This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/1-JxvcHzi3fTWIQIbvPanzl3n-d4.roa File: 1-JxvcHzi3fTWIQIbvPanzl3n-d4.roa (raw, json) Hash identifier: fTf9uHn8S4snxNzJSBwP8hjJbSyOEDEo+V6Skd5EbnQ= Subject key identifier: F8:9C:6F:70:7C:E2:DD:F4:D6:21:02:1B:BC:F6:A7:CE:5D:E7:F9:DE Certificate issuer: /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b Certificate serial: 019AA7E7272CBC50B27C961CF0B78D2BA947 Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/1-JxvcHzi3fTWIQIbvPanzl3n-d4.roa Signing time: Fri 21 Nov 2025 19:32:15 +0000 ROA not before: Fri 21 Nov 2025 19:32:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205784 IP address blocks: 213.109.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:e7:27:2c:bc:50:b2:7c:96:1c:f0:b7:8d:2b:a9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b Validity Not Before: Nov 21 19:32:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f89c6f707ce2ddf4d621021bbcf6a7ce5de7f9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:cd:e7:d6:d3:ed:31:f0:25:67:e9:68:0b: 74:73:c2:ce:bb:23:fa:22:78:b7:3c:d0:b8:32:1f: 3b:a1:ee:49:b7:94:ce:bd:b1:49:97:ad:1b:13:b6: 8f:31:12:37:93:09:1c:57:bb:db:28:ef:97:3a:a8: ae:53:bf:8a:37:68:19:6e:97:5b:79:b9:f8:01:2f: 3d:33:78:28:b3:7e:ae:36:26:3f:d0:f8:80:d1:dc: 67:47:0e:3b:2d:69:1f:af:85:c2:8f:3d:6f:ce:f8: 27:45:68:6f:98:a6:3a:b8:03:56:cb:c5:7f:64:e1: a0:ed:7b:a6:0c:38:6c:a5:aa:15:6e:93:fd:cc:0e: 3e:ad:ca:45:76:79:51:76:7e:3f:83:30:01:7e:3b: 35:c3:5f:a5:91:21:3f:b3:c7:35:58:71:96:a8:00: c6:2d:60:d0:7e:dc:73:0a:0e:b9:2e:02:5d:97:92: 7d:e4:61:37:d8:07:98:7a:91:6d:09:47:37:18:5f: 5b:cd:72:be:c1:7f:ba:29:a6:71:bb:5d:ea:38:38: 4e:9f:a3:91:8f:b5:2e:08:0c:83:9f:1e:a2:47:93: 21:59:61:ff:e4:37:b8:ad:ba:3c:ee:fa:56:b4:40: 57:6a:09:0e:b4:38:dc:fd:5a:58:f2:5a:04:00:30: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9C:6F:70:7C:E2:DD:F4:D6:21:02:1B:BC:F6:A7:CE:5D:E7:F9:DE X509v3 Authority Key Identifier: keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/1-JxvcHzi3fTWIQIbvPanzl3n-d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.145.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:6c:d3:7a:9c:bc:c5:7b:5c:e9:50:13:0a:fb:c9:03:46:5c: c3:16:a5:ef:18:3c:6f:2c:61:cc:18:c1:70:12:25:f9:ae:70: ff:78:32:2e:e7:04:bf:be:91:57:34:d0:e9:7a:91:86:74:1e: 57:20:94:c6:14:8a:e8:fc:ea:0a:50:50:f9:aa:67:bc:51:33: f8:76:56:f5:de:10:18:3b:88:2b:00:d4:90:24:d9:9b:f6:1c: 16:2c:99:54:4f:01:6e:f2:ef:cf:89:0e:a3:a9:45:79:97:5f: 08:89:26:ee:1b:0c:f1:ad:59:80:79:51:24:ed:aa:4e:fc:4e: d9:a5:b2:d6:f0:c0:c0:f6:33:94:b8:e7:bf:ef:ef:60:8d:19: 77:5e:50:ca:90:4d:b3:55:8f:25:79:97:37:43:1b:0e:a2:5c: 43:cd:78:d4:23:03:2d:69:86:94:5e:af:c5:c4:4b:58:75:12: 48:13:17:6f:dd:2a:12:f4:97:4a:ae:ba:12:00:19:97:d9:a7: ca:b6:9f:f0:d7:6f:78:77:e6:14:2f:d6:40:11:6d:d8:5e:19: 96:d2:4c:6b:36:1d:ba:cf:5a:31:12:a6:ff:69:7c:83:0d:98: 2f:60:ce:ba:ca:5a:43:a0:55:57:51:2c:34:12:ac:6e:a6:88: 54:7a:c6:28 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqn5ycsvFCyfJYc8LeNK6lHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYzIwOGEyM2IyZDRkODdiZTkzZjg5ZDUzMmJjNmY0NDkw ODgxOWIwHhcNMjUxMTIxMTkzMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODljNmY3MDdjZTJkZGY0ZDYyMTAyMWJiY2Y2YTdjZTVkZTdmOWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxXN59bT7THwJWfpaAt0c8LOuyP6 Ini3PNC4Mh87oe5Jt5TOvbFJl60bE7aPMRI3kwkcV7vbKO+XOqiuU7+KN2gZbpdb ebn4AS89M3gos36uNiY/0PiA0dxnRw47LWkfr4XCjz1vzvgnRWhvmKY6uANWy8V/ ZOGg7XumDDhspaoVbpP9zA4+rcpFdnlRdn4/gzABfjs1w1+lkSE/s8c1WHGWqADG LWDQftxzCg65LgJdl5J95GE32AeYepFtCUc3GF9bzXK+wX+6KaZxu13qODhOn6OR j7UuCAyDnx6iR5MhWWH/5De4rbo87vpWtEBXagkOtDjc/VpY8loEADCq3wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPicb3B84t301iECG7z2p85d5/neMB8GA1UdIwQY MBaAFLHCCKI7LU2HvpP4nVMrxvRJCIGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2NJSW9qc3RUWWUta19pZFV5dkc5RWtJZ1pzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hNTY1ZmItNTBiZC00YmI2LTg3NWMt MGUyYmJkNDMzN2FhLzEvMS1KeHZjSHppM2ZUV0lRSWJ2UGFuemwzbi1kNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjIvYTU2NWZiLTUwYmQtNGJiNi04NzVjLTBlMmJiZDQzMzdh YS8xL3NjSUlvanN0VFllLWtfaWRVeXZHOUVrSWdacy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANVtkTAN BgkqhkiG9w0BAQsFAAOCAQEAPmzTepy8xXtc6VATCvvJA0Zcwxal7xg8byxhzBjB cBIl+a5w/3gyLucEv76RVzTQ6XqRhnQeVyCUxhSK6PzqClBQ+apnvFEz+HZW9d4Q GDuIKwDUkCTZm/YcFiyZVE8BbvLvz4kOo6lFeZdfCIkm7hsM8a1ZgHlRJO2qTvxO 2aWy1vDAwPYzlLjnv+/vYI0Zd15QypBNs1WPJXmXN0MbDqJcQ8141CMDLWmGlF6v xcRLWHUSSBMXb90qEvSXSq66EgAZl9mnyraf8NdveHfmFC/WQBFt2F4ZltJMazYd us9aMRKm/2l8gw2YL2DOuspaQ6BVV1EsNBKsbqaIVHrGKA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:35 2025 by rpki-client