This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/Tjr5jtgtbJ3fEJ5GPFAzKe-rKao.roa File: Tjr5jtgtbJ3fEJ5GPFAzKe-rKao.roa (raw, json) Hash identifier: 3YYOamn4sYIPHKkC+u6jZmcp0RjEInV5oQMY2Ch7hiU= Subject key identifier: 4E:3A:F9:8E:D8:2D:6C:9D:DF:10:9E:46:3C:50:33:29:EF:AB:29:AA Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Certificate serial: 019AE3A57F04AA9F6476E8FBB2632C6EFBD9 Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/Tjr5jtgtbJ3fEJ5GPFAzKe-rKao.roa Signing time: Wed 03 Dec 2025 09:57:45 +0000 ROA not before: Wed 03 Dec 2025 09:57:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13099 IP address blocks: 213.172.70.0/24 maxlen: 24 213.172.71.0/24 maxlen: 24 213.172.83.0/24 maxlen: 24 213.172.84.0/24 maxlen: 24 213.172.92.0/24 maxlen: 24 213.172.94.0/24 maxlen: 24 213.172.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a5:7f:04:aa:9f:64:76:e8:fb:b2:63:2c:6e:fb:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Validity Not Before: Dec 3 09:57:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4e3af98ed82d6c9ddf109e463c503329efab29aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:fd:c3:55:dd:83:f4:a6:fb:e7:6b:6a:e3:9a: 03:84:4a:b0:71:6b:0b:5c:ac:ae:b8:e4:70:04:b7: 74:be:30:f0:d0:1a:71:fb:3b:90:d3:d1:26:5b:a7: 4c:1f:1f:5f:e4:98:99:65:ad:01:ee:b9:7c:20:62: ac:9b:74:b7:9c:cc:9f:84:6e:55:bc:cd:79:6a:c0: a9:72:2d:fa:07:0e:08:be:a8:34:b3:38:d0:82:32: cb:ec:19:f4:77:e3:7a:d0:b7:05:d9:ce:8a:9f:dd: 7f:ba:16:ca:f6:af:15:0a:91:bd:b6:68:ee:71:2b: 40:59:33:f1:fb:00:9c:3c:99:6a:16:58:1b:11:a8: 18:e2:02:85:87:1c:2f:8c:7a:60:f9:bd:0d:a0:27: 48:ac:4d:15:ab:08:6d:20:6e:59:e6:d9:3f:31:57: 33:72:2d:ba:99:30:fe:6a:a5:34:9a:48:c1:f0:ad: c8:99:6f:fd:49:8f:20:b9:8c:f1:93:6a:4f:16:1c: 0a:f7:18:9b:26:41:bb:a4:b5:d3:1d:2d:63:cc:ad: d9:6b:fd:ad:3f:09:33:67:76:93:8a:10:46:3a:b6: 45:f5:c0:d2:91:2e:93:a1:62:80:8f:2b:f8:83:45: d8:14:07:fb:d5:84:c8:6e:c1:1c:14:f6:72:31:35: 48:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:F9:8E:D8:2D:6C:9D:DF:10:9E:46:3C:50:33:29:EF:AB:29:AA X509v3 Authority Key Identifier: keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/Tjr5jtgtbJ3fEJ5GPFAzKe-rKao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.172.70.0/23 213.172.83.0-213.172.84.255 213.172.92.0/24 213.172.94.0/23 Signature Algorithm: sha256WithRSAEncryption 