This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/nLf7EoxKFXRurdIRsSpBj3rxvrQ.roa File: nLf7EoxKFXRurdIRsSpBj3rxvrQ.roa (raw, json) Hash identifier: ekP2PeDzC5rM/e3wynmYZx2+SLmE7vjJ/gaJYQtY74I= Subject key identifier: 9C:B7:FB:12:8C:4A:15:74:6E:AD:D2:11:B1:2A:41:8F:7A:F1:BE:B4 Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019AA555CFD32CCFB407DE925D374F5C00FA Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/nLf7EoxKFXRurdIRsSpBj3rxvrQ.roa Signing time: Fri 21 Nov 2025 07:34:15 +0000 ROA not before: Fri 21 Nov 2025 07:34:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 217.22.230.0/23 maxlen: 23 217.22.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 03:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:55:cf:d3:2c:cf:b4:07:de:92:5d:37:4f:5c:00:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Nov 21 07:34:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9cb7fb128c4a15746eadd211b12a418f7af1beb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:e4:61:84:95:e0:77:b9:6a:58:10:c4:3d: 6b:81:d7:19:68:28:a1:7a:54:a4:00:17:f1:ee:2e: e6:7e:eb:61:96:15:ff:44:c1:f5:c1:a1:cb:72:6e: d8:12:21:c8:d9:2c:f8:5a:03:c6:2b:0d:69:d7:8e: 0e:81:a3:ec:82:25:53:fb:29:9d:a4:ca:ff:c8:cb: aa:ba:0f:29:ce:fb:4d:0f:de:12:40:78:d8:96:d3: a1:88:e6:64:c1:2d:5f:9d:f6:6f:ae:46:00:0d:07: d9:7e:bb:8a:80:63:71:0e:c9:46:ef:e0:0b:7f:75: 56:14:b8:31:f8:69:a9:33:11:4e:da:11:f1:72:55: 28:41:34:c6:73:9b:71:7a:6d:ac:93:e8:29:b2:3e: c4:f8:fb:d2:76:ec:7f:93:3c:2c:bd:10:16:36:ec: c2:cd:30:01:c0:ab:09:01:8d:87:2a:24:05:0f:e6: ea:9b:6a:c1:bf:08:f3:86:d5:e5:eb:c6:12:81:f2: 7f:3d:ec:b1:9b:36:f2:0d:0c:71:7e:45:b1:1e:31: dd:5d:16:08:28:71:e2:34:27:35:77:53:ec:d3:d8: ee:e9:ae:91:97:95:17:6e:89:e5:32:3f:1d:a7:f2: 1f:19:65:5a:87:27:eb:8f:fd:d9:6b:3b:15:77:be: 3d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B7:FB:12:8C:4A:15:74:6E:AD:D2:11:B1:2A:41:8F:7A:F1:BE:B4 X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/nLf7EoxKFXRurdIRsSpBj3rxvrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.22.230.0/23 217.22.252.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:68:7d:df:b0:02:dd:90:c1:36:34:d7:5d:f1:1d:8d:8f:14: f6:6b:52:c8:84:04:3e:9a:5a:74:f7:46:91:c6:b7:e8:d1:fa: b2:d6:51:dc:bb:ee:5d:d6:52:dd:a4:4b:da:cd:43:5f:cc:00: 17:89:57:b6:60:b2:83:e6:4e:42:44:fe:f9:65:d2:a9:d5:b6: 60:ea:5b:f2:3a:9e:0b:f6:6c:2b:ce:83:0d:a1:a3:93:6c:1a: 12:73:83:c5:94:d7:ee:e7:9f:e4:fa:81:6a:34:6e:b8:9a:dc: a8:ef:1f:53:a4:ef:8a:13:20:4f:a4:24:3f:47:b5:b4:1a:b1: 7f:3f:43:13:17:97:40:ce:54:cf:6f:b2:c1:ba:66:32:14:bd: e9:a6:10:44:ae:a9:93:92:ae:f7:a2:3e:a3:b6:ce:7f:b0:91: 43:84:c8:82:3f:e3:c4:32:eb:83:92:a6:7f:c9:60:71:ae:e6: 63:c9:af:5d:d7:64:44:03:90:60:71:6f:5d:f1:48:47:a1:03: 30:c2:ff:40:9c:af:dc:c9:f8:ed:26:e4:31:58:10:b0:ac:26: b6:24:ce:cc:16:6a:71:90:c9:2b:4b:4d:8c:36:69:20:ce:3f: ed:ea:61:ea:a2:66:2e:26:ab:27:1a:8c:e8:60:db:95:16:c6: ff:7f:9f:59 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqlVc/TLM+0B96SXTdPXAD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjUxMTIxMDczNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2I3ZmIxMjhjNGExNTc0NmVhZGQyMTFiMTJhNDE4ZjdhZjFiZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYXkYYSV4He5algQxD1rgdcZaCih elSkABfx7i7mfuthlhX/RMH1waHLcm7YEiHI2Sz4WgPGKw1p144OgaPsgiVT+ymd pMr/yMuqug8pzvtND94SQHjYltOhiOZkwS1fnfZvrkYADQfZfruKgGNxDslG7+AL f3VWFLgx+GmpMxFO2hHxclUoQTTGc5txem2sk+gpsj7E+PvSdux/kzwsvRAWNuzC zTABwKsJAY2HKiQFD+bqm2rBvwjzhtXl68YSgfJ/PeyxmzbyDQxxfkWxHjHdXRYI KHHiNCc1d1Ps09ju6a6Rl5UXbonlMj8dp/IfGWVahyfrj/3ZazsVd749EQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJy3+xKMShV0bq3SEbEqQY968b60MB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEvbkxmN0VveEtGWFJ1cmRJUnNTcEJqM3J4dnJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB2RbmAwQB 2Rb8MA0GCSqGSIb3DQEBCwUAA4IBAQCaaH3fsALdkME2NNdd8R2NjxT2a1LIhAQ+ mlp090aRxrfo0fqy1lHcu+5d1lLdpEvazUNfzAAXiVe2YLKD5k5CRP75ZdKp1bZg 6lvyOp4L9mwrzoMNoaOTbBoSc4PFlNfu55/k+oFqNG64mtyo7x9TpO+KEyBPpCQ/ R7W0GrF/P0MTF5dAzlTPb7LBumYyFL3pphBErqmTkq73oj6jts5/sJFDhMiCP+PE MuuDkqZ/yWBxruZjya9d12REA5BgcW9d8UhHoQMwwv9AnK/cyfjtJuQxWBCwrCa2 JM7MFmpxkMkrS02MNmkgzj/t6mHqomYuJqsnGozoYNuVFsb/f59Z -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:09 2025 by rpki-client