This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/pl_4_BDzXZjJ4TLe-idFQHoFcZ0.roa File: pl_4_BDzXZjJ4TLe-idFQHoFcZ0.roa (raw, json) Hash identifier: lpIAW5v+TxOADdZGRu2HZ/neoNrBr0yBzSa/bNi621Y= Subject key identifier: A6:5F:F8:FC:10:F3:5D:98:C9:E1:32:DE:FA:27:45:40:7A:05:71:9D Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019AB65E76BF3F0386C3725155A03849AFD0 Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/pl_4_BDzXZjJ4TLe-idFQHoFcZ0.roa Signing time: Mon 24 Nov 2025 14:57:15 +0000 ROA not before: Mon 24 Nov 2025 14:57:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8368 IP address blocks: 217.22.240.0/23 maxlen: 23 217.22.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:5e:76:bf:3f:03:86:c3:72:51:55:a0:38:49:af:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Nov 24 14:57:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a65ff8fc10f35d98c9e132defa2745407a05719d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:1e:c8:86:7d:a2:30:c4:de:52:73:19:a8: e6:b2:fd:e1:89:ed:b3:0c:37:bb:1b:05:1c:67:45: 8a:73:5e:f1:1d:8b:33:d0:fc:41:3f:3a:d2:a4:48: 76:a2:23:94:e5:cd:be:33:78:0f:af:00:dc:b1:7e: 13:af:da:84:ff:53:32:6a:db:a7:1e:2c:4c:38:9e: 33:ac:e4:90:7a:48:2f:8c:22:16:e6:4b:06:a5:bf: 9d:9f:38:54:65:ac:c3:29:ed:5d:ff:58:2b:fe:a3: 56:2e:b8:6c:36:fa:c2:d4:1f:b6:6c:3d:51:5d:62: a6:87:6f:2d:af:5e:54:c6:af:19:0a:be:f2:ec:4d: 02:21:41:32:87:34:ca:bd:31:75:00:d4:a7:4f:2f: 23:a4:58:79:77:b4:c8:93:62:57:85:18:53:e7:08: 3a:d9:1d:e5:24:f6:c5:35:e8:85:ef:ef:d0:bf:24: 64:9b:5c:ff:af:41:a3:53:e6:42:93:06:a4:3d:f9: d8:66:fa:fb:ae:17:f8:34:20:19:4c:c4:7e:09:b6: 9f:77:8d:67:44:bf:8e:21:47:19:01:24:6f:ca:7f: e3:c2:1e:ab:3e:87:30:e1:b8:c6:29:77:1c:98:fe: 32:ff:ef:dc:6c:d3:7b:b3:57:e6:60:f3:ab:c9:f4: ee:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5F:F8:FC:10:F3:5D:98:C9:E1:32:DE:FA:27:45:40:7A:05:71:9D X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/pl_4_BDzXZjJ4TLe-idFQHoFcZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.22.240.0/23 217.22.248.0/23 Signature Algorithm: sha256WithRSAEncryption 47:72:6f:97:20:6d:2b:c1:78:fd:9e:78:c8:6b:1f:53:69:50: d3:32:1a:ef:4d:90:4a:8e:8a:7e:c2:7f:79:cc:d4:ad:09:3a: dc:2f:36:5c:10:7b:f6:ae:93:98:35:b5:d2:89:d6:5d:a3:9b: 82:ce:91:b9:c4:68:83:e0:35:cd:ec:57:17:72:84:8a:bc:6f: 05:31:9c:04:96:a7:32:57:27:e8:bf:90:f9:ab:23:ff:aa:15: 90:ea:17:ef:74:da:8f:21:3f:ab:48:54:83:9e:14:d4:a3:7a: 7d:4f:ca:00:86:a1:06:37:9d:99:17:0b:e7:02:cc:82:24:c6: 38:62:35:0f:99:f2:1a:9f:a1:71:b3:1c:6c:b7:d9:5e:18:fd: 90:80:fc:10:4d:eb:b5:ed:e3:88:cf:f2:41:d8:a6:a4:5f:17: fd:f1:fd:f2:87:55:79:a2:a2:38:de:4e:f6:cc:80:94:ab:11: 10:c2:5e:8f:e5:1e:d8:d0:74:e7:04:92:51:7a:ca:03:78:4d: dd:3f:91:e5:75:1d:51:2b:ee:0c:f7:8c:b1:85:da:cf:e3:36: f4:20:e7:69:97:73:e8:75:7f:11:fe:46:b4:f9:e9:5b:9f:74: 8b:01:31:9a:51:5a:6e:b9:b7:8b:e5:48:71:44:ff:04:ae:2d: e7:93:be:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq2Xna/PwOGw3JRVaA4Sa/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjUxMTI0MTQ1NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjVmZjhmYzEwZjM1ZDk4YzllMTMyZGVmYTI3NDU0MDdhMDU3MTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvukeyIZ9ojDE3lJzGajmsv3hie2z DDe7GwUcZ0WKc17xHYsz0PxBPzrSpEh2oiOU5c2+M3gPrwDcsX4Tr9qE/1Myatun HixMOJ4zrOSQekgvjCIW5ksGpb+dnzhUZazDKe1d/1gr/qNWLrhsNvrC1B+2bD1R XWKmh28tr15Uxq8ZCr7y7E0CIUEyhzTKvTF1ANSnTy8jpFh5d7TIk2JXhRhT5wg6 2R3lJPbFNeiF7+/QvyRkm1z/r0GjU+ZCkwakPfnYZvr7rhf4NCAZTMR+Cbafd41n RL+OIUcZASRvyn/jwh6rPocw4bjGKXccmP4y/+/cbNN7s1fmYPOryfTusQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKZf+PwQ812YyeEy3vonRUB6BXGdMB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEvcGxfNF9CRHpYWmpKNFRMZS1pZEZRSG9GY1owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB2RbwAwQB 2Rb4MA0GCSqGSIb3DQEBCwUAA4IBAQBHcm+XIG0rwXj9nnjIax9TaVDTMhrvTZBK jop+wn95zNStCTrcLzZcEHv2rpOYNbXSidZdo5uCzpG5xGiD4DXN7FcXcoSKvG8F MZwElqcyVyfov5D5qyP/qhWQ6hfvdNqPIT+rSFSDnhTUo3p9T8oAhqEGN52ZFwvn AsyCJMY4YjUPmfIan6Fxsxxst9leGP2QgPwQTeu17eOIz/JB2KakXxf98f3yh1V5 oqI43k72zICUqxEQwl6P5R7Y0HTnBJJResoDeE3dP5HldR1RK+4M94yxhdrP4zb0 IOdpl3PodX8R/ka0+elbn3SLATGaUVpuubeL5UhxRP8Eri3nk778 -----END CERTIFICATE-----Generated at Thu Dec 4 07:45:26 2025 by rpki-client