This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/NEY5wfu3YaOf5Irv9ZAeXPNHZK8.roa File: NEY5wfu3YaOf5Irv9ZAeXPNHZK8.roa (raw, json) Hash identifier: k4M73AdKqWqWSQkTMso46G2VUYiguHQrtP/UOxmaNHc= Subject key identifier: 34:46:39:C1:FB:B7:61:A3:9F:E4:8A:EF:F5:90:1E:5C:F3:47:64:AF Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Certificate serial: 019B78A224741697B1B4294DA39F0908E4D3 Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/NEY5wfu3YaOf5Irv9ZAeXPNHZK8.roa Signing time: Thu 01 Jan 2026 08:17:30 +0000 ROA not before: Thu 01 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43145 IP address blocks: 217.66.100.0/24 maxlen: 24 217.66.101.0/24 maxlen: 24 217.66.102.0/24 maxlen: 24 217.66.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:24:74:16:97:b1:b4:29:4d:a3:9f:09:08:e4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=344639c1fbb761a39fe48aeff5901e5cf34764af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:8c:1b:0b:81:fa:3a:29:16:76:fe:a0:65: d7:00:f9:7b:d4:79:95:21:78:92:36:f8:aa:4c:4f: 10:96:71:c7:de:53:f7:f8:ac:91:8c:5d:f3:f8:00: 02:b0:c6:41:a8:50:11:79:25:85:da:1b:ad:b6:21: d2:dc:c1:e3:af:70:2d:67:7a:16:18:60:71:7d:7e: f1:25:b7:b4:f5:f4:e6:00:14:b8:7b:68:3e:f1:77: a5:2f:a6:b8:8c:4e:a0:2b:19:ed:57:70:49:26:6b: a9:7d:c1:cf:48:83:1a:cc:f6:01:85:2d:ce:43:a1: 6d:88:24:17:49:82:bf:de:0a:b1:3e:91:20:0f:db: b1:f0:6d:f6:8e:68:17:ec:97:33:c1:95:fb:35:49: a4:b2:44:0d:76:ab:ad:a1:0f:2e:8a:f0:2d:63:97: db:03:3f:d3:69:40:22:e6:3d:0d:c1:2f:6a:d6:cf: 66:47:20:42:ad:c8:85:47:43:97:9b:13:8a:c3:10: 22:3e:ba:94:99:a4:32:61:ee:05:2b:7c:4b:7b:ab: 06:c8:d9:37:82:bf:5d:21:61:65:02:f4:a2:1b:42: 50:b2:3a:92:33:ca:c4:6b:5e:48:ef:d8:a2:53:70: 29:f3:23:41:51:6c:fa:43:a6:16:e6:db:15:bd:c4: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:46:39:C1:FB:B7:61:A3:9F:E4:8A:EF:F5:90:1E:5C:F3:47:64:AF X509v3 Authority Key Identifier: keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/NEY5wfu3YaOf5Irv9ZAeXPNHZK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.66.100.0/22 Signature Algorithm: sha256WithRSAEncryption 88:5f:37:0b:ce:55:75:3b:c3:2e:84:07:dd:2e:27:c6:a2:01: 31:c0:ab:63:a9:3e:29:c5:a8:e1:f4:f2:1c:b1:95:31:c1:e2: 71:7c:b1:05:8e:e1:eb:85:17:27:b5:c8:b2:0d:62:e2:2a:e8: 4b:ac:3c:d4:5e:3b:92:6c:34:a4:dd:e5:36:b9:e2:02:3a:3f: 88:1d:97:e4:48:25:62:07:4d:4e:f1:bc:44:3b:7a:77:d9:3a: 6b:f0:1f:4c:9e:f9:a1:93:cc:f6:d1:2e:aa:0c:de:51:b4:52: ae:b7:49:0f:37:69:79:ce:b5:08:a6:12:bb:63:a1:d9:11:18: 77:49:89:86:7b:f1:38:aa:3d:d9:5e:c4:26:06:bb:1e:46:48: 71:cd:e6:6d:12:de:82:b7:d2:4e:4f:cc:f9:3f:d5:bb:70:e6: ff:b1:94:82:ab:24:d4:b9:ca:ef:5d:82:cb:28:70:de:70:c1: 37:ef:f9:40:ea:40:65:c2:bc:6c:e3:18:78:ed:89:a0:84:85: 03:b2:04:7b:bb:90:a2:64:10:d5:6f:7c:ac:6a:85:f8:ed:55: db:a7:9d:af:27:6e:69:c5:1c:d6:8f:63:fb:84:7b:fe:9f:96: 1f:69:24:18:a3:1b:82:5d:16:30:94:38:0f:58:e7:84:73:5f: 73:97:c7:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiR0FpextClNo58JCOTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmNiNjQzZTZhMjFlMmZiNmUyMWNkMDY1M2FiMDk1ZTll YmVmMTMwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDQ2MzljMWZiYjc2MWEzOWZlNDhhZWZmNTkwMWU1Y2YzNDc2NGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw6MGwuB+jopFnb+oGXXAPl71HmV IXiSNviqTE8QlnHH3lP3+KyRjF3z+AACsMZBqFAReSWF2huttiHS3MHjr3AtZ3oW GGBxfX7xJbe09fTmABS4e2g+8XelL6a4jE6gKxntV3BJJmupfcHPSIMazPYBhS3O Q6FtiCQXSYK/3gqxPpEgD9ux8G32jmgX7JczwZX7NUmkskQNdqutoQ8uivAtY5fb Az/TaUAi5j0NwS9q1s9mRyBCrciFR0OXmxOKwxAiPrqUmaQyYe4FK3xLe6sGyNk3 gr9dIWFlAvSiG0JQsjqSM8rEa15I79iiU3Ap8yNBUWz6Q6YW5tsVvcRbkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRGOcH7t2Gjn+SK7/WQHlzzR2SvMB8GA1UdIwQY MBaAFNr8tkPmoh4vtuIc0GU6sJXp6+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2Ut ZGUyZGUxNWY5MGVkLzEvTkVZNXdmdTNZYU9mNUlydjlaQWVYUE5IWks4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2UtZGUyZGUxNWY5MGVk LzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2UJkMA0G CSqGSIb3DQEBCwUAA4IBAQCIXzcLzlV1O8MuhAfdLifGogExwKtjqT4pxajh9PIc sZUxweJxfLEFjuHrhRcntciyDWLiKuhLrDzUXjuSbDSk3eU2ueICOj+IHZfkSCVi B01O8bxEO3p32Tpr8B9Mnvmhk8z20S6qDN5RtFKut0kPN2l5zrUIphK7Y6HZERh3 SYmGe/E4qj3ZXsQmBrseRkhxzeZtEt6Ct9JOT8z5P9W7cOb/sZSCqyTUucrvXYLL KHDecME37/lA6kBlwrxs4xh47YmghIUDsgR7u5CiZBDVb3ysaoX47VXbp52vJ25p xRzWj2P7hHv+n5YfaSQYoxuCXRYwlDgPWOeEc19zl8f0 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:30 2026 by rpki-client