This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/J0FY3zyfHxNEB8yMdd7E1LW0KQY.roa File: J0FY3zyfHxNEB8yMdd7E1LW0KQY.roa (raw, json) Hash identifier: T+h1CDVONxwGKPgdtsEQk8rhhIuKgrDFiOo2zZqI01s= Subject key identifier: 27:41:58:DF:3C:9F:1F:13:44:07:CC:8C:75:DE:C4:D4:B5:B4:29:06 Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019B0DD2120C5A47D74BAFCE529ADA6A9ACB Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/J0FY3zyfHxNEB8yMdd7E1LW0KQY.roa Signing time: Thu 11 Dec 2025 14:30:29 +0000 ROA not before: Thu 11 Dec 2025 14:30:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10753 IP address blocks: 217.22.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:d2:12:0c:5a:47:d7:4b:af:ce:52:9a:da:6a:9a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Dec 11 14:30:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=274158df3c9f1f134407cc8c75dec4d4b5b42906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:38:da:f1:58:7b:8b:13:d4:61:bf:8d:41: 02:16:e0:2c:b2:04:12:57:3d:b6:12:0a:36:04:89: 11:d5:10:30:20:32:1b:40:56:f8:a1:73:6a:1b:de: 68:69:e8:ff:2f:94:76:63:67:b0:c0:26:1d:7d:01: ca:79:7e:d4:32:2e:de:29:d9:ce:a4:3f:84:35:62: d9:b0:ee:c0:c8:d2:01:15:df:18:f8:79:c2:1e:b8: f6:bf:f2:d2:66:d2:5a:5d:90:4d:c0:c2:64:af:81: 36:6f:a5:fd:aa:9f:9b:ce:22:91:b0:87:21:09:4a: ac:94:e5:5e:4a:d6:e6:4c:f1:9d:aa:59:00:da:f1: de:d9:ac:3a:4e:61:74:d7:ba:bf:7b:6d:f6:c3:f0: 52:71:a4:f2:fb:89:b9:62:9a:88:34:bb:a2:32:b4: 2e:5c:cd:70:18:fa:93:4b:aa:69:fc:22:65:f9:6f: d7:06:41:88:96:37:88:55:a2:2c:d3:dd:db:f9:94: a8:02:90:bd:26:3d:46:7d:f4:db:1d:ba:6a:b7:27: 10:c9:70:a5:a2:8c:b1:3c:1c:70:65:66:41:b1:36: cb:e6:79:7c:ab:3b:52:b6:e5:e3:96:d7:2c:a8:d1: 48:94:02:9d:c2:01:5f:8a:49:e4:db:1c:11:7d:d5: 98:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:41:58:DF:3C:9F:1F:13:44:07:CC:8C:75:DE:C4:D4:B5:B4:29:06 X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/J0FY3zyfHxNEB8yMdd7E1LW0KQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.22.244.0/23 Signature Algorithm: sha256WithRSAEncryption be:aa:88:35:b1:f0:7c:98:40:43:a4:d6:a4:7a:2a:1f:f3:4d: 60:23:1a:d1:aa:e7:a2:e7:14:c5:e4:e5:a7:4a:88:36:13:10: 86:d0:62:22:00:48:c1:da:f2:8b:c6:bf:b6:0f:7a:2b:d8:3b: cd:0d:ef:1d:33:8c:61:e0:7a:69:b3:df:9d:e4:8e:45:fc:ac: db:9e:63:92:ed:25:38:cc:ca:41:dd:e8:47:f5:ad:a8:a6:52: 29:d3:60:ee:07:bb:61:c0:10:8e:2f:24:67:5c:96:bc:ff:72: aa:fe:43:7b:f1:34:ae:51:0e:2a:f4:38:ec:56:8d:56:0f:4a: c0:50:bd:ab:0f:0c:2f:0f:e6:98:08:fa:81:dc:99:2d:0f:87: f3:0b:3b:9d:31:50:3f:74:8c:57:b7:b4:b0:04:b8:46:e1:dd: e7:3f:e6:25:fb:b8:f0:96:c8:b8:5e:5e:a1:6f:2c:95:dc:e2: 75:a5:aa:ba:a4:a4:35:0f:c7:34:c4:a8:18:9c:8c:d1:ba:22: 5f:81:f3:14:83:e9:b5:65:9f:96:b9:89:f8:9d:c2:d6:0d:c7: 3c:dd:2b:eb:40:1f:37:42:29:67:b2:df:b8:57:28:f3:22:76: 6b:69:32:a3:01:81:1d:cd:92:4e:c5:39:74:30:7b:ec:44:e5: 9e:39:8a:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsN0hIMWkfXS6/OUpraaprLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjUxMjExMTQzMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQxNThkZjNjOWYxZjEzNDQwN2NjOGM3NWRlYzRkNGI1YjQyOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyA42vFYe4sT1GG/jUECFuAssgQS Vz22Ego2BIkR1RAwIDIbQFb4oXNqG95oaej/L5R2Y2ewwCYdfQHKeX7UMi7eKdnO pD+ENWLZsO7AyNIBFd8Y+HnCHrj2v/LSZtJaXZBNwMJkr4E2b6X9qp+bziKRsIch CUqslOVeStbmTPGdqlkA2vHe2aw6TmF017q/e232w/BScaTy+4m5YpqINLuiMrQu XM1wGPqTS6pp/CJl+W/XBkGIljeIVaIs093b+ZSoApC9Jj1GffTbHbpqtycQyXCl ooyxPBxwZWZBsTbL5nl8qztStuXjltcsqNFIlAKdwgFfiknk2xwRfdWYIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdBWN88nx8TRAfMjHXexNS1tCkGMB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEvSjBGWTN6eWZIeE5FQjh5TWRkN0UxTFcwS1FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Rb0MA0G CSqGSIb3DQEBCwUAA4IBAQC+qog1sfB8mEBDpNakeiof801gIxrRquei5xTF5OWn Sog2ExCG0GIiAEjB2vKLxr+2D3or2DvNDe8dM4xh4Hpps9+d5I5F/KzbnmOS7SU4 zMpB3ehH9a2oplIp02DuB7thwBCOLyRnXJa8/3Kq/kN78TSuUQ4q9DjsVo1WD0rA UL2rDwwvD+aYCPqB3JktD4fzCzudMVA/dIxXt7SwBLhG4d3nP+Yl+7jwlsi4Xl6h byyV3OJ1paq6pKQ1D8c0xKgYnIzRuiJfgfMUg+m1ZZ+WuYn4ncLWDcc83SvrQB83 Qilnst+4VyjzInZraTKjAYEdzZJOxTl0MHvsROWeOYom -----END CERTIFICATE-----Generated at Sat Dec 13 02:33:00 2025 by rpki-client