This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/IzT7B6hBqCPMluzcAWSP1E5e-WY.roa File: IzT7B6hBqCPMluzcAWSP1E5e-WY.roa (raw, json) Hash identifier: e0FYKIWMCsfj5OQDcrrq5vYAB9ZG8a35+sfTG+gRtNQ= Subject key identifier: 23:34:FB:07:A8:41:A8:23:CC:96:EC:DC:01:64:8F:D4:4E:5E:F9:66 Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019A96CAB2899D9F64E2B33E3DD113421F4E Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/IzT7B6hBqCPMluzcAWSP1E5e-WY.roa Signing time: Tue 18 Nov 2025 11:47:37 +0000 ROA not before: Tue 18 Nov 2025 11:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3257 IP address blocks: 62.217.8.0/21 maxlen: 24 212.11.0.0/24 maxlen: 24 212.11.6.0/24 maxlen: 24 212.11.9.0/24 maxlen: 24 212.11.10.0/24 maxlen: 24 212.11.13.0/24 maxlen: 24 212.11.44.0/24 maxlen: 24 212.11.48.0/24 maxlen: 24 212.11.49.0/24 maxlen: 24 212.11.52.0/24 maxlen: 24 212.11.55.0/24 maxlen: 24 212.11.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:ca:b2:89:9d:9f:64:e2:b3:3e:3d:d1:13:42:1f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Nov 18 11:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2334fb07a841a823cc96ecdc01648fd44e5ef966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:9b:f2:f3:34:ec:f8:dd:4f:9d:46:2c:a1: 47:14:21:7d:81:cb:94:57:e3:ae:41:1d:c7:3b:60: ff:06:03:86:c6:d3:2e:7f:e1:9c:bd:f8:80:6f:ff: 15:bd:cf:51:2f:57:05:5a:97:19:a7:a8:9c:6d:42: c8:0b:eb:ec:4a:8b:e4:04:2a:8b:2c:e3:54:b6:48: 8d:41:58:65:8b:6c:73:0d:43:7d:51:f1:28:20:81: 71:e4:97:b9:fc:b6:db:7b:76:50:cf:ed:05:b7:72: 0e:2b:2b:75:24:7f:e5:da:54:93:79:ae:7f:c2:59: 2c:9f:12:7b:b6:b3:c6:8e:3b:06:06:82:41:c6:e4: c4:46:b4:8e:d6:f1:5a:26:55:e0:fe:15:92:03:4e: 3f:15:ee:dd:e1:df:8c:65:be:06:32:f3:37:f1:48: 71:a1:db:66:7d:22:8c:b3:46:23:fd:c1:fe:5e:44: bd:f9:cc:d9:0c:98:93:4f:dc:00:8c:32:b0:85:2d: b3:de:94:a9:1c:34:f4:c1:70:f5:a5:e9:f5:e6:54: d6:fe:e2:71:a0:03:57:2e:cf:49:09:14:56:cd:76: 7a:86:d1:80:b6:3e:14:a9:7a:e7:3a:2b:96:56:a5: e3:64:f0:02:1a:03:89:2b:a5:a4:63:84:67:26:86: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:34:FB:07:A8:41:A8:23:CC:96:EC:DC:01:64:8F:D4:4E:5E:F9:66 X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/IzT7B6hBqCPMluzcAWSP1E5e-WY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.217.8.0/21 212.11.0.0/24 212.11.6.0/24 212.11.9.0-212.11.10.255 212.11.13.0/24 