This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/tEiznCRaCEXuSiqwVe-1WIaGDGU.roa File: tEiznCRaCEXuSiqwVe-1WIaGDGU.roa (raw, json) Hash identifier: pOXbDIJbSmZy8KsnI5uOSVFdRgYoW3ngwx0TRZi2I7o= Subject key identifier: B4:48:B3:9C:24:5A:08:45:EE:4A:2A:B0:55:EF:B5:58:86:86:0C:65 Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b Certificate serial: 019B7EA4AB760F2946326367966876C51F86 Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/tEiznCRaCEXuSiqwVe-1WIaGDGU.roa Signing time: Fri 02 Jan 2026 12:17:59 +0000 ROA not before: Fri 02 Jan 2026 12:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51695 IP address blocks: 217.78.97.0/24 maxlen: 24 217.78.98.0/24 maxlen: 24 217.78.99.0/24 maxlen: 24 217.78.100.0/24 maxlen: 24 217.78.101.0/24 maxlen: 24 217.78.102.0/24 maxlen: 24 217.78.103.0/24 maxlen: 24 217.78.104.0/24 maxlen: 24 217.78.105.0/24 maxlen: 24 217.78.106.0/24 maxlen: 24 217.78.107.0/24 maxlen: 24 217.78.108.0/24 maxlen: 24 217.78.109.0/24 maxlen: 24 217.78.110.0/24 maxlen: 24 217.78.111.0/24 maxlen: 24 2a02:6700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ab:76:0f:29:46:32:63:67:96:68:76:c5:1f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b Validity Not Before: Jan 2 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b448b39c245a0845ee4a2ab055efb55886860c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:35:fa:35:fc:67:c5:4f:4b:8d:16:6f:c1:cc: 44:71:dd:a7:34:fa:c0:71:88:ab:13:42:0b:39:8f: d7:e0:bc:ef:60:1b:30:05:94:52:3d:40:6d:07:fa: 12:b5:ce:41:53:ae:15:bd:7a:34:32:48:20:6e:4a: 8e:42:44:02:d2:e4:e2:88:5c:d3:a3:08:1b:86:de: e3:d7:d2:e5:7f:ff:bf:3e:df:2a:bf:de:6b:e4:dc: d4:0c:c2:3e:a2:f8:e5:13:cb:fc:bb:90:d8:5a:21: 0a:7c:65:54:3a:a6:e5:bb:a0:76:9e:c7:e5:ed:74: a9:12:a8:9b:f0:c6:93:16:13:38:c5:0d:b7:cb:e3: 4c:73:a8:cf:f1:9f:af:eb:fd:8d:14:00:4c:56:de: 1f:68:4c:d8:5c:e4:2a:1d:ba:c8:f6:6f:1a:d7:15: 57:49:5c:a2:c0:1e:a6:fa:00:51:ef:e5:75:b2:77: dc:fc:5c:dd:5f:72:d1:79:99:07:5f:1f:aa:87:22: 34:57:3a:be:d8:b0:5d:fe:e4:f3:34:81:46:83:d9: 7e:7f:77:70:f3:28:7e:f6:bb:13:7f:20:45:25:f2: 63:da:02:96:db:19:fb:20:a1:91:ef:27:ee:df:80: 6e:36:55:74:ce:4c:98:31:aa:12:69:2b:5a:43:91: d1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:48:B3:9C:24:5A:08:45:EE:4A:2A:B0:55:EF:B5:58:86:86:0C:65 X509v3 Authority Key Identifier: keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/tEiznCRaCEXuSiqwVe-1WIaGDGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.78.97.0-217.78.111.255 