This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/IXEJL_tdGYePOrA4C939NMYD3Cg.roa File: IXEJL_tdGYePOrA4C939NMYD3Cg.roa (raw, json) Hash identifier: 6He4XuRiwlVVjToNZDkpS77/r8Qyg9qEq2S01FY4ymI= Subject key identifier: 21:71:09:2F:FB:5D:19:87:8F:3A:B0:38:0B:DD:FD:34:C6:03:DC:28 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019A968C715965493F9ABE3C960B0DC302AB Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/IXEJL_tdGYePOrA4C939NMYD3Cg.roa Signing time: Tue 18 Nov 2025 10:39:37 +0000 ROA not before: Tue 18 Nov 2025 10:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203661 IP address blocks: 212.7.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:8c:71:59:65:49:3f:9a:be:3c:96:0b:0d:c3:02:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Nov 18 10:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2171092ffb5d19878f3ab0380bddfd34c603dc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:0e:33:36:6a:11:d9:fe:34:a5:b1:43:52: 05:9b:cc:64:ca:c1:93:18:84:00:1d:cc:1b:fe:cc: d8:29:ee:63:2a:52:8b:56:0c:42:49:3d:19:25:4c: 08:cd:0c:c4:d3:ed:16:28:44:8e:62:cf:a9:02:c4: b1:25:6c:29:7a:02:31:6a:71:5b:ef:f4:04:cd:d2: c3:e3:06:18:26:89:ba:86:2b:6f:a0:2b:74:28:18: 9f:5b:93:c7:19:20:c0:24:d5:60:ac:a1:b1:08:f4: dc:3a:41:2b:a2:cd:0a:80:f9:8b:0a:ef:42:f4:35: 91:e4:8c:ba:35:bb:f4:df:71:86:2a:a6:08:28:aa: ff:a5:5c:8d:9b:d4:13:96:e6:8d:b4:6a:0d:54:f7: eb:73:37:ec:f6:e3:47:e2:75:19:41:30:27:d3:df: 32:b1:df:bb:b5:fa:84:d2:cd:f1:a3:7a:38:ac:88: 89:24:db:8a:d6:16:04:f4:82:68:b1:5f:fb:c0:b1: b4:c0:82:36:0c:30:1e:01:83:74:08:7c:5c:fe:38: e2:ed:c3:35:90:17:8a:22:33:10:34:c2:91:ec:91: 69:6b:3e:7d:a6:e4:04:42:e5:95:4b:60:6c:a6:b1: a6:9a:81:b8:f7:1a:35:65:f1:cd:9d:25:7f:f5:91: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:71:09:2F:FB:5D:19:87:8F:3A:B0:38:0B:DD:FD:34:C6:03:DC:28 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/IXEJL_tdGYePOrA4C939NMYD3Cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.7.217.0/24 Signature Algorithm: sha256WithRSAEncryption 13:23:00:6e:0b:f1:10:48:d9:2c:d1:34:17:42:da:92:e6:b0: ce:79:a4:e6:86:15:07:1e:9f:d2:36:47:06:b2:13:a4:7f:cc: f1:27:64:a8:ce:01:42:fe:79:49:c8:11:55:a2:7e:65:27:fa: 76:db:69:67:74:06:6a:af:90:a3:85:fd:4b:5c:d7:65:cb:b4: f7:9d:c7:46:60:f7:d4:e1:7a:c0:b7:83:cc:be:2a:71:3a:f0: 99:50:d3:bb:54:c3:21:a9:92:70:7e:58:c8:a2:8e:89:13:77: ff:52:80:1b:83:31:4f:69:1c:34:ea:eb:8e:1f:85:ba:02:e0: 30:7d:44:68:7e:39:fc:e1:68:57:25:50:43:d5:16:be:e1:6e: 56:3e:33:a5:f8:51:ac:53:b4:7b:ae:9a:04:65:3d:62:bc:4f: d5:c4:3b:63:2b:aa:c7:cd:59:09:79:2b:20:b1:76:7f:79:19: 2c:2a:0b:63:18:31:bb:be:77:b4:4b:3f:9f:bf:7a:13:06:7c: 09:e7:10:2d:2d:94:21:ff:0e:c3:a0:0d:53:1a:a8:21:6a:e6: 67:07:29:c6:ed:dc:dd:ed:8c:ca:af:f5:0a:d3:3d:7f:c7:fb: 24:d0:78:fd:01:ff:3a:59:22:87:1d:47:36:8f:48:b2:87:f3: 0c:b8:78:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqWjHFZZUk/mr48lgsNwwKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUxMTE4MTAzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTcxMDkyZmZiNWQxOTg3OGYzYWIwMzgwYmRkZmQzNGM2MDNkYzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmsOMzZqEdn+NKWxQ1IFm8xkysGT GIQAHcwb/szYKe5jKlKLVgxCST0ZJUwIzQzE0+0WKESOYs+pAsSxJWwpegIxanFb 7/QEzdLD4wYYJom6hitvoCt0KBifW5PHGSDAJNVgrKGxCPTcOkEros0KgPmLCu9C 9DWR5Iy6Nbv033GGKqYIKKr/pVyNm9QTluaNtGoNVPfrczfs9uNH4nUZQTAn098y sd+7tfqE0s3xo3o4rIiJJNuK1hYE9IJosV/7wLG0wII2DDAeAYN0CHxc/jji7cM1 kBeKIjMQNMKR7JFpaz59puQEQuWVS2BsprGmmoG49xo1ZfHNnSV/9ZGrnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCFxCS/7XRmHjzqwOAvd/TTGA9woMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvSVhFSkxfdGRHWWVQT3JBNEM5MzlOTVlEM0NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AfZMA0G CSqGSIb3DQEBCwUAA4IBAQATIwBuC/EQSNks0TQXQtqS5rDOeaTmhhUHHp/SNkcG shOkf8zxJ2SozgFC/nlJyBFVon5lJ/p222lndAZqr5Cjhf1LXNdly7T3ncdGYPfU 4XrAt4PMvipxOvCZUNO7VMMhqZJwfljIoo6JE3f/UoAbgzFPaRw06uuOH4W6AuAw fURofjn84WhXJVBD1Ra+4W5WPjOl+FGsU7R7rpoEZT1ivE/VxDtjK6rHzVkJeSsg sXZ/eRksKgtjGDG7vne0Sz+fv3oTBnwJ5xAtLZQh/w7DoA1TGqghauZnBynG7dzd 7YzKr/UK0z1/x/sk0Hj9Af86WSKHHUc2j0iyh/MMuHgx -----END CERTIFICATE-----Generated at Mon Dec 8 09:35:30 2025 by rpki-client