This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/rFQ04GqSU9DTULqn8_NPkqKbWSc.roa File: rFQ04GqSU9DTULqn8_NPkqKbWSc.roa (raw, json) Hash identifier: 8XgwklO153GBrJc2s4PKkyGugWT/fq0MyA5r4Aq8lKY= Subject key identifier: AC:54:34:E0:6A:92:53:D0:D3:50:BA:A7:F3:F3:4F:92:A2:9B:59:27 Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a Certificate serial: 019B7A5B49498E5A00AA345F744B1570B926 Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/rFQ04GqSU9DTULqn8_NPkqKbWSc.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201160 IP address blocks: 217.8.120.0/24 maxlen: 24 217.8.121.0/24 maxlen: 24 217.8.122.0/24 maxlen: 24 217.8.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:49:49:8e:5a:00:aa:34:5f:74:4b:15:70:b9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac5434e06a9253d0d350baa7f3f34f92a29b5927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:e1:09:af:75:51:4e:05:4e:63:38:af:32: 01:34:77:61:83:b5:1a:07:a0:9c:3c:a1:c6:e8:9c: 78:c2:4b:23:7b:09:06:1d:3e:07:b2:c7:50:98:21: d6:84:20:3e:50:23:3c:1b:90:e8:36:25:9e:d6:76: 24:60:4f:1c:6e:bb:6c:38:14:ac:b9:cb:b2:bc:35: 33:82:93:c8:88:9b:06:4c:0d:c5:58:7c:c9:40:7e: 69:e9:67:bd:60:f5:79:70:b5:07:f4:fe:12:82:a4: 03:0d:46:d6:f9:fe:35:e8:0d:f6:37:9e:f1:88:8c: ba:34:c4:87:2c:22:40:e7:e0:9b:74:5d:0b:38:1c: 72:17:51:88:f2:55:c3:6f:ea:3c:b6:26:9a:bc:de: 48:1f:52:92:71:1c:fe:a4:34:53:b7:d1:55:1f:0e: 62:ff:ef:c1:46:7c:09:fd:0f:33:ba:fc:51:44:86: 9a:6d:31:ec:48:d0:df:f7:76:b5:46:cc:03:c7:14: 1a:3e:b3:f2:7d:d0:b8:ea:68:b3:cf:3f:2e:d0:6d: d4:96:b9:2e:27:25:c6:c0:c5:c0:c2:31:45:b0:73: cb:65:2d:be:5b:a2:5a:23:1d:92:75:f8:fe:c7:4b: 3e:75:88:0c:cb:f8:70:1b:e0:e7:ea:4c:94:e5:a0: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:54:34:E0:6A:92:53:D0:D3:50:BA:A7:F3:F3:4F:92:A2:9B:59:27 X509v3 Authority Key Identifier: keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/rFQ04GqSU9DTULqn8_NPkqKbWSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.8.120.0/22 Signature Algorithm: sha256WithRSAEncryption 25:21:f0:0a:99:9e:b9:85:40:16:08:83:0a:f8:df:02:55:bf: 6e:59:1c:1a:a3:ab:d1:05:f0:9d:42:3a:13:15:6f:e8:e8:bf: e3:1a:13:b6:1d:46:d2:ea:90:e5:2f:ae:77:bb:a9:ff:91:58: 89:dc:57:ea:52:60:c8:21:99:a5:4f:ce:9b:96:68:8e:32:fd: 21:c6:1f:23:47:83:d2:75:4c:ee:93:32:ad:27:88:5f:b9:2d: 69:f6:d7:78:ee:ca:8a:5e:2a:2d:4c:35:39:d3:97:12:86:15: a8:10:11:d6:24:1c:f7:1d:9f:9d:84:48:8f:7a:8b:bd:e7:cd: 35:1c:a6:34:fe:07:52:07:0e:4f:57:bc:7c:a7:25:4b:d4:8c: 9d:11:6e:bb:bd:e9:64:63:bc:65:59:84:d3:41:e0:ac:ac:2b: 7d:c4:36:1c:78:8e:44:9e:c6:6a:21:0f:0f:fb:d3:b3:fe:83: 64:11:ee:5c:ee:28:b8:0c:81:6c:9f:bf:f6:b2:28:38:1b:9b: 0a:f2:c8:5f:e3:ad:cb:c7:c3:2f:85:07:2b:50:b2:f5:df:38: 67:e3:1e:53:b1:c6:2c:30:3c:c1:a8:79:80:e4:8e:1b:88:a1: 6e:9e:8b:43:7e:3f:6f:cb:24:6e:cc:98:66:0a:6a:70:59:3c: ac:52:53:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0lJjloAqjRfdEsVcLkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTVkNTJiM2NhODc0NTQ1NzViNjViNzIwZWVmODFhMjYy YTVmM2EwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzU0MzRlMDZhOTI1M2QwZDM1MGJhYTdmM2YzNGY5MmEyOWI1OTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmPhCa91UU4FTmM4rzIBNHdhg7Ua B6CcPKHG6Jx4wksjewkGHT4HssdQmCHWhCA+UCM8G5DoNiWe1nYkYE8cbrtsOBSs ucuyvDUzgpPIiJsGTA3FWHzJQH5p6We9YPV5cLUH9P4SgqQDDUbW+f416A32N57x iIy6NMSHLCJA5+CbdF0LOBxyF1GI8lXDb+o8tiaavN5IH1KScRz+pDRTt9FVHw5i /+/BRnwJ/Q8zuvxRRIaabTHsSNDf93a1RswDxxQaPrPyfdC46mizzz8u0G3Ulrku JyXGwMXAwjFFsHPLZS2+W6JaIx2Sdfj+x0s+dYgMy/hwG+Dn6kyU5aAs1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxUNOBqklPQ01C6p/PzT5Kim1knMB8GA1UdIwQY MBaAFK2l1Ss8qHRUV1tltyDu+BomKl86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMt ZDE4YWI0ZjdmNWRmLzEvckZRMDRHcVNVOURUVUxxbjhfTlBrcUtiV1NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMtZDE4YWI0ZjdmNWRm LzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Qh4MA0G CSqGSIb3DQEBCwUAA4IBAQAlIfAKmZ65hUAWCIMK+N8CVb9uWRwao6vRBfCdQjoT FW/o6L/jGhO2HUbS6pDlL653u6n/kViJ3FfqUmDIIZmlT86blmiOMv0hxh8jR4PS dUzukzKtJ4hfuS1p9td47sqKXiotTDU505cShhWoEBHWJBz3HZ+dhEiPeou95801 HKY0/gdSBw5PV7x8pyVL1IydEW67velkY7xlWYTTQeCsrCt9xDYceI5EnsZqIQ8P +9Oz/oNkEe5c7ii4DIFsn7/2sig4G5sK8shf463Lx8MvhQcrULL13zhn4x5TscYs MDzBqHmA5I4biKFunotDfj9vyyRuzJhmCmpwWTysUlMD -----END CERTIFICATE-----Generated at Wed Jan 21 17:17:21 2026 by rpki-client