This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DNqdcV3tFWHLRdNijySst_38-Oo.roa File: DNqdcV3tFWHLRdNijySst_38-Oo.roa (raw, json) Hash identifier: 9VbQdKcHPfk6ectI7FcYUGAlDJDZDgwmUvPr5SiVu3I= Subject key identifier: 0C:DA:9D:71:5D:ED:15:61:CB:45:D3:62:8F:24:AC:B7:FD:FC:F8:EA Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AD5B3024969108C919A7CA6E64675E27A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DNqdcV3tFWHLRdNijySst_38-Oo.roa Signing time: Sun 30 Nov 2025 16:57:49 +0000 ROA not before: Sun 30 Nov 2025 16:57:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399138 IP address blocks: 217.60.64.0/22 maxlen: 24 217.60.72.0/22 maxlen: 24 217.60.80.0/22 maxlen: 24 217.60.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:b3:02:49:69:10:8c:91:9a:7c:a6:e6:46:75:e2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 30 16:57:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0cda9d715ded1561cb45d3628f24acb7fdfcf8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:20:08:8d:12:8c:22:6b:71:9f:e7:27:5b: 01:ad:c6:42:03:be:83:e5:c9:18:b1:19:ed:15:51: 36:6a:b8:e4:a0:7d:4c:95:19:08:46:39:45:db:65: 45:f0:ed:0d:36:f1:4a:e1:21:43:2b:56:ca:26:cd: 8e:ea:2a:c5:36:7d:d8:18:83:6e:05:8e:cd:0e:a0: 40:3d:8e:36:6b:a9:62:11:2d:4f:b4:9d:59:0c:76: 58:5e:7e:f6:3a:77:7b:42:ef:ac:d6:4c:be:6d:9b: 38:19:ab:9f:ba:20:32:e5:e5:4d:d8:68:19:3f:d8: ba:a9:e3:98:f8:a1:45:bf:e0:0c:8d:7e:fb:08:85: 87:1c:8e:17:7e:54:9e:7b:08:13:b5:f2:72:cb:d2: 4c:c6:2d:5c:2b:42:ed:55:c2:af:f3:db:42:c4:d2: 1b:9c:14:3b:31:6c:72:19:3e:de:5b:19:03:f4:ca: b2:97:41:09:1f:17:07:27:8a:97:4a:f5:33:0c:21: 85:89:22:b3:76:bf:44:e2:5e:2f:05:75:ab:3e:e8: fc:6f:da:d4:64:b7:d7:62:a6:42:b6:4b:bc:c6:40: be:57:1a:85:ab:34:ec:a1:9d:71:b8:b5:9c:4b:02: 1d:e9:79:d8:3a:12:7b:dd:0d:25:ab:81:1d:fe:5e: 15:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DA:9D:71:5D:ED:15:61:CB:45:D3:62:8F:24:AC:B7:FD:FC:F8:EA X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DNqdcV3tFWHLRdNijySst_38-Oo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.64.0/22 217.60.72.0/22 217.60.80.0/22 217.60.92.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:81:71:80:d3:c5:d4:64:6a:4c:c3:2e:c9:71:be:bc:05:6e: 19:5d:ad:ed:fa:55:74:87:4e:ff:ff:49:84:aa:27:ef:b3:61: d8:2a:22:d2:af:b0:68:0c:35:4c:58:6c:e4:80:f4:a0:b9:94: d3:78:06:2e:0c:42:c2:1c:49:e3:b8:69:0f:e2:ac:a0:34:8f: db:62:38:d0:b7:b9:b5:d2:30:b5:8d:0f:f3:c3:65:8b:e0:c8: 95:f6:2c:ca:e8:9d:be:6e:cc:07:5f:81:b0:f9:9a:5c:c2:56: 09:fc:9c:25:d1:6a:3d:2b:97:ed:dc:b2:b3:1a:eb:f0:c2:f1: a5:fd:52:8a:82:a1:3b:0b:4f:27:1a:1b:e9:f3:1a:ed:27:e6: 16:4b:6d:0e:46:09:e6:a5:04:01:ee:d2:05:5d:34:b3:93:5f: 34:6c:44:57:86:68:64:2e:e6:70:5f:03:eb:c5:d4:8c:2d:1c: fb:42:fa:e2:53:3e:c3:45:45:89:95:1c:0e:00:c3:cd:73:f6: ef:58:17:6f:ab:b8:31:ed:3b:62:55:58:31:67:70:2b:2e:c2: e9:5f:4e:b0:34:02:45:41:09:e7:06:51:5f:0e:22:03:b3:0f: 0d:4c:3d:01:41:69:9d:ee:4a:49:e1:ce:ea:da:0d:b1:50:54: a9:f6:0a:3d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrVswJJaRCMkZp8puZGdeJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTMwMTY1NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2RhOWQ3MTVkZWQxNTYxY2I0NWQzNjI4ZjI0YWNiN2ZkZmNmOGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7IgCI0SjCJrcZ/nJ1sBrcZCA76D 5ckYsRntFVE2arjkoH1MlRkIRjlF22VF8O0NNvFK4SFDK1bKJs2O6irFNn3YGINu BY7NDqBAPY42a6liES1PtJ1ZDHZYXn72Ond7Qu+s1ky+bZs4GaufuiAy5eVN2GgZ P9i6qeOY+KFFv+AMjX77CIWHHI4XflSeewgTtfJyy9JMxi1cK0LtVcKv89tCxNIb nBQ7MWxyGT7eWxkD9Mqyl0EJHxcHJ4qXSvUzDCGFiSKzdr9E4l4vBXWrPuj8b9rU ZLfXYqZCtku8xkC+VxqFqzTsoZ1xuLWcSwId6XnYOhJ73Q0lq4Ed/l4VGwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAzanXFd7RVhy0XTYo8krLf9/PjqMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRE5xZGNWM3RGV0hMUmROaWp5U3N0XzM4LU9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQC2TxAAwQC 2TxIAwQC2TxQAwQC2TxcMA0GCSqGSIb3DQEBCwUAA4IBAQAMgXGA08XUZGpMwy7J cb68BW4ZXa3t+lV0h07//0mEqifvs2HYKiLSr7BoDDVMWGzkgPSguZTTeAYuDELC HEnjuGkP4qygNI/bYjjQt7m10jC1jQ/zw2WL4MiV9izK6J2+bswHX4Gw+ZpcwlYJ /Jwl0Wo9K5ft3LKzGuvwwvGl/VKKgqE7C08nGhvp8xrtJ+YWS20ORgnmpQQB7tIF XTSzk180bERXhmhkLuZwXwPrxdSMLRz7QvriUz7DRUWJlRwOAMPNc/bvWBdvq7gx 7TtiVVgxZ3ArLsLpX06wNAJFQQnnBlFfDiIDsw8NTD0BQWmd7kpJ4c7q2g2xUFSp 9go9 -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:21 2025 by rpki-client