This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/_No3AaXXRlHLcpFNSmUWopTAJdg.roa File: _No3AaXXRlHLcpFNSmUWopTAJdg.roa (raw, json) Hash identifier: EJSEOoxCaCh+aZvxqJVPw2pAxsLbMiGabHj8Ve+PjSE= Subject key identifier: FC:DA:37:01:A5:D7:46:51:CB:72:91:4D:4A:65:16:A2:94:C0:25:D8 Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa Certificate serial: 019B7AC942ACE3B77CF22E1C3FFEF31D649B Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/_No3AaXXRlHLcpFNSmUWopTAJdg.roa Signing time: Thu 01 Jan 2026 18:19:28 +0000 ROA not before: Thu 01 Jan 2026 18:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 217.25.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:42:ac:e3:b7:7c:f2:2e:1c:3f:fe:f3:1d:64:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcda3701a5d74651cb72914d4a6516a294c025d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:99:2b:5a:82:53:28:7a:5d:b5:0e:db:bc: 8a:32:e7:a7:48:b9:83:04:38:a0:36:03:43:06:de: 42:79:08:5d:fe:14:1e:0b:a3:a8:78:6d:ec:fe:22: dc:2b:d8:c3:8c:8a:46:03:c3:26:0d:40:ce:06:93: 2f:b8:b1:dd:c7:b9:56:e7:9b:9f:2b:86:5d:c3:0b: 56:83:8d:61:8a:87:0e:0c:a2:66:e4:3c:b4:b9:40: 07:18:4e:f0:72:ec:f7:7a:d5:78:39:36:d4:64:c5: 57:8c:49:fe:de:5e:2c:51:1e:09:62:ca:06:15:40: 16:36:9c:7e:b5:5f:ab:27:71:19:5a:1d:f2:fb:b6: 77:aa:31:3e:ac:49:f5:ae:05:32:16:8f:8c:22:ab: 33:a8:67:ae:31:89:e7:d7:20:25:95:93:82:e3:f7: f5:2c:02:d5:80:b7:ae:f5:6f:d5:3f:b2:1d:9b:06: 16:cb:b3:a7:c8:e6:77:12:09:6e:89:9d:98:a2:04: 45:b9:a8:5d:7d:0a:cd:e0:8f:db:2f:ca:45:17:ec: dc:af:17:70:8a:63:9a:f0:00:63:25:76:48:57:62: 0a:f8:e0:ff:1a:a9:78:07:fe:bc:02:40:c9:6d:69: d6:16:05:e7:e0:40:ee:c5:63:5f:cc:44:c7:4a:6e: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DA:37:01:A5:D7:46:51:CB:72:91:4D:4A:65:16:A2:94:C0:25:D8 X509v3 Authority Key Identifier: keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/_No3AaXXRlHLcpFNSmUWopTAJdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.25.137.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:ce:8e:72:82:cb:6a:83:c2:17:7e:89:67:fe:a6:3b:cc:3b: 69:68:8c:54:3a:f1:a6:8b:c6:68:ae:00:1e:52:2a:1c:03:ab: 86:d1:6e:6b:fe:89:f9:84:4c:e9:68:99:65:14:3c:87:8d:a3: 9a:ba:68:15:43:fa:66:50:e5:41:cd:7e:38:41:91:f9:49:28: 80:8e:37:e8:ca:25:55:43:d6:c6:f6:b2:eb:ba:b3:ab:3d:db: 21:b6:50:79:e4:99:27:a7:f0:8c:bf:cd:26:59:31:9a:51:97: 54:87:08:38:fa:a6:71:ef:c8:9f:92:05:92:c5:b6:d6:d2:5a: 49:22:bc:d0:07:52:47:2f:73:a9:11:c0:37:46:cb:5d:ba:1d: ff:72:8c:f0:96:58:a2:cf:81:55:f4:dc:c9:63:34:65:5e:58: 49:b5:22:ed:d6:23:17:c0:dd:cd:b8:a2:b9:0a:35:c1:c3:5f: 5e:27:51:4b:eb:15:f4:7c:42:49:9c:08:e5:2b:af:c7:ca:d8: 71:a9:4b:89:22:f8:52:dc:93:46:6c:4e:db:78:97:d3:01:d1: 78:bb:4a:ec:b8:d7:74:24:27:fe:45:41:13:b9:fa:3f:4c:fd: 14:8b:cc:7f:4c:a8:54:c8:4c:9d:aa:d1:c2:07:3b:9a:56:0b: 98:11:d2:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUKs47d88i4cP/7zHWSbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMmYwOWYyNjVlOWIyNzhmODA3M2Q2OTgyZmYxNzU3MTNh NWEwZmEwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2RhMzcwMWE1ZDc0NjUxY2I3MjkxNGQ0YTY1MTZhMjk0YzAyNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY6ZK1qCUyh6XbUO27yKMuenSLmD BDigNgNDBt5CeQhd/hQeC6OoeG3s/iLcK9jDjIpGA8MmDUDOBpMvuLHdx7lW55uf K4ZdwwtWg41hiocODKJm5Dy0uUAHGE7wcuz3etV4OTbUZMVXjEn+3l4sUR4JYsoG FUAWNpx+tV+rJ3EZWh3y+7Z3qjE+rEn1rgUyFo+MIqszqGeuMYnn1yAllZOC4/f1 LALVgLeu9W/VP7IdmwYWy7OnyOZ3EgluiZ2YogRFuahdfQrN4I/bL8pFF+zcrxdw imOa8ABjJXZIV2IK+OD/Gql4B/68AkDJbWnWFgXn4EDuxWNfzETHSm5RFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPzaNwGl10ZRy3KRTUplFqKUwCXYMB8GA1UdIwQY MBaAFDAvCfJl6bJ4+Ac9aYL/F1cTpaD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODct M2I1NWYyMzI3YjM0LzEvX05vM0FhWFhSbEhMY3BGTlNtVVdvcFRBSmRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODctM2I1NWYyMzI3YjM0 LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RmJMA0G CSqGSIb3DQEBCwUAA4IBAQAPzo5ygstqg8IXfoln/qY7zDtpaIxUOvGmi8ZorgAe UiocA6uG0W5r/on5hEzpaJllFDyHjaOaumgVQ/pmUOVBzX44QZH5SSiAjjfoyiVV Q9bG9rLrurOrPdshtlB55Jknp/CMv80mWTGaUZdUhwg4+qZx78ifkgWSxbbW0lpJ IrzQB1JHL3OpEcA3Rstduh3/cozwlliiz4FV9NzJYzRlXlhJtSLt1iMXwN3NuKK5 CjXBw19eJ1FL6xX0fEJJnAjlK6/HythxqUuJIvhS3JNGbE7beJfTAdF4u0rsuNd0 JCf+RUETufo/TP0Ui8x/TKhUyEydqtHCBzuaVguYEdLm -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:27 2026 by rpki-client