This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/Sf9NlL9u0gQktP7IoLN4vYHJsgM.roa File: Sf9NlL9u0gQktP7IoLN4vYHJsgM.roa (raw, json) Hash identifier: ppXLp3rl84ATGcOkgVXnAwMIjcmYz64iVP17eQHXfwc= Subject key identifier: 49:FF:4D:94:BF:6E:D2:04:24:B4:FE:C8:A0:B3:78:BD:81:C9:B2:03 Certificate issuer: /CN=0f4207ce80855a5cc97c0ba473b95872c7c193c4 Certificate serial: 019AD984C4504B93238DB5B3FE806995D684 Authority key identifier: 0F:42:07:CE:80:85:5A:5C:C9:7C:0B:A4:73:B9:58:72:C7:C1:93:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/Sf9NlL9u0gQktP7IoLN4vYHJsgM.roa Signing time: Mon 01 Dec 2025 10:45:48 +0000 ROA not before: Mon 01 Dec 2025 10:45:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215020 IP address blocks: 217.180.12.0/23 maxlen: 23 217.180.12.0/24 maxlen: 24 217.180.13.0/24 maxlen: 24 2a12:8040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:84:c4:50:4b:93:23:8d:b5:b3:fe:80:69:95:d6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f4207ce80855a5cc97c0ba473b95872c7c193c4 Validity Not Before: Dec 1 10:45:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=49ff4d94bf6ed20424b4fec8a0b378bd81c9b203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:79:4f:5a:50:a3:e4:57:7c:1f:12:d8:ee: 92:65:85:43:b4:11:f6:94:37:18:8b:17:63:8f:e8: 6e:d1:e8:83:63:a1:ef:51:66:55:45:fe:5b:1a:16: 87:a7:d0:fe:e9:a2:e2:07:ab:f9:66:e4:17:37:e1: 3b:f8:78:c4:f9:b5:46:1d:51:b7:9e:36:c2:71:0c: 50:0f:ad:c0:bb:50:fc:8e:cc:e0:74:aa:2e:a0:ca: 44:60:3a:82:c3:84:98:5b:de:6c:33:a4:eb:c3:d0: 29:58:88:f7:56:22:8c:b2:d2:ee:a1:46:f5:9d:0e: c3:c7:65:1c:56:4c:42:69:30:34:bf:97:b4:c5:5b: e0:be:52:d6:7c:08:6c:b1:38:fc:48:a3:ff:e7:75: 67:6f:ab:e6:69:d3:cd:b0:52:64:bd:f2:b8:ac:69: 39:28:8e:23:5a:1e:f5:0a:0a:14:e6:04:ce:ce:a7: 8b:eb:76:1e:51:c4:b2:b8:9e:c4:ad:cd:b2:f2:54: 28:0f:bd:16:6d:05:a2:7d:cd:83:4e:a4:c2:7c:8a: 59:b5:c4:ee:eb:3d:31:ee:2d:3b:97:a0:80:42:0f: 1b:fd:78:ec:5c:be:d3:17:95:fe:71:7b:5b:f9:e5: f7:b4:71:ac:13:be:80:80:01:9f:83:65:b5:04:06: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FF:4D:94:BF:6E:D2:04:24:B4:FE:C8:A0:B3:78:BD:81:C9:B2:03 X509v3 Authority Key Identifier: keyid:0F:42:07:CE:80:85:5A:5C:C9:7C:0B:A4:73:B9:58:72:C7:C1:93:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/Sf9NlL9u0gQktP7IoLN4vYHJsgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.180.12.0/23 IPv6: 2a12:8040::/29 Signature Algorithm: sha256WithRSAEncryption 52:f4:d5:d8:9b:96:ae:75:2c:3a:fb:fe:5b:74:42:37:f9:d2: 