This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/j8NjqBIRJXHLU6fz4KRQ0ytmrY0.roa File: j8NjqBIRJXHLU6fz4KRQ0ytmrY0.roa (raw, json) Hash identifier: GHDQRyU8BNxmW/AD2/CXO2KZK3zM4XOOhxJSq3Xe3ZQ= Subject key identifier: 8F:C3:63:A8:12:11:25:71:CB:53:A7:F3:E0:A4:50:D3:2B:66:AD:8D Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019B2C2B3CFE4C99C2B195A9FD8066CB9077 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/j8NjqBIRJXHLU6fz4KRQ0ytmrY0.roa Signing time: Wed 17 Dec 2025 11:56:29 +0000 ROA not before: Wed 17 Dec 2025 11:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 217.147.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2b:3c:fe:4c:99:c2:b1:95:a9:fd:80:66:cb:90:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Dec 17 11:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8fc363a812112571cb53a7f3e0a450d32b66ad8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:a0:f4:7a:3b:99:35:43:23:45:a7:ab:0c: 9a:10:d6:8e:79:04:55:9a:b5:1a:b2:c8:a6:3e:83: 92:db:c5:cd:0a:9e:7a:26:ae:ca:ca:d0:86:ea:4a: 18:cf:e3:60:c7:5e:19:ed:05:18:ea:77:9f:4b:ac: 42:4d:4b:1f:41:20:fb:51:53:a8:9c:79:3e:5b:c7: ee:f1:05:d6:b1:1f:ed:4c:97:3d:d1:d8:53:f1:a3: 5b:87:f8:08:f8:b1:c0:6b:ed:c6:24:7a:6c:9a:a4: be:0f:d5:0c:87:3d:15:29:b7:64:af:f6:be:e8:ad: 46:c6:d1:13:14:b9:d9:aa:03:8f:d8:b5:28:d4:50: 9c:14:e5:5f:8c:ef:c3:35:39:b2:04:f7:d4:16:b2: 97:0e:4c:2d:0e:20:a8:6f:c2:93:15:dd:bc:5b:16: 42:62:11:ba:98:b2:fb:c6:b4:ef:60:06:f1:ec:0b: f7:8f:40:43:98:10:4d:3d:ff:f3:70:28:4b:f7:e5: 5d:19:bd:fa:bd:f7:f7:06:ec:0f:8e:02:4e:ad:4b: fe:a4:64:7d:db:68:f2:12:0a:2a:d6:ff:ab:6f:e0: f1:70:8b:c8:e5:87:54:f4:ab:ab:c0:27:dd:c7:e6: bb:e3:e3:b4:1d:2f:6b:f9:5c:d3:98:c0:0f:30:6d: da:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C3:63:A8:12:11:25:71:CB:53:A7:F3:E0:A4:50:D3:2B:66:AD:8D X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/j8NjqBIRJXHLU6fz4KRQ0ytmrY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.168.0/24 Signature Algorithm: sha256WithRSAEncryption b9:62:aa:12:2f:8e:c0:eb:37:36:1c:3c:87:05:3f:cb:9b:ef: 55:3e:23:64:ec:97:6c:3b:ab:4e:d0:71:c2:c3:cb:b8:01:b8: 20:7a:4f:79:5d:59:d3:f4:7b:3d:1b:90:3f:df:e6:9b:79:26: fa:ee:38:53:b7:c6:9f:6e:68:ed:37:74:4c:7d:73:e4:f1:6f: 47:b7:56:b8:3c:75:a5:96:0b:6c:75:df:32:94:11:8b:f1:75: 98:83:09:9d:cf:ac:93:fd:1d:a3:52:42:b6:81:e8:74:51:cc: c9:67:38:de:82:48:88:64:97:68:d3:0a:e6:44:b1:61:d5:57: 71:56:f2:df:7f:36:44:fe:20:a3:dd:4a:10:72:16:c2:b0:22: 52:ca:cf:e1:c7:bb:aa:d2:6a:3d:88:cd:d6:03:14:b4:fa:db: 3d:f9:76:8d:2f:f0:3a:91:0b:1b:1a:64:8e:f1:c4:76:93:d5: 60:bf:71:71:c1:c2:e7:a1:50:be:c1:7f:ff:22:77:89:76:41: 95:b6:d6:3f:ec:9a:9d:a3:73:81:f9:20:f1:c4:ef:82:f8:1b: ab:77:b2:41:c4:1f:8c:84:9e:b1:a6:13:e7:f1:ea:4a:48:cb: 87:a3:10:e2:d0:fd:35:65:cd:f4:64:6f:f1:7d:cf:e1:a0:7d: 38:55:fe:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZssKzz+TJnCsZWp/YBmy5B3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUxMjE3MTE1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmMzNjNhODEyMTEyNTcxY2I1M2E3ZjNlMGE0NTBkMzJiNjZhZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq6g9Ho7mTVDI0WnqwyaENaOeQRV mrUassimPoOS28XNCp56Jq7KytCG6koYz+Ngx14Z7QUY6nefS6xCTUsfQSD7UVOo nHk+W8fu8QXWsR/tTJc90dhT8aNbh/gI+LHAa+3GJHpsmqS+D9UMhz0VKbdkr/a+ 6K1GxtETFLnZqgOP2LUo1FCcFOVfjO/DNTmyBPfUFrKXDkwtDiCob8KTFd28WxZC YhG6mLL7xrTvYAbx7Av3j0BDmBBNPf/zcChL9+VdGb36vff3BuwPjgJOrUv+pGR9 22jyEgoq1v+rb+DxcIvI5YdU9KurwCfdx+a74+O0HS9r+VzTmMAPMG3auwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI/DY6gSESVxy1On8+CkUNMrZq2NMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvajhOanFCSVJKWEhMVTZmejRLUlEweXRtclkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZOoMA0G CSqGSIb3DQEBCwUAA4IBAQC5YqoSL47A6zc2HDyHBT/Lm+9VPiNk7JdsO6tO0HHC w8u4Abggek95XVnT9Hs9G5A/3+abeSb67jhTt8afbmjtN3RMfXPk8W9Ht1a4PHWl lgtsdd8ylBGL8XWYgwmdz6yT/R2jUkK2geh0UczJZzjegkiIZJdo0wrmRLFh1Vdx VvLffzZE/iCj3UoQchbCsCJSys/hx7uq0mo9iM3WAxS0+ts9+XaNL/A6kQsbGmSO 8cR2k9Vgv3FxwcLnoVC+wX//IneJdkGVttY/7Jqdo3OB+SDxxO+C+Burd7JBxB+M hJ6xphPn8epKSMuHoxDi0P01Zc30ZG/xfc/hoH04Vf5g -----END CERTIFICATE-----Generated at Fri Dec 19 20:48:41 2025 by rpki-client