This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa File: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (raw, json) Hash identifier: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo= Subject key identifier: ED:D7:59:E8:0B:93:68:A4:D5:1C:CC:F0:B5:C3:35:2A:87:1E:DE:32 Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df Certificate serial: 019B7CECEAFFC0A6CBD2D5D9E9C38EAB9AD4 Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa Signing time: Fri 02 Jan 2026 04:17:39 +0000 ROA not before: Fri 02 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 217.119.96.0/24 maxlen: 24 217.119.98.0/24 maxlen: 24 217.119.104.0/24 maxlen: 24 217.119.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ea:ff:c0:a6:cb:d2:d5:d9:e9:c3:8e:ab:9a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df Validity Not Before: Jan 2 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edd759e80b9368a4d51cccf0b5c3352a871ede32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:83:b7:9e:b9:d8:a6:13:11:68:33:cd:c9:b1: 23:2f:cf:1f:13:30:9d:6b:6c:a8:b6:69:d6:9a:4d: ab:cc:9d:60:b1:32:7a:5f:0d:93:d7:77:62:7d:84: 4a:5f:75:a8:7a:8e:c9:f8:f4:37:ec:28:38:50:04: 5e:18:3a:87:1b:aa:be:8d:5c:0b:55:0d:6b:65:90: 94:bd:d8:fb:2e:d8:e1:55:87:e3:2d:58:cd:81:d5: 0b:5f:d7:23:bc:18:f8:3d:9b:20:29:7d:0a:5b:49: 90:67:87:c3:33:51:fe:93:5c:16:76:77:41:8d:a8: 9b:0a:8c:8f:fa:d0:67:06:4c:1e:98:89:2c:ac:3e: ec:34:2d:06:65:bc:94:40:31:42:1c:e3:5c:21:ea: 98:c7:6d:e1:5d:65:7f:a9:4c:8c:19:a8:12:1a:30: d6:ee:fb:5f:5d:8a:43:17:c2:ec:ad:a7:5b:6e:49: 68:82:4d:1c:ef:4f:5b:cd:a3:12:ec:ad:06:8e:57: db:dc:c4:79:24:76:5e:3a:2c:37:df:e3:6b:4e:24: bf:49:39:7f:47:81:1d:53:38:ce:e1:ec:23:fe:a5: 6f:ed:c0:9f:72:f3:06:45:11:60:49:76:3e:45:b4: 6a:8d:44:3f:39:aa:4b:90:21:dd:8a:8f:6d:bd:2b: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D7:59:E8:0B:93:68:A4:D5:1C:CC:F0:B5:C3:35:2A:87:1E:DE:32 X509v3 Authority Key Identifier: keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.119.96.0/24 217.119.98.0/24 217.119.104.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:10:53:80:31:08:dd:f1:89:94:93:c0:47:a8:82:f6:67:2b: ba:c9:23:58:5b:66:6d:c9:06:c9:fc:48:b0:0a:d2:20:8b:b2: 05:48:fc:ab:65:a3:a0:9e:5d:b0:0f:20:89:d8:af:0a:df:3b: d5:a8:4f:3b:82:65:8b:fc:8c:4f:48:31:a2:6a:f2:c5:dd:42: 88:04:13:4c:32:a0:22:91:63:cb:05:f7:d2:da:62:a7:33:42: 81:a0:59:9c:af:ad:55:a1:53:3d:5a:d9:13:65:23:8b:55:94: e5:50:f0:86:b2:98:3f:6b:6e:23:dd:5e:69:80:2c:5b:a4:b8: c7:a9:0d:5a:ac:e0:cf:cb:71:bc:a9:d5:57:ba:06:38:57:d3: df:87:06:1e:84:7c:7d:38:ba:48:85:3c:5b:9b:4e:20:00:ea: 5c:d9:f1:c2:4e:35:09:d6:0e:0c:b8:2f:c1:81:5b:fe:aa:96: b4:3d:b1:ad:9f:57:56:35:60:c8:91:12:a0:a9:70:d1:1c:5d: 14:fa:23:b8:a0:14:e9:ec:a0:37:d8:a8:c8:ea:68:89:b1:19: f9:bc:b5:94:ee:17:cd:16:54:9c:db:42:a8:d5:23:02:23:9b: b6:ce:64:12:86:b6:b5:1c:1e:e2:ea:ce:af:18:16:ca:6f:75: 9e:8d:32:d1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87Or/wKbL0tXZ6cOOq5rUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDQ5ZmVmNmRhZDI2NjE5ZWJlZTA2NWQxZjIzMWMxYTI3 NmQ3ZGYwHhcNMjYwMTAyMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGQ3NTllODBiOTM2OGE0ZDUxY2NjZjBiNWMzMzUyYTg3MWVkZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IO3nrnYphMRaDPNybEjL88fEzCd a2yotmnWmk2rzJ1gsTJ6Xw2T13difYRKX3Woeo7J+PQ37Cg4UAReGDqHG6q+jVwL VQ1rZZCUvdj7LtjhVYfjLVjNgdULX9cjvBj4PZsgKX0KW0mQZ4fDM1H+k1wWdndB jaibCoyP+tBnBkwemIksrD7sNC0GZbyUQDFCHONcIeqYx23hXWV/qUyMGagSGjDW 7vtfXYpDF8Lsradbbklogk0c709bzaMS7K0Gjlfb3MR5JHZeOiw33+NrTiS/STl/ R4EdUzjO4ewj/qVv7cCfcvMGRRFgSXY+RbRqjUQ/OapLkCHdio9tvSsqowIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO3XWegLk2ik1RzM8LXDNSqHHt4yMB8GA1UdIwQY MBaAFMnUn+9trSZhnr7gZdHyMcGidtffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAt MGQ0ZjQwYmMzZmFhLzEvN2RkWjZBdVRhS1RWSE16d3RjTTFLb2NlM2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAtMGQ0ZjQwYmMzZmFh LzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2XdgAwQA 2XdiAwQB2XdoMA0GCSqGSIb3DQEBCwUAA4IBAQAtEFOAMQjd8YmUk8BHqIL2Zyu6 ySNYW2ZtyQbJ/EiwCtIgi7IFSPyrZaOgnl2wDyCJ2K8K3zvVqE87gmWL/IxPSDGi avLF3UKIBBNMMqAikWPLBffS2mKnM0KBoFmcr61VoVM9WtkTZSOLVZTlUPCGspg/ a24j3V5pgCxbpLjHqQ1arODPy3G8qdVXugY4V9PfhwYehHx9OLpIhTxbm04gAOpc 2fHCTjUJ1g4MuC/BgVv+qpa0PbGtn1dWNWDIkRKgqXDRHF0U+iO4oBTp7KA32KjI 6miJsRn5vLWU7hfNFlSc20Ko1SMCI5u2zmQShra1HB7i6s6vGBbKb3WejTLR -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:05 2026 by rpki-client