This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ICf1N54sWmgImkJZLxC93x14b6M.roa File: ICf1N54sWmgImkJZLxC93x14b6M.roa (raw, json) Hash identifier: zUeR1FW2SRh6uc3sducJB/nBZ87Rzrh22r5+clJzpnU= Subject key identifier: 20:27:F5:37:9E:2C:5A:68:08:9A:42:59:2F:10:BD:DF:1D:78:6F:A3 Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Certificate serial: 019AD07FCF184F39CDA70B53B4909DFB6CEB Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ICf1N54sWmgImkJZLxC93x14b6M.roa Signing time: Sat 29 Nov 2025 16:43:48 +0000 ROA not before: Sat 29 Nov 2025 16:43:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60632 IP address blocks: 217.114.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:7f:cf:18:4f:39:cd:a7:0b:53:b4:90:9d:fb:6c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Validity Not Before: Nov 29 16:43:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2027f5379e2c5a68089a42592f10bddf1d786fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:58:75:59:4c:4d:b1:ce:7c:c3:70:5d:af: f1:1f:c1:90:5c:2b:16:d3:a3:ae:f4:5e:82:24:10: 19:21:46:18:2a:b8:43:e7:02:5b:7a:e6:57:0c:fe: db:9b:90:3b:20:07:ad:d2:86:37:0d:3b:23:e4:95: 03:8b:da:29:50:9c:0c:e3:0a:9c:17:8d:13:b3:0c: 41:9c:31:48:34:7b:8d:8f:4d:99:e7:fe:fc:c0:26: 8b:81:54:8e:39:36:c4:04:ae:65:02:06:7d:92:56: e0:b2:f9:c0:73:a4:84:c7:9b:75:78:4e:75:53:e5: c8:f2:86:d2:10:f7:1b:be:c4:33:cb:03:de:ab:36: 9b:43:ae:e4:6c:8b:dd:8c:fd:a0:ae:2a:ad:47:59: 16:b8:93:24:4b:56:28:dd:ae:8f:f0:0d:41:bf:6c: 90:fe:51:d0:07:d4:0d:0a:f3:ab:6b:08:86:3c:27: d3:02:83:0e:52:9b:b1:12:a4:98:c2:df:79:2a:88: 36:a3:eb:8d:44:60:ec:af:ab:48:bb:b3:6e:d9:a6: 3c:09:3d:56:47:8e:79:94:39:93:3c:12:68:df:94: 06:a5:fd:a2:19:85:ef:f1:6f:4e:b5:86:2c:f6:57: 72:ef:df:27:70:cb:9e:98:40:40:0a:fe:73:bb:b4: 1f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:27:F5:37:9E:2C:5A:68:08:9A:42:59:2F:10:BD:DF:1D:78:6F:A3 X509v3 Authority Key Identifier: keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ICf1N54sWmgImkJZLxC93x14b6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.114.40.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:88:26:a2:41:52:c6:0e:96:be:e1:40:b6:f2:ac:19:bd:27: ff:24:de:37:3c:e1:46:04:3a:94:5a:ac:a5:9c:aa:66:99:87: 50:cd:f6:8d:da:92:97:ce:2d:6a:cc:7d:2a:64:c4:7b:a0:aa: 7d:d1:f7:d0:aa:74:b0:6c:7d:26:2a:58:f0:99:60:4c:d8:53: 34:fe:19:5a:79:2a:61:cc:6b:9d:2b:fc:26:96:22:ea:fc:70: 8d:98:c1:d6:40:64:ce:e5:30:d8:ad:b0:69:3c:85:a5:cc:a0: fa:86:86:1c:30:8a:ac:1d:d2:c4:b3:a8:66:ab:fa:71:1d:93: 0f:03:3a:c1:e0:51:82:bc:f2:d2:f7:4f:e2:0c:5b:f4:7c:5b: 71:4c:09:a7:88:cf:16:8a:64:c7:19:45:3b:d6:2d:fe:ae:3e: 18:a6:cb:6c:8a:8b:6f:6d:dd:2c:f7:e0:1e:17:0d:d6:70:af: 96:72:59:7f:5c:ea:25:60:44:97:f0:52:de:d6:5f:34:5c:60: 04:9b:cf:f1:7e:cd:17:0a:47:1b:9b:42:2b:ef:0d:7c:af:55: 3a:ff:da:b1:65:e7:a5:ca:f1:a2:a2:8a:5f:a8:d3:53:ba:b2: f0:4f:37:f8:a2:2e:24:b8:a0:ae:94:4b:c6:13:d5:0b:07:1d: 3f:95:19:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrQf88YTznNpwtTtJCd+2zrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi OWQ2MDgwHhcNMjUxMTI5MTY0MzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDI3ZjUzNzllMmM1YTY4MDg5YTQyNTkyZjEwYmRkZjFkNzg2ZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV1YdVlMTbHOfMNwXa/xH8GQXCsW 06Ou9F6CJBAZIUYYKrhD5wJbeuZXDP7bm5A7IAet0oY3DTsj5JUDi9opUJwM4wqc F40TswxBnDFINHuNj02Z5/78wCaLgVSOOTbEBK5lAgZ9klbgsvnAc6SEx5t1eE51 U+XI8obSEPcbvsQzywPeqzabQ67kbIvdjP2griqtR1kWuJMkS1Yo3a6P8A1Bv2yQ /lHQB9QNCvOrawiGPCfTAoMOUpuxEqSYwt95Kog2o+uNRGDsr6tIu7Nu2aY8CT1W R455lDmTPBJo35QGpf2iGYXv8W9OtYYs9ldy798ncMuemEBACv5zu7Qf9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAn9TeeLFpoCJpCWS8Qvd8deG+jMB8GA1UdIwQY MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt YmM5M2NhNjc5ZTFmLzEvSUNmMU41NHNXbWdJbWtKWkx4QzkzeDE0YjZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XIoMA0G CSqGSIb3DQEBCwUAA4IBAQCbiCaiQVLGDpa+4UC28qwZvSf/JN43POFGBDqUWqyl nKpmmYdQzfaN2pKXzi1qzH0qZMR7oKp90ffQqnSwbH0mKljwmWBM2FM0/hlaeSph zGudK/wmliLq/HCNmMHWQGTO5TDYrbBpPIWlzKD6hoYcMIqsHdLEs6hmq/pxHZMP AzrB4FGCvPLS90/iDFv0fFtxTAmniM8WimTHGUU71i3+rj4Ypstsiotvbd0s9+Ae Fw3WcK+Wcll/XOolYESX8FLe1l80XGAEm8/xfs0XCkcbm0Ir7w18r1U6/9qxZeel yvGioopfqNNTurLwTzf4oi4kuKCulEvGE9ULBx0/lRmi -----END CERTIFICATE-----Generated at Sat Dec 6 17:20:06 2025 by rpki-client