This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/T5aiE1hBQ7IRSCWrSsHsYtBRcAg.roa File: T5aiE1hBQ7IRSCWrSsHsYtBRcAg.roa (raw, json) Hash identifier: 309chVwaxlsKtPuysVWOW95E7n0FUrlzdRWGLRMTzgM= Subject key identifier: 4F:96:A2:13:58:41:43:B2:11:48:25:AB:4A:C1:EC:62:D0:51:70:08 Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0 Certificate serial: 019AEE70542DD1282D70C69226E3ABF64245 Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/T5aiE1hBQ7IRSCWrSsHsYtBRcAg.roa Signing time: Fri 05 Dec 2025 12:15:30 +0000 ROA not before: Fri 05 Dec 2025 12:15:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25279 IP address blocks: 217.68.0.0/20 maxlen: 24 2a02:328::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:70:54:2d:d1:28:2d:70:c6:92:26:e3:ab:f6:42:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0 Validity Not Before: Dec 5 12:15:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4f96a213584143b2114825ab4ac1ec62d0517008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:08:44:64:32:0f:12:79:68:c2:d5:84:0d: ae:f4:57:8b:2e:c3:5b:20:1b:a9:fe:45:60:9b:98: ed:a2:89:86:d1:9d:4c:d0:6d:dc:e3:4e:1b:ab:da: dc:36:2f:dc:5a:74:36:5c:0a:88:bd:1c:30:e4:0c: 80:8b:45:e9:0a:8b:16:df:3f:12:52:56:30:ed:ad: e4:9e:e7:d9:9f:4b:0b:8a:7e:5c:b0:c1:9e:f4:fd: 21:44:88:4e:f1:66:61:8e:c6:0a:21:84:c9:df:e6: 5d:53:62:96:b7:d6:10:5b:42:c8:13:a4:72:30:a6: 95:a2:0d:2a:e2:6d:16:cb:14:b3:b3:b6:e3:d7:ab: 50:3e:a7:ad:3b:09:bf:68:43:7b:77:fa:04:d1:04: bf:da:75:1b:2b:41:f5:6b:28:dd:64:ee:ec:7e:21: 7b:60:c7:17:e6:36:03:ae:01:f4:27:f2:84:9b:25: d9:9e:ea:09:6e:17:3d:4b:83:ec:d0:47:12:84:7d: 3e:c9:ba:ed:e8:78:33:3f:7e:b1:3e:cc:df:04:eb: ff:29:64:b7:d1:0c:d6:3e:d1:3f:87:d7:92:e7:74: 8e:7e:bf:fe:6d:d7:e3:9b:5a:91:56:04:e4:30:5c: b9:08:19:55:ac:fe:bb:71:b4:bd:d2:78:fb:c4:84: e2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:96:A2:13:58:41:43:B2:11:48:25:AB:4A:C1:EC:62:D0:51:70:08 X509v3 Authority Key Identifier: keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/T5aiE1hBQ7IRSCWrSsHsYtBRcAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.68.0.0/20 IPv6: 2a02:328::/29 Signature Algorithm: sha256WithRSAEncryption 87:43:03:2d:96:aa:58:65:77:9d:04:0f:e7:b9:cd:e8:30:4d: 09:10:91:6a:01:0d:4f:bc:61:49:69:7c:2a:cb:d1:7a:e1:54: df:c1:56:d9:09:94:7c:cb:61:e0:63:04:02:88:65:df:da:86: ee:e2:79:de:b1:68:15:7f:51:d5:50:3d:af:62:fc:50:fc:0d: 3f:4c:94:f6:61:6c:bb:e5:cf:9d:ae:4b:6e:04:d8:04:1b:c6: b4:c7:bc:8a:54:28:1e:95:4b:75:61:0a:21:8f:a4:54:f4:09: a8:d2:34:c9:bf:56:eb:d0:66:86:2e:2b:97:15:9e:a0:b9:dc: 68:d2:89:39:34:d4:0a:31:21:7a:46:5f:04:1d:6f:b3:58:bc: f3:ef:22:b0:15:84:02:74:c8:fe:9a:e9:95:9d:1a:6d:52:70: a3:a7:fb:f5:bb:74:55:33:8e:e0:df:82:67:0b:1a:5e:53:50: e5:97:eb:0b:10:ab:f1:2f:7b:68:72:b1:2e:39:75:b0:db:40: 19:83:c7:7a:01:84:85:80:94:6d:47:ee:a2:6b:d0:54:48:05: c3:fe:5d:cd:ae:72:08:04:25:82:c8:d5:e6:61:74:21:7e:f1: 4a:0a:54:2d:7d:f3:d2:51:c3:38:2c:41:16:e5:88:84:f0:96: 88:82:f1:40 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrucFQt0SgtcMaSJuOr9kJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZmRlMmFkNzEyM2IzYTg2MDA4MDU4ODA1YmIxMDE2ZjZi NzNmYjAwHhcNMjUxMjA1MTIxNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Zjk2YTIxMzU4NDE0M2IyMTE0ODI1YWI0YWMxZWM2MmQwNTE3MDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NQIRGQyDxJ5aMLVhA2u9FeLLsNb IBup/kVgm5jtoomG0Z1M0G3c404bq9rcNi/cWnQ2XAqIvRww5AyAi0XpCosW3z8S UlYw7a3knufZn0sLin5csMGe9P0hRIhO8WZhjsYKIYTJ3+ZdU2KWt9YQW0LIE6Ry MKaVog0q4m0WyxSzs7bj16tQPqetOwm/aEN7d/oE0QS/2nUbK0H1ayjdZO7sfiF7 YMcX5jYDrgH0J/KEmyXZnuoJbhc9S4Ps0EcShH0+ybrt6HgzP36xPszfBOv/KWS3 0QzWPtE/h9eS53SOfr/+bdfjm1qRVgTkMFy5CBlVrP67cbS90nj7xITihQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE+WohNYQUOyEUglq0rB7GLQUXAIMB8GA1UdIwQY MBaAFD794q1xI7OoYAgFiAW7EBb2tz+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kNjE3OWYtNGJkYS00ODcxLTg5Nzct YzgwZDMzYTI2NTM1LzEvVDVhaUUxaEJRN0lSU0NXclNzSHNZdEJSY0FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kNjE3OWYtNGJkYS00ODcxLTg5NzctYzgwZDMzYTI2NTM1 LzEvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2UQAMA0E AgACMAcDBQMqAgMoMA0GCSqGSIb3DQEBCwUAA4IBAQCHQwMtlqpYZXedBA/nuc3o ME0JEJFqAQ1PvGFJaXwqy9F64VTfwVbZCZR8y2HgYwQCiGXf2obu4nnesWgVf1HV UD2vYvxQ/A0/TJT2YWy75c+drktuBNgEG8a0x7yKVCgelUt1YQohj6RU9Amo0jTJ v1br0GaGLiuXFZ6gudxo0ok5NNQKMSF6Rl8EHW+zWLzz7yKwFYQCdMj+mumVnRpt UnCjp/v1u3RVM47g34JnCxpeU1Dll+sLEKvxL3tocrEuOXWw20AZg8d6AYSFgJRt R+6ia9BUSAXD/l3NrnIIBCWCyNXmYXQhfvFKClQtffPSUcM4LEEW5YiE8JaIgvFA -----END CERTIFICATE-----Generated at Wed Dec 17 01:13:54 2025 by rpki-client