This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/CAjk9p0MVB2vqI7dUqStbLvNRqQ.roa File: CAjk9p0MVB2vqI7dUqStbLvNRqQ.roa (raw, json) Hash identifier: K8d2siBmN7Doa69Snhi8u6Ub+K1q5dqi4m4zGRBmJS4= Subject key identifier: 08:08:E4:F6:9D:0C:54:1D:AF:A8:8E:DD:52:A4:AD:6C:BB:CD:46:A4 Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e Certificate serial: 019B7C8059AA4F6115B5AC0D8644746A89DF Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/CAjk9p0MVB2vqI7dUqStbLvNRqQ.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43256 IP address blocks: 217.171.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:59:aa:4f:61:15:b5:ac:0d:86:44:74:6a:89:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0808e4f69d0c541dafa88edd52a4ad6cbbcd46a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e4:28:53:40:4e:a1:02:71:07:a4:de:0e:f0: a9:9d:2e:4e:a9:76:5f:17:ad:89:c8:e5:53:d7:ef: 41:35:bf:35:a4:d2:ee:49:62:01:47:5f:6a:9d:7c: 44:91:11:63:ea:aa:f8:3c:f1:e0:54:08:13:0a:f5: b9:d8:11:36:e3:ca:c7:a3:eb:2e:b1:8f:f3:d7:e5: 61:e7:12:f0:a6:52:36:1e:45:7a:dc:1d:4c:42:f1: 93:0f:5e:8c:ab:20:42:96:88:a6:ea:b7:b0:74:40: a0:72:44:ce:46:9f:3e:ed:9b:3b:ea:22:87:9a:7a: 14:db:60:fa:b9:6f:6c:3a:84:6c:14:ac:db:5e:3d: cd:7e:aa:e4:d7:d6:2a:b0:b8:c5:83:76:d3:67:50: 33:3b:ac:32:f4:ea:f0:d6:24:79:3a:bc:ce:5c:57: f2:70:81:01:42:2c:8b:c0:3d:98:5b:19:52:4b:10: 84:45:ae:73:67:b0:7e:d3:a1:92:3f:3a:2a:00:28: 6b:b6:d6:1c:ac:01:1d:e0:f8:dd:d0:a8:15:c3:51: d3:24:2a:67:b8:9b:92:67:39:65:7b:0a:78:3b:3e: a4:56:d9:54:7a:0a:b3:35:2f:2f:93:8f:f1:6e:5a: 8c:ad:84:66:ab:78:ca:87:d4:b6:07:a4:ef:d8:ca: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:08:E4:F6:9D:0C:54:1D:AF:A8:8E:DD:52:A4:AD:6C:BB:CD:46:A4 X509v3 Authority Key Identifier: keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/CAjk9p0MVB2vqI7dUqStbLvNRqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.171.91.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:bc:94:6d:d7:ad:2a:85:56:8d:ca:ea:33:1d:a0:86:9d:64: bf:ed:ea:bf:fa:75:a5:d2:88:d2:89:85:4d:2b:58:fd:cb:30: 45:28:8c:4f:31:90:db:55:85:63:2d:bd:28:8a:72:6f:86:83: f4:e9:b4:ef:6e:ba:8f:8a:f3:0a:1a:c2:69:71:2b:04:42:f9: fe:f2:d5:f9:5e:66:3a:38:06:41:8b:6a:f4:71:16:5f:e8:27: 02:df:a5:7f:f3:b5:0e:94:45:d8:86:64:cc:3f:63:54:58:a4: da:28:b3:99:e9:62:23:b5:64:81:14:fd:ac:80:df:9e:d4:30: 67:a1:c0:e8:98:18:b3:30:98:db:d7:7b:51:b1:d2:93:86:bb: 7d:69:e1:3c:10:70:6e:83:53:65:8b:20:2e:31:32:95:51:74: 0a:de:29:e3:35:8c:3c:eb:ad:3c:ee:b4:74:a8:9c:cb:e1:e0: 28:2b:d4:a3:7c:d3:d7:14:05:c9:e0:19:c5:16:0b:ed:c6:94: ed:7d:35:04:46:5a:8d:3f:d9:53:c0:f2:19:31:c9:8d:73:66: fb:9f:f4:61:ca:b8:23:d2:1c:94:5c:85:f0:54:e7:77:1f:3b: e3:f4:5f:5c:8a:ec:d0:ac:a5:ca:7f:a4:66:89:38:25:7d:4a: 5d:42:85:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFmqT2EVtawNhkR0aonfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmMxNDM4ZWUwODE1YTliZjhiNzNmOWE3Y2VkMDk0ZjIx YWM3OWUwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODA4ZTRmNjlkMGM1NDFkYWZhODhlZGQ1MmE0YWQ2Y2JiY2Q0NmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OQoU0BOoQJxB6TeDvCpnS5OqXZf F62JyOVT1+9BNb81pNLuSWIBR19qnXxEkRFj6qr4PPHgVAgTCvW52BE248rHo+su sY/z1+Vh5xLwplI2HkV63B1MQvGTD16MqyBCloim6rewdECgckTORp8+7Zs76iKH mnoU22D6uW9sOoRsFKzbXj3Nfqrk19YqsLjFg3bTZ1AzO6wy9Orw1iR5OrzOXFfy cIEBQiyLwD2YWxlSSxCERa5zZ7B+06GSPzoqAChrttYcrAEd4Pjd0KgVw1HTJCpn uJuSZzllewp4Oz6kVtlUegqzNS8vk4/xblqMrYRmq3jKh9S2B6Tv2MrBeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgI5PadDFQdr6iO3VKkrWy7zUakMB8GA1UdIwQY MBaAFG38FDjuCBWpv4tz+afO0JTyGseeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEt ZDY0Njc2N2M1ZjEzLzEvQ0FqazlwME1WQjJ2cUk3ZFVxU3RiTHZOUnFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEtZDY0Njc2N2M1ZjEz LzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2atbMA0G CSqGSIb3DQEBCwUAA4IBAQBvvJRt160qhVaNyuozHaCGnWS/7eq/+nWl0ojSiYVN K1j9yzBFKIxPMZDbVYVjLb0oinJvhoP06bTvbrqPivMKGsJpcSsEQvn+8tX5XmY6 OAZBi2r0cRZf6CcC36V/87UOlEXYhmTMP2NUWKTaKLOZ6WIjtWSBFP2sgN+e1DBn ocDomBizMJjb13tRsdKThrt9aeE8EHBug1NliyAuMTKVUXQK3injNYw866087rR0 qJzL4eAoK9SjfNPXFAXJ4BnFFgvtxpTtfTUERlqNP9lTwPIZMcmNc2b7n/Rhyrgj 0hyUXIXwVOd3Hzvj9F9ciuzQrKXKf6RmiTglfUpdQoUS -----END CERTIFICATE-----Generated at Tue Feb 10 06:23:34 2026 by rpki-client