This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/1-IUX-5a8mzNC982IYo8McsQxwVM.roa File: 1-IUX-5a8mzNC982IYo8McsQxwVM.roa (raw, json) Hash identifier: DZTDftcGrtJSd1vZUszhc3bZZu8OjhqggeTv0HYl57Q= Subject key identifier: F8:85:17:FB:96:BC:9B:33:42:F7:CD:88:62:8F:0C:72:C4:31:C1:53 Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019AC54EA0616042B769286A517BC363273C Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/1-IUX-5a8mzNC982IYo8McsQxwVM.roa Signing time: Thu 27 Nov 2025 12:34:15 +0000 ROA not before: Thu 27 Nov 2025 12:34:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19211 IP address blocks: 217.22.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:4e:a0:61:60:42:b7:69:28:6a:51:7b:c3:63:27:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Nov 27 12:34:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f88517fb96bc9b3342f7cd88628f0c72c431c153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:a4:3c:93:d8:34:1a:67:cd:3f:3a:8b:24: 74:41:d8:58:f6:61:20:39:8e:aa:3b:d3:a8:56:bd: fe:62:1a:27:fb:bb:ea:92:fb:60:2a:e2:db:42:fd: 30:0e:fe:86:89:e3:56:23:ae:f8:98:8d:43:19:2c: 22:39:34:1a:7b:10:4d:bd:90:23:d1:ed:72:89:88: 60:50:50:bb:5d:10:22:15:9a:b5:70:60:30:a2:3e: a1:94:6d:20:21:b3:69:00:9d:9b:48:08:a6:36:75: 2c:34:6e:32:05:37:a4:d1:8d:25:0e:26:c2:cf:63: 4b:e0:49:b7:07:a9:d5:02:3a:c4:5d:ce:f7:12:b9: 97:9e:1c:7f:f4:35:3a:d5:dd:93:78:e0:9f:6f:95: b0:c2:cc:48:20:3d:01:33:47:2f:fd:fa:c7:97:d9: 69:cd:61:11:d2:ca:ec:d3:15:c0:bc:9d:8e:b0:ec: 0f:7f:7a:5d:16:34:26:a2:63:c3:31:e9:ae:cf:7e: 8d:c4:ae:df:cf:0a:68:dc:5c:f8:90:0d:d0:bb:18: 7f:11:4c:ce:76:d8:8a:36:b9:4d:d2:b5:af:bf:0f: a6:31:7c:bd:0e:2a:de:1d:4e:1c:4f:a9:5f:90:15: c3:04:d5:f0:bd:8a:e9:5f:3e:c2:7b:05:9c:58:23: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:85:17:FB:96:BC:9B:33:42:F7:CD:88:62:8F:0C:72:C4:31:C1:53 X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/1-IUX-5a8mzNC982IYo8McsQxwVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.22.232.0/21 Signature Algorithm: sha256WithRSAEncryption 05:04:f7:33:6b:13:0d:c3:7c:99:74:72:7e:f9:73:f1:6e:ae: 70:62:c0:c8:cf:42:ca:91:78:ce:54:27:ed:16:b2:ac:9f:89: d4:5b:99:f6:23:1f:1e:99:e4:10:ca:d8:67:ef:bc:81:a5:f8: 40:70:ed:5a:a8:29:55:fd:38:3e:1f:0b:e8:f7:a4:a3:91:10: bc:b8:72:17:d8:1c:6c:4d:04:e8:3b:b8:1a:d2:5f:02:1d:67: de:d5:24:c5:1e:f7:b8:f6:f6:ef:2a:8b:11:f4:bc:a5:b3:4d: fa:3e:54:37:63:a8:c3:f5:08:49:4e:d1:52:02:95:3e:46:6c: 09:91:7f:ab:8e:19:a4:8c:28:93:eb:e7:8e:65:f0:d1:e4:55: 7b:e0:e3:0b:4d:c9:9f:6d:c3:3c:97:e0:0e:08:24:87:c4:8d: 50:cb:0b:bf:15:90:e4:6e:91:c4:b4:91:f7:82:90:d5:87:00: 65:1a:df:72:fd:ab:80:03:4e:7c:b8:62:e1:b6:0e:9f:45:71: 37:14:69:d1:91:f3:49:05:a0:dc:a6:cf:34:2b:65:bc:19:53: 84:a5:28:af:f9:e0:24:59:51:2f:70:f0:20:e3:f9:fc:03:35: 1f:3e:d3:b1:6f:2d:e1:83:d0:bd:6a:7f:21:7b:8b:f6:71:4a: 42:ab:dd:17 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrFTqBhYEK3aShqUXvDYyc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjUxMTI3MTIzNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODg1MTdmYjk2YmM5YjMzNDJmN2NkODg2MjhmMGM3MmM0MzFjMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlKkPJPYNBpnzT86iyR0QdhY9mEg OY6qO9OoVr3+Yhon+7vqkvtgKuLbQv0wDv6GieNWI674mI1DGSwiOTQaexBNvZAj 0e1yiYhgUFC7XRAiFZq1cGAwoj6hlG0gIbNpAJ2bSAimNnUsNG4yBTek0Y0lDibC z2NL4Em3B6nVAjrEXc73ErmXnhx/9DU61d2TeOCfb5WwwsxIID0BM0cv/frHl9lp zWER0srs0xXAvJ2OsOwPf3pdFjQmomPDMemuz36NxK7fzwpo3Fz4kA3Quxh/EUzO dtiKNrlN0rWvvw+mMXy9DireHU4cT6lfkBXDBNXwvYrpXz7CewWcWCOZGQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPiFF/uWvJszQvfNiGKPDHLEMcFTMB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEvMS1JVVgtNWE4bXpOQzk4MklZbzhNY3NReHdWTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGUvYTk1NGJkLTE1N2YtNGRiYi1iYmE0LTM0NjNiNTZlMzcy Yy8xL3dvbHpyX3FwazIwNUZHcWhOdnZMQlJ1YS1aOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9kW6DAN BgkqhkiG9w0BAQsFAAOCAQEABQT3M2sTDcN8mXRyfvlz8W6ucGLAyM9CypF4zlQn 7RayrJ+J1FuZ9iMfHpnkEMrYZ++8gaX4QHDtWqgpVf04Ph8L6Peko5EQvLhyF9gc bE0E6Du4GtJfAh1n3tUkxR73uPb27yqLEfS8pbNN+j5UN2Oow/UISU7RUgKVPkZs CZF/q44ZpIwok+vnjmXw0eRVe+DjC03Jn23DPJfgDggkh8SNUMsLvxWQ5G6RxLSR 94KQ1YcAZRrfcv2rgANOfLhi4bYOn0VxNxRp0ZHzSQWg3KbPNCtlvBlThKUor/ng JFlRL3DwIOP5/AM1Hz7TsW8t4YPQvWp/IXuL9nFKQqvdFw== -----END CERTIFICATE-----Generated at Fri Nov 28 08:28:45 2025 by rpki-client