This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ot94FGKNeZXa9Ps5ms5VwTPB6a8.roa File: ot94FGKNeZXa9Ps5ms5VwTPB6a8.roa (raw, json) Hash identifier: 27hf462k7NlapGnzxijLWRn4bJNNQtBX2ig/Ydc37hc= Subject key identifier: A2:DF:78:14:62:8D:79:95:DA:F4:FB:39:9A:CE:55:C1:33:C1:E9:AF Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AC1191258573581236A504B989504C10C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ot94FGKNeZXa9Ps5ms5VwTPB6a8.roa Signing time: Wed 26 Nov 2025 16:57:17 +0000 ROA not before: Wed 26 Nov 2025 16:57:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 266539 IP address blocks: 217.60.12.0/24 maxlen: 24 217.60.14.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.184.0/23 maxlen: 24 217.60.198.0/24 maxlen: 24 217.60.242.0/24 maxlen: 24 217.60.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 02:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:19:12:58:57:35:81:23:6a:50:4b:98:95:04:c1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 26 16:57:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a2df7814628d7995daf4fb399ace55c133c1e9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:34:bd:1f:a5:bd:1e:64:10:04:02:26:af:e6: d7:a2:26:02:50:97:9a:94:58:e0:5c:89:fc:f7:ee: 92:f5:38:7d:13:65:aa:84:8b:01:ec:8a:a2:fe:41: 3a:15:d1:2a:de:ba:29:de:3a:21:91:63:14:e7:a4: 22:b1:1a:e9:47:77:12:a4:03:1d:b3:74:dc:c5:6c: e4:55:89:14:c0:14:b7:d6:3d:1d:59:a6:54:ee:b7: c9:81:57:8d:9e:11:3d:48:42:b4:95:c2:30:42:33: 12:05:4b:cd:7f:02:9b:f9:ec:82:6e:b0:d4:aa:b6: 0d:31:c8:8a:65:ff:9a:97:a3:39:ad:6f:03:75:00: 4a:7f:e0:dd:09:04:bb:c9:08:aa:28:4f:ad:c4:ee: 80:b6:25:9c:3c:58:09:ce:e9:de:6c:76:9c:3c:6f: 44:41:e7:3b:22:60:f1:b0:63:05:4c:0d:bd:66:44: cc:c7:da:6a:8b:7a:ca:83:69:ce:f8:ad:e8:94:a6: fc:79:3f:66:5b:42:e6:e3:cd:a6:f3:df:a9:f1:8f: b0:fe:c8:9f:25:be:e6:5c:93:f3:10:97:7e:04:84: ae:f3:3e:75:94:0b:94:4e:02:ed:e2:94:3f:f5:86: 6e:3d:b4:3c:f3:85:17:68:28:a4:d1:81:47:92:44: 3e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DF:78:14:62:8D:79:95:DA:F4:FB:39:9A:CE:55:C1:33:C1:E9:AF X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ot94FGKNeZXa9Ps5ms5VwTPB6a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.12.0/24 217.60.14.0/23 217.60.184.0/23 217.60.198.0/24 217.60.242.0/24 217.60.250.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:66:f9:e1:44:81:51:d9:fb:74:be:2f:aa:ec:d0:53:e8:fe: 58:eb:45:8c:af:e2:ab:e0:02:c1:a2:63:6c:b3:03:53:8d:7e: 1e:db:fd:9b:50:b7:8b:9a:b7:c7:45:bf:65:88:9d:4b:00:51: 7f:c3:8f:c7:83:63:74:e0:63:f5:79:75:da:46:21:2f:6a:3d: b6:5d:ab:ea:e8:bf:82:23:46:b4:8a:79:68:1f:d6:6b:35:5e: ce:4d:36:03:e4:96:f9:bb:6e:ea:1d:b4:c8:8f:de:93:3e:b2: 66:7e:ff:b1:ac:9b:f3:8b:ac:ef:24:d9:cf:01:a5:c5:09:f6: 8c:7d:d0:89:8b:23:6b:58:fc:9f:31:78:16:98:35:dc:c3:1e: 6d:fc:d9:98:54:a9:9a:53:5a:0d:99:29:02:7a:3d:35:80:4e: ae:4b:5e:84:74:1f:f4:89:53:6f:bc:21:0e:df:20:70:80:1d: d4:8c:95:f2:6b:e7:b7:f1:93:b0:d7:5d:26:ba:db:7e:be:47: 0b:00:76:56:a7:cf:68:41:60:bb:da:94:b5:a6:8c:f7:aa:40: a2:cb:8c:85:0d:ce:04:83:77:44:53:63:7c:2c:7d:ed:23:7a: 85:d6:58:1f:1c:e1:1d:44:ad:7b:9b:f9:18:c0:33:b3:e9:f1: bc:6d:c1:c5 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrBGRJYVzWBI2pQS5iVBMEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI2MTY1NzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmRmNzgxNDYyOGQ3OTk1ZGFmNGZiMzk5YWNlNTVjMTMzYzFlOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTS9H6W9HmQQBAImr+bXoiYCUJea lFjgXIn89+6S9Th9E2WqhIsB7Iqi/kE6FdEq3rop3johkWMU56QisRrpR3cSpAMd s3TcxWzkVYkUwBS31j0dWaZU7rfJgVeNnhE9SEK0lcIwQjMSBUvNfwKb+eyCbrDU qrYNMciKZf+al6M5rW8DdQBKf+DdCQS7yQiqKE+txO6AtiWcPFgJzunebHacPG9E Qec7ImDxsGMFTA29ZkTMx9pqi3rKg2nO+K3olKb8eT9mW0Lm482m89+p8Y+w/sif Jb7mXJPzEJd+BISu8z51lAuUTgLt4pQ/9YZuPbQ884UXaCik0YFHkkQ+CQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKLfeBRijXmV2vT7OZrOVcEzwemvMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvb3Q5NEZHS05lWlhhOVBzNW1zNVZ3VFBCNmE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQA2TwMAwQB 2TwOAwQB2Ty4AwQA2TzGAwQA2TzyAwQA2Tz6MA0GCSqGSIb3DQEBCwUAA4IBAQAv ZvnhRIFR2ft0vi+q7NBT6P5Y60WMr+Kr4ALBomNsswNTjX4e2/2bULeLmrfHRb9l iJ1LAFF/w4/Hg2N04GP1eXXaRiEvaj22Xavq6L+CI0a0inloH9ZrNV7OTTYD5Jb5 u27qHbTIj96TPrJmfv+xrJvzi6zvJNnPAaXFCfaMfdCJiyNrWPyfMXgWmDXcwx5t /NmYVKmaU1oNmSkCej01gE6uS16EdB/0iVNvvCEO3yBwgB3UjJXya+e38ZOw110m utt+vkcLAHZWp89oQWC72pS1poz3qkCiy4yFDc4Eg3dEU2N8LH3tI3qF1lgfHOEd RK17m/kYwDOz6fG8bcHF -----END CERTIFICATE-----Generated at Thu Nov 27 06:42:48 2025 by rpki-client