This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MmKHhyri0iDtPKScDOsv4-SWLOY.roa File: MmKHhyri0iDtPKScDOsv4-SWLOY.roa (raw, json) Hash identifier: LI3eNmnrbCICQLWoLoopbv57XePf53thkWb7+koiuHU= Subject key identifier: 32:62:87:87:2A:E2:D2:20:ED:3C:A4:9C:0C:EB:2F:E3:E4:96:2C:E6 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AC11AE6DD7F094518A11214AB0EE4AA51 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MmKHhyri0iDtPKScDOsv4-SWLOY.roa Signing time: Wed 26 Nov 2025 16:59:17 +0000 ROA not before: Wed 26 Nov 2025 16:59:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401362 IP address blocks: 217.60.24.0/22 maxlen: 24 217.60.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 02:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:1a:e6:dd:7f:09:45:18:a1:12:14:ab:0e:e4:aa:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 26 16:59:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=326287872ae2d220ed3ca49c0ceb2fe3e4962ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:7f:27:57:29:af:d1:ae:55:9e:24:81:12: 1b:cd:e1:d0:91:18:52:80:cb:56:cf:04:ea:e0:46: f7:db:52:44:9b:8c:bd:55:0a:59:28:e7:63:03:31: ea:2c:22:7b:e2:93:ad:db:96:1f:a3:51:38:c5:6c: f4:e9:81:0c:10:54:04:3f:0a:0f:c6:7e:63:3b:f9: 40:78:4a:0e:5d:63:ec:35:a1:a4:45:8a:b9:c8:37: 51:6c:d8:78:3d:97:04:99:42:d0:fd:61:f8:ec:9c: 7d:d1:df:57:87:41:bb:29:d7:79:9d:59:30:c5:21: ff:44:28:c1:64:dc:ff:5b:6d:14:29:e3:52:73:08: cf:37:a0:29:2b:eb:f7:af:a5:0c:83:71:0a:64:a4: 98:40:3f:59:13:ac:d0:da:0f:f1:59:ce:0f:49:fa: e2:4d:ef:b2:8b:39:02:c5:83:f1:69:37:d1:bd:a4: ec:59:e2:62:73:40:de:23:ba:c0:dd:56:71:17:e0: 33:d4:c7:7f:fe:8f:9b:01:2e:20:35:b0:0d:8f:54: de:56:fa:b7:d8:05:d2:46:93:3b:01:77:0f:ff:64: 32:db:1d:d3:37:f9:37:0e:10:18:11:a8:28:e3:12: bc:7c:2d:89:59:42:b6:38:99:c4:5c:fb:89:e4:77: 29:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:62:87:87:2A:E2:D2:20:ED:3C:A4:9C:0C:EB:2F:E3:E4:96:2C:E6 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MmKHhyri0iDtPKScDOsv4-SWLOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.24.0/22 217.60.60.0/22 Signature Algorithm: sha256WithRSAEncryption 30:23:7d:fd:75:e8:23:14:15:52:c6:85:b3:6d:b3:db:d6:8c: 66:95:86:dd:46:46:a1:fa:dd:6f:a4:1b:c0:b0:1a:4e:4b:83: 15:81:b5:15:d8:55:95:61:b0:e0:f9:5e:9a:e8:b1:66:f6:d5: 13:ae:63:91:75:30:6c:35:48:98:27:ed:44:05:32:27:de:fd: 47:c5:0d:69:53:33:f0:81:a3:f1:6e:47:92:8d:74:6b:7b:93: 50:ed:30:0d:5e:4a:34:16:de:87:7a:01:ed:f6:9e:51:27:0e: 4b:64:94:ca:9e:0a:59:cb:a8:c7:0e:73:ca:d3:1f:b3:f5:d9: 8c:1d:2b:a4:10:d3:fa:f2:a4:e8:be:2e:50:cb:9c:1f:4d:22: 0e:81:37:b8:8c:d8:76:cd:53:01:40:df:22:9a:90:0c:9f:2e: ff:40:85:20:b2:68:a2:04:61:93:25:38:16:26:09:f3:1e:17: 91:b8:8d:66:02:7b:3b:d4:41:fd:25:41:75:a7:42:25:68:d2: d2:a4:7d:96:54:92:f3:cb:4e:56:82:f6:dd:4c:88:4a:2e:b3: 98:ab:58:f2:67:a5:4f:bf:9b:a4:67:be:94:44:43:c3:d6:e4: 4e:16:93:81:07:f4:06:3a:be:9b:6b:d2:f6:29:aa:da:7b:84: a2:10:d5:96 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrBGubdfwlFGKESFKsO5KpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI2MTY1OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjYyODc4NzJhZTJkMjIwZWQzY2E0OWMwY2ViMmZlM2U0OTYyY2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/p/J1cpr9GuVZ4kgRIbzeHQkRhS gMtWzwTq4Eb321JEm4y9VQpZKOdjAzHqLCJ74pOt25Yfo1E4xWz06YEMEFQEPwoP xn5jO/lAeEoOXWPsNaGkRYq5yDdRbNh4PZcEmULQ/WH47Jx90d9Xh0G7Kdd5nVkw xSH/RCjBZNz/W20UKeNScwjPN6ApK+v3r6UMg3EKZKSYQD9ZE6zQ2g/xWc4PSfri Te+yizkCxYPxaTfRvaTsWeJic0DeI7rA3VZxF+Az1Md//o+bAS4gNbANj1TeVvq3 2AXSRpM7AXcP/2Qy2x3TN/k3DhAYEago4xK8fC2JWUK2OJnEXPuJ5Hcp0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDJih4cq4tIg7TyknAzrL+PklizmMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTW1LSGh5cmkwaUR0UEtTY0RPc3Y0LVNXTE9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC2TwYAwQC 2Tw8MA0GCSqGSIb3DQEBCwUAA4IBAQAwI339degjFBVSxoWzbbPb1oxmlYbdRkah +t1vpBvAsBpOS4MVgbUV2FWVYbDg+V6a6LFm9tUTrmORdTBsNUiYJ+1EBTIn3v1H xQ1pUzPwgaPxbkeSjXRre5NQ7TANXko0Ft6HegHt9p5RJw5LZJTKngpZy6jHDnPK 0x+z9dmMHSukENP68qTovi5Qy5wfTSIOgTe4jNh2zVMBQN8impAMny7/QIUgsmii BGGTJTgWJgnzHheRuI1mAns71EH9JUF1p0IlaNLSpH2WVJLzy05WgvbdTIhKLrOY q1jyZ6VPv5ukZ76UREPD1uROFpOBB/QGOr6ba9L2Karae4SiENWW -----END CERTIFICATE-----Generated at Thu Nov 27 06:42:49 2025 by rpki-client