbb206111682456b2baa3a22644f84af98b482d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:73:d7:9e:31:e2:6a:a1:d6:8b:fe:ef:21:7f: 95:ca:12:8c:c4:da:32:55:19:34:51:d0:11:3a:b2: 0e:32:0b:f0:44:40:49:dc:55:eb:59:1d:2c:dc:a7: 96:b6:04:cc:bf:16:6c:a8:d1:1e:52:ea:de:f6:74: 68:17:d1:63:c8:11:b1:1d:03:b9:6c:9b:62:53:d1: 2c:55:e1:27:78:5d:9f:dc:a4:06:9b:9f:2f:17:4c: 7a:fd:e5:64:85:4a:0d:d4:4f:17:13:bd:01:c0:f7: a6:6c:d2:57:75:e7:42:5b:58:50:73:cb:86:43:72: 40:89:26:ec:d4:11:ea:5b:93:34:7f:97:36:33:7e: a2:0d:94:fe:9d:38:3e:a7:bc:6d:08:80:48:3a:75: 15:bc:96:17:3d:bb:85:14:4f:82:0e:2a:5e:9b:eb: 7f:39:41:f1:cc:a6:b8:0c:8e:58:5e:bd:b2:8f:04: f3:9b:d2:e9:00:e5:64:a4:d5:39:15:68:8c:a0:86: b7:c8:97:23:67:08:af:97:e3:43:94:08:de:61:d5: 6d:7b:68:42:75:31:31:1a:04:b7:2a:8b:bf:99:45: c3:9b:ee:38:77:39:54:5b:59:0c:b1:96:51:36:dd: 0d:ce:3d:47:38:36:98:d4:c3:b3:62:cf:e0:2b:da: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BB:20:61:11:68:24:56:B2:BA:A3:A2:26:44:F8:4A:F9:8B:48:2D X509v3 Authority Key Identifier: keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/G7sgYRFoJFayuqOiJkT4SvmLSC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.177.0-217.145.178.255 217.145.180.0-217.145.182.255 Signature Algorithm: sha256WithRSAEncryption 13:0c:75:57:a2:5d:7a:0a:d6:f5:ac:60:e8:fc:3b:b3:5e:79: 9e:79:84:02:88:e7:3c:61:62:56:01:22:5c:08:6a:bd:3f:28: 87:28:4b:c6:33:69:78:0b:7a:b7:68:0e:c9:c3:97:7b:55:af: fe:d2:0f:96:a3:fd:c0:53:f0:79:69:5d:5f:af:04:6f:3e:f5: 3a:13:b3:d4:ae:5d:67:2e:a2:ac:80:bc:ef:ef:a0:1c:f1:1d: 07:c7:db:c9:74:1f:16:3d:7b:2e:fc:bf:52:b8:dd:83:79:1a: e3:d6:b4:b3:44:14:f5:5c:2f:28:14:6b:cc:31:52:09:c9:58: d2:26:68:18:9a:d7:e5:12:76:0e:a1:2f:ab:cf:e3:fc:42:3d: ae:85:30:d9:4e:0b:26:1a:ae:9a:07:be:75:a0:8f:b0:09:83: 6e:3d:94:85:ef:3b:bb:91:0f:0b:b6:1d:72:48:c8:4a:a0:7d: 0a:a4:6a:ec:73:37:4d:0f:f3:db:48:6a:dc:d0:e5:4d:3e:66: 8f:c9:c2:98:66:ab:d7:0f:dc:56:de:3f:a9:ec:46:8b:64:fd: b4:d9:e4:ad:75:68:bd:02:74:07:cc:47:bb:5c:3d:2b:13:e8: f5:2a:99:41:4c:e9:29:0c:1f:4e:90:2e:d3:72:3e:80:66:3c: 09:45:e7:da -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt8Ej18Xta7RvErz8lO5OCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjI4OWNiYjgxNzlmZGYzOGU5ZjUzMmM5Y2Q3MjkxYjRm NWM0MmQwHhcNMjYwMTAyMDAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmJiMjA2MTExNjgyNDU2YjJiYWEzYTIyNjQ0Zjg0YWY5OGI0ODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnPXnjHiaqHWi/7vIX+VyhKMxNoy VRk0UdAROrIOMgvwREBJ3FXrWR0s3KeWtgTMvxZsqNEeUure9nRoF9FjyBGxHQO5 bJtiU9EsVeEneF2f3KQGm58vF0x6/eVkhUoN1E8XE70BwPembNJXdedCW1hQc8uG Q3JAiSbs1BHqW5M0f5c2M36iDZT+nTg+p7xtCIBIOnUVvJYXPbuFFE+CDipem+t/ OUHxzKa4DI5YXr2yjwTzm9LpAOVkpNU5FWiMoIa3yJcjZwivl+NDlAjeYdVte2hC dTExGgS3Kou/mUXDm+44dzlUW1kMsZZRNt0Nzj1HODaY1MOzYs/gK9pQJwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFBu7IGERaCRWsrqjoiZE+Er5i0gtMB8GA1UdIwQY MBaAFBciicu4F5/fOOn1MsnNcpG09cQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGIt Zjc0YmFhMTJmZGM5LzEvRzdzZ1lSRm9KRmF5dXFPaUprVDRTdm1MU0MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGItZjc0YmFhMTJmZGM5 LzEvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADZkbED BADZkbIwDAMEAtmRtAMEANmRtjANBgkqhkiG9w0BAQsFAAOCAQEAEwx1V6JdegrW 9axg6Pw7s155nnmEAojnPGFiVgEiXAhqvT8ohyhLxjNpeAt6t2gOycOXe1Wv/tIP lqP9wFPweWldX68Ebz71OhOz1K5dZy6irIC87++gHPEdB8fbyXQfFj17Lvy/Urjd g3ka49a0s0QU9VwvKBRrzDFSCclY0iZoGJrX5RJ2DqEvq8/j/EI9roUw2U4LJhqu mge+daCPsAmDbj2Uhe87u5EPC7YdckjISqB9CqRq7HM3TQ/z20hq3NDlTT5mj8nC mGar1w/cVt4/qexGi2T9tNnkrXVovQJ0B8xHu1w9KxPo9SqZQUzpKQwfTpAu03I+ gGY8CUXn2g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:53 2026 by rpki-client