This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/m45yjB9heCQgWbdWEVZCVnmp6X4.roa File: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (raw, json) Hash identifier: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk= Subject key identifier: 9B:8E:72:8C:1F:61:78:24:20:59:B7:56:11:56:42:56:79:A9:E9:7E Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Certificate serial: 019B79104FD9C310DFF4405BEFBE06106450 Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/m45yjB9heCQgWbdWEVZCVnmp6X4.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208732 IP address blocks: 217.11.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4f:d9:c3:10:df:f4:40:5b:ef:be:06:10:64:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b8e728c1f6178242059b7561156425679a9e97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:11:af:07:a3:9b:85:92:be:2c:72:e7:a5: 0f:2b:c4:ac:a3:cf:26:77:97:16:20:d9:a2:fb:9e: e4:23:68:78:5e:c9:ce:f4:50:10:4c:fb:0c:8b:bf: 01:c7:de:8d:5d:36:d7:2d:c6:c5:4f:e1:97:74:40: 55:13:a2:07:ba:c3:c4:7b:d4:a9:f5:49:0f:ce:bc: c1:a9:6f:9f:ae:2e:99:05:77:e5:6c:97:53:b0:c0: 4c:85:80:92:52:14:f5:5d:7b:1a:50:64:de:fd:8e: 99:8d:9d:7c:71:6a:6d:a3:e6:ab:7d:6e:92:3a:95: 2c:f1:12:db:90:30:5e:31:e2:00:2c:df:d0:be:88: 0c:4f:75:93:3e:11:df:8d:95:37:e1:81:67:cf:a8: a1:20:c7:97:5e:a0:f5:90:7d:4a:f5:ee:c8:a5:a5: 1e:16:36:3d:d6:dd:79:a0:27:60:ed:92:4e:11:01: 0c:0a:26:c5:27:d1:10:81:50:e6:f5:02:4a:44:e6: 08:ff:73:2d:bc:0f:db:4e:38:68:a2:79:19:62:a0: 33:75:d1:9b:fc:15:38:f2:d1:2f:98:bf:4b:86:19: cf:2e:fd:18:33:e9:8c:2a:d6:f9:2a:59:55:88:5e: c8:32:1a:ef:b8:68:88:84:23:e4:07:30:34:93:be: 8a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8E:72:8C:1F:61:78:24:20:59:B7:56:11:56:42:56:79:A9:E9:7E X509v3 Authority Key Identifier: keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/m45yjB9heCQgWbdWEVZCVnmp6X4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.11.133.0/24 Signature Algorithm: sha256WithRSAEncryption 43:4b:48:fa:04:26:49:df:1c:93:c0:d9:d2:ac:a1:73:f7:c9: f4:7f:f9:e2:be:67:a7:11:5b:ef:70:27:a3:da:c5:9a:3b:04: 19:9b:a2:85:88:44:a6:6f:85:17:ee:99:5b:7b:f6:34:a3:95: d1:99:3b:73:c9:18:66:9c:a4:bd:4c:1e:1d:34:31:22:ec:d7: 02:49:fe:7a:bd:68:3f:bf:04:b3:64:1d:6d:47:4e:da:ec:27: 0f:e6:57:8f:f7:30:10:8c:c2:4e:0b:56:96:f9:4e:04:4e:85: 15:3d:e7:7e:49:6c:8e:86:73:ed:49:df:ab:ec:9d:5a:c5:b7: 2f:b4:01:01:94:bf:32:e9:52:83:1e:67:1b:57:b4:87:58:da: 25:9a:9f:48:3f:27:e8:df:7d:47:b8:8d:81:9c:22:ee:38:df: b4:32:ab:f3:4d:5d:6a:88:fc:58:44:dd:87:34:f0:5c:5c:13: ba:68:d2:ca:07:7e:d0:8f:13:96:56:28:95:26:2b:62:e6:ee: 62:3d:73:56:da:d1:90:9a:0c:43:46:71:84:8f:d2:ca:6e:dc: 24:3a:1a:c3:d7:47:62:96:61:f8:cc:8a:1d:fb:38:49:dc:3a: b4:2c:b1:d3:55:58:63:5e:72:f6:7f:14:60:a8:f9:b2:f7:45: 2b:2b:1a:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EE/ZwxDf9EBb774GEGRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1 ZDBmNTUwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjhlNzI4YzFmNjE3ODI0MjA1OWI3NTYxMTU2NDI1Njc5YTllOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtwRrwejm4WSvixy56UPK8Sso88m d5cWINmi+57kI2h4XsnO9FAQTPsMi78Bx96NXTbXLcbFT+GXdEBVE6IHusPEe9Sp 9UkPzrzBqW+fri6ZBXflbJdTsMBMhYCSUhT1XXsaUGTe/Y6ZjZ18cWpto+arfW6S OpUs8RLbkDBeMeIALN/QvogMT3WTPhHfjZU34YFnz6ihIMeXXqD1kH1K9e7IpaUe FjY91t15oCdg7ZJOEQEMCibFJ9EQgVDm9QJKROYI/3MtvA/bTjhoonkZYqAzddGb /BU48tEvmL9LhhnPLv0YM+mMKtb5KllViF7IMhrvuGiIhCPkBzA0k76KwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJuOcowfYXgkIFm3VhFWQlZ5qel+MB8GA1UdIwQY MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt YWI3OWEzNzg5ZjhmLzEvbTQ1eWpCOWhlQ1FnV2JkV0VWWkNWbm1wNlg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QuFMA0G CSqGSIb3DQEBCwUAA4IBAQBDS0j6BCZJ3xyTwNnSrKFz98n0f/nivmenEVvvcCej 2sWaOwQZm6KFiESmb4UX7plbe/Y0o5XRmTtzyRhmnKS9TB4dNDEi7NcCSf56vWg/ vwSzZB1tR07a7CcP5leP9zAQjMJOC1aW+U4EToUVPed+SWyOhnPtSd+r7J1axbcv tAEBlL8y6VKDHmcbV7SHWNolmp9IPyfo331HuI2BnCLuON+0MqvzTV1qiPxYRN2H NPBcXBO6aNLKB37QjxOWViiVJiti5u5iPXNW2tGQmgxDRnGEj9LKbtwkOhrD10di lmH4zIod+zhJ3Dq0LLHTVVhjXnL2fxRgqPmy90UrKxo+ -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:20 2026 by rpki-client