This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/fU0ZyKezfFg3A0ASimWS_vDf2Ag.roa File: fU0ZyKezfFg3A0ASimWS_vDf2Ag.roa (raw, json) Hash identifier: WGVPl1NHnlzzsePSOzjj+Gl8SDY0jb2m343GSbYT0V4= Subject key identifier: 7D:4D:19:C8:A7:B3:7C:58:37:03:40:12:8A:65:92:FE:F0:DF:D8:08 Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Certificate serial: 019B7D5BE7989079BACCA068EE764F9D289E Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/fU0ZyKezfFg3A0ASimWS_vDf2Ag.roa Signing time: Fri 02 Jan 2026 06:18:53 +0000 ROA not before: Fri 02 Jan 2026 06:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206844 IP address blocks: 171.22.244.0/24 maxlen: 24 171.22.245.0/24 maxlen: 24 171.22.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e7:98:90:79:ba:cc:a0:68:ee:76:4f:9d:28:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Validity Not Before: Jan 2 06:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d4d19c8a7b37c58370340128a6592fef0dfd808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:82:7e:67:94:28:4c:4f:52:a4:32:fd:d3: 55:de:55:10:28:eb:e4:18:df:d3:b8:ad:e1:9b:19: 40:7e:6a:8c:c7:24:e4:4a:5e:ca:8b:4f:bd:00:72: 51:22:2d:da:a6:19:cb:95:e8:f1:fe:08:49:43:79: d9:b5:8a:88:45:7f:6c:95:47:7d:d5:88:40:ba:b2: 34:42:1b:e6:95:09:03:b5:53:05:3a:47:30:24:69: de:30:41:a3:99:87:72:53:99:cc:89:35:69:f2:77: 6f:80:81:c1:68:6d:58:7a:86:42:05:7b:34:d9:02: df:68:fc:80:4c:e0:de:db:47:9c:14:78:1b:91:d4: 11:c6:f9:5b:13:9f:d9:6f:3f:5f:1b:50:59:dc:b5: 78:6b:17:f9:68:a2:6a:6b:f3:77:15:ff:3e:f1:9d: 44:fa:11:1c:38:aa:06:29:bf:10:d5:d1:da:9f:aa: b5:2f:ff:b9:cf:5a:1a:88:06:f7:56:b5:c8:57:ac: 9f:b4:ed:35:e2:aa:1e:65:d5:17:37:26:2a:ab:b6: a7:ab:fc:dc:a5:a3:fc:dc:5f:81:54:da:66:f8:7c: 71:2f:82:43:57:32:cd:10:a7:4e:59:a6:83:09:ef: aa:6e:d8:5a:d0:8e:c4:a6:29:d8:c6:8c:52:b7:8e: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4D:19:C8:A7:B3:7C:58:37:03:40:12:8A:65:92:FE:F0:DF:D8:08 X509v3 Authority Key Identifier: keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/fU0ZyKezfFg3A0ASimWS_vDf2Ag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.244.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:9c:b7:d5:06:80:c2:ca:82:93:90:1b:c2:09:27:ac:61:4c: 33:01:cb:f6:9b:99:15:a2:52:de:ef:09:69:02:e2:fe:c7:39: 83:1f:b7:de:0e:95:af:5e:26:ee:fa:cc:9c:6d:53:06:53:12: 7c:f8:ee:d4:03:2e:4f:d4:c7:92:62:a0:92:0b:f4:36:1b:05: de:fc:1b:39:89:32:fc:1a:5d:f3:96:80:71:cf:13:6a:71:b2: 53:a8:e4:8d:7e:38:1b:2b:05:82:49:5e:d4:0c:da:84:2f:99: d0:4f:0d:7f:69:97:1b:72:f6:39:0c:0e:74:c4:8f:1b:cb:34: 31:1b:e7:14:20:58:c2:fd:cb:d2:86:3d:24:76:67:37:7d:bf: 86:ca:36:24:7e:5d:c5:a8:a8:6e:21:fd:9d:5c:4a:99:ca:27: f1:ed:01:ab:d5:d5:3b:f7:8f:59:77:96:e6:a1:f0:43:e6:54: 05:58:eb:42:98:38:ad:57:18:8f:b9:d3:f8:7c:48:cf:30:e5: 25:3d:97:ae:89:ca:86:cd:2b:1d:3b:f5:b1:ae:9c:b1:05:de: 6d:18:69:ae:65:04:53:41:d5:06:fc:58:51:79:98:86:4e:e8: 99:b3:71:6c:6a:d2:48:37:c1:8a:ff:15:30:1c:6c:80:c8:ea: 74:2e:ac:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W+eYkHm6zKBo7nZPnSieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk NDBkYzYwHhcNMjYwMTAyMDYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDRkMTljOGE3YjM3YzU4MzcwMzQwMTI4YTY1OTJmZWYwZGZkODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuKCfmeUKExPUqQy/dNV3lUQKOvk GN/TuK3hmxlAfmqMxyTkSl7Ki0+9AHJRIi3aphnLlejx/ghJQ3nZtYqIRX9slUd9 1YhAurI0QhvmlQkDtVMFOkcwJGneMEGjmYdyU5nMiTVp8ndvgIHBaG1YeoZCBXs0 2QLfaPyATODe20ecFHgbkdQRxvlbE5/Zbz9fG1BZ3LV4axf5aKJqa/N3Ff8+8Z1E +hEcOKoGKb8Q1dHan6q1L/+5z1oaiAb3VrXIV6yftO014qoeZdUXNyYqq7anq/zc paP83F+BVNpm+HxxL4JDVzLNEKdOWaaDCe+qbtha0I7EpinYxoxSt47o3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1NGcins3xYNwNAEoplkv7w39gIMB8GA1UdIwQY MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt ZjJjNzkyMmZhZjMyLzEvZlUwWnlLZXpmRmczQTBBU2ltV1NfdkRmMkFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqxb0MA0G CSqGSIb3DQEBCwUAA4IBAQBPnLfVBoDCyoKTkBvCCSesYUwzAcv2m5kVolLe7wlp AuL+xzmDH7feDpWvXibu+sycbVMGUxJ8+O7UAy5P1MeSYqCSC/Q2GwXe/Bs5iTL8 Gl3zloBxzxNqcbJTqOSNfjgbKwWCSV7UDNqEL5nQTw1/aZcbcvY5DA50xI8byzQx G+cUIFjC/cvShj0kdmc3fb+GyjYkfl3FqKhuIf2dXEqZyifx7QGr1dU7949Zd5bm ofBD5lQFWOtCmDitVxiPudP4fEjPMOUlPZeuicqGzSsdO/WxrpyxBd5tGGmuZQRT QdUG/FhReZiGTuiZs3FsatJIN8GK/xUwHGyAyOp0Lqx1 -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:12 2026 by rpki-client