57:79:fb:0a:74:29:6f:28:96:72:bf:95:bc:f5:3c:d2:e9:db: 32:c8:68:2f:d2:8c:60:3b:06:f7:4b:d0:83:65:9b:44:05:24: f9:bc:9e:02:e0:0e:16:03:c0:6e:fb:23:40:06:3d:e9:ab:8d: e4:f3:63:2c:97:f0:83:8a:46:4f:1e:f9:b1:88:9e:7e:43:96: 02:29:72:9b:39:33:29:35:1f:46:76:83:58:9a:20:0c:79:61: 8f:f5:f4:19:39:59:f0:4b:56:5e:6c:a3:02:29:1c:0e:28:da: 27:9c:d5:60:f6:ab:58:e8:52:16:71:31:d2:00:c9:11:c4:e3: 44:ea:f9:c4:4f:e4:25:e1:97:8f:66:fe:7b:1c:58:4c:6a:24: 03:d6:99:f8:79:95:72:43:04:c8:e4:bd:e6:7d:eb:52:8f:34: ec:ea:ef:d0:1c:42:db:06:e3:c3:d0:e1:fa:e3:ca:e6:9e:ff: 4c:61:03:ff:57:ae:b1:0b:4b:44:d0:d2:69:22:23:27:eb:d0: a4:15:fa:be:9b:99:35:77:94:88:6f:e5:1a:20:0f:89:8b:c2: 60:aa:da:2a:bc:3d:df:09:59:bb:29:0a:49:40:5e:06:7f:03: 6a:3d:a8:7e:e9:cf:8d:df:44:99:f6:76:e2:2c:ce:ef:63:0a: 74:f2:58:c7 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZrjpX8Eqp9kduj7smMsbvvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxODY1NGNiOGVkM2Y1NWQ1YzYwOTcyZDMxMGY1ZWQ2MjA0 YjRmZTUwHhcNMjUxMjAzMDk1NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTNhZjk4ZWQ4MmQ2YzlkZGYxMDllNDYzYzUwMzMyOWVmYWIyOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+v3DVd2D9Kb752tq45oDhEqwcWsL XKyuuORwBLd0vjDw0Bpx+zuQ09EmW6dMHx9f5JiZZa0B7rl8IGKsm3S3nMyfhG5V vM15asCpci36Bw4Ivqg0szjQgjLL7Bn0d+N60LcF2c6Kn91/uhbK9q8VCpG9tmju cStAWTPx+wCcPJlqFlgbEagY4gKFhxwvjHpg+b0NoCdIrE0VqwhtIG5Z5tk/MVcz ci26mTD+aqU0mkjB8K3ImW/9SY8guYzxk2pPFhwK9xibJkG7pLXTHS1jzK3Za/2t PwkzZ3aTihBGOrZF9cDSkS6ToWKAjyv4g0XYFAf71YTIbsEcFPZyMTVIMwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFE46+Y7YLWyd3xCeRjxQMynvqymqMB8GA1UdIwQY MBaAFHGGVMuO0/VdXGCXLTEPXtYgS0/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQt YTI4YmNlNWQ1ZGE1LzEvVGpyNWp0Z3RiSjNmRUo1R1BGQXpLZS1yS2FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQtYTI4YmNlNWQ1ZGE1 LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQB1axGMAwD BADVrFMDBADVrFQDBADVrFwDBAHVrF4wDQYJKoZIhvcNAQELBQADggEBAFd5+wp0 KW8olnK/lbz1PNLp2zLIaC/SjGA7BvdL0INlm0QFJPm8ngLgDhYDwG77I0AGPemr jeTzYyyX8IOKRk8e+bGInn5DlgIpcps5Myk1H0Z2g1iaIAx5YY/19Bk5WfBLVl5s owIpHA4o2iec1WD2q1joUhZxMdIAyRHE40Tq+cRP5CXhl49m/nscWExqJAPWmfh5 lXJDBMjkveZ961KPNOzq79AcQtsG48PQ4frjyuae/0xhA/9XrrELS0TQ0mkiIyfr 0KQV+r6bmTV3lIhv5RogD4mLwmCq2iq8Pd8JWbspCklAXgZ/A2o9qH7pz43fRJn2 duIszu9jCnTyWMc= -----END CERTIFICATE-----Generated at Sat Dec 6 14:16:11 2025 by rpki-client