This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/sJ7rRhlozSopUwn3kZQ6qS2Lj3A.roa File: sJ7rRhlozSopUwn3kZQ6qS2Lj3A.roa (raw, json) Hash identifier: 69ARsnQbQaHuHkyGiqTvn8kIeud2aA9Y9jgyLsbYA4k= Subject key identifier: B0:9E:EB:46:19:68:CD:2A:29:53:09:F7:91:94:3A:A9:2D:8B:8F:70 Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Certificate serial: 019B775906F70C7FE51F41381C3F7A8E9159 Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/sJ7rRhlozSopUwn3kZQ6qS2Lj3A.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198735 IP address blocks: 217.145.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 20:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:06:f7:0c:7f:e5:1f:41:38:1c:3f:7a:8e:91:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b09eeb461968cd2a295309f791943aa92d8b8f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:29:b0:13:6c:04:4a:3b:72:5d:6a:73:98: 18:94:5d:02:5d:5a:38:17:d1:2a:e6:db:82:bb:ea: 05:72:19:aa:cc:f7:01:56:b5:e8:f1:b9:dd:52:03: fb:3a:9f:1b:6e:ba:82:73:b3:2c:d6:82:28:61:5e: dd:d8:84:39:57:7b:60:4a:4a:9d:6e:67:e9:81:81: 59:31:ef:ec:5d:2d:07:0d:44:c8:b9:0e:c2:df:66: e6:57:96:60:bc:74:30:97:f7:bc:04:7d:c5:de:0e: 7f:b8:6a:de:24:71:91:1e:01:ca:14:d1:fb:0c:9e: ba:d6:a5:80:23:4e:31:c5:be:63:78:ef:4e:9d:96: 06:22:55:c8:b8:56:0e:6f:1f:ad:08:11:af:d4:d7: 3f:8d:e0:44:9c:3c:82:65:b9:51:72:99:68:89:ef: 3e:e1:bd:5c:50:89:1d:a1:fc:b0:bc:11:27:e3:01: a7:f8:c1:f8:19:c7:b8:1f:bf:9d:0b:56:51:f9:d3: df:05:6c:e6:92:a2:65:80:b7:f7:9a:8a:f8:81:35: 4c:54:84:d6:cc:26:af:fa:61:5d:81:8c:c8:f4:f7: a6:98:b8:00:27:ad:1e:70:9e:b8:60:cf:c5:8a:ab: 66:68:0a:62:5a:41:28:ef:2b:f8:64:b7:57:b6:bb: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9E:EB:46:19:68:CD:2A:29:53:09:F7:91:94:3A:A9:2D:8B:8F:70 X509v3 Authority Key Identifier: keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/sJ7rRhlozSopUwn3kZQ6qS2Lj3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.231.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:57:06:59:96:27:f0:8d:07:33:e0:4d:70:8a:66:46:66:27: 97:62:64:5f:81:5f:e4:19:01:a7:e1:93:99:43:a6:1c:81:dc: 28:a5:45:0e:6e:44:a0:b3:31:82:d7:99:04:b4:4e:c5:7a:82: 39:8a:c9:42:12:f4:bd:b7:95:e5:0c:2f:39:f5:7c:c3:dd:ec: 9f:24:d6:61:24:56:e8:5a:6d:2e:8a:bd:08:eb:a2:36:d3:fa: c5:06:cb:d0:11:8f:23:43:3f:b0:86:df:58:12:0e:bb:10:7c: 21:01:ce:a1:09:99:80:d9:5c:81:e8:aa:65:e3:cf:b2:59:ce: fd:91:f5:20:7e:f6:d1:de:9f:c1:ef:c0:0a:72:41:2b:ae:2a: 7c:6f:13:47:34:c4:47:ea:e0:52:b4:0e:b4:8a:ca:08:ba:ae: 46:f5:f4:66:e1:fb:b8:e7:9e:90:78:c8:30:62:72:02:a4:0e: c3:44:31:7d:59:2c:e4:04:c5:cc:e9:37:eb:86:99:b7:cc:26: a4:44:89:78:e4:7a:9d:d3:96:7b:0a:d5:b4:90:90:69:06:02: b9:b8:40:0f:57:e7:5a:1a:62:8a:87:b4:20:09:2f:bb:37:f6: a8:c1:68:e1:3c:b2:49:3f:c3:7c:59:ff:cc:d6:be:50:31:34: 39:5a:1e:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQb3DH/lH0E4HD96jpFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMjhjZmEzZmQyZGE5Y2FhYTY1OTI4NDc1OGRlZTY3MDk5 OTM0ZjgwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDllZWI0NjE5NjhjZDJhMjk1MzA5Zjc5MTk0M2FhOTJkOGI4ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppgpsBNsBEo7cl1qc5gYlF0CXVo4 F9Eq5tuCu+oFchmqzPcBVrXo8bndUgP7Op8bbrqCc7Ms1oIoYV7d2IQ5V3tgSkqd bmfpgYFZMe/sXS0HDUTIuQ7C32bmV5ZgvHQwl/e8BH3F3g5/uGreJHGRHgHKFNH7 DJ661qWAI04xxb5jeO9OnZYGIlXIuFYObx+tCBGv1Nc/jeBEnDyCZblRcploie8+ 4b1cUIkdofywvBEn4wGn+MH4Gce4H7+dC1ZR+dPfBWzmkqJlgLf3mor4gTVMVITW zCav+mFdgYzI9PemmLgAJ60ecJ64YM/FiqtmaApiWkEo7yv4ZLdXtrv7bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLCe60YZaM0qKVMJ95GUOqkti49wMB8GA1UdIwQY MBaAFC0oz6P9LanKqmWShHWN7mcJmTT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEt M2FkNTJlOGI5NjI4LzEvc0o3clJobG96U29wVXduM2taUTZxUzJMajNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEtM2FkNTJlOGI5NjI4 LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZHnMA0G CSqGSIb3DQEBCwUAA4IBAQAfVwZZlifwjQcz4E1wimZGZieXYmRfgV/kGQGn4ZOZ Q6YcgdwopUUObkSgszGC15kEtE7FeoI5islCEvS9t5XlDC859XzD3eyfJNZhJFbo Wm0uir0I66I20/rFBsvQEY8jQz+wht9YEg67EHwhAc6hCZmA2VyB6Kpl48+yWc79 kfUgfvbR3p/B78AKckErrip8bxNHNMRH6uBStA60isoIuq5G9fRm4fu4556QeMgw YnICpA7DRDF9WSzkBMXM6Tfrhpm3zCakRIl45Hqd05Z7CtW0kJBpBgK5uEAPV+da GmKKh7QgCS+7N/aowWjhPLJJP8N8Wf/M1r5QMTQ5Wh7Y -----END CERTIFICATE-----Generated at Thu Jan 29 06:15:49 2026 by rpki-client