This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h3xNjohH_zrZMKJIO_Rq9sfsLek.roa File: h3xNjohH_zrZMKJIO_Rq9sfsLek.roa (raw, json) Hash identifier: pFlGr2Dxj6dGCXdPIRYl4mil5oU4OfG5HdPW28bwseA= Subject key identifier: 87:7C:4D:8E:88:47:FF:3A:D9:30:A2:48:3B:F4:6A:F6:C7:EC:2D:E9 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BB1BAE9DAB9A46B27B78A2360717172F8 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h3xNjohH_zrZMKJIO_Rq9sfsLek.roa Signing time: Mon 12 Jan 2026 10:22:55 +0000 ROA not before: Mon 12 Jan 2026 10:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51722 IP address blocks: 217.60.15.0/24 maxlen: 24 217.60.25.0/24 maxlen: 24 217.60.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:ba:e9:da:b9:a4:6b:27:b7:8a:23:60:71:71:72:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 12 10:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=877c4d8e8847ff3ad930a2483bf46af6c7ec2de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:fd:06:e0:18:58:92:6f:6b:d8:da:1e:ac: 2c:1e:3f:08:0f:be:4a:09:ba:8f:0a:5a:d9:28:5b: 05:0f:d6:ba:55:83:12:d4:1d:50:bf:b6:e7:af:67: 59:85:58:5c:30:87:c2:69:2f:7f:dc:f4:33:00:c6: 85:c6:1c:b8:c0:e2:5e:48:a6:e3:f3:9c:71:70:3d: 62:72:32:12:e6:d5:a8:19:75:88:1c:c7:cf:c9:43: 13:1c:ef:d1:42:b3:44:9b:43:fc:de:21:89:a9:05: 67:26:7f:7a:98:30:e2:50:cb:f6:6d:a4:f8:74:50: 6a:8b:79:9f:e4:4c:66:e0:f2:7f:4e:0b:2d:ec:33: 99:20:19:bf:ec:fa:77:35:fe:55:99:6d:98:46:b6: 80:e8:a9:dc:db:f5:bf:03:92:0a:32:98:c9:61:04: 02:b2:21:41:2f:97:66:77:2a:5b:f6:91:04:1c:a8: b8:61:01:95:7a:89:cc:a0:8a:52:70:5d:4e:28:13: 74:2c:e1:17:2a:e7:0b:1b:4d:de:94:93:af:b6:b0: 13:5e:ac:32:9c:11:10:f1:81:ef:37:97:5c:a5:9c: f9:9c:ca:17:8d:28:1c:4e:d5:57:b5:34:7b:16:33: 1b:3b:cb:f0:1c:a5:f0:51:b7:64:c0:d5:4a:bb:c0: 4d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7C:4D:8E:88:47:FF:3A:D9:30:A2:48:3B:F4:6A:F6:C7:EC:2D:E9 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h3xNjohH_zrZMKJIO_Rq9sfsLek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.15.0/24 217.60.25.0/24 217.60.200.0/21 Signature Algorithm: sha256WithRSAEncryption ba:53:33:ae:34:79:24:42:17:7a:7a:75:13:26:62:ac:91:e7: c5:7c:3f:78:75:44:a0:3c:9b:2d:4f:23:3a:60:66:62:ab:25: 80:3b:8c:34:e0:3a:d6:6c:df:68:e6:41:00:fe:a1:84:13:20: d9:59:88:30:13:5b:1e:fa:85:d6:b0:0a:5b:0a:fa:fa:68:a9: 59:1d:04:a0:73:83:ee:d3:dc:f9:02:02:a6:95:94:35:09:a3: da:81:0c:9e:11:d5:63:3e:81:b4:4a:cd:59:8c:b8:c9:7c:04: 8e:40:49:26:21:69:be:12:f9:e0:cd:66:13:bb:bd:ee:de:36: 26:c7:bc:81:b9:b8:4a:66:b2:6a:f9:e8:a6:0e:f6:21:f8:de: f2:bd:4e:3f:65:59:3f:50:62:b7:d3:19:45:63:06:fe:cc:b3: 38:ca:87:c2:f0:eb:8d:cd:4c:e7:f0:81:e5:b8:76:f4:5b:77: 54:c0:4e:4f:4e:4a:8b:08:82:19:2f:36:d1:54:43:28:4c:05: 9b:1e:68:98:f1:9f:85:e1:b9:54:84:78:8c:2f:bb:35:98:61: 7d:c2:54:bf:23:82:ef:31:04:d3:fc:11:27:6f:f8:09:e5:bd: 41:3b:a5:33:a3:6a:55:36:a8:9b:a4:25:a2:5a:77:35:6a:66: e2:e0:a6:89 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuxuunauaRrJ7eKI2BxcXL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTEyMTAyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzdjNGQ4ZTg4NDdmZjNhZDkzMGEyNDgzYmY0NmFmNmM3ZWMyZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHv9BuAYWJJva9jaHqwsHj8ID75K CbqPClrZKFsFD9a6VYMS1B1Qv7bnr2dZhVhcMIfCaS9/3PQzAMaFxhy4wOJeSKbj 85xxcD1icjIS5tWoGXWIHMfPyUMTHO/RQrNEm0P83iGJqQVnJn96mDDiUMv2baT4 dFBqi3mf5Exm4PJ/Tgst7DOZIBm/7Pp3Nf5VmW2YRraA6Knc2/W/A5IKMpjJYQQC siFBL5dmdypb9pEEHKi4YQGVeonMoIpScF1OKBN0LOEXKucLG03elJOvtrATXqwy nBEQ8YHvN5dcpZz5nMoXjSgcTtVXtTR7FjMbO8vwHKXwUbdkwNVKu8BNhwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFId8TY6IR/862TCiSDv0avbH7C3pMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvaDN4TmpvaEhfenJaTUtKSU9fUnE5c2ZzTGVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2TwPAwQA 2TwZAwQD2TzIMA0GCSqGSIb3DQEBCwUAA4IBAQC6UzOuNHkkQhd6enUTJmKskefF fD94dUSgPJstTyM6YGZiqyWAO4w04DrWbN9o5kEA/qGEEyDZWYgwE1se+oXWsApb Cvr6aKlZHQSgc4Pu09z5AgKmlZQ1CaPagQyeEdVjPoG0Ss1ZjLjJfASOQEkmIWm+ EvngzWYTu73u3jYmx7yBubhKZrJq+eimDvYh+N7yvU4/ZVk/UGK30xlFYwb+zLM4 yofC8OuNzUzn8IHluHb0W3dUwE5PTkqLCIIZLzbRVEMoTAWbHmiY8Z+F4blUhHiM L7s1mGF9wlS/I4LvMQTT/BEnb/gJ5b1BO6Uzo2pVNqibpCWiWnc1ambi4KaJ -----END CERTIFICATE-----Generated at Tue Jan 13 06:59:24 2026 by rpki-client