This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/17oHaVw15vTu8FodT6qyrGXdCE8.roa File: 17oHaVw15vTu8FodT6qyrGXdCE8.roa (raw, json) Hash identifier: 10x42+uM4gtVY1tlAyNsbOOZuz1R9hAtkwKa+UuU4Sc= Subject key identifier: D7:BA:07:69:5C:35:E6:F4:EE:F0:5A:1D:4F:AA:B2:AC:65:DD:08:4F Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EBB544713F74D4D15BBB2AD63AD2B Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/17oHaVw15vTu8FodT6qyrGXdCE8.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213545 IP address blocks: 2a0e:aa07:e220::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bb:54:47:13:f7:4d:4d:15:bb:b2:ad:63:ad:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7ba07695c35e6f4eef05a1d4faab2ac65dd084f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:30:1d:77:e3:60:d6:b0:12:88:fc:c5:bc: 65:f2:eb:49:ce:a3:cd:9c:08:c9:99:a6:08:57:7a: 24:e5:57:95:01:7e:0b:44:93:c1:85:e1:ba:b4:72: 04:99:b8:91:ef:a6:e2:ca:15:6f:f7:f6:bc:20:0c: 02:fd:10:c7:51:5a:ea:66:78:5b:e7:25:20:ff:fd: e5:8b:c2:1b:05:6a:42:85:28:f3:b2:21:9d:9d:88: eb:0e:a4:ba:41:9d:fc:13:c4:96:c3:fb:b5:96:08: ac:7c:75:c3:cc:bd:db:1c:53:52:6c:ae:49:45:d4: f9:8b:46:6b:6a:de:fe:2e:ad:ed:ab:94:e3:2a:65: 02:5c:5c:0b:ac:30:2e:09:33:05:09:c6:85:a6:1c: 6f:36:f2:94:a3:7d:94:57:6c:36:37:9f:6e:cf:18: f8:e2:b9:f0:09:cd:04:6d:7d:62:63:b0:a1:3a:60: d3:2d:b1:bf:6f:dc:df:bb:2c:21:f8:4a:51:f5:c6: b7:9b:47:07:bd:2d:94:ab:1e:e2:e3:9c:ef:97:52: 0f:a7:72:8c:3e:07:f6:d9:a2:d6:5d:18:cd:17:49: b0:81:71:78:b1:b7:7c:d3:05:14:8a:d0:14:1e:e8: 26:65:c2:a8:f7:e2:28:3c:c5:5f:30:4d:b8:9d:f1: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BA:07:69:5C:35:E6:F4:EE:F0:5A:1D:4F:AA:B2:AC:65:DD:08:4F X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/17oHaVw15vTu8FodT6qyrGXdCE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e220::/44 Signature Algorithm: sha256WithRSAEncryption 14:ee:0b:23:50:6e:70:a2:40:3b:5f:71:55:1c:8a:df:4e:02: 4e:aa:12:a6:7f:ee:18:88:4e:82:0d:a4:66:2e:ce:5c:5e:73: bb:88:25:88:d5:98:a6:3c:45:9e:0a:f4:f7:20:45:0e:cb:dd: 9e:f4:21:80:f5:ca:f1:2a:20:e6:37:7a:ef:34:d6:bd:b3:4e: 42:d6:86:66:1e:ac:f0:5b:d3:d5:8f:36:33:45:81:55:44:e6: a2:40:91:2c:7e:4a:1e:bf:9b:28:76:07:8c:b5:d3:f8:90:a5: ad:2c:f6:cf:46:67:a2:02:31:5f:e8:b5:e9:24:16:a9:ec:dd: a7:9c:bb:24:2c:80:f7:ba:6b:5e:a1:71:c9:69:ba:b9:80:81: d4:83:2a:68:ad:0e:ab:7c:8a:f7:58:9c:7c:c0:90:e7:ba:2a: 97:ed:15:6e:8e:e7:06:b1:96:34:a2:82:31:d4:05:04:0f:5f: 09:78:42:be:cf:fd:18:90:da:b9:1a:7e:15:82:9e:ac:b0:e6: 78:28:ad:80:44:63:e9:2c:02:21:88:9f:10:f8:dc:80:f9:e9: a2:84:1f:e7:6d:78:1b:41:f9:00:4b:77:90:73:0d:c2:24:bd: 1f:c2:33:6f:bd:c0:d5:20:d0:9e:d8:45:41:6e:a7:84:90:27: 54:e0:31:56 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frtURxP3TU0Vu7KtY60rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2JhMDc2OTVjMzVlNmY0ZWVmMDVhMWQ0ZmFhYjJhYzY1ZGQwODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm18wHXfjYNawEoj8xbxl8utJzqPN nAjJmaYIV3ok5VeVAX4LRJPBheG6tHIEmbiR76biyhVv9/a8IAwC/RDHUVrqZnhb 5yUg//3li8IbBWpChSjzsiGdnYjrDqS6QZ38E8SWw/u1lgisfHXDzL3bHFNSbK5J RdT5i0Zrat7+Lq3tq5TjKmUCXFwLrDAuCTMFCcaFphxvNvKUo32UV2w2N59uzxj4 4rnwCc0EbX1iY7ChOmDTLbG/b9zfuywh+EpR9ca3m0cHvS2Uqx7i45zvl1IPp3KM Pgf22aLWXRjNF0mwgXF4sbd80wUUitAUHugmZcKo9+IoPMVfME24nfGemwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNe6B2lcNeb07vBaHU+qsqxl3QhPMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvMTdvSGFWdzE1dlR1OEZvZFQ2cXlyR1hkQ0U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Ig MA0GCSqGSIb3DQEBCwUAA4IBAQAU7gsjUG5wokA7X3FVHIrfTgJOqhKmf+4YiE6C DaRmLs5cXnO7iCWI1ZimPEWeCvT3IEUOy92e9CGA9crxKiDmN3rvNNa9s05C1oZm HqzwW9PVjzYzRYFVROaiQJEsfkoev5sodgeMtdP4kKWtLPbPRmeiAjFf6LXpJBap 7N2nnLskLID3umteoXHJabq5gIHUgyporQ6rfIr3WJx8wJDnuiqX7RVujucGsZY0 ooIx1AUED18JeEK+z/0YkNq5Gn4Vgp6ssOZ4KK2ARGPpLAIhiJ8Q+NyA+emihB/n bXgbQfkAS3eQcw3CJL0fwjNvvcDVINCe2EVBbqeEkCdU4DFW -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:58 2026 by rpki-client