This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/2417X7FoOqz6CeouHbdWxlmT2oc.roa File: 2417X7FoOqz6CeouHbdWxlmT2oc.roa (raw, json) Hash identifier: 2RqyI1mU42Ad8DLLnv9aYk4kIOqsmsu61g8bfpa34DU= Subject key identifier: DB:8D:7B:5F:B1:68:3A:AC:FA:09:EA:2E:1D:B7:56:C6:59:93:DA:87 Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B36A27916790343A38C14771E958D35 Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/2417X7FoOqz6CeouHbdWxlmT2oc.roa Signing time: Thu 01 Jan 2026 20:18:56 +0000 ROA not before: Thu 01 Jan 2026 20:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 85.203.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 05:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a2:79:16:79:03:43:a3:8c:14:77:1e:95:8d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db8d7b5fb1683aacfa09ea2e1db756c65993da87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:c9:ff:48:8f:0a:6d:23:74:f2:e3:2d:3b: 4f:b8:e2:19:f5:9f:d8:34:a0:ec:74:ba:2e:2c:c7: d5:70:dd:1c:71:ca:dd:ed:ff:c6:f4:39:75:8e:65: d8:c6:9f:a4:bb:07:c7:f1:85:d2:11:a8:75:bd:e0: fc:34:4a:48:95:14:50:3e:2e:38:cf:88:5f:b9:be: b9:79:62:25:62:1f:38:82:1f:3b:fc:6a:ab:56:1d: f6:7c:21:46:28:3f:f3:a3:e6:54:02:a7:c2:70:a5: 0e:e5:22:f5:0a:55:a7:68:b5:40:d6:ac:12:40:26: 52:28:81:27:cd:d9:e5:d6:b1:15:2d:4f:76:ee:cc: 54:eb:1f:ab:69:3f:6b:fd:41:fb:37:ce:5d:8c:43: 59:48:40:75:c3:e3:33:09:da:03:6c:03:bc:d1:c0: 28:e1:1c:7c:3e:33:94:2a:84:b6:1a:ce:be:1a:32: cd:58:4d:01:e4:60:ab:e8:49:8d:95:7e:4c:d1:cb: 2b:38:c1:34:d6:71:f3:f1:fd:15:c7:cc:c5:af:c8: 2a:c4:a7:06:98:67:e8:c5:61:d3:40:01:d3:5e:74: a4:a4:8c:37:fa:d4:91:fb:9b:de:e2:e8:f5:f4:62: 76:b1:3e:a2:16:b0:22:b3:a7:c2:69:ec:f0:d0:12: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8D:7B:5F:B1:68:3A:AC:FA:09:EA:2E:1D:B7:56:C6:59:93:DA:87 X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/2417X7FoOqz6CeouHbdWxlmT2oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.40.0/22 Signature Algorithm: sha256WithRSAEncryption 57:69:d5:6d:6d:9a:eb:1e:29:ab:ce:33:e5:02:64:06:44:a7: 35:fd:a3:13:74:8d:d7:70:c0:3c:c4:b8:34:e9:9b:f0:98:35: 55:80:00:6b:d8:25:d7:1c:41:5f:c3:03:f8:13:0c:b3:f2:60: 4d:57:b1:be:bf:28:01:78:18:b9:17:65:9b:c0:8d:b0:98:c3: e7:77:9d:8c:d3:69:89:a1:a7:37:22:09:40:19:49:76:0d:14: 0c:71:df:b4:d0:0f:25:a2:14:a2:84:da:7b:16:70:c5:fc:5a: 43:79:b6:95:53:de:f3:14:5a:e0:89:a2:0e:a8:77:f1:e6:17: 9e:42:c6:9f:fb:5a:d2:f2:cd:e0:e5:e7:94:b9:57:f2:40:27: 2e:56:ba:0a:02:a5:a3:94:ce:28:fb:3a:7d:1c:82:9d:0b:9b: 31:cb:f6:dc:04:fc:3c:5f:ba:a4:d2:33:13:6e:4e:a4:99:bf: cf:bf:bd:0c:0d:b5:d0:e1:e5:f8:bc:9f:b7:65:68:7b:ec:fc: b7:3e:2c:2a:d5:44:f3:73:d5:82:45:10:0a:25:61:65:67:a3: 51:1d:7f:ad:48:1f:49:5c:08:b6:d4:67:4b:27:58:29:c8:82: 2a:ee:03:fb:e1:ac:fb:19:d3:6c:e4:a3:32:11:72:0e:e2:5f: a2:36:74:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqJ5FnkDQ6OMFHcelY01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjhkN2I1ZmIxNjgzYWFjZmEwOWVhMmUxZGI3NTZjNjU5OTNkYTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv17J/0iPCm0jdPLjLTtPuOIZ9Z/Y NKDsdLouLMfVcN0cccrd7f/G9Dl1jmXYxp+kuwfH8YXSEah1veD8NEpIlRRQPi44 z4hfub65eWIlYh84gh87/GqrVh32fCFGKD/zo+ZUAqfCcKUO5SL1ClWnaLVA1qwS QCZSKIEnzdnl1rEVLU927sxU6x+raT9r/UH7N85djENZSEB1w+MzCdoDbAO80cAo 4Rx8PjOUKoS2Gs6+GjLNWE0B5GCr6EmNlX5M0csrOME01nHz8f0Vx8zFr8gqxKcG mGfoxWHTQAHTXnSkpIw3+tSR+5ve4uj19GJ2sT6iFrAis6fCaezw0BIURQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNuNe1+xaDqs+gnqLh23VsZZk9qHMB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvMjQxN1g3Rm9PcXo2Q2VvdUhiZFd4bG1UMm9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVcsoMA0G CSqGSIb3DQEBCwUAA4IBAQBXadVtbZrrHimrzjPlAmQGRKc1/aMTdI3XcMA8xLg0 6ZvwmDVVgABr2CXXHEFfwwP4Ewyz8mBNV7G+vygBeBi5F2WbwI2wmMPnd52M02mJ oac3IglAGUl2DRQMcd+00A8lohSihNp7FnDF/FpDebaVU97zFFrgiaIOqHfx5hee Qsaf+1rS8s3g5eeUuVfyQCcuVroKAqWjlM4o+zp9HIKdC5sxy/bcBPw8X7qk0jMT bk6kmb/Pv70MDbXQ4eX4vJ+3ZWh77Py3Piwq1UTzc9WCRRAKJWFlZ6NRHX+tSB9J XAi21GdLJ1gpyIIq7gP74az7GdNs5KMyEXIO4l+iNnTX -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:36 2026 by rpki-client