This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iOOKX7c9bLWYqcw_P3mPImfMOvw.roa File: iOOKX7c9bLWYqcw_P3mPImfMOvw.roa (raw, json) Hash identifier: 4zuFtxJacZa56KfmVlF8eKE9K30zx8zZ/B/nfEsKWbk= Subject key identifier: 88:E3:8A:5F:B7:3D:6C:B5:98:A9:CC:3F:3F:79:8F:22:67:CC:3A:FC Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B079E91C267765A5B71F24475F7798565 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iOOKX7c9bLWYqcw_P3mPImfMOvw.roa Signing time: Wed 10 Dec 2025 09:36:31 +0000 ROA not before: Wed 10 Dec 2025 09:36:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19793 IP address blocks: 217.60.144.0/22 maxlen: 24 217.60.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:9e:91:c2:67:76:5a:5b:71:f2:44:75:f7:79:85:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 10 09:36:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=88e38a5fb73d6cb598a9cc3f3f798f2267cc3afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:d8:a3:79:7f:7c:00:46:33:69:50:2d:69: b1:42:0c:70:f9:54:56:a8:b3:23:70:12:69:fe:38: 01:eb:99:ca:2c:b2:fb:77:24:c4:ed:a4:29:34:95: 26:8c:da:76:e4:86:a4:8a:fa:21:fd:8e:2d:1a:e2: f3:f0:7b:6b:ce:61:6a:55:38:cf:13:68:13:7b:b3: 35:ad:fd:29:c1:15:15:b5:a5:6d:cc:e5:61:14:18: b5:70:98:4e:1e:4e:d5:0c:08:1d:ea:5c:6b:ba:cf: 22:fa:d3:84:b2:89:6c:cd:6b:41:31:9c:fd:63:dc: 3e:70:cf:af:ea:5a:21:e2:3b:c2:16:1b:b5:29:d8: c6:1b:7d:72:d4:50:63:e7:26:a7:8d:34:f3:88:c2: 38:ee:6e:38:a9:9f:25:f3:46:a5:50:a5:a9:bd:f1: 6e:8e:a2:ad:42:06:54:97:2f:4b:87:01:a9:c9:aa: 83:42:b5:b9:75:95:28:51:d2:d9:3d:4f:36:c0:86: c1:7e:4d:ec:35:7b:8e:2d:be:d5:08:c3:90:6d:bc: b6:33:a0:44:c3:af:13:ba:45:99:d6:a4:f3:75:08: 31:d8:59:fc:40:70:a9:9e:5b:b2:fc:7b:39:e6:0d: 5c:d3:14:8c:37:01:6b:d3:32:37:ba:34:8e:85:71: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E3:8A:5F:B7:3D:6C:B5:98:A9:CC:3F:3F:79:8F:22:67:CC:3A:FC X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iOOKX7c9bLWYqcw_P3mPImfMOvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.144.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:f6:a8:18:da:80:31:a9:e7:dd:38:b8:d2:dd:5d:e6:8a:4c: ae:2a:e5:6e:5b:16:b7:c7:a8:18:70:48:77:9d:9e:48:42:8b: 74:0b:b5:65:fa:04:07:eb:c1:6f:f3:61:92:7a:fb:2b:02:0a: 3b:71:f1:90:7c:29:4c:fa:e1:62:8d:da:5c:28:a7:93:79:d9: ef:b9:d5:f6:42:dc:30:59:f3:46:c1:f6:18:b9:7f:0a:0f:6d: d9:b1:c4:7a:b3:1c:17:c4:e9:f2:bc:e7:85:3b:d4:e7:43:ee: af:ca:60:55:30:ee:8f:01:b4:f5:d1:3b:4b:b6:bf:b7:2d:01: 64:03:e8:59:69:4d:db:05:88:5d:e3:00:ca:7e:75:11:66:21: dc:8a:16:65:b4:96:85:12:cc:eb:7c:44:d5:62:2e:4a:10:06: 58:95:81:2a:02:7c:f3:64:a9:f5:b1:e8:f1:1f:a8:4e:9d:b4: 68:55:a2:e0:0b:50:17:bd:86:21:fc:4f:37:07:48:24:b2:f2: 0d:4f:30:ad:3a:2f:40:51:1c:02:20:46:11:9e:96:c3:e8:e2: 7f:bf:ce:8d:9d:48:81:d9:58:c2:f0:df:50:04:57:68:f1:c4: f2:c4:b2:8a:e1:59:6d:49:85:48:f7:6e:92:66:6a:a4:d4:18: 7f:db:1a:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHnpHCZ3ZaW3HyRHX3eYVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjEwMDkzNjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGUzOGE1ZmI3M2Q2Y2I1OThhOWNjM2YzZjc5OGYyMjY3Y2MzYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9DYo3l/fABGM2lQLWmxQgxw+VRW qLMjcBJp/jgB65nKLLL7dyTE7aQpNJUmjNp25Iakivoh/Y4tGuLz8HtrzmFqVTjP E2gTe7M1rf0pwRUVtaVtzOVhFBi1cJhOHk7VDAgd6lxrus8i+tOEsolszWtBMZz9 Y9w+cM+v6loh4jvCFhu1KdjGG31y1FBj5yanjTTziMI47m44qZ8l80alUKWpvfFu jqKtQgZUly9LhwGpyaqDQrW5dZUoUdLZPU82wIbBfk3sNXuOLb7VCMOQbby2M6BE w68TukWZ1qTzdQgx2Fn8QHCpnluy/Hs55g1c0xSMNwFr0zI3ujSOhXF1YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIjjil+3PWy1mKnMPz95jyJnzDr8MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvaU9PS1g3YzliTFdZcWN3X1AzbVBJbWZNT3Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2TyQMA0G CSqGSIb3DQEBCwUAA4IBAQBu9qgY2oAxqefdOLjS3V3mikyuKuVuWxa3x6gYcEh3 nZ5IQot0C7Vl+gQH68Fv82GSevsrAgo7cfGQfClM+uFijdpcKKeTednvudX2Qtww WfNGwfYYuX8KD23ZscR6sxwXxOnyvOeFO9TnQ+6vymBVMO6PAbT10TtLtr+3LQFk A+hZaU3bBYhd4wDKfnURZiHcihZltJaFEszrfETVYi5KEAZYlYEqAnzzZKn1sejx H6hOnbRoVaLgC1AXvYYh/E83B0gksvINTzCtOi9AURwCIEYRnpbD6OJ/v86NnUiB 2VjC8N9QBFdo8cTyxLKK4VltSYVI926SZmqk1Bh/2xoF -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:38 2025 by rpki-client