This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZOfzQZwVmFp_yHMegEFyXOLNArI.roa File: ZOfzQZwVmFp_yHMegEFyXOLNArI.roa (raw, json) Hash identifier: /WxcpRFajoaraapF6bT0XuoO7oJ/OH42pQw0wCnARr0= Subject key identifier: 64:E7:F3:41:9C:15:98:5A:7F:C8:73:1E:80:41:72:5C:E2:CD:02:B2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B515AE76A233775512F28C43B06D0A923 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZOfzQZwVmFp_yHMegEFyXOLNArI.roa Signing time: Wed 24 Dec 2025 17:14:30 +0000 ROA not before: Wed 24 Dec 2025 17:14:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 266539 IP address blocks: 217.60.12.0/24 maxlen: 24 217.60.14.0/24 maxlen: 24 217.60.24.0/24 maxlen: 24 217.60.26.0/24 maxlen: 24 217.60.184.0/23 maxlen: 24 217.60.193.0/24 maxlen: 24 217.60.198.0/24 maxlen: 24 217.60.242.0/24 maxlen: 24 217.60.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:5a:e7:6a:23:37:75:51:2f:28:c4:3b:06:d0:a9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 24 17:14:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=64e7f3419c15985a7fc8731e8041725ce2cd02b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:34:02:6f:81:e7:4c:89:cf:0e:ba:18:d6: 5d:54:c6:91:6a:f3:a5:0f:96:cf:bc:ee:ec:86:23: 55:e1:55:96:d9:10:13:a9:20:de:41:22:cb:a7:f2: ff:33:f0:f7:b4:9c:a3:da:07:62:d9:25:68:24:67: 69:c0:c4:97:bf:fb:cf:44:ae:32:79:ca:61:f1:6d: 37:f8:6c:45:e5:5f:5c:22:af:95:0f:95:99:5f:d2: 11:8b:34:6e:34:d7:bc:51:82:90:1a:32:ec:88:26: 49:f2:ac:bc:41:f4:45:0a:ee:93:34:7b:b9:b8:82: 58:2d:89:59:7b:d2:8a:c5:75:a4:b5:ba:a7:54:e8: 34:31:66:ff:16:72:79:3a:7c:d5:60:57:b8:0c:74: 62:a3:fc:e3:a3:98:d9:ee:b1:2b:2d:ea:d5:ae:9d: 8b:4c:a4:96:51:4e:eb:96:80:54:69:77:70:75:2d: 8f:01:f9:d9:fc:94:d8:4b:e9:6c:09:57:0d:bf:ac: 26:5b:a5:28:00:d2:1c:6d:a6:27:3f:4e:da:3b:0f: 7c:bb:59:32:25:ce:87:98:0b:ed:3c:20:18:e5:ba: 87:67:47:58:73:26:d9:50:b5:73:c9:95:32:00:b3: a3:1a:80:43:6a:82:40:f6:48:af:d8:20:0b:88:56: 65:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E7:F3:41:9C:15:98:5A:7F:C8:73:1E:80:41:72:5C:E2:CD:02:B2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZOfzQZwVmFp_yHMegEFyXOLNArI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.12.0/24 217.60.14.0/24 217.60.24.0/24 217.60.26.0/24 217.60.184.0/23 217.60.193.0/24 217.60.198.0/24 217.60.242.0/24 217.60.250.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:f4:57:82:5f:40:df:69:9d:4e:43:57:97:7e:94:26:f2:be: a5:59:26:ba:59:de:9c:79:6d:8e:46:05:ed:aa:bc:19:17:e9: 52:04:11:6e:68:d8:56:85:7d:12:7e:c4:07:2f:26:a4:c5:64: 2b:f9:24:c1:dd:d4:09:57:c9:6c:a3:6c:32:9d:f6:4f:32:8e: ca:52:ad:b9:7c:98:e6:90:ef:0b:5b:34:a8:a2:77:0c:a6:78: de:1f:9a:79:1c:9a:0e:a8:eb:14:25:ef:41:01:7b:e4:cc:42: ee:ce:10:2f:ea:e4:b2:a2:b7:44:04:5d:23:7e:97:d9:52:bb: b9:d7:82:5a:dd:cc:5d:32:fb:f0:cc:c7:db:4f:e9:b5:db:0e: 2b:fc:b5:91:3e:29:a2:f1:d4:2e:0f:59:c6:eb:be:7d:2f:6c: ac:27:21:01:45:03:13:ab:c0:a7:85:4b:2a:1d:53:20:a7:96: fb:1c:85:e2:f4:c3:b1:69:e8:ba:3f:cf:74:9f:24:89:34:21: 17:c3:79:a7:b9:16:fa:f0:56:71:32:86:79:b9:31:6a:8a:d4: 6e:5e:16:54:8d:0c:d0:bf:1f:6d:11:39:e6:a4:02:ac:9d:b3: 71:ae:19:c7:4e:29:e6:4b:e8:18:29:26:41:dd:9c:b5:63:4f: 77:15:83:9a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZtRWudqIzd1US8oxDsG0KkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjI0MTcxNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGU3ZjM0MTljMTU5ODVhN2ZjODczMWU4MDQxNzI1Y2UyY2QwMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ40Am+B50yJzw66GNZdVMaRavOl D5bPvO7shiNV4VWW2RATqSDeQSLLp/L/M/D3tJyj2gdi2SVoJGdpwMSXv/vPRK4y ecph8W03+GxF5V9cIq+VD5WZX9IRizRuNNe8UYKQGjLsiCZJ8qy8QfRFCu6TNHu5 uIJYLYlZe9KKxXWktbqnVOg0MWb/FnJ5OnzVYFe4DHRio/zjo5jZ7rErLerVrp2L TKSWUU7rloBUaXdwdS2PAfnZ/JTYS+lsCVcNv6wmW6UoANIcbaYnP07aOw98u1ky Jc6HmAvtPCAY5bqHZ0dYcybZULVzyZUyALOjGoBDaoJA9kiv2CALiFZlxwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFGTn80GcFZhaf8hzHoBBclzizQKyMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWk9melFad1ZtRnBfeUhNZWdFRnlYT0xOQXJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQA2TwMAwQA 2TwOAwQA2TwYAwQA2TwaAwQB2Ty4AwQA2TzBAwQA2TzGAwQA2TzyAwQA2Tz6MA0G CSqGSIb3DQEBCwUAA4IBAQBe9FeCX0DfaZ1OQ1eXfpQm8r6lWSa6Wd6ceW2ORgXt qrwZF+lSBBFuaNhWhX0SfsQHLyakxWQr+STB3dQJV8lso2wynfZPMo7KUq25fJjm kO8LWzSooncMpnjeH5p5HJoOqOsUJe9BAXvkzELuzhAv6uSyordEBF0jfpfZUru5 14Ja3cxdMvvwzMfbT+m12w4r/LWRPimi8dQuD1nG6759L2ysJyEBRQMTq8CnhUsq HVMgp5b7HIXi9MOxaei6P890nySJNCEXw3mnuRb68FZxMoZ5uTFqitRuXhZUjQzQ vx9tETnmpAKsnbNxrhnHTinmS+gYKSZB3Zy1Y093FYOa -----END CERTIFICATE-----Generated at Sat Dec 27 10:44:00 2025 by rpki-client