IPv6: 2a02:6700::/32 Signature Algorithm: sha256WithRSAEncryption 25:12:82:df:4a:51:13:da:10:86:73:eb:ea:d8:1d:eb:70:b8: 14:e6:ee:7d:92:e2:7c:0a:7d:d5:24:43:49:8b:54:e8:26:10: 34:c5:06:8d:fe:28:ea:92:0f:08:bf:b6:f5:19:87:6b:b8:e4: 3c:a3:97:b9:87:17:dc:0a:1c:0f:69:b8:a4:ee:1c:d6:f9:45: 43:a2:cd:75:6f:b9:72:af:7a:0e:d0:16:e0:1e:92:2f:19:5b: d0:f9:e1:3e:8e:e9:9f:91:de:0e:55:17:77:b5:75:e5:61:f6: ed:fa:42:63:5d:cb:cd:b0:8e:b1:61:c6:88:08:2b:51:81:80: fd:02:f2:6c:a6:bc:73:ec:cf:60:a9:46:5a:f5:cc:08:e6:54: 64:f3:d5:f7:01:e9:7f:41:1d:5b:41:8b:e5:56:1e:e8:7e:6a: b6:7b:ce:d6:c9:5d:ce:17:8c:5a:fc:08:f6:bd:05:36:df:3e: 96:e2:86:85:f9:4a:1e:80:fd:ab:c8:a0:5e:34:40:56:8a:04: e0:48:8b:88:e8:ca:f4:b1:43:d1:6c:82:d0:d9:3a:eb:d1:35: bf:55:56:2b:b0:2f:b6:f4:54:d1:66:01:85:e0:35:db:cc:a8: 98:be:22:16:6c:f9:9b:02:a6:a9:7c:d3:27:69:05:ef:56:5f: c1:21:fd:b3 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+pKt2DylGMmNnlmh2xR+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOWNmMDk3NzFiOGYxODRjYWExYTAwNDIxYjkyOTQ0OTFl OTdlNmIwHhcNMjYwMTAyMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQ4YjM5YzI0NWEwODQ1ZWU0YTJhYjA1NWVmYjU1ODg2ODYwYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTX6NfxnxU9LjRZvwcxEcd2nNPrA cYirE0ILOY/X4LzvYBswBZRSPUBtB/oStc5BU64VvXo0MkggbkqOQkQC0uTiiFzT owgbht7j19Llf/+/Pt8qv95r5NzUDMI+ovjlE8v8u5DYWiEKfGVUOqblu6B2nsfl 7XSpEqib8MaTFhM4xQ23y+NMc6jP8Z+v6/2NFABMVt4faEzYXOQqHbrI9m8a1xVX SVyiwB6m+gBR7+V1snfc/FzdX3LReZkHXx+qhyI0Vzq+2LBd/uTzNIFGg9l+f3dw 8yh+9rsTfyBFJfJj2gKW2xn7IKGR7yfu34BuNlV0zkyYMaoSaStaQ5HRMwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFLRIs5wkWghF7koqsFXvtViGhgxlMB8GA1UdIwQY MBaAFPGc8JdxuPGEyqGgBCG5KUSR6X5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMt ZGMxZGI2N2RiM2NiLzEvdEVpem5DUmFDRVh1U2lxd1ZlLTFXSWFHREdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMtZGMxZGI2N2RiM2Ni LzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBADZTmED BATZTmAwDQQCAAIwBwMFACoCZwAwDQYJKoZIhvcNAQELBQADggEBACUSgt9KURPa EIZz6+rYHetwuBTm7n2S4nwKfdUkQ0mLVOgmEDTFBo3+KOqSDwi/tvUZh2u45Dyj l7mHF9wKHA9puKTuHNb5RUOizXVvuXKveg7QFuAeki8ZW9D54T6O6Z+R3g5VF3e1 deVh9u36QmNdy82wjrFhxogIK1GBgP0C8mymvHPsz2CpRlr1zAjmVGTz1fcB6X9B HVtBi+VWHuh+arZ7ztbJXc4XjFr8CPa9BTbfPpbihoX5Sh6A/avIoF40QFaKBOBI i4joyvSxQ9FsgtDZOuvRNb9VViuwL7b0VNFmAYXgNdvMqJi+IhZs+ZsCpql80ydp Be9WX8Eh/bM= -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:39 2026 by rpki-client