This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/elxZu4K9ji2WmHSU8lxHX8DwDRY.roa File: elxZu4K9ji2WmHSU8lxHX8DwDRY.roa (raw, json) Hash identifier: cAuWijmXOZYXT9m6C71i9jgDgOiSPcM7fCXNdQt9oH4= Subject key identifier: 7A:5C:59:BB:82:BD:8E:2D:96:98:74:94:F2:5C:47:5F:C0:F0:0D:16 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B6D4AD5B06C96D832C4FB2490743BE Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/elxZu4K9ji2WmHSU8lxHX8DwDRY.roa Signing time: Tue 02 Dec 2025 20:17:49 +0000 ROA not before: Tue 02 Dec 2025 20:17:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202602 IP address blocks: 91.223.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:d4:ad:5b:06:c9:6d:83:2c:4f:b2:49:07:43:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:17:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7a5c59bb82bd8e2d96987494f25c475fc0f00d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:6f:98:31:94:24:4a:ba:01:5a:11:0e:6a: f7:f6:c5:97:1e:96:7f:98:8f:a6:2c:c2:bc:58:46: 82:5a:20:92:8e:74:36:fd:8e:2b:8c:a1:8d:9a:c0: d9:c2:57:9f:a5:c8:7a:fa:01:1e:db:02:37:9f:47: 58:0e:b6:62:cf:b3:9d:22:52:9c:ad:ae:b0:d2:7a: 2e:e2:c8:38:0c:33:80:e6:72:06:c5:02:cc:66:4d: fe:c3:49:db:43:95:8c:ae:38:68:51:18:c1:27:9c: e2:e0:2f:44:c3:fe:69:e0:55:45:68:99:22:3f:63: 74:ba:6c:88:1d:cf:53:1f:4d:3f:87:3a:74:8a:1b: 7a:7c:d5:ca:fd:25:56:e3:25:b4:d3:08:ef:0b:4a: 79:33:1c:a5:46:21:fe:18:9b:43:6c:87:86:cb:3a: 5c:50:e3:3d:e7:57:ce:91:0f:a1:9b:d9:ce:13:a1: 3d:34:57:e6:6f:05:6e:de:fa:88:3b:6c:b0:a7:1c: a7:33:a5:59:8e:15:f3:bb:80:ed:3f:40:7d:a5:78: 23:57:09:04:d6:70:23:98:be:62:6f:b0:41:f6:ae: fd:13:e7:70:d8:e5:fe:bb:ec:3f:20:28:2d:67:13: 94:44:34:c9:3d:79:78:3f:d8:d9:84:a5:38:a8:53: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5C:59:BB:82:BD:8E:2D:96:98:74:94:F2:5C:47:5F:C0:F0:0D:16 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/elxZu4K9ji2WmHSU8lxHX8DwDRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.119.0/24 Signature Algorithm: sha256WithRSAEncryption 38:aa:2c:64:b8:5b:73:cd:01:93:2c:c3:0a:8e:c7:e2:c5:26: 20:7a:a2:ba:13:8d:27:7b:4b:d6:88:8f:53:88:77:3f:65:51: fa:1c:62:53:67:c1:a6:53:53:09:99:89:e6:f6:09:35:89:95: 76:02:f7:99:61:86:1a:d1:a1:b1:b2:e5:fc:bc:d0:06:a6:26: 9f:f2:2f:38:23:38:c3:f6:68:e8:e5:f8:34:80:42:f8:64:a7: 6e:a8:6d:b7:aa:ce:38:a1:a3:15:a8:50:79:15:3c:ac:c1:f4: 54:d5:f1:fc:2a:5e:1e:fd:2a:ad:cc:42:79:79:34:12:bd:42: a3:fc:8f:80:6a:ed:00:16:86:42:0c:eb:1a:10:18:45:a3:9b: 6e:5d:75:b4:14:9b:d9:a2:2a:c2:81:8c:63:93:3b:ea:d6:97: 12:6b:ee:35:ff:fa:b4:89:74:41:8a:7b:8c:f2:1a:96:d7:bc: 32:31:7d:b7:7c:a4:9d:ad:2d:22:93:5f:e3:80:65:32:97:db: ea:4e:cc:df:e2:0a:5b:5e:4e:7b:07:14:bf:96:03:1f:34:2b: 89:fd:04:59:03:aa:99:2f:c6:af:74:0c:eb:62:96:73:07:93: 40:c9:5a:9c:e4:52:25:ee:05:b6:45:fc:96:49:19:50:8d:56: cd:00:6b:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrgttStWwbJbYMsT7JJB0O+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTVjNTliYjgyYmQ4ZTJkOTY5ODc0OTRmMjVjNDc1ZmMwZjAwZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFRvmDGUJEq6AVoRDmr39sWXHpZ/ mI+mLMK8WEaCWiCSjnQ2/Y4rjKGNmsDZwlefpch6+gEe2wI3n0dYDrZiz7OdIlKc ra6w0nou4sg4DDOA5nIGxQLMZk3+w0nbQ5WMrjhoURjBJ5zi4C9Ew/5p4FVFaJki P2N0umyIHc9TH00/hzp0iht6fNXK/SVW4yW00wjvC0p5MxylRiH+GJtDbIeGyzpc UOM951fOkQ+hm9nOE6E9NFfmbwVu3vqIO2ywpxynM6VZjhXzu4DtP0B9pXgjVwkE 1nAjmL5ib7BB9q79E+dw2OX+u+w/ICgtZxOURDTJPXl4P9jZhKU4qFME6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHpcWbuCvY4tlph0lPJcR1/A8A0WMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvZWx4WnU0SzlqaTJXbUhTVThseEhYOER3RFJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW993MA0G CSqGSIb3DQEBCwUAA4IBAQA4qixkuFtzzQGTLMMKjsfixSYgeqK6E40ne0vWiI9T iHc/ZVH6HGJTZ8GmU1MJmYnm9gk1iZV2AveZYYYa0aGxsuX8vNAGpiaf8i84IzjD 9mjo5fg0gEL4ZKduqG23qs44oaMVqFB5FTyswfRU1fH8Kl4e/SqtzEJ5eTQSvUKj /I+Aau0AFoZCDOsaEBhFo5tuXXW0FJvZoirCgYxjkzvq1pcSa+41//q0iXRBinuM 8hqW17wyMX23fKSdrS0ik1/jgGUyl9vqTszf4gpbXk57BxS/lgMfNCuJ/QRZA6qZ L8avdAzrYpZzB5NAyVqc5FIl7gW2RfyWSRlQjVbNAGuC -----END CERTIFICATE-----Generated at Wed Dec 3 13:10:36 2025 by rpki-client