This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/n7Dw6icACfBipEhkaIogX-wY52w.roa File: n7Dw6icACfBipEhkaIogX-wY52w.roa (raw, json) Hash identifier: P+dC8HLZOUnfDl935Jh3dgCSKojKDZFGpOJSrbj10Z4= Subject key identifier: 9F:B0:F0:EA:27:00:09:F0:62:A4:48:64:68:8A:20:5F:EC:18:E7:6C Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83973E7FDF3DA0B94C994DBFB864A0 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/n7Dw6icACfBipEhkaIogX-wY52w.roa Signing time: Fri 02 Jan 2026 16:21:28 +0000 ROA not before: Fri 02 Jan 2026 16:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3216 IP address blocks: 141.101.217.0/24 maxlen: 24 141.101.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:97:3e:7f:df:3d:a0:b9:4c:99:4d:bf:b8:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fb0f0ea270009f062a44864688a205fec18e76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:e8:35:8f:f1:89:e5:39:4a:2d:37:b8:dc: 15:96:66:19:cf:d4:f8:b3:14:92:f9:57:16:e1:db: 6d:1d:4c:e5:bf:79:98:63:a7:9a:5c:57:40:08:38: c6:64:67:63:72:55:7d:f9:39:71:c1:06:f2:fa:4a: b8:98:97:b6:20:b5:be:10:fb:b6:a4:cd:26:fc:83: d9:44:5f:78:d3:3a:4e:3f:0a:c9:92:98:4c:40:a1: cb:b8:11:6e:45:2a:02:c2:38:4e:27:68:7e:6f:17: 13:1c:98:21:fb:74:7e:1f:8d:1f:99:56:f7:f3:9c: d6:e3:74:4b:92:e1:69:19:d9:94:6a:7c:cc:29:23: d2:c7:77:80:ab:63:17:92:5a:0c:f6:4c:91:f0:e7: 5f:e0:9c:c8:8a:81:40:4d:38:ac:b2:2e:ad:8c:6b: 7d:86:da:85:b8:88:62:ca:0b:1b:0f:eb:8d:23:73: 5e:2d:f0:65:09:26:12:70:8b:48:af:13:c8:5b:b4: b8:63:19:b6:63:b8:5e:46:00:7d:76:ee:58:57:15: ec:4c:b6:45:92:91:e9:9f:ef:54:58:60:b9:5d:ed: ea:8e:d4:6e:80:e7:93:dc:2e:92:c1:c9:9e:fc:07: 9b:15:5e:77:4a:ce:ae:0a:00:b9:dd:39:80:d8:d5: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B0:F0:EA:27:00:09:F0:62:A4:48:64:68:8A:20:5F:EC:18:E7:6C X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/n7Dw6icACfBipEhkaIogX-wY52w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.101.217.0-141.101.219.255 Signature Algorithm: sha256WithRSAEncryption 99:51:33:b8:29:eb:80:c3:78:c7:85:61:bb:ae:5b:2c:25:c1: 9b:a6:57:e7:a6:48:51:83:d7:9b:4a:ee:19:01:f5:8e:c5:08: 2d:b5:ab:6a:8c:9c:75:31:9d:f6:fb:6f:1b:86:a0:57:7a:36: 3c:7e:54:cc:4f:63:5b:dc:33:1a:61:8b:5f:6e:c9:49:e6:03: a8:2d:4a:d0:46:ee:c6:70:96:7a:50:69:0f:31:d6:7b:4d:74: a9:01:3d:6f:b1:b4:f5:ce:3c:bf:b6:b1:7d:9c:36:07:e9:67: d0:9f:c7:c2:2c:c0:ac:18:46:5d:dc:76:03:1c:0d:5d:78:01: cd:18:a1:85:a9:f3:c0:1c:5d:e2:97:36:36:df:97:e3:16:b8: 1b:e8:00:ac:e8:12:25:e8:33:0f:41:e8:af:e5:79:d6:62:5e: aa:e9:26:61:b3:01:41:ea:54:2f:a0:d4:e2:c8:78:4e:da:fa: 01:84:6e:a0:e1:4c:3b:40:1d:c4:c3:06:49:9c:20:e0:5b:23: 48:d1:16:e5:1c:fb:3f:16:9b:c2:93:30:fc:a2:5d:9c:e0:1f: 2b:fb:f9:02:47:1c:95:82:7e:81:f5:7f:0c:c6:fb:e0:2d:a6: 77:d9:91:11:b1:75:53:91:68:76:d6:3a:db:f0:c6:b0:a6:0a: 70:56:72:c2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/g5c+f989oLlMmU2/uGSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmIwZjBlYTI3MDAwOWYwNjJhNDQ4NjQ2ODhhMjA1ZmVjMThlNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSHoNY/xieU5Si03uNwVlmYZz9T4 sxSS+VcW4dttHUzlv3mYY6eaXFdACDjGZGdjclV9+TlxwQby+kq4mJe2ILW+EPu2 pM0m/IPZRF940zpOPwrJkphMQKHLuBFuRSoCwjhOJ2h+bxcTHJgh+3R+H40fmVb3 85zW43RLkuFpGdmUanzMKSPSx3eAq2MXkloM9kyR8Odf4JzIioFATTissi6tjGt9 htqFuIhiygsbD+uNI3NeLfBlCSYScItIrxPIW7S4Yxm2Y7heRgB9du5YVxXsTLZF kpHpn+9UWGC5Xe3qjtRugOeT3C6Swcme/AebFV53Ss6uCgC53TmA2NXF7QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJ+w8OonAAnwYqRIZGiKIF/sGOdsMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvbjdEdzZpY0FDZkJpcEVoa2FJb2dYLXdZNTJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACNZdkD BAKNZdgwDQYJKoZIhvcNAQELBQADggEBAJlRM7gp64DDeMeFYbuuWywlwZumV+em SFGD15tK7hkB9Y7FCC21q2qMnHUxnfb7bxuGoFd6Njx+VMxPY1vcMxphi19uyUnm A6gtStBG7sZwlnpQaQ8x1ntNdKkBPW+xtPXOPL+2sX2cNgfpZ9Cfx8IswKwYRl3c dgMcDV14Ac0YoYWp88AcXeKXNjbfl+MWuBvoAKzoEiXoMw9B6K/ledZiXqrpJmGz AUHqVC+g1OLIeE7a+gGEbqDhTDtAHcTDBkmcIOBbI0jRFuUc+z8Wm8KTMPyiXZzg Hyv7+QJHHJWCfoH1fwzG++AtpnfZkRGxdVORaHbWOtvwxrCmCnBWcsI= -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:35 2026 by rpki-client