This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa File: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (raw, json) Hash identifier: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w= Subject key identifier: 7E:63:41:CB:D0:A3:D1:4F:87:10:09:0F:B6:76:D4:83:47:88:4F:E0 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CEDA0776D174EAB644675E346C84E78 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa Signing time: Fri 02 Jan 2026 04:18:26 +0000 ROA not before: Fri 02 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208465 IP address blocks: 147.234.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a0:77:6d:17:4e:ab:64:46:75:e3:46:c8:4e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e6341cbd0a3d14f8710090fb676d48347884fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:27:1e:07:2e:c7:40:22:88:1b:77:10:91: 45:93:4b:60:81:36:27:8d:6c:bc:59:1b:26:3d:c9: 2f:2a:ef:f7:6a:5f:a9:88:bd:8b:e7:8b:d0:4c:d8: 7c:2c:f6:fc:4c:b9:f1:0a:be:02:af:de:0d:bb:8d: 30:33:05:ed:16:0a:6c:c0:a2:59:7e:88:92:d5:c1: 4b:02:0d:be:3f:2f:37:ba:e4:a6:13:3e:c4:2e:9c: b1:0c:a8:bf:42:51:df:19:11:0c:2c:57:07:89:28: 67:a9:46:6c:57:95:de:e2:37:1d:df:f9:3e:9f:e4: 7c:3b:5d:a3:ec:6c:6d:b7:4f:a3:0c:b5:c8:7d:49: 88:46:50:41:b8:6c:98:43:a5:32:8c:91:58:b4:ab: 6e:af:8c:3e:af:9c:f1:f2:df:f7:fc:ed:04:8c:06: 43:4c:27:46:e1:08:81:de:4d:ed:e8:2b:19:c8:8e: bc:14:65:6d:db:73:9c:8d:63:3c:0c:0b:94:52:4d: 38:2f:34:bc:a2:0b:2d:37:28:4f:f1:9c:cc:17:39: af:95:21:e8:cf:24:f9:39:36:dc:d5:0b:70:1a:39: ff:81:80:5b:32:1e:71:06:bd:57:3d:57:f9:9f:b0: bb:22:a2:d4:88:8e:f5:8a:a5:79:39:f9:bd:d1:3c: 9a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:63:41:CB:D0:A3:D1:4F:87:10:09:0F:B6:76:D4:83:47:88:4F:E0 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.29.0/24 Signature Algorithm: sha256WithRSAEncryption 61:ee:76:c9:1b:cf:d6:bd:e4:88:71:43:6d:0f:6c:e8:96:ae: 7e:a6:cf:19:f2:64:1b:62:5d:3f:4e:6a:9a:25:13:be:68:3a: 2b:de:f2:d7:64:2b:ef:b4:c3:66:28:dd:93:c6:af:1a:fa:e3: 6e:f2:bf:94:34:e6:58:ea:e8:1a:65:e2:68:d9:51:9e:12:72: 57:de:18:85:2e:d4:3a:f6:1d:e1:68:02:50:d7:23:b0:c5:f4: fd:af:d2:ff:17:30:c0:55:35:97:ee:f6:60:1d:9b:15:58:6a: 6a:c2:ba:9e:91:be:2e:fc:cc:75:cc:89:90:14:49:65:8e:72: f5:0a:df:a7:7f:31:10:ec:c3:1f:ce:3a:10:50:ef:56:12:f3: 31:c6:87:b2:e5:52:68:0c:8c:56:74:1e:6e:ea:6b:bc:95:51: 0a:d8:51:a5:45:df:7c:ce:9c:12:2f:21:fe:4d:73:0b:d7:1e: 71:32:9c:db:44:f1:1d:c4:5a:13:ea:35:84:1c:28:6f:a0:7d: 58:cd:4d:23:f6:c5:c2:0b:d5:6a:05:e1:fe:c8:b6:6d:19:8c: 3f:52:bd:86:d6:fd:f9:51:f8:48:c0:20:79:cf:a8:be:a0:90: 90:22:cb:39:f4:aa:a0:2a:aa:fd:55:e2:c1:29:3f:5a:55:f5: 9f:3f:b2:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87aB3bRdOq2RGdeNGyE54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTYzNDFjYmQwYTNkMTRmODcxMDA5MGZiNjc2ZDQ4MzQ3ODg0ZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxYnHgcux0AiiBt3EJFFk0tggTYn jWy8WRsmPckvKu/3al+piL2L54vQTNh8LPb8TLnxCr4Cr94Nu40wMwXtFgpswKJZ foiS1cFLAg2+Py83uuSmEz7ELpyxDKi/QlHfGREMLFcHiShnqUZsV5Xe4jcd3/k+ n+R8O12j7Gxtt0+jDLXIfUmIRlBBuGyYQ6UyjJFYtKtur4w+r5zx8t/3/O0EjAZD TCdG4QiB3k3t6CsZyI68FGVt23OcjWM8DAuUUk04LzS8ogstNyhP8ZzMFzmvlSHo zyT5OTbc1QtwGjn/gYBbMh5xBr1XPVf5n7C7IqLUiI71iqV5Ofm90TyaAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5jQcvQo9FPhxAJD7Z21INHiE/gMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvZm1OQnk5Q2owVS1IRUFrUHRuYlVnMGVJVC1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+odMA0G CSqGSIb3DQEBCwUAA4IBAQBh7nbJG8/WveSIcUNtD2zolq5+ps8Z8mQbYl0/Tmqa JRO+aDor3vLXZCvvtMNmKN2Txq8a+uNu8r+UNOZY6ugaZeJo2VGeEnJX3hiFLtQ6 9h3haAJQ1yOwxfT9r9L/FzDAVTWX7vZgHZsVWGpqwrqekb4u/Mx1zImQFElljnL1 Ct+nfzEQ7MMfzjoQUO9WEvMxxoey5VJoDIxWdB5u6mu8lVEK2FGlRd98zpwSLyH+ TXML1x5xMpzbRPEdxFoT6jWEHChvoH1YzU0j9sXCC9VqBeH+yLZtGYw/Ur2G1v35 UfhIwCB5z6i+oJCQIss59KqgKqr9VeLBKT9aVfWfP7Ku -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:59 2026 by rpki-client