This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wQzhLyxuJgd_7gnHXo1SM9502UE.roa File: wQzhLyxuJgd_7gnHXo1SM9502UE.roa (raw, json) Hash identifier: DBPUCUwJfZGekAjN93x2940eZPytkTjn+xx/kl9Vm9c= Subject key identifier: C1:0C:E1:2F:2C:6E:26:07:7F:EE:09:C7:5E:8D:52:33:DE:74:D9:41 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5EADE80F58DF1A8926A4AD306024 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wQzhLyxuJgd_7gnHXo1SM9502UE.roa Signing time: Fri 02 Jan 2026 06:20:29 +0000 ROA not before: Fri 02 Jan 2026 06:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212042 IP address blocks: 217.74.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5e:ad:e8:0f:58:df:1a:89:26:a4:ad:30:60:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c10ce12f2c6e26077fee09c75e8d5233de74d941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:14:0d:16:08:67:87:81:80:ad:9f:62:48: 94:48:9e:5b:71:ef:79:85:42:1f:7e:28:e2:90:2e: 3d:8a:63:f7:39:9e:6a:80:83:97:40:e4:a8:3b:05: ea:0d:b9:3a:28:cf:72:f1:e3:cb:08:9a:a0:26:08: 29:73:98:42:86:f5:bc:93:75:c5:76:71:d7:c4:9e: 9f:98:ff:50:df:44:b1:ba:51:3e:56:33:f1:ab:55: 29:d6:28:b8:bb:c5:22:57:a2:62:3d:1f:7b:7c:3b: 3d:53:b2:ed:fa:c6:78:f2:75:56:74:da:1b:d4:df: 5c:a9:b2:78:73:53:dc:3e:64:68:50:ee:06:11:31: 90:e7:e1:b1:15:e5:af:5d:79:54:0e:ed:bd:1f:ec: 6a:0d:26:a0:24:36:1a:e6:ad:7b:8c:f3:6d:e4:f8: 1a:0c:b0:6f:61:d3:2d:70:5a:89:94:f5:2e:09:90: 47:14:33:8d:48:20:82:38:a3:96:ff:78:27:2e:91: b6:38:12:2f:09:4d:9e:d3:33:d0:50:bb:63:5b:bd: 35:7c:cf:c4:51:7c:1c:de:2a:2a:16:a3:f6:2c:6d: 35:86:62:af:00:89:6c:18:0c:81:ad:d7:13:1e:11: cb:4a:dc:7c:52:3e:1f:27:ff:b0:d4:18:d4:b3:d5: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0C:E1:2F:2C:6E:26:07:7F:EE:09:C7:5E:8D:52:33:DE:74:D9:41 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wQzhLyxuJgd_7gnHXo1SM9502UE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.74.17.0/24 Signature Algorithm: sha256WithRSAEncryption 54:f9:c4:da:74:36:db:b4:7f:30:ab:e8:29:cf:86:30:06:19: 7d:3b:e0:8e:58:b5:b9:a0:94:b1:f1:f6:89:cb:3c:a6:53:56: c9:b8:9c:72:97:15:16:64:63:ad:42:21:f9:d1:f4:78:49:4b: 06:aa:37:60:65:d5:aa:4d:a8:5f:1f:3f:06:03:67:71:49:3b: 20:af:a0:a0:df:5b:53:d7:0e:38:7a:c4:9c:6d:fa:a8:6b:55: 27:8f:7a:91:2f:93:65:cc:52:f2:f2:4b:dd:40:cb:bd:58:a3: 21:93:f1:bd:1a:04:a1:bc:fc:0c:6f:c2:b1:23:9e:89:f4:d6: 2a:d6:8e:33:66:4e:e8:88:18:7e:cd:78:98:26:73:7c:7f:18: 3f:58:51:0a:34:2a:5a:b4:02:ab:83:74:81:db:2a:84:05:1b: eb:5a:21:ff:b0:37:ae:df:ea:b2:e1:f3:61:3a:41:57:e4:68: 8d:95:78:34:6d:f3:8f:85:41:93:ab:01:da:ca:ac:bd:bd:f7: 8e:f7:43:f8:ca:a3:57:b2:b4:ce:b8:9d:45:83:58:bd:aa:9c: 28:18:23:51:3a:5a:aa:dc:10:dd:5b:3a:5b:22:d3:12:85:ef: 08:19:8f:45:29:53:90:d3:fc:de:76:94:86:f1:90:03:62:c1: ed:81:3f:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XV6t6A9Y3xqJJqStMGAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTBjZTEyZjJjNmUyNjA3N2ZlZTA5Yzc1ZThkNTIzM2RlNzRkOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxYUDRYIZ4eBgK2fYkiUSJ5bce95 hUIffijikC49imP3OZ5qgIOXQOSoOwXqDbk6KM9y8ePLCJqgJggpc5hChvW8k3XF dnHXxJ6fmP9Q30SxulE+VjPxq1Up1ii4u8UiV6JiPR97fDs9U7Lt+sZ48nVWdNob 1N9cqbJ4c1PcPmRoUO4GETGQ5+GxFeWvXXlUDu29H+xqDSagJDYa5q17jPNt5Pga DLBvYdMtcFqJlPUuCZBHFDONSCCCOKOW/3gnLpG2OBIvCU2e0zPQULtjW701fM/E UXwc3ioqFqP2LG01hmKvAIlsGAyBrdcTHhHLStx8Uj4fJ/+w1BjUs9UhCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMEM4S8sbiYHf+4Jx16NUjPedNlBMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvd1F6aEx5eHVKZ2RfN2duSFhvMVNNOTUwMlVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UoRMA0G CSqGSIb3DQEBCwUAA4IBAQBU+cTadDbbtH8wq+gpz4YwBhl9O+COWLW5oJSx8faJ yzymU1bJuJxylxUWZGOtQiH50fR4SUsGqjdgZdWqTahfHz8GA2dxSTsgr6Cg31tT 1w44esScbfqoa1Unj3qRL5NlzFLy8kvdQMu9WKMhk/G9GgShvPwMb8KxI56J9NYq 1o4zZk7oiBh+zXiYJnN8fxg/WFEKNCpatAKrg3SB2yqEBRvrWiH/sDeu3+qy4fNh OkFX5GiNlXg0bfOPhUGTqwHayqy9vfeO90P4yqNXsrTOuJ1Fg1i9qpwoGCNROlqq 3BDdWzpbItMShe8IGY9FKVOQ0/zedpSG8ZADYsHtgT/O -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:14 2026 by rpki-client