This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/f17XkH98cx1gh70ONAM2pso2TyM.roa File: f17XkH98cx1gh70ONAM2pso2TyM.roa (raw, json) Hash identifier: /clMOa1tJOfaj7r1IuhAFXXYw80nX01tggaDzfbLkAI= Subject key identifier: 7F:5E:D7:90:7F:7C:73:1D:60:87:BD:0E:34:03:36:A6:CA:36:4F:23 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019A820FE784E6CC209126972313C4CBE0C6 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/f17XkH98cx1gh70ONAM2pso2TyM.roa Signing time: Fri 14 Nov 2025 11:11:11 +0000 ROA not before: Fri 14 Nov 2025 11:11:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31715 IP address blocks: 212.135.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:0f:e7:84:e6:cc:20:91:26:97:23:13:c4:cb:e0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 14 11:11:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7f5ed7907f7c731d6087bd0e340336a6ca364f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:59:43:e7:8b:38:b6:e9:92:eb:65:e3:6a: 72:3f:bc:3f:cc:49:5a:bc:64:48:ba:d2:f3:43:06: c7:57:ea:d5:18:61:23:8c:89:8c:01:dc:f5:5b:a4: 24:d5:49:f6:fa:14:78:3a:e4:2d:0e:af:37:e8:2d: 8b:e0:a5:51:ce:d9:42:68:ec:40:36:02:4a:93:27: 5d:8c:3a:d9:5c:cf:5c:fc:c2:5e:b9:86:3c:df:50: ef:3a:cb:a6:8c:ac:2f:44:26:1c:55:aa:fb:05:48: 6c:76:6a:17:6b:c8:5a:e3:8b:c6:13:84:d7:8b:4b: c1:6e:58:a6:48:0e:f9:c3:82:f6:9a:5b:9b:14:59: a6:03:54:c9:af:38:67:68:45:e6:bc:5b:aa:42:e0: 8e:19:d4:17:85:5b:26:51:b6:84:07:44:6b:c5:94: c4:ec:d2:9d:7d:8b:4c:af:08:34:87:21:7f:6d:df: d1:db:2c:75:94:7f:1a:32:21:6f:83:f8:ac:c7:f5: 09:8d:6a:ba:f8:de:05:ed:3e:1d:90:db:b4:93:27: 75:28:fe:d5:54:59:f6:90:e6:c5:60:97:34:f2:00: ae:f6:0c:ba:01:01:1c:93:ad:77:69:0b:58:24:c8: ee:fc:f9:13:8c:5a:5b:b4:02:3e:04:fc:49:e1:a7: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:D7:90:7F:7C:73:1D:60:87:BD:0E:34:03:36:A6:CA:36:4F:23 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/f17XkH98cx1gh70ONAM2pso2TyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.255.0/24 Signature Algorithm: sha256WithRSAEncryption 98:ca:6b:03:9b:38:2b:39:e4:53:af:00:69:c3:2f:4c:d5:69: 57:82:85:4c:07:8c:07:7a:ba:93:91:29:e3:f6:0a:30:93:57: 24:c0:1d:d3:69:a4:2c:0a:5b:95:71:f0:d0:0b:10:75:be:76: 0c:37:eb:b6:58:7e:e4:8d:6f:97:a4:9a:0c:b4:06:ce:32:15: 36:cb:c1:9f:3d:fa:8f:d1:84:0d:05:ea:6d:6f:8f:b6:7d:d3: 7a:25:fc:d9:8b:10:8c:a0:c7:84:6b:64:ca:2d:f0:6c:55:e7: 1c:bf:12:b0:b8:8f:e8:42:4e:aa:93:9b:c7:22:c4:a1:c4:0f: de:8e:d6:78:9a:bd:63:1e:2e:c4:44:c9:da:2b:0c:c4:f4:f9: 0d:49:9a:8c:a6:70:e8:b3:68:e8:51:8b:fc:9a:e7:8a:43:4b: 8d:f7:4c:88:a0:e6:b3:3f:89:9f:41:44:9a:6d:ba:ab:c9:6a: 65:fb:fa:81:a8:9c:20:17:4b:c6:16:ce:1e:cb:08:04:21:0e: 25:ea:26:6e:ec:65:d6:f3:30:54:50:c6:3c:14:40:1d:e4:59: 6e:99:63:ac:95:93:1d:d3:f5:32:5d:43:ef:44:c9:8b:7c:4b: cb:4d:31:bf:70:57:35:44:e2:5e:3c:1c:8d:d2:a2:c2:b9:c4: c0:5d:10:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqCD+eE5swgkSaXIxPEy+DGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTE0MTExMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjVlZDc5MDdmN2M3MzFkNjA4N2JkMGUzNDAzMzZhNmNhMzY0ZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/FZQ+eLOLbpkutl42pyP7w/zEla vGRIutLzQwbHV+rVGGEjjImMAdz1W6Qk1Un2+hR4OuQtDq836C2L4KVRztlCaOxA NgJKkyddjDrZXM9c/MJeuYY831DvOsumjKwvRCYcVar7BUhsdmoXa8ha44vGE4TX i0vBblimSA75w4L2mlubFFmmA1TJrzhnaEXmvFuqQuCOGdQXhVsmUbaEB0RrxZTE 7NKdfYtMrwg0hyF/bd/R2yx1lH8aMiFvg/isx/UJjWq6+N4F7T4dkNu0kyd1KP7V VFn2kObFYJc08gCu9gy6AQEck613aQtYJMju/PkTjFpbtAI+BPxJ4acL6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH9e15B/fHMdYIe9DjQDNqbKNk8jMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvZjE3WGtIOThjeDFnaDcwT05BTTJwc28yVHlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1If/MA0G CSqGSIb3DQEBCwUAA4IBAQCYymsDmzgrOeRTrwBpwy9M1WlXgoVMB4wHerqTkSnj 9gowk1ckwB3TaaQsCluVcfDQCxB1vnYMN+u2WH7kjW+XpJoMtAbOMhU2y8GfPfqP 0YQNBeptb4+2fdN6JfzZixCMoMeEa2TKLfBsVeccvxKwuI/oQk6qk5vHIsShxA/e jtZ4mr1jHi7ERMnaKwzE9PkNSZqMpnDos2joUYv8mueKQ0uN90yIoOazP4mfQUSa bbqryWpl+/qBqJwgF0vGFs4eywgEIQ4l6iZu7GXW8zBUUMY8FEAd5FlumWOslZMd 0/UyXUPvRMmLfEvLTTG/cFc1ROJePByN0qLCucTAXRCd -----END CERTIFICATE-----Generated at Thu Dec 4 18:04:42 2025 by rpki-client