212.11.44.0/24 212.11.48.0/23 212.11.52.0/24 212.11.55.0-212.11.56.255 Signature Algorithm: sha256WithRSAEncryption 50:ef:b2:7d:f1:02:8c:f5:99:46:56:1f:d2:cc:8c:f7:18:ca: 68:83:14:de:b1:d3:20:37:b4:db:8b:9d:59:e2:bd:8c:9d:57: 2f:30:d7:87:06:11:b6:f8:da:32:17:d5:c1:b9:86:10:ac:f7: d3:21:9d:8a:40:fb:b9:bb:54:a5:4f:12:9e:bf:61:04:dc:2e: 5d:2d:4d:7e:e3:76:84:03:65:b8:33:b5:0c:c2:3e:95:fa:a7: ae:e3:c0:0b:71:aa:da:d8:35:46:1b:1e:bf:18:e0:b0:f0:d9: c8:fa:94:a6:f5:81:6d:ca:44:49:5d:9b:ac:87:1f:a8:a8:d9: 90:fe:69:4b:a3:0f:81:80:a7:91:99:ce:87:41:74:54:da:9b: da:0b:01:18:fb:8f:2c:bf:06:50:3b:d8:fc:4c:ad:4a:b0:dd: c5:1c:44:d3:67:c2:bc:73:48:9b:88:af:d5:66:39:ce:e9:a1: 6c:dc:ed:84:2b:71:4b:0b:06:b5:a4:cc:5c:db:ef:7b:4f:11: f1:4e:d2:82:f7:f2:4e:fa:09:16:b2:85:a1:09:bc:19:a4:a8: 52:f2:57:09:23:c2:35:11:65:27:a8:09:6d:3d:e2:09:c1:74: a0:88:48:3a:1b:d4:ab:6a:18:1d:01:cd:6d:39:29:72:17:6f: c5:55:c4:a2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZqWyrKJnZ9k4rM+PdETQh9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjUxMTE4MTE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzM0ZmIwN2E4NDFhODIzY2M5NmVjZGMwMTY0OGZkNDRlNWVmOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBWb8vM07PjdT51GLKFHFCF9gcuU V+OuQR3HO2D/BgOGxtMuf+GcvfiAb/8Vvc9RL1cFWpcZp6icbULIC+vsSovkBCqL LONUtkiNQVhli2xzDUN9UfEoIIFx5Je5/Lbbe3ZQz+0Ft3IOKyt1JH/l2lSTea5/ wlksnxJ7trPGjjsGBoJBxuTERrSO1vFaJlXg/hWSA04/Fe7d4d+MZb4GMvM38Uhx odtmfSKMs0Yj/cH+XkS9+czZDJiTT9wAjDKwhS2z3pSpHDT0wXD1pen15lTW/uJx oANXLs9JCRRWzXZ6htGAtj4UqXrnOiuWVqXjZPACGgOJK6WkY4RnJoYoVQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFCM0+weoQagjzJbs3AFkj9ROXvlmMB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEvSXpUN0I2aEJxQ1BNbHV6Y0FXU1AxRTVlLVdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQDPtkIAwQA 1AsAAwQA1AsGMAwDBADUCwkDBADUCwoDBADUCw0DBADUCywDBAHUCzADBADUCzQw DAMEANQLNwMEANQLODANBgkqhkiG9w0BAQsFAAOCAQEAUO+yffECjPWZRlYf0syM 9xjKaIMU3rHTIDe024udWeK9jJ1XLzDXhwYRtvjaMhfVwbmGEKz30yGdikD7ubtU pU8Snr9hBNwuXS1NfuN2hANluDO1DMI+lfqnruPAC3Gq2tg1RhsevxjgsPDZyPqU pvWBbcpESV2brIcfqKjZkP5pS6MPgYCnkZnOh0F0VNqb2gsBGPuPLL8GUDvY/Eyt SrDdxRxE02fCvHNIm4iv1WY5zumhbNzthCtxSwsGtaTMXNvve08R8U7SgvfyTvoJ FrKFoQm8GaSoUvJXCSPCNRFlJ6gJbT3iCcF0oIhIOhvUq2oYHQHNbTkpchdvxVXE og== -----END CERTIFICATE-----Generated at Sat Dec 6 20:12:25 2025 by rpki-client