This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/ctKt52Vn_3gdSjgBKmq9nexMId8.roa File: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (raw, json) Hash identifier: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k= Subject key identifier: 72:D2:AD:E7:65:67:FF:78:1D:4A:38:01:2A:6A:BD:9D:EC:4C:21:DF Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5 Certificate serial: 019B7F1382E486E4CEAFA96EC8D56AD1C32B Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/ctKt52Vn_3gdSjgBKmq9nexMId8.roa Signing time: Fri 02 Jan 2026 14:19:03 +0000 ROA not before: Fri 02 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 217.65.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:82:e4:86:e4:ce:af:a9:6e:c8:d5:6a:d1:c3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5 Validity Not Before: Jan 2 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72d2ade76567ff781d4a38012a6abd9dec4c21df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:c0:90:fc:f3:3e:2a:fb:1c:f7:f1:d5:a8: cd:03:ce:52:03:eb:f1:16:3a:63:91:33:6a:bc:c1: ea:35:d3:a8:3e:7c:69:72:6f:51:bc:e5:86:27:2c: 7f:c2:c4:14:3b:fc:61:34:ea:50:0b:83:c4:dd:0a: 04:b1:94:1f:57:e3:af:df:02:05:44:18:9c:49:ef: 9c:4b:97:a7:c5:22:08:e1:ff:10:89:8e:a1:4b:07: 86:43:52:bd:87:e2:fb:43:1e:31:c4:18:3f:2a:30: e2:84:32:77:1a:f8:2e:3d:a5:70:b8:7f:58:f6:2e: 0a:40:cb:9b:25:ef:b4:7c:90:53:c4:d5:88:e6:23: ce:63:90:01:d9:0c:2b:80:d1:97:6b:cd:9f:75:f8: a6:6a:6e:64:4c:c6:a7:39:73:c4:d8:7e:9c:6f:4e: 7a:de:52:cf:4b:9b:b6:8b:c2:f8:68:be:f2:89:27: f5:e6:4a:7a:52:56:a2:e8:a4:98:10:0a:a0:56:0a: a4:b6:7e:89:12:a4:d5:69:90:8f:4f:1b:e7:02:01: 68:03:82:20:d5:99:f7:d1:8f:77:1d:95:26:ea:ba: 8c:7e:dd:a9:b4:a7:b5:af:8f:04:a7:8b:e2:91:a6: d1:95:79:53:62:a1:27:4d:8d:b1:0f:df:b1:a5:46: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D2:AD:E7:65:67:FF:78:1D:4A:38:01:2A:6A:BD:9D:EC:4C:21:DF X509v3 Authority Key Identifier: keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/ctKt52Vn_3gdSjgBKmq9nexMId8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.65.72.0/24 Signature Algorithm: sha256WithRSAEncryption a7:5e:22:60:db:9a:fe:20:d3:3b:b0:49:ae:f1:98:4e:f5:5b: 91:c9:43:83:cf:4a:54:c4:49:52:60:d8:5f:2c:30:62:09:ab: 70:07:7a:e4:43:48:ac:a3:a9:db:26:38:a6:b0:05:7a:12:c1: b7:35:8d:97:0f:74:c8:28:1c:26:aa:d0:2b:db:69:17:e6:3b: f3:24:7a:16:3a:99:5a:78:0d:7d:17:ec:a2:fb:db:2e:30:96: 98:49:fa:9c:b9:07:1d:2c:3f:66:39:0c:ae:22:02:3b:61:48: ec:0b:4a:73:56:b5:d2:9c:5a:fd:22:6a:f9:08:4d:6e:f5:d9: fe:be:ed:9f:de:0c:01:83:07:25:9d:2c:4c:1a:80:dc:7a:38: ec:c0:4c:f5:f9:f0:72:d7:9a:0b:48:07:2e:4b:50:ba:07:dd: f7:1e:43:03:9c:a1:de:ca:0b:98:bf:35:80:e1:41:55:07:28: 50:4b:0d:a2:ca:bf:7f:0a:95:ed:82:a5:c8:4c:11:cc:14:bc: 48:9a:5f:66:f7:a0:a9:fa:98:74:09:02:45:86:cc:d3:5c:40: 1d:a2:03:eb:f9:9a:6f:1c:b4:3f:77:1a:07:9a:ae:db:f4:e9: 87:14:4c:4b:72:27:c9:d7:48:c0:5e:be:63:47:a8:c3:70:57: 58:88:43:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E4LkhuTOr6luyNVq0cMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNWQ1YjY0NGUyMmZiNDg4ZTRkNmMwMDEyYjBhYWJmMjM4 ZTYxZTUwHhcNMjYwMTAyMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmQyYWRlNzY1NjdmZjc4MWQ0YTM4MDEyYTZhYmQ5ZGVjNGMyMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPvAkPzzPir7HPfx1ajNA85SA+vx FjpjkTNqvMHqNdOoPnxpcm9RvOWGJyx/wsQUO/xhNOpQC4PE3QoEsZQfV+Ov3wIF RBicSe+cS5enxSII4f8QiY6hSweGQ1K9h+L7Qx4xxBg/KjDihDJ3GvguPaVwuH9Y 9i4KQMubJe+0fJBTxNWI5iPOY5AB2QwrgNGXa82fdfimam5kTManOXPE2H6cb056 3lLPS5u2i8L4aL7yiSf15kp6Ulai6KSYEAqgVgqktn6JEqTVaZCPTxvnAgFoA4Ig 1Zn30Y93HZUm6rqMft2ptKe1r48Ep4vikabRlXlTYqEnTY2xD9+xpUbTowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHLSredlZ/94HUo4ASpqvZ3sTCHfMB8GA1UdIwQY MBaAFGNdW2ROIvtIjk1sABKwqr8jjmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGIt ZjVhZjYxNmI1NDgzLzEvY3RLdDUyVm5fM2dkU2pnQkttcTluZXhNSWQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGItZjVhZjYxNmI1NDgz LzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UFIMA0G CSqGSIb3DQEBCwUAA4IBAQCnXiJg25r+INM7sEmu8ZhO9VuRyUODz0pUxElSYNhf LDBiCatwB3rkQ0iso6nbJjimsAV6EsG3NY2XD3TIKBwmqtAr22kX5jvzJHoWOpla eA19F+yi+9suMJaYSfqcuQcdLD9mOQyuIgI7YUjsC0pzVrXSnFr9Imr5CE1u9dn+ vu2f3gwBgwclnSxMGoDcejjswEz1+fBy15oLSAcuS1C6B933HkMDnKHeyguYvzWA 4UFVByhQSw2iyr9/CpXtgqXITBHMFLxIml9m96Cp+ph0CQJFhszTXEAdogPr+Zpv HLQ/dxoHmq7b9OmHFExLcifJ10jAXr5jR6jDcFdYiEOM -----END CERTIFICATE-----Generated at Mon Jan 19 11:26:17 2026 by rpki-client