This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/RPrBbEnoUjqZ5cz7T7a5GYWXCcM.roa File: RPrBbEnoUjqZ5cz7T7a5GYWXCcM.roa (raw, json) Hash identifier: CRq+pDZeUDRucY39aQu9W9dJZ2hkbZK+EIWSe9Ksg/E= Subject key identifier: 44:FA:C1:6C:49:E8:52:3A:99:E5:CC:FB:4F:B6:B9:19:85:97:09:C3 Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa Certificate serial: 019B7AC94385CF8D21758F94458447D4DBFF Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/RPrBbEnoUjqZ5cz7T7a5GYWXCcM.roa Signing time: Thu 01 Jan 2026 18:19:28 +0000 ROA not before: Thu 01 Jan 2026 18:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21234 IP address blocks: 217.25.128.0/20 maxlen: 24 217.25.137.0/24 maxlen: 24 217.25.138.0/24 maxlen: 24 2a07:fbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:43:85:cf:8d:21:75:8f:94:45:84:47:d4:db:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44fac16c49e8523a99e5ccfb4fb6b919859709c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:c7:44:a4:b8:f7:8e:a2:4f:c4:d5:35:c7: d3:9f:6f:98:17:cc:3a:d2:0e:a4:a4:8d:00:7a:95: 8c:d8:e0:cd:d0:12:77:c8:d2:d5:0c:4f:62:3d:7f: cd:57:94:62:30:c2:ce:fe:9f:54:f3:54:27:36:c7: a5:73:c6:0e:9b:a4:1f:41:9f:b2:d1:65:77:d6:a2: a4:2f:37:59:1b:0a:c2:3b:78:11:15:2a:8a:9b:72: 89:bb:99:bb:3b:a2:1f:8d:81:0f:48:9c:cf:f0:38: 73:0a:4a:42:3f:fc:f0:22:71:5d:43:b8:32:0a:59: bd:9b:97:49:05:94:a2:85:fc:c4:db:26:41:35:23: 76:f9:05:75:31:4c:b9:be:a7:9b:4f:df:12:8f:9b: 5f:5c:06:44:5b:b7:bb:dc:e7:98:48:69:56:8b:48: da:8a:1d:c4:13:c2:74:f4:3f:9b:c3:90:81:4b:48: 1f:af:bf:33:46:eb:e4:1d:eb:88:3b:47:64:1c:ff: a5:da:ff:1d:41:d5:6b:f3:93:2e:ed:f9:25:92:24: 86:f5:c7:a2:86:5c:91:e2:22:1e:f7:35:bf:fa:05: e8:85:a6:3c:36:a1:2a:77:f6:e5:31:5a:e8:00:77: 4d:ee:17:7e:32:f9:7d:b7:25:26:65:87:78:44:75: 44:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FA:C1:6C:49:E8:52:3A:99:E5:CC:FB:4F:B6:B9:19:85:97:09:C3 X509v3 Authority Key Identifier: keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/RPrBbEnoUjqZ5cz7T7a5GYWXCcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.25.128.0/20 IPv6: 2a07:fbc0::/32 Signature Algorithm: sha256WithRSAEncryption 33:98:60:38:5c:2a:62:49:02:12:80:0b:5d:f3:92:0a:16:11: 63:7c:5c:a8:e9:3f:97:6e:0e:85:2c:37:f6:85:01:2f:b9:f3: 68:4b:cd:e8:f1:91:39:f3:8d:94:16:9d:d8:6b:09:f1:eb:9e: 1d:d0:31:d3:9f:f9:7d:11:c4:4f:b3:15:28:21:c5:2a:47:45: 57:35:68:b5:0c:8a:0c:de:90:9d:6a:5a:5e:01:25:4d:98:73: 7c:48:f8:48:1c:c2:53:4e:65:66:5e:81:3c:f7:66:48:a1:da: 6e:23:1a:b1:7e:7a:5a:14:2f:93:f4:d1:43:ec:67:58:9c:fd: 30:ea:5b:37:44:a6:19:a1:de:93:c9:10:f4:88:60:58:1f:a6: ca:64:07:b5:02:a1:66:80:a0:04:9d:24:fc:cb:72:55:2f:a2: bf:f7:32:9d:d3:75:d5:a6:9f:9c:b2:10:ab:ca:5f:4f:03:2d: 54:e5:1f:7b:50:ac:01:cd:84:99:51:f5:11:fe:47:3c:7a:60: e8:a9:be:e0:26:d8:72:e5:80:94:8e:21:fa:6a:19:d0:fe:10: c2:e9:69:fa:0e:2b:c4:70:49:b2:b6:e7:4d:72:a3:5a:bf:c0: 8f:ee:97:1e:3e:8f:83:1b:ed:65:8a:62:d3:b1:6a:23:2c:25: 9a:b8:67:76 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yUOFz40hdY+URYRH1Nv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMmYwOWYyNjVlOWIyNzhmODA3M2Q2OTgyZmYxNzU3MTNh NWEwZmEwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGZhYzE2YzQ5ZTg1MjNhOTllNWNjZmI0ZmI2YjkxOTg1OTcwOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SnHRKS4946iT8TVNcfTn2+YF8w6 0g6kpI0AepWM2ODN0BJ3yNLVDE9iPX/NV5RiMMLO/p9U81QnNselc8YOm6QfQZ+y 0WV31qKkLzdZGwrCO3gRFSqKm3KJu5m7O6IfjYEPSJzP8DhzCkpCP/zwInFdQ7gy Clm9m5dJBZSihfzE2yZBNSN2+QV1MUy5vqebT98Sj5tfXAZEW7e73OeYSGlWi0ja ih3EE8J09D+bw5CBS0gfr78zRuvkHeuIO0dkHP+l2v8dQdVr85Mu7fklkiSG9cei hlyR4iIe9zW/+gXohaY8NqEqd/blMVroAHdN7hd+Mvl9tyUmZYd4RHVEqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFET6wWxJ6FI6meXM+0+2uRmFlwnDMB8GA1UdIwQY MBaAFDAvCfJl6bJ4+Ac9aYL/F1cTpaD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODct M2I1NWYyMzI3YjM0LzEvUlByQmJFbm9VanFaNWN6N1Q3YTVHWVdYQ2NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODctM2I1NWYyMzI3YjM0 LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2RmAMA0E AgACMAcDBQAqB/vAMA0GCSqGSIb3DQEBCwUAA4IBAQAzmGA4XCpiSQISgAtd85IK FhFjfFyo6T+Xbg6FLDf2hQEvufNoS83o8ZE5842UFp3Yawnx654d0DHTn/l9EcRP sxUoIcUqR0VXNWi1DIoM3pCdalpeASVNmHN8SPhIHMJTTmVmXoE892ZIodpuIxqx fnpaFC+T9NFD7GdYnP0w6ls3RKYZod6TyRD0iGBYH6bKZAe1AqFmgKAEnST8y3JV L6K/9zKd03XVpp+cshCryl9PAy1U5R97UKwBzYSZUfUR/kc8emDoqb7gJthy5YCU jiH6ahnQ/hDC6Wn6DivEcEmytudNcqNav8CP7pcePo+DG+1limLTsWojLCWauGd2 -----END CERTIFICATE-----Generated at Tue Jan 27 00:32:15 2026 by rpki-client