This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/17V0jzStQoCb_AQ6tvGaBLavGoM.roa File: 17V0jzStQoCb_AQ6tvGaBLavGoM.roa (raw, json) Hash identifier: xin2ArbEF/v8y8IFPHvAh0sLnYeJkUxdnoEAhdH3Knc= Subject key identifier: D7:B5:74:8F:34:AD:42:80:9B:FC:04:3A:B6:F1:9A:04:B6:AF:1A:83 Certificate issuer: /CN=807709e7b0efba127025c83e5d3194c71ba428c3 Certificate serial: 019B76EABF167C97D7AD4B120F7F092371CB Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/17V0jzStQoCb_AQ6tvGaBLavGoM.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3758 IP address blocks: 195.238.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bf:16:7c:97:d7:ad:4b:12:0f:7f:09:23:71:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7b5748f34ad42809bfc043ab6f19a04b6af1a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:a2:65:f0:d2:6c:3e:94:e7:38:8f:42:60: 24:70:a1:b3:81:84:8b:94:a2:5c:69:99:d2:dc:f5: 1d:73:5f:58:19:f7:75:ad:f8:ec:fd:38:23:e0:96: f3:74:ed:79:88:f1:25:86:ab:85:ad:07:7a:92:24: 64:c8:c4:b5:94:50:67:09:b8:1a:66:5c:1c:27:86: ba:62:ca:39:7a:80:bd:96:c6:08:b6:1f:0a:3b:19: 04:43:62:6b:76:e8:05:10:ca:3d:31:0f:ce:00:3a: 70:b3:85:1d:4c:6a:35:f1:da:4c:fc:c3:c6:4b:1a: fa:ff:d5:4e:5a:72:04:0d:53:56:e9:72:ad:a3:a8: 64:be:d5:50:34:a5:a4:2e:0c:a6:0f:16:3f:47:3b: f3:cf:76:bb:07:93:92:50:71:0c:de:18:74:f8:27: f7:78:c4:86:c6:e4:77:ec:de:53:36:e6:02:53:63: ae:21:b3:c3:10:f6:a6:19:1f:5b:2f:4e:38:4a:33: 2f:e9:86:2e:cb:ce:cd:c6:ee:08:14:ad:ba:0d:75: 04:1d:b1:b1:f7:7c:c4:5f:b1:13:c7:66:cc:15:44: fa:e1:f8:b7:85:3a:f5:31:cd:0a:8e:65:d2:4b:80: a4:6b:8b:c6:2b:dd:47:8c:cb:f6:3a:05:bc:61:4e: 35:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B5:74:8F:34:AD:42:80:9B:FC:04:3A:B6:F1:9A:04:B6:AF:1A:83 X509v3 Authority Key Identifier: keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/17V0jzStQoCb_AQ6tvGaBLavGoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.238.94.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:96:89:ff:3a:76:8f:2c:68:23:39:b0:41:b5:fb:89:a5:8a: 9d:3b:b4:2c:2e:07:7f:e3:02:0b:3d:23:6e:fc:c9:f9:e9:74: 8f:d1:e9:a9:85:d0:71:e8:95:1f:1c:7a:b3:09:d0:39:a9:81: 32:b0:8d:16:e1:84:16:1a:77:53:03:6a:a4:53:2b:8a:81:4d: 2f:d3:58:75:ad:ce:bf:92:4f:95:41:40:30:d4:1b:3f:e5:d1: e5:05:3e:f2:bd:dd:a2:66:ad:fe:00:40:29:ec:a2:c5:f0:fa: 7c:83:51:c0:c1:39:11:5c:5f:98:33:9c:dc:50:a6:11:5b:b2: ea:2a:9d:c8:e6:2b:9c:0a:b3:ca:7c:ff:e4:a7:09:05:5a:b0: e0:ca:59:0d:77:c6:75:48:2d:31:b7:66:6c:c0:34:96:06:84: 03:3e:5c:14:ad:53:24:0e:8f:b0:d1:ea:89:2c:a9:88:95:c7: dc:72:f9:1e:2a:dd:ef:f2:ac:2c:9a:d7:7c:e7:63:e5:09:19: 8e:eb:65:1b:b7:5f:80:95:dd:e1:60:1c:0d:18:af:5d:a6:e3: e7:36:a8:04:0c:a4:e7:e9:a0:b4:42:59:d0:23:29:26:f1:22: 54:3c:f4:6c:dd:04:97:20:4c:5e:b8:57:da:93:28:5c:d7:5b: a9:39:dc:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26r8WfJfXrUsSD38JI3HLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNzcwOWU3YjBlZmJhMTI3MDI1YzgzZTVkMzE5NGM3MWJh NDI4YzMwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2I1NzQ4ZjM0YWQ0MjgwOWJmYzA0M2FiNmYxOWEwNGI2YWYxYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7aiZfDSbD6U5ziPQmAkcKGzgYSL lKJcaZnS3PUdc19YGfd1rfjs/Tgj4JbzdO15iPElhquFrQd6kiRkyMS1lFBnCbga ZlwcJ4a6Yso5eoC9lsYIth8KOxkEQ2JrdugFEMo9MQ/OADpws4UdTGo18dpM/MPG Sxr6/9VOWnIEDVNW6XKto6hkvtVQNKWkLgymDxY/Rzvzz3a7B5OSUHEM3hh0+Cf3 eMSGxuR37N5TNuYCU2OuIbPDEPamGR9bL044SjMv6YYuy87Nxu4IFK26DXUEHbGx 93zEX7ETx2bMFUT64fi3hTr1Mc0KjmXSS4Cka4vGK91HjMv2OgW8YU41WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNe1dI80rUKAm/wEOrbxmgS2rxqDMB8GA1UdIwQY MBaAFIB3Ceew77oScCXIPl0xlMcbpCjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgt YmU5YWQyYmY3MjVmLzEvMTdWMGp6U3RRb0NiX0FRNnR2R2FCTGF2R29NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgtYmU5YWQyYmY3MjVm LzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+5eMA0G CSqGSIb3DQEBCwUAA4IBAQCdlon/OnaPLGgjObBBtfuJpYqdO7QsLgd/4wILPSNu /Mn56XSP0emphdBx6JUfHHqzCdA5qYEysI0W4YQWGndTA2qkUyuKgU0v01h1rc6/ kk+VQUAw1Bs/5dHlBT7yvd2iZq3+AEAp7KLF8Pp8g1HAwTkRXF+YM5zcUKYRW7Lq Kp3I5iucCrPKfP/kpwkFWrDgylkNd8Z1SC0xt2ZswDSWBoQDPlwUrVMkDo+w0eqJ LKmIlcfccvkeKt3v8qwsmtd852PlCRmO62Ubt1+Ald3hYBwNGK9dpuPnNqgEDKTn 6aC0QlnQIykm8SJUPPRs3QSXIExeuFfakyhc11upOdwX -----END CERTIFICATE-----Generated at Wed Jan 21 12:20:20 2026 by rpki-client