This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/X_c4nULo2I9_8M6Tnr9LOGMWT4o.roa File: X_c4nULo2I9_8M6Tnr9LOGMWT4o.roa (raw, json) Hash identifier: OYUYahQ2k3gq1hCdgyN2LHpOg006aLSKZ8M7SU5zas0= Subject key identifier: 5F:F7:38:9D:42:E8:D8:8F:7F:F0:CE:93:9E:BF:4B:38:63:16:4F:8A Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce Certificate serial: 019ABF9500D86521CD312E504534D398A6DB Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/X_c4nULo2I9_8M6Tnr9LOGMWT4o.roa Signing time: Wed 26 Nov 2025 09:53:24 +0000 ROA not before: Wed 26 Nov 2025 09:53:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6453 IP address blocks: 62.215.219.0/24 maxlen: 24 62.215.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:95:00:d8:65:21:cd:31:2e:50:45:34:d3:98:a6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce Validity Not Before: Nov 26 09:53:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5ff7389d42e8d88f7ff0ce939ebf4b3863164f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d3:22:10:86:5d:af:e6:50:ce:4f:35:b9:21: a4:a6:2a:c5:01:59:af:08:d5:47:6b:60:af:ee:b5: 41:5f:8b:30:ac:fe:00:49:4b:1d:da:72:b3:27:40: 1e:0f:67:cc:43:f3:da:11:82:e9:6e:58:ff:38:ac: bb:9d:e8:5a:78:06:9e:0a:ba:98:eb:4b:73:48:71: 6c:c7:60:6e:99:e2:f0:2d:69:fd:c8:fd:5c:55:d4: 7e:a6:f2:34:3b:ef:6e:cd:f0:ec:0e:10:8a:24:35: 85:8a:8f:01:68:6e:b2:9a:db:e3:77:b2:c2:32:27: e9:c1:47:6c:46:c0:7a:77:4a:6c:c9:40:30:0f:6a: fa:25:b8:09:48:87:9c:02:2a:f1:4c:4f:ae:10:26: 65:a7:1d:62:44:a9:6d:50:87:47:99:c5:8f:22:1c: 0d:08:39:cc:57:8b:85:15:53:e0:92:27:69:1c:90: 1b:fa:e2:20:62:f1:63:af:d1:d5:1e:ee:13:ed:04: 57:55:23:31:fd:87:bb:cf:6f:53:43:7d:7b:97:9f: fd:2f:b2:96:14:f5:99:0e:e9:d1:80:3b:94:48:65: b9:92:cd:c3:35:cf:cb:96:ab:42:04:96:0e:62:ed: 9e:c9:7f:21:df:7f:95:8f:85:d7:73:eb:ea:79:08: 36:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F7:38:9D:42:E8:D8:8F:7F:F0:CE:93:9E:BF:4B:38:63:16:4F:8A X509v3 Authority Key Identifier: keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/X_c4nULo2I9_8M6Tnr9LOGMWT4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.215.219.0/24 62.215.253.0/24 Signature Algorithm: sha256WithRSAEncryption 21:1e:bc:2d:ce:bc:04:b2:46:c9:8a:7b:60:2e:a1:af:ed:57: 70:5f:46:13:fd:e0:67:84:aa:f2:86:17:bd:62:12:18:75:b5: 3f:4b:87:63:4b:35:21:92:c5:5d:99:ee:15:e7:1e:42:23:85: 90:13:15:18:87:e2:55:d8:1c:f8:f5:63:e9:f9:3d:1e:29:0c: 0f:8d:4e:f2:ad:a0:b9:0f:ff:0c:6c:17:81:84:4f:12:b4:8c: c5:a2:81:c1:87:f9:8d:c6:5d:39:4a:79:b0:b3:0f:41:ef:23: 52:40:0d:a2:35:13:b9:09:45:5e:9f:a5:1d:04:af:5f:d6:21: 6a:e7:b6:1e:e2:7f:92:a6:df:51:8d:6a:ca:4f:ba:f8:f5:d5: d8:2d:39:53:72:79:82:a5:2f:3d:70:5e:64:78:82:c1:57:57: 0f:f2:ab:63:db:e5:52:c9:75:43:19:01:29:5b:aa:89:45:21: d3:76:3a:f5:51:eb:07:4c:bb:f3:29:eb:98:46:b4:61:f6:40: c4:1c:64:8a:32:21:9f:a4:8f:91:75:cb:77:62:38:22:f4:92: ce:a3:1e:8a:69:42:78:3f:97:2e:9c:62:af:ad:71:ff:ea:5f: 23:9b:75:90:eb:5c:ff:74:49:5f:32:cd:a3:57:b5:f5:e7:2b: 25:16:ae:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq/lQDYZSHNMS5QRTTTmKbbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0 N2ZkY2UwHhcNMjUxMTI2MDk1MzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY3Mzg5ZDQyZThkODhmN2ZmMGNlOTM5ZWJmNGIzODYzMTY0ZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NMiEIZdr+ZQzk81uSGkpirFAVmv CNVHa2Cv7rVBX4swrP4ASUsd2nKzJ0AeD2fMQ/PaEYLpblj/OKy7nehaeAaeCrqY 60tzSHFsx2BumeLwLWn9yP1cVdR+pvI0O+9uzfDsDhCKJDWFio8BaG6ymtvjd7LC MifpwUdsRsB6d0psyUAwD2r6JbgJSIecAirxTE+uECZlpx1iRKltUIdHmcWPIhwN CDnMV4uFFVPgkidpHJAb+uIgYvFjr9HVHu4T7QRXVSMx/Ye7z29TQ317l5/9L7KW FPWZDunRgDuUSGW5ks3DNc/LlqtCBJYOYu2eyX8h33+Vj4XXc+vqeQg2KwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF/3OJ1C6NiPf/DOk56/SzhjFk+KMB8GA1UdIwQY MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt YjczYTM2ZDkzOWIyLzEvWF9jNG5VTG8ySTlfOE02VG5yOUxPR01XVDRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPtfbAwQA Ptf9MA0GCSqGSIb3DQEBCwUAA4IBAQAhHrwtzrwEskbJintgLqGv7VdwX0YT/eBn hKryhhe9YhIYdbU/S4djSzUhksVdme4V5x5CI4WQExUYh+JV2Bz49WPp+T0eKQwP jU7yraC5D/8MbBeBhE8StIzFooHBh/mNxl05Snmwsw9B7yNSQA2iNRO5CUVen6Ud BK9f1iFq57Ye4n+Spt9RjWrKT7r49dXYLTlTcnmCpS89cF5keILBV1cP8qtj2+VS yXVDGQEpW6qJRSHTdjr1UesHTLvzKeuYRrRh9kDEHGSKMiGfpI+Rdct3Yjgi9JLO ox6KaUJ4P5cunGKvrXH/6l8jm3WQ61z/dElfMs2jV7X15yslFq6b -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:22 2025 by rpki-client