This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/XX2wYcwap8ipUrsF5QxMCkU6q3s.roa File: XX2wYcwap8ipUrsF5QxMCkU6q3s.roa (raw, json) Hash identifier: 5rJ1cTY8WuJEVbqP9odqHpQe40kbl4hVcRgWYYyQhgQ= Subject key identifier: 5D:7D:B0:61:CC:1A:A7:C8:A9:52:BB:05:E5:0C:4C:0A:45:3A:AB:7B Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019A8C72136DF9E2D572ECC340B46339DFC6 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/XX2wYcwap8ipUrsF5QxMCkU6q3s.roa Signing time: Sun 16 Nov 2025 11:34:37 +0000 ROA not before: Sun 16 Nov 2025 11:34:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 91.221.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8c:72:13:6d:f9:e2:d5:72:ec:c3:40:b4:63:39:df:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Nov 16 11:34:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5d7db061cc1aa7c8a952bb05e50c4c0a453aab7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:c8:b9:1f:73:12:1c:3f:8c:62:4e:db:6f: e7:53:cc:23:21:9b:9a:60:3a:ae:c3:56:4e:86:c9: 47:ee:63:25:5c:2a:71:df:9f:b4:4e:bb:6d:0e:98: 09:a8:7d:f7:a0:6a:b9:a9:1b:27:f3:87:01:df:bb: 18:8f:0e:75:25:b6:45:5b:2b:cc:7f:fd:21:88:11: e8:02:fc:5f:9e:8a:af:2d:c3:f3:a9:21:ed:d5:70: f3:42:c9:ac:6e:95:a8:de:a4:8d:dd:20:52:5f:68: c2:56:fb:0a:d3:ce:98:8f:a0:47:e9:f7:40:b2:b2: 7d:0c:19:bf:27:a7:32:e3:3a:cb:df:f3:3d:95:bc: a0:ee:0d:02:c1:37:15:e7:ee:84:de:ab:3c:ff:bc: fc:d0:f1:36:c8:b2:27:d4:47:51:f5:a6:2e:1b:44: d3:93:f6:5b:a1:89:04:41:50:f8:3c:f0:fe:59:89: b9:4e:c8:40:4a:29:5f:c1:1c:c8:81:c9:af:44:f3: 89:67:06:e7:5d:f9:dc:3a:aa:69:79:d1:e9:38:e8: 46:99:90:8c:93:4f:2b:f7:f2:40:6f:0e:d6:12:31: fc:d9:d7:8b:75:73:0b:89:30:a7:05:c3:23:1c:f3: 64:f4:64:87:d8:40:c4:c2:e5:09:e7:8e:0d:a1:92: 68:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7D:B0:61:CC:1A:A7:C8:A9:52:BB:05:E5:0C:4C:0A:45:3A:AB:7B X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/XX2wYcwap8ipUrsF5QxMCkU6q3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.117.0/24 Signature Algorithm: sha256WithRSAEncryption 06:6a:6c:66:84:a1:46:77:2e:fb:7b:ab:15:eb:ed:fe:3a:b5: b0:d3:9a:30:08:6c:37:b9:4d:71:52:c8:c3:e1:ff:fb:86:8c: 96:b3:3d:e4:2e:d1:42:7d:1b:08:8b:01:0e:4e:fd:3f:21:98: a1:2a:6e:00:b1:1a:90:4e:e4:e5:68:09:63:eb:c6:b4:43:b8: dc:01:91:c5:77:6e:dc:05:d9:34:2d:fd:96:c9:a3:da:c3:58: e0:67:6c:77:9a:fd:da:60:4e:23:2b:b5:6b:24:20:60:5e:61: e9:66:90:1f:5a:70:6b:28:7f:dc:65:1e:14:ef:59:ed:0c:aa: e2:e6:55:65:7c:4b:b2:3d:92:56:0f:22:3b:01:eb:7c:73:b4: 13:8d:69:56:29:dd:7f:32:2b:66:ff:01:36:66:d2:42:af:db: 3c:26:ab:83:70:a4:f8:34:0c:aa:09:e3:93:78:9f:74:c5:cb: cc:df:c4:90:cf:2f:f5:71:38:1e:b2:94:f4:0a:41:73:36:65: 83:e6:76:91:e3:96:de:94:04:5e:c8:2c:18:2e:e3:62:5d:95: 1e:1e:68:2d:fc:87:66:95:39:cc:37:03:75:45:98:0e:38:5f: 21:12:e5:d9:6a:0c:d9:15:8b:a7:fa:3a:11:83:5b:14:66:55: 37:de:0d:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqMchNt+eLVcuzDQLRjOd/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjUxMTE2MTEzNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDdkYjA2MWNjMWFhN2M4YTk1MmJiMDVlNTBjNGMwYTQ1M2FhYjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjjIuR9zEhw/jGJO22/nU8wjIZua YDquw1ZOhslH7mMlXCpx35+0TrttDpgJqH33oGq5qRsn84cB37sYjw51JbZFWyvM f/0hiBHoAvxfnoqvLcPzqSHt1XDzQsmsbpWo3qSN3SBSX2jCVvsK086Yj6BH6fdA srJ9DBm/J6cy4zrL3/M9lbyg7g0CwTcV5+6E3qs8/7z80PE2yLIn1EdR9aYuG0TT k/ZboYkEQVD4PPD+WYm5TshASilfwRzIgcmvRPOJZwbnXfncOqppedHpOOhGmZCM k08r9/JAbw7WEjH82deLdXMLiTCnBcMjHPNk9GSH2EDEwuUJ544NoZJo2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF19sGHMGqfIqVK7BeUMTApFOqt7MB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWFgyd1ljd2FwOGlwVXJzRjVReE1Da1U2cTNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW911MA0G CSqGSIb3DQEBCwUAA4IBAQAGamxmhKFGdy77e6sV6+3+OrWw05owCGw3uU1xUsjD 4f/7hoyWsz3kLtFCfRsIiwEOTv0/IZihKm4AsRqQTuTlaAlj68a0Q7jcAZHFd27c Bdk0Lf2WyaPaw1jgZ2x3mv3aYE4jK7VrJCBgXmHpZpAfWnBrKH/cZR4U71ntDKri 5lVlfEuyPZJWDyI7Aet8c7QTjWlWKd1/Mitm/wE2ZtJCr9s8JquDcKT4NAyqCeOT eJ90xcvM38SQzy/1cTgespT0CkFzNmWD5naR45belAReyCwYLuNiXZUeHmgt/Idm lTnMNwN1RZgOOF8hEuXZagzZFYun+joRg1sUZlU33g36 -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:56 2025 by rpki-client