This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/pxS12DAcCwaW3ocjEXURu6Jiigc.roa File: pxS12DAcCwaW3ocjEXURu6Jiigc.roa (raw, json) Hash identifier: ETa0HlY7Y1RquVwxDSRzexuULYuncZkEz0TP+kkZKZc= Subject key identifier: A7:14:B5:D8:30:1C:0B:06:96:DE:87:23:11:75:11:BB:A2:62:8A:07 Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d Certificate serial: 019B7C123DFFE59621975B6B2C0A213556B8 Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/pxS12DAcCwaW3ocjEXURu6Jiigc.roa Signing time: Fri 02 Jan 2026 00:18:48 +0000 ROA not before: Fri 02 Jan 2026 00:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 217.145.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3d:ff:e5:96:21:97:5b:6b:2c:0a:21:35:56:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d Validity Not Before: Jan 2 00:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a714b5d8301c0b0696de8723117511bba2628a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:98:37:b3:91:6d:46:f3:44:01:8a:d7:2a: cd:3c:dd:05:39:de:ea:91:52:7c:65:ba:1b:51:31: 75:3e:32:1d:08:fb:59:9e:cf:20:84:61:a8:f0:72: d0:18:3e:cb:04:45:fc:8f:a8:e6:5a:b9:22:b0:ff: ce:f6:b2:96:73:dd:48:94:18:11:a2:83:58:45:83: 90:61:15:df:c6:89:88:86:21:a9:ae:6b:64:ee:97: 8c:05:12:8b:b8:c7:5a:c7:f2:88:13:96:31:af:73: d8:9b:ec:c2:25:18:25:b6:91:ee:8a:f9:c8:67:6b: d3:c4:11:8e:d7:ca:8a:20:a0:a7:d4:3f:33:c4:b2: d0:1e:10:a9:42:d3:cc:69:d9:5d:3d:db:81:45:87: 6d:11:b3:52:6f:7c:d0:93:63:e5:62:d8:69:c2:ae: 6d:4d:13:d3:68:f0:e6:f7:36:28:df:eb:4a:ed:21: 86:21:d3:f0:1a:d8:59:50:0a:01:c1:9e:0f:1e:d6: 47:6d:5c:12:33:d0:b9:36:16:01:7d:2b:e4:e2:fe: 42:33:a0:e5:9f:42:b2:0a:c5:28:9f:d3:35:5f:14: 81:ae:36:52:93:b1:46:0b:6d:d3:b0:59:08:69:31: 95:9e:40:31:a6:23:1e:df:48:61:25:96:ab:b9:ab: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:14:B5:D8:30:1C:0B:06:96:DE:87:23:11:75:11:BB:A2:62:8A:07 X509v3 Authority Key Identifier: keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/pxS12DAcCwaW3ocjEXURu6Jiigc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.184.0/24 Signature Algorithm: sha256WithRSAEncryption a6:28:03:93:ac:ae:96:5a:7b:6b:9c:91:f8:ce:93:c4:75:80: 09:88:33:9d:14:75:d5:63:8b:64:3a:1b:e2:58:ee:1c:15:d8: 71:d3:9f:e5:80:0e:c7:36:11:3e:00:13:c5:a1:51:d9:3d:bf: d6:14:84:b7:29:f9:2f:e4:43:7e:50:d4:ed:70:71:09:f0:02: 9d:52:f3:6b:d7:e0:84:54:93:fb:70:a7:2e:b3:47:de:21:b7: 36:4c:a5:19:9b:45:50:7c:6a:56:1e:e4:7f:26:d2:88:27:5e: 0b:ac:de:05:a6:84:4f:71:92:ac:f2:97:c1:af:77:b8:0c:af: ae:a0:e7:16:32:15:f2:1e:a4:56:e7:62:5e:eb:8f:a4:31:20: eb:b3:ec:3f:b3:ef:3d:c0:0c:11:7b:74:57:93:9a:85:aa:9a: c7:e7:4f:98:cb:27:df:1c:16:1c:b1:b3:9b:ff:04:b4:3b:d3: 46:f5:fe:77:cc:bb:92:7c:8b:6a:f1:56:88:49:d1:24:4a:00: 4e:c3:c8:4e:0c:6a:d6:3d:96:77:70:0a:6a:ce:cd:b1:dd:d8: 1e:1e:f6:57:92:7a:28:21:11:22:e5:91:0e:63:2f:e1:bf:17: 27:75:4d:ea:3d:0b:5c:79:5e:4a:f4:48:87:73:42:8b:7e:5d: b4:45:00:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ej3/5ZYhl1trLAohNVa4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjI4OWNiYjgxNzlmZGYzOGU5ZjUzMmM5Y2Q3MjkxYjRm NWM0MmQwHhcNMjYwMTAyMDAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzE0YjVkODMwMWMwYjA2OTZkZTg3MjMxMTc1MTFiYmEyNjI4YTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeOYN7ORbUbzRAGK1yrNPN0FOd7q kVJ8ZbobUTF1PjIdCPtZns8ghGGo8HLQGD7LBEX8j6jmWrkisP/O9rKWc91IlBgR ooNYRYOQYRXfxomIhiGprmtk7peMBRKLuMdax/KIE5Yxr3PYm+zCJRgltpHuivnI Z2vTxBGO18qKIKCn1D8zxLLQHhCpQtPMadldPduBRYdtEbNSb3zQk2PlYthpwq5t TRPTaPDm9zYo3+tK7SGGIdPwGthZUAoBwZ4PHtZHbVwSM9C5NhYBfSvk4v5CM6Dl n0KyCsUon9M1XxSBrjZSk7FGC23TsFkIaTGVnkAxpiMe30hhJZaruas1SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcUtdgwHAsGlt6HIxF1EbuiYooHMB8GA1UdIwQY MBaAFBciicu4F5/fOOn1MsnNcpG09cQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGIt Zjc0YmFhMTJmZGM5LzEvcHhTMTJEQWNDd2FXM29jakVYVVJ1NkppaWdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGItZjc0YmFhMTJmZGM5 LzEvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZG4MA0G CSqGSIb3DQEBCwUAA4IBAQCmKAOTrK6WWntrnJH4zpPEdYAJiDOdFHXVY4tkOhvi WO4cFdhx05/lgA7HNhE+ABPFoVHZPb/WFIS3Kfkv5EN+UNTtcHEJ8AKdUvNr1+CE VJP7cKcus0feIbc2TKUZm0VQfGpWHuR/JtKIJ14LrN4FpoRPcZKs8pfBr3e4DK+u oOcWMhXyHqRW52Je64+kMSDrs+w/s+89wAwRe3RXk5qFqprH50+YyyffHBYcsbOb /wS0O9NG9f53zLuSfItq8VaISdEkSgBOw8hODGrWPZZ3cApqzs2x3dgeHvZXknoo IREi5ZEOYy/hvxcndU3qPQtceV5K9EiHc0KLfl20RQAk -----END CERTIFICATE-----Generated at Sat Jan 10 20:50:19 2026 by rpki-client