This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uAUdW1mjlt6hQQe_CiNe2D1PrsM.roa File: uAUdW1mjlt6hQQe_CiNe2D1PrsM.roa (raw, json) Hash identifier: JWRtRqCk2VP77nZYvSA454fA5Ye2icvxoCKea6zJqOQ= Subject key identifier: B8:05:1D:5B:59:A3:96:DE:A1:41:07:BF:0A:23:5E:D8:3D:4F:AE:C3 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AD5B3EBEBDF8FB17B927B72D4CAD61123 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uAUdW1mjlt6hQQe_CiNe2D1PrsM.roa Signing time: Sun 30 Nov 2025 16:58:49 +0000 ROA not before: Sun 30 Nov 2025 16:58:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399461 IP address blocks: 217.60.100.0/22 maxlen: 24 217.60.108.0/22 maxlen: 24 217.60.112.0/22 maxlen: 24 217.60.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:b3:eb:eb:df:8f:b1:7b:92:7b:72:d4:ca:d6:11:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 30 16:58:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b8051d5b59a396dea14107bf0a235ed83d4faec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:53:0b:ab:62:a8:8c:3b:7a:57:d1:59:1e: ff:18:b2:b5:df:f4:92:1d:10:bd:9d:91:c9:22:3d: 8a:01:85:a0:dd:72:4d:f8:7d:df:21:9d:d1:67:ce: 18:3a:43:73:e6:0e:4f:4d:e2:51:e7:94:ff:bd:90: eb:2b:5c:7e:66:83:5d:18:2e:a8:34:47:21:5f:a4: 77:70:2e:45:ff:83:9b:39:85:08:1c:fa:ff:d1:05: a3:24:c9:ab:ea:7a:9b:61:5b:ba:3e:04:f2:42:d1: 95:aa:ed:37:89:50:55:74:f3:ef:ca:31:2c:e8:c9: 2f:5d:63:03:b7:5b:34:13:a1:5d:b9:c3:4a:b6:6f: 3d:b5:e7:58:f0:ef:8a:04:89:93:50:dc:0d:dc:30: a3:97:f5:3b:98:ba:e4:8e:c5:94:98:4e:5d:53:14: 41:f1:91:31:33:bd:d7:6e:bc:8a:73:ab:a6:d0:09: e3:ea:bd:e3:f3:16:c7:29:e9:a2:85:63:cc:71:ed: e8:92:30:94:d8:9c:7a:9d:8c:e6:b2:b7:11:a4:f9: 5f:a8:8b:9c:57:f3:dd:b5:b9:43:3c:31:de:03:3c: 06:a9:5a:c1:67:51:e7:cf:3e:eb:5a:2f:bc:11:67: 8a:69:9a:5e:1e:c1:1f:74:98:ca:fc:8b:bb:dc:0c: 8b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:05:1D:5B:59:A3:96:DE:A1:41:07:BF:0A:23:5E:D8:3D:4F:AE:C3 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uAUdW1mjlt6hQQe_CiNe2D1PrsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.100.0/22 217.60.108.0-217.60.115.255 217.60.124.0/22 Signature Algorithm: sha256WithRSAEncryption 01:2e:8b:c5:6f:27:20:20:75:4c:1a:11:93:80:9d:a0:61:7a: db:e6:4e:18:1d:ab:4f:b1:b5:16:3a:ba:67:33:80:7f:a2:11: 27:e1:af:ab:d5:14:23:9a:5c:ff:26:de:09:a5:b4:bf:0d:db: a1:d7:60:eb:99:58:01:f5:0f:9d:d5:34:5f:e7:de:3b:0b:47: 3a:8f:44:98:13:6e:aa:97:9a:ae:c8:1d:aa:cb:60:1f:4f:e8: 98:cd:59:91:94:0f:f6:01:a1:e6:97:bc:eb:01:3e:49:ff:64: 5a:cb:a9:c2:a4:cc:72:31:83:30:1e:6c:67:3f:1c:f5:88:fa: a2:75:77:0c:35:23:35:89:f8:b7:44:7d:a4:27:fe:33:26:f1: d1:77:08:8a:41:5a:35:f6:fa:0a:f3:59:c5:2a:d2:fb:c7:bf: ac:ed:05:ac:8e:08:13:19:6f:2c:c7:55:73:5c:c1:d6:5d:52: 58:f2:6f:cd:89:a7:c9:8f:9e:d7:3b:ed:e4:d8:6f:ee:f4:56: 43:22:18:fc:bb:a4:86:0f:79:cc:81:e4:de:c1:2a:d9:ec:ac: bf:f0:d8:3c:8e:eb:24:4a:fa:2c:ab:0f:eb:85:52:4e:a4:56: 0a:d7:04:91:bb:58:05:ae:88:8a:96:e7:0e:1c:fa:04:7a:c6: 77:10:e8:f7 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZrVs+vr34+xe5J7ctTK1hEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTMwMTY1ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODA1MWQ1YjU5YTM5NmRlYTE0MTA3YmYwYTIzNWVkODNkNGZhZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiNTC6tiqIw7elfRWR7/GLK13/SS HRC9nZHJIj2KAYWg3XJN+H3fIZ3RZ84YOkNz5g5PTeJR55T/vZDrK1x+ZoNdGC6o NEchX6R3cC5F/4ObOYUIHPr/0QWjJMmr6nqbYVu6PgTyQtGVqu03iVBVdPPvyjEs 6MkvXWMDt1s0E6FducNKtm89tedY8O+KBImTUNwN3DCjl/U7mLrkjsWUmE5dUxRB 8ZExM73XbryKc6um0Anj6r3j8xbHKemihWPMce3okjCU2Jx6nYzmsrcRpPlfqIuc V/PdtblDPDHeAzwGqVrBZ1Hnzz7rWi+8EWeKaZpeHsEfdJjK/Iu73AyLIQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLgFHVtZo5beoUEHvwojXtg9T67DMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdUFVZFcxbWpsdDZoUVFlX0NpTmUyRDFQcnNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQC2TxkMAwD BALZPGwDBALZPHADBALZPHwwDQYJKoZIhvcNAQELBQADggEBAAEui8VvJyAgdUwa EZOAnaBhetvmThgdq0+xtRY6umczgH+iESfhr6vVFCOaXP8m3gmltL8N26HXYOuZ WAH1D53VNF/n3jsLRzqPRJgTbqqXmq7IHarLYB9P6JjNWZGUD/YBoeaXvOsBPkn/ ZFrLqcKkzHIxgzAebGc/HPWI+qJ1dww1IzWJ+LdEfaQn/jMm8dF3CIpBWjX2+grz WcUq0vvHv6ztBayOCBMZbyzHVXNcwdZdUljyb82Jp8mPntc77eTYb+70VkMiGPy7 pIYPecyB5N7BKtnsrL/w2DyO6yRK+iyrD+uFUk6kVgrXBJG7WAWuiIqW5w4c+gR6 xncQ6Pc= -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:28 2025 by rpki-client