This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/to9OwOfY2gYabsE2e_ZELvsI_rU.roa File: to9OwOfY2gYabsE2e_ZELvsI_rU.roa (raw, json) Hash identifier: s0SkGoiQxrVm7KkMC6Ajpkq1MgO1vuYl0n5PRb27DnQ= Subject key identifier: B6:8F:4E:C0:E7:D8:DA:06:1A:6E:C1:36:7B:F6:44:2E:FB:08:FE:B5 Certificate issuer: /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218 Certificate serial: 019A5EF3A7A66D3689A50B7F43B8FA93DA89 Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/to9OwOfY2gYabsE2e_ZELvsI_rU.roa Signing time: Fri 07 Nov 2025 15:33:37 +0000 ROA not before: Fri 07 Nov 2025 15:33:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31144 IP address blocks: 217.118.240.0/20 maxlen: 20 217.118.244.0/24 maxlen: 24 217.118.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5e:f3:a7:a6:6d:36:89:a5:0b:7f:43:b8:fa:93:da:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218 Validity Not Before: Nov 7 15:33:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b68f4ec0e7d8da061a6ec1367bf6442efb08feb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:44:be:da:51:18:0a:bb:7f:c1:e0:38:fd: 31:e6:6a:67:ba:8f:f6:fd:26:9c:2e:77:61:81:7d: 3a:53:b2:d9:c3:e8:09:56:c9:12:43:e3:bf:a3:b9: 68:45:fc:06:63:7a:8d:28:a0:a0:7e:db:be:04:01: 39:ca:8d:43:c0:15:dc:7c:8f:c5:52:b7:08:3b:05: 45:c2:f7:84:a1:37:b5:a5:e1:05:b4:d3:88:21:74: dc:9a:04:a9:6f:af:63:3c:a4:ea:26:ec:5d:7e:55: 95:35:79:fd:61:89:22:ef:c3:0e:f6:c4:a0:ba:33: 52:c2:d4:6f:a9:51:05:74:b7:12:40:05:b8:c8:b9: 3a:42:2f:65:ca:33:d4:c6:15:08:be:f5:86:dc:44: ed:a0:7d:43:92:10:92:44:b3:90:ec:f6:fc:41:84: 01:c2:35:58:0b:67:22:01:9e:bd:c8:00:16:8f:9d: 11:12:c2:e7:be:1a:f2:96:76:2f:15:c9:87:bb:82: bd:84:90:68:04:68:4b:77:45:99:6a:c6:58:54:d2: db:52:70:fd:fa:cc:fb:4b:18:d6:59:af:6a:c5:f8: 12:a7:5b:b3:67:e6:49:4c:ac:b4:46:47:b3:fe:b6: 4a:d9:8a:3e:47:d9:20:55:e4:db:2a:a4:73:19:68: 03:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8F:4E:C0:E7:D8:DA:06:1A:6E:C1:36:7B:F6:44:2E:FB:08:FE:B5 X509v3 Authority Key Identifier: keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/to9OwOfY2gYabsE2e_ZELvsI_rU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.118.240.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:f5:46:b8:e8:43:72:a1:1d:12:e3:d9:df:77:d1:2e:23:3b: 61:61:22:e7:1a:cc:81:a3:0e:43:0b:67:fb:71:e3:ae:31:32: ec:09:4f:d6:83:97:b1:d5:08:2c:aa:d2:ee:79:e2:b8:f2:62: 25:10:bc:dc:4d:e4:0c:14:33:f3:58:d7:59:72:ad:36:37:bf: f7:d2:f6:f0:c8:c4:ba:6d:c8:67:2e:f1:9c:f2:7d:35:f1:e6: 43:28:8f:9c:e2:4b:86:ad:1d:38:c3:39:1c:33:72:06:67:33: 25:de:74:82:40:45:d7:e7:f5:05:4e:0d:74:4a:81:fb:f6:97: cc:75:38:1a:e1:06:2a:6c:32:dd:51:0a:a6:83:55:eb:47:53: 4a:a5:aa:82:26:68:05:15:71:4c:04:86:d0:00:fe:0a:cd:ff: 68:e3:25:5a:b3:83:1f:80:ad:c9:a4:91:78:60:65:6b:52:30: ff:7d:84:fd:65:59:0b:2c:15:64:7d:ea:ac:27:31:7f:b0:41: fb:73:44:66:ce:ee:0a:ea:6d:b1:73:57:bb:f8:66:9b:47:5a: 70:d2:92:37:9f:a9:df:0d:ff:bd:2c:3a:71:c0:a2:06:cb:26: 3c:f0:dd:18:43:f6:cd:48:a8:d4:bc:a6:d0:ad:aa:22:e0:04: 54:bf:52:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpe86embTaJpQt/Q7j6k9qJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2IzNWMwOGJhNDkzMDFhNmNjNDMwYWRhOTQ5M2NlZDdl ZDQyMTgwHhcNMjUxMTA3MTUzMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjhmNGVjMGU3ZDhkYTA2MWE2ZWMxMzY3YmY2NDQyZWZiMDhmZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG9EvtpRGAq7f8HgOP0x5mpnuo/2 /SacLndhgX06U7LZw+gJVskSQ+O/o7loRfwGY3qNKKCgftu+BAE5yo1DwBXcfI/F UrcIOwVFwveEoTe1peEFtNOIIXTcmgSpb69jPKTqJuxdflWVNXn9YYki78MO9sSg ujNSwtRvqVEFdLcSQAW4yLk6Qi9lyjPUxhUIvvWG3ETtoH1DkhCSRLOQ7Pb8QYQB wjVYC2ciAZ69yAAWj50REsLnvhrylnYvFcmHu4K9hJBoBGhLd0WZasZYVNLbUnD9 +sz7SxjWWa9qxfgSp1uzZ+ZJTKy0Rkez/rZK2Yo+R9kgVeTbKqRzGWgDnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLaPTsDn2NoGGm7BNnv2RC77CP61MB8GA1UdIwQY MBaAFG97NcCLpJMBpsxDCtqUk87X7UIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEt ZDI0YzM1ZGZhYzk0LzEvdG85T3dPZlkyZ1lhYnNFMmVfWkVMdnNJX3JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEtZDI0YzM1ZGZhYzk0 LzEvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2XbwMA0G CSqGSIb3DQEBCwUAA4IBAQCN9Ua46ENyoR0S49nfd9EuIzthYSLnGsyBow5DC2f7 ceOuMTLsCU/Wg5ex1QgsqtLueeK48mIlELzcTeQMFDPzWNdZcq02N7/30vbwyMS6 bchnLvGc8n018eZDKI+c4kuGrR04wzkcM3IGZzMl3nSCQEXX5/UFTg10SoH79pfM dTga4QYqbDLdUQqmg1XrR1NKpaqCJmgFFXFMBIbQAP4Kzf9o4yVas4MfgK3JpJF4 YGVrUjD/fYT9ZVkLLBVkfeqsJzF/sEH7c0Rmzu4K6m2xc1e7+GabR1pw0pI3n6nf Df+9LDpxwKIGyyY88N0YQ/bNSKjUvKbQraoi4ARUv1Ll -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:30 2025 by rpki-client