This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/pG3Dfbd9hX3TvxsYc8iEA-E9yvU.roa File: pG3Dfbd9hX3TvxsYc8iEA-E9yvU.roa (raw, json) Hash identifier: RKfqaHBHufPXQ+FRBmatkD236oqFKLw1y5df/WqN564= Subject key identifier: A4:6D:C3:7D:B7:7D:85:7D:D3:BF:1B:18:73:C8:84:03:E1:3D:CA:F5 Certificate issuer: /CN=27fdce9db6af9b8133a32617eef4e046444efdd4 Certificate serial: 019B7BA54215B1DC963FEE3D8617EF7283B6 Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/pG3Dfbd9hX3TvxsYc8iEA-E9yvU.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60274 IP address blocks: 207.244.220.0/24 maxlen: 24 2001:67c:ce0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:42:15:b1:dc:96:3f:ee:3d:86:17:ef:72:83:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a46dc37db77d857dd3bf1b1873c88403e13dcaf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:be:a8:3e:97:d6:13:f6:47:f0:fd:a4:5d: 70:c8:d1:ea:db:82:f1:72:ec:7c:ce:be:85:e3:37: ec:01:65:18:12:24:be:e9:e5:2e:17:a3:18:dc:c9: 71:65:98:fb:c2:46:4c:42:c5:f0:d5:bd:02:34:45: a0:b8:9f:69:b1:0d:0c:ca:66:a6:32:0c:2c:ef:71: 9d:a1:6d:f0:38:af:a6:88:6a:c9:fd:ca:1b:42:65: 58:cb:be:84:d1:b8:d0:b7:9a:7f:0d:3d:59:1c:79: ef:b8:80:71:e5:9a:51:2b:d1:40:2c:e6:b3:b9:ee: 91:1f:99:55:c7:0c:cf:42:b2:66:02:de:42:6b:f9: a9:71:1d:8e:64:d5:49:e8:5c:cc:47:a6:6a:f7:31: c8:cc:ed:b6:90:98:e3:68:b3:a0:6e:10:08:eb:1f: f6:d5:88:0e:cc:5f:3e:a0:2c:02:4e:36:42:ad:96: ef:71:cd:42:78:4e:26:e7:25:5b:2f:52:d1:1a:c6: 95:45:1a:f5:f0:c7:4b:df:b3:cc:bd:15:48:62:d3: 55:62:4a:7d:bc:41:b9:f2:00:4c:18:84:ef:8f:9e: bb:d3:c6:e3:65:18:0c:65:20:68:87:4d:39:9d:9f: c0:96:07:0c:ed:06:9d:4e:0b:14:08:c6:17:14:4f: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6D:C3:7D:B7:7D:85:7D:D3:BF:1B:18:73:C8:84:03:E1:3D:CA:F5 X509v3 Authority Key Identifier: keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/pG3Dfbd9hX3TvxsYc8iEA-E9yvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.244.220.0/24 IPv6: 2001:67c:ce0::/48 Signature Algorithm: sha256WithRSAEncryption 3b:c2:cb:81:4a:1f:2e:39:ae:21:17:fe:ce:09:62:bb:89:f6: 5b:12:a0:16:52:11:d5:4d:bf:76:53:64:33:58:1c:f0:c7:ca: d8:a5:19:e9:7d:20:5e:1c:2e:f7:79:6f:4f:79:fa:bc:24:da: a1:64:f3:a7:9b:b4:90:df:20:68:16:e6:d3:21:5c:18:5d:4a: f5:a4:fd:50:d3:37:4e:af:97:25:ae:24:79:0f:25:33:d8:23: 94:46:15:fc:70:0a:a5:7f:e3:be:61:e6:cb:92:3f:92:44:19: 22:25:5c:2d:ff:4a:7e:44:9d:dd:7a:49:bf:cf:6b:c6:e4:f3: 9b:3a:ef:74:e7:d1:85:42:0d:d3:47:cc:a1:3a:6e:32:39:22: bb:23:be:80:ea:76:3a:70:01:c2:4f:e0:7f:04:ef:b8:34:78: a0:0f:ec:9e:ac:74:0d:cd:04:1f:08:99:44:cf:41:54:0e:85: 46:39:9e:74:80:b9:53:43:89:85:74:6b:87:7c:9c:f6:b7:06: 46:43:36:df:a5:61:6e:b1:33:63:af:93:c4:c0:f4:6f:35:ed: 4a:d2:c4:58:d2:80:27:c6:67:42:0d:97:4d:e6:45:78:13:9d: 9b:c6:ed:0d:7b:0f:e1:61:9f:82:44:08:9e:6f:cb:64:91:c1: e9:5d:18:2f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pUIVsdyWP+49hhfvcoO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZmRjZTlkYjZhZjliODEzM2EzMjYxN2VlZjRlMDQ2NDQ0 ZWZkZDQwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDZkYzM3ZGI3N2Q4NTdkZDNiZjFiMTg3M2M4ODQwM2UxM2RjYWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCG+qD6X1hP2R/D9pF1wyNHq24Lx cux8zr6F4zfsAWUYEiS+6eUuF6MY3MlxZZj7wkZMQsXw1b0CNEWguJ9psQ0Mymam Mgws73GdoW3wOK+miGrJ/cobQmVYy76E0bjQt5p/DT1ZHHnvuIBx5ZpRK9FALOaz ue6RH5lVxwzPQrJmAt5Ca/mpcR2OZNVJ6FzMR6Zq9zHIzO22kJjjaLOgbhAI6x/2 1YgOzF8+oCwCTjZCrZbvcc1CeE4m5yVbL1LRGsaVRRr18MdL37PMvRVIYtNVYkp9 vEG58gBMGITvj56708bjZRgMZSBoh005nZ/AlgcM7QadTgsUCMYXFE/x1QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKRtw323fYV9078bGHPIhAPhPcr1MB8GA1UdIwQY MBaAFCf9zp22r5uBM6MmF+704EZETv3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl8zT25iYXZtNEV6b3lZWDd2VGdSa1JPX2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wNDMzZTMtYmQ2MS00ZDEzLTg0N2Et ZDkwYzYxNzdlNDAyLzEvcEczRGZiZDloWDNUdnhzWWM4aUVBLUU5eXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wNDMzZTMtYmQ2MS00ZDEzLTg0N2EtZDkwYzYxNzdlNDAy LzEvSl8zT25iYXZtNEV6b3lZWDd2VGdSa1JPX2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz/TcMA8E AgACMAkDBwAgAQZ8DOAwDQYJKoZIhvcNAQELBQADggEBADvCy4FKHy45riEX/s4J YruJ9lsSoBZSEdVNv3ZTZDNYHPDHytilGel9IF4cLvd5b095+rwk2qFk86ebtJDf IGgW5tMhXBhdSvWk/VDTN06vlyWuJHkPJTPYI5RGFfxwCqV/475h5suSP5JEGSIl XC3/Sn5End16Sb/Pa8bk85s673Tn0YVCDdNHzKE6bjI5IrsjvoDqdjpwAcJP4H8E 77g0eKAP7J6sdA3NBB8ImUTPQVQOhUY5nnSAuVNDiYV0a4d8nPa3BkZDNt+lYW6x M2Ovk8TA9G817UrSxFjSgCfGZ0INl03mRXgTnZvG7Q17D+Fhn4JECJ5vy2SRweld GC8= -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:02 2026 by rpki-client