This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1zKLLOBdfckE92MNi-WX2FyA928.roa File: 1zKLLOBdfckE92MNi-WX2FyA928.roa (raw, json) Hash identifier: rSggyksnOdk1jsI+AvP/zJ4r3ce4J03VCF7ClRaCyrQ= Subject key identifier: D7:32:8B:2C:E0:5D:7D:C9:04:F7:63:0D:8B:E5:97:D8:5C:80:F7:6F Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019AB6BBA616EAFDF0F555A5C8192667B6CE Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1zKLLOBdfckE92MNi-WX2FyA928.roa Signing time: Mon 24 Nov 2025 16:39:02 +0000 ROA not before: Mon 24 Nov 2025 16:39:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214449 IP address blocks: 104.222.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:bb:a6:16:ea:fd:f0:f5:55:a5:c8:19:26:67:b6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Nov 24 16:39:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d7328b2ce05d7dc904f7630d8be597d85c80f76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:69:ff:2c:5d:0d:cb:c8:5e:1e:3b:6e:17: 8d:40:5b:f5:f5:5a:c0:94:48:1d:cf:6d:88:93:be: 41:13:08:5e:75:68:cc:9a:95:0e:f0:0d:3c:f4:45: b5:66:c6:ad:ac:4a:ec:a8:a1:9c:3e:52:63:6a:e7: 00:d7:9f:2a:d1:f9:92:2d:0b:f2:cb:84:4e:bf:e6: 25:65:0d:74:f4:1d:9e:dd:36:18:60:d4:92:7e:ee: 03:80:a8:3d:25:da:3d:6f:57:85:41:52:a9:96:92: 5d:4b:53:fb:b2:ea:6d:06:ee:e0:a8:19:e4:c1:38: 33:13:2d:9b:45:ea:94:93:77:2a:37:d4:2e:9a:b1: 7a:74:50:22:c2:11:a4:c2:f9:18:8b:b2:c9:c2:bd: 7b:1b:fc:6c:4c:d0:28:1d:da:97:5e:c2:f5:36:4d: a7:06:30:6f:a4:38:e2:d5:4d:ec:0c:f1:c6:ce:6a: 1d:ba:d1:78:24:c3:bd:dd:ed:64:38:05:be:56:a7: 48:50:0a:0f:d9:70:f4:2d:22:58:58:94:05:25:42: c1:15:80:e3:74:97:01:92:0a:0b:be:73:cc:54:90: 8d:e5:a5:64:29:d2:c6:1e:26:04:a3:ce:be:58:f0: 52:af:c8:4f:57:e4:e1:f2:ce:fd:ed:8a:8c:c8:24: 1d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:32:8B:2C:E0:5D:7D:C9:04:F7:63:0D:8B:E5:97:D8:5C:80:F7:6F X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1zKLLOBdfckE92MNi-WX2FyA928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.222.176.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:be:01:8c:e6:a5:30:c6:16:9b:9a:d3:bc:75:27:eb:dc:ba: 52:f8:1e:5c:91:b5:b3:70:45:c7:90:31:e9:a5:05:46:2f:48: 88:24:7c:c1:94:ff:20:df:58:cc:09:39:7a:b1:38:e6:18:63: bb:cf:bd:53:85:47:b7:51:b4:d8:ef:7f:2c:8a:3b:e1:43:f1: 2d:e1:c4:72:d3:12:55:19:30:6f:d7:e0:c9:c0:a5:6c:57:bb: 33:96:6e:40:e6:33:f4:31:0f:ae:a1:33:a9:3b:76:7e:e0:59: d3:2c:2a:76:cc:5b:7b:86:31:06:86:fa:2c:b9:95:97:0e:3d: a7:6a:81:16:34:55:35:0c:cc:60:3e:79:7d:0c:f0:cd:dc:27: 59:a3:11:bc:2e:ed:30:8d:52:97:37:fe:e6:d4:e7:bf:e5:3a: f0:63:7e:b6:43:0d:87:d1:e9:db:6f:d3:40:c5:d3:74:8f:24: f1:ee:1b:24:fa:ce:12:14:00:a0:4d:05:75:78:55:15:31:71: b5:53:59:b2:3f:4f:31:52:08:6f:9c:cc:dd:a6:3f:fb:f3:cc: d7:92:d0:51:99:b9:0c:b4:1d:55:3e:68:0c:aa:d6:a3:3f:5f: 81:57:ea:e2:31:c3:9e:f7:97:50:27:61:52:bd:5e:92:84:dd: c7:47:fd:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq2u6YW6v3w9VWlyBkmZ7bOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjUxMTI0MTYzOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzMyOGIyY2UwNWQ3ZGM5MDRmNzYzMGQ4YmU1OTdkODVjODBmNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZJp/yxdDcvIXh47bheNQFv19VrA lEgdz22Ik75BEwhedWjMmpUO8A089EW1ZsatrErsqKGcPlJjaucA158q0fmSLQvy y4ROv+YlZQ109B2e3TYYYNSSfu4DgKg9Jdo9b1eFQVKplpJdS1P7suptBu7gqBnk wTgzEy2bReqUk3cqN9QumrF6dFAiwhGkwvkYi7LJwr17G/xsTNAoHdqXXsL1Nk2n BjBvpDji1U3sDPHGzmodutF4JMO93e1kOAW+VqdIUAoP2XD0LSJYWJQFJULBFYDj dJcBkgoLvnPMVJCN5aVkKdLGHiYEo86+WPBSr8hPV+Th8s797YqMyCQdIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNcyiyzgXX3JBPdjDYvll9hcgPdvMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvMXpLTExPQmRmY2tFOTJNTmktV1gyRnlBOTI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaN6wMA0G CSqGSIb3DQEBCwUAA4IBAQBsvgGM5qUwxhabmtO8dSfr3LpS+B5ckbWzcEXHkDHp pQVGL0iIJHzBlP8g31jMCTl6sTjmGGO7z71ThUe3UbTY738sijvhQ/Et4cRy0xJV GTBv1+DJwKVsV7szlm5A5jP0MQ+uoTOpO3Z+4FnTLCp2zFt7hjEGhvosuZWXDj2n aoEWNFU1DMxgPnl9DPDN3CdZoxG8Lu0wjVKXN/7m1Oe/5TrwY362Qw2H0enbb9NA xdN0jyTx7hsk+s4SFACgTQV1eFUVMXG1U1myP08xUghvnMzdpj/788zXktBRmbkM tB1VPmgMqtajP1+BV+riMcOe95dQJ2FSvV6ShN3HR/2T -----END CERTIFICATE-----Generated at Tue Nov 25 18:14:29 2025 by rpki-client