This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/x4wXEKXMOxtK_lFwko7eiWoBBHU.roa File: x4wXEKXMOxtK_lFwko7eiWoBBHU.roa (raw, json) Hash identifier: aj4RuLLfbpjb0EvT7ddowihSUQXljP0or+HYSFta5Xw= Subject key identifier: C7:8C:17:10:A5:CC:3B:1B:4A:FE:51:70:92:8E:DE:89:6A:01:04:75 Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Certificate serial: 019B79104F6A517833534BF52F9DF54B4DFE Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/x4wXEKXMOxtK_lFwko7eiWoBBHU.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203551 IP address blocks: 217.11.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4f:6a:51:78:33:53:4b:f5:2f:9d:f5:4b:4d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c78c1710a5cc3b1b4afe5170928ede896a010475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:68:3c:9b:79:3e:ca:7f:70:78:bf:34:14:51: 38:30:cd:f6:38:12:35:82:7b:aa:e3:b7:e4:aa:e2: b9:a6:4e:50:19:98:a4:57:ee:a6:b4:07:a0:d1:7b: d5:4b:d4:91:f9:b0:2b:04:28:c9:e8:e4:a7:ef:2a: f9:68:95:8d:81:7a:98:5a:fd:aa:54:5f:71:0f:90: f5:5e:ec:92:0a:c0:0d:51:fc:cc:b0:f2:1e:e2:ea: 42:6e:19:16:67:90:57:6f:2d:2d:a0:27:e9:1c:e2: 0f:9b:73:b6:65:c4:a5:a1:55:e0:c4:36:8d:aa:96: 99:91:62:4a:5d:f6:01:82:0d:f8:00:32:ae:3a:9a: 7e:ca:9f:a1:13:91:1c:31:07:9c:a9:ee:22:e5:33: e4:7d:2b:02:36:9c:2a:0f:a4:d7:c3:1b:64:5c:af: 79:5d:4f:9b:a5:f8:27:8a:c8:df:68:bd:f7:03:ac: f7:76:1a:17:38:e2:39:5f:36:0e:f5:05:46:e2:fe: d0:10:61:20:bf:43:c5:b8:f8:e3:b7:8e:45:1e:9e: 7d:36:c5:61:cc:bb:8d:7f:a9:b5:05:5b:54:7c:a2: 3d:3c:e1:35:3b:be:d8:32:d1:9d:dd:50:43:c7:a7: 44:30:7a:13:c5:d1:9a:80:94:5b:68:78:40:8a:88: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8C:17:10:A5:CC:3B:1B:4A:FE:51:70:92:8E:DE:89:6A:01:04:75 X509v3 Authority Key Identifier: keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/x4wXEKXMOxtK_lFwko7eiWoBBHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.11.142.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:fb:2d:6f:77:91:4f:05:19:3c:b0:13:6b:5b:03:f1:b9:9c: 95:85:6b:9b:7f:16:8c:db:aa:c4:91:5f:8a:8b:56:23:cd:23: e6:3a:97:e9:84:2d:b1:97:a2:83:ac:d2:48:f5:e7:5a:97:0b: de:97:89:de:6c:a4:e8:2a:b4:0d:00:91:0f:24:06:2d:a0:c6: d8:98:44:5c:2d:0a:6d:34:b1:b9:7c:6d:77:2a:93:5f:c1:44: 22:06:3a:d2:0a:a3:65:f0:02:37:d0:b3:28:c9:7d:5d:18:e0: 78:3d:48:92:d8:32:c9:0e:18:26:45:13:ed:a7:b1:cf:bc:cb: fe:82:04:c9:d7:74:79:a3:9e:ac:40:24:1e:30:ac:88:de:6c: 4f:ae:5c:71:a7:e7:b0:5f:a7:9e:f4:75:52:52:fe:86:6c:2e: 97:7b:2d:21:01:8d:40:b0:49:eb:32:09:1f:25:33:b5:b0:92: 95:6c:5f:c0:02:de:b8:1c:84:fa:d4:fc:2b:43:e4:a1:4f:df: c8:8d:de:8b:3e:4a:f9:a8:c0:37:3e:44:53:6a:1f:d7:bc:67: 7b:7e:5c:bd:02:a0:1a:b7:e6:fa:bb:08:4c:f6:83:83:58:f8: 5b:6d:bb:d4:12:9b:c8:81:bc:cc:61:1e:8a:55:12:e5:d1:c3: 76:9b:6e:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EE9qUXgzU0v1L531S03+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1 ZDBmNTUwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzhjMTcxMGE1Y2MzYjFiNGFmZTUxNzA5MjhlZGU4OTZhMDEwNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmg8m3k+yn9weL80FFE4MM32OBI1 gnuq47fkquK5pk5QGZikV+6mtAeg0XvVS9SR+bArBCjJ6OSn7yr5aJWNgXqYWv2q VF9xD5D1XuySCsANUfzMsPIe4upCbhkWZ5BXby0toCfpHOIPm3O2ZcSloVXgxDaN qpaZkWJKXfYBgg34ADKuOpp+yp+hE5EcMQecqe4i5TPkfSsCNpwqD6TXwxtkXK95 XU+bpfgnisjfaL33A6z3dhoXOOI5XzYO9QVG4v7QEGEgv0PFuPjjt45FHp59NsVh zLuNf6m1BVtUfKI9POE1O77YMtGd3VBDx6dEMHoTxdGagJRbaHhAiojhqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMeMFxClzDsbSv5RcJKO3olqAQR1MB8GA1UdIwQY MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt YWI3OWEzNzg5ZjhmLzEveDR3WEVLWE1PeHRLX2xGd2tvN2VpV29CQkhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QuOMA0G CSqGSIb3DQEBCwUAA4IBAQBP+y1vd5FPBRk8sBNrWwPxuZyVhWubfxaM26rEkV+K i1YjzSPmOpfphC2xl6KDrNJI9edalwvel4nebKToKrQNAJEPJAYtoMbYmERcLQpt NLG5fG13KpNfwUQiBjrSCqNl8AI30LMoyX1dGOB4PUiS2DLJDhgmRRPtp7HPvMv+ ggTJ13R5o56sQCQeMKyI3mxPrlxxp+ewX6ee9HVSUv6GbC6Xey0hAY1AsEnrMgkf JTO1sJKVbF/AAt64HIT61PwrQ+ShT9/Ijd6LPkr5qMA3PkRTah/XvGd7fly9AqAa t+b6uwhM9oODWPhbbbvUEpvIgbzMYR6KVRLl0cN2m26N -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:16 2026 by rpki-client