This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/tDGAKA6vCaBKcErUgT3MNC6aIu0.roa File: tDGAKA6vCaBKcErUgT3MNC6aIu0.roa (raw, json) Hash identifier: e/pJ6HHlGchTF3Diz9Sgd8uUt2kZ7DHh23Gu0gHK74Y= Subject key identifier: B4:31:80:28:0E:AF:09:A0:4A:70:4A:D4:81:3D:CC:34:2E:9A:22:ED Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419 Certificate serial: 019B7C80B3DB7C3B7A8E0C6B4C698D96C71B Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/tDGAKA6vCaBKcErUgT3MNC6aIu0.roa Signing time: Fri 02 Jan 2026 02:19:28 +0000 ROA not before: Fri 02 Jan 2026 02:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215119 IP address blocks: 217.23.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b3:db:7c:3b:7a:8e:0c:6b:4c:69:8d:96:c7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b43180280eaf09a04a704ad4813dcc342e9a22ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:7b:22:b2:68:16:a3:17:07:64:fa:ef:77: a2:66:da:12:bb:c9:69:35:36:35:f1:15:72:0f:90: 3f:53:b2:92:a0:e7:a6:40:7c:f2:38:3e:ef:c0:77: 92:31:98:ff:30:6c:c7:5d:13:75:f7:f0:c3:47:c7: 53:99:88:51:f8:c8:94:d8:12:02:3f:f9:78:d0:8b: 84:8c:90:08:93:50:5a:d7:01:69:5a:5e:9e:c6:83: 68:06:56:7a:84:1f:91:27:27:40:d0:87:23:74:41: d1:a2:e9:3c:d7:ae:85:4d:09:63:cd:63:6f:74:f2: b6:58:f9:25:94:f5:8c:b4:ee:05:f2:2b:c7:8e:e6: 28:1a:69:f3:dd:f2:d6:3e:eb:98:41:08:51:5f:bb: e0:86:ec:50:1a:de:f3:18:62:3e:60:14:eb:7b:9f: eb:c8:ce:f7:61:ce:cd:9e:fa:1a:49:27:98:4e:a6: a9:e8:ae:ce:d6:1e:e4:88:57:ca:52:03:1f:61:41: e0:15:59:d6:a2:42:48:23:51:0f:04:bc:99:83:b2: ec:ab:67:cb:04:33:75:6f:b6:51:0e:72:6c:32:94: a2:60:62:7b:2b:3c:09:83:a1:79:f9:d4:8c:c0:39: df:50:82:26:bc:2f:04:51:29:2a:d3:71:0d:01:f2: c6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:31:80:28:0E:AF:09:A0:4A:70:4A:D4:81:3D:CC:34:2E:9A:22:ED X509v3 Authority Key Identifier: keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/tDGAKA6vCaBKcErUgT3MNC6aIu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.23.120.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:62:5e:fb:df:ca:fd:84:53:c7:6d:9c:b9:65:59:9a:29:3e: d0:fe:d2:6e:ad:4f:1b:1f:a8:c0:e2:c7:bf:8b:df:b3:bf:a8: 4b:07:ca:49:f0:7c:dc:6f:64:5a:38:9e:aa:a6:cb:6a:e4:52: d0:1e:a8:03:ed:5a:9e:83:23:07:44:ce:58:f4:be:25:00:40: a8:48:00:65:42:7a:b1:6d:e8:08:4e:50:dc:b1:91:b9:58:24: 6e:6d:8c:d3:c2:b0:d3:48:12:1e:e6:21:53:ae:32:41:63:ee: 35:71:b5:5f:01:3b:93:24:f8:4e:55:ad:20:fe:a5:1c:7f:7b: 61:4e:5a:82:c5:b3:7e:bd:f8:9c:d8:6f:be:75:d4:98:98:e4: 84:90:56:a4:92:ce:fa:ec:6c:94:c0:b6:ac:eb:be:17:08:cb: 20:87:c0:84:1d:50:cf:1c:8c:b4:f2:e8:58:fb:f8:a2:c8:3e: 2f:17:87:d1:7b:28:a6:38:a2:9d:0c:b6:de:76:54:a9:5f:f6: ea:34:cc:61:13:94:fb:a5:4e:1c:41:e2:b3:08:f8:22:d0:81: a6:4e:05:6d:6c:3d:5a:6e:25:b6:54:be:d0:6f:67:43:72:53: ee:96:47:4e:e4:66:7a:8a:7d:65:99:35:e7:a1:05:00:f6:44: a2:82:4f:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLPbfDt6jgxrTGmNlscbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw Yjg0MTkwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDMxODAyODBlYWYwOWEwNGE3MDRhZDQ4MTNkY2MzNDJlOWEyMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTV7IrJoFqMXB2T673eiZtoSu8lp NTY18RVyD5A/U7KSoOemQHzyOD7vwHeSMZj/MGzHXRN19/DDR8dTmYhR+MiU2BIC P/l40IuEjJAIk1Ba1wFpWl6exoNoBlZ6hB+RJydA0IcjdEHRouk8166FTQljzWNv dPK2WPkllPWMtO4F8ivHjuYoGmnz3fLWPuuYQQhRX7vghuxQGt7zGGI+YBTre5/r yM73Yc7NnvoaSSeYTqap6K7O1h7kiFfKUgMfYUHgFVnWokJII1EPBLyZg7Lsq2fL BDN1b7ZRDnJsMpSiYGJ7KzwJg6F5+dSMwDnfUIImvC8EUSkq03ENAfLGwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLQxgCgOrwmgSnBK1IE9zDQumiLtMB8GA1UdIwQY MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt MGNjODNiMDBmYzU4LzEvdERHQUtBNnZDYUJLY0VyVWdUM01OQzZhSXUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4 LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Rd4MA0G CSqGSIb3DQEBCwUAA4IBAQBMYl7738r9hFPHbZy5ZVmaKT7Q/tJurU8bH6jA4se/ i9+zv6hLB8pJ8Hzcb2RaOJ6qpstq5FLQHqgD7VqegyMHRM5Y9L4lAECoSABlQnqx begITlDcsZG5WCRubYzTwrDTSBIe5iFTrjJBY+41cbVfATuTJPhOVa0g/qUcf3th TlqCxbN+vfic2G++ddSYmOSEkFakks767GyUwLas674XCMsgh8CEHVDPHIy08uhY +/iiyD4vF4fReyimOKKdDLbedlSpX/bqNMxhE5T7pU4cQeKzCPgi0IGmTgVtbD1a biW2VL7Qb2dDclPulkdO5GZ6in1lmTXnoQUA9kSigk8+ -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:20 2026 by rpki-client