82:c7:47:22:fe:6b:8b:ec:5e:b4:00:d2:80:fa:4e:a2:48:06: 32:3a:e6:94:ee:64:86:c3:14:57:46:32:dd:8e:00:7a:a5:db: 3a:13:ef:14:d9:65:5f:a0:bb:ea:b2:02:4b:4f:4e:9f:81:b9: f5:0b:d9:e2:c2:c1:20:fb:25:16:b3:75:32:f2:8a:86:bb:3f: 3c:c8:25:04:93:23:24:4a:1c:b1:f7:e2:68:14:31:f7:fa:62: e8:b0:59:fe:8a:ca:97:85:3e:5b:2b:70:4d:e8:50:f8:db:de: b8:9a:a2:f2:94:cd:fc:a9:81:b0:c3:ba:59:b1:6d:70:0f:19: 45:0b:85:66:c0:af:fa:21:40:f9:32:7a:93:e4:39:45:c8:db: ff:de:ae:7a:78:31:f8:d3:76:62:b3:6c:b7:8b:11:7b:0e:a4: 32:ee:e4:a3:63:e7:47:8e:e1:b2:21:da:30:f5:70:ae:7a:21: 29:37:93:84:50:49:0b:41:aa:85:a8:0d:70:a4:93:0c:43:8e: 97:fd:13:be:9d:5c:23:42:c9:9c:57:7b:8c:20:17:92:f3:58: 3e:50:2c:af:86:bb:4f:13:90:1d:cd:83:23:50:c7:96:a6:4f: b4:be:83:ee -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrZhMRQS5MjjbWz/oBpldaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNDIwN2NlODA4NTVhNWNjOTdjMGJhNDczYjk1ODcyYzdj MTkzYzQwHhcNMjUxMjAxMTA0NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWZmNGQ5NGJmNmVkMjA0MjRiNGZlYzhhMGIzNzhiZDgxYzliMjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRR5T1pQo+RXfB8S2O6SZYVDtBH2 lDcYixdjj+hu0eiDY6HvUWZVRf5bGhaHp9D+6aLiB6v5ZuQXN+E7+HjE+bVGHVG3 njbCcQxQD63Au1D8jszgdKouoMpEYDqCw4SYW95sM6Trw9ApWIj3ViKMstLuoUb1 nQ7Dx2UcVkxCaTA0v5e0xVvgvlLWfAhssTj8SKP/53Vnb6vmadPNsFJkvfK4rGk5 KI4jWh71CgoU5gTOzqeL63YeUcSyuJ7Erc2y8lQoD70WbQWifc2DTqTCfIpZtcTu 6z0x7i07l6CAQg8b/XjsXL7TF5X+cXtb+eX3tHGsE76AgAGfg2W1BAYZiwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEn/TZS/btIEJLT+yKCzeL2BybIDMB8GA1UdIwQY MBaAFA9CB86AhVpcyXwLpHO5WHLHwZPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDBJSHpvQ0ZXbHpKZkF1a2M3bFljc2ZCazhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85MDE5NTctNGU3MS00Y2YzLWFjYjgt ZmIyYzhhODE0MzQ3LzEvU2Y5TmxMOXUwZ1FrdFA3SW9MTjR2WUhKc2dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85MDE5NTctNGU3MS00Y2YzLWFjYjgtZmIyYzhhODE0MzQ3 LzEvRDBJSHpvQ0ZXbHpKZkF1a2M3bFljc2ZCazhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQB2bQMMA0E AgACMAcDBQMqEoBAMA0GCSqGSIb3DQEBCwUAA4IBAQBS9NXYm5audSw6+/5bdEI3 +dKCx0ci/muL7F60ANKA+k6iSAYyOuaU7mSGwxRXRjLdjgB6pds6E+8U2WVfoLvq sgJLT06fgbn1C9niwsEg+yUWs3Uy8oqGuz88yCUEkyMkShyx9+JoFDH3+mLosFn+ isqXhT5bK3BN6FD42964mqLylM38qYGww7pZsW1wDxlFC4VmwK/6IUD5MnqT5DlF yNv/3q56eDH403Zis2y3ixF7DqQy7uSjY+dHjuGyIdow9XCueiEpN5OEUEkLQaqF qA1wpJMMQ46X/RO+nVwjQsmcV3uMIBeS81g+UCyvhrtPE5AdzYMjUMeWpk+0voPu -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:15 2025 by rpki-client