This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p_tjHA5lOLOOjYaQqduWTFMg0TE.roa File: p_tjHA5lOLOOjYaQqduWTFMg0TE.roa (raw, json) Hash identifier: QkrB6cnBEnLYy42mcXuXy1cBVaKEO7imha5uUiOkZrc= Subject key identifier: A7:FB:63:1C:0E:65:38:B3:8E:8D:86:90:A9:DB:96:4C:53:20:D1:31 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B615BE4AF1C4E7FCF569FE406916FEA37 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p_tjHA5lOLOOjYaQqduWTFMg0TE.roa Signing time: Sat 27 Dec 2025 19:49:30 +0000 ROA not before: Sat 27 Dec 2025 19:49:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51722 IP address blocks: 217.60.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:5b:e4:af:1c:4e:7f:cf:56:9f:e4:06:91:6f:ea:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 27 19:49:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7fb631c0e6538b38e8d8690a9db964c5320d131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:bd:88:2d:e2:9e:00:e0:6d:6c:61:92:be: c0:05:f8:5a:85:29:47:e1:ad:cf:0f:37:c0:0b:5a: 93:4a:8f:39:2e:e0:2e:2e:bd:21:9e:17:a7:97:ef: 33:6e:d5:15:a9:e7:4d:7c:51:68:9c:1d:c6:78:06: 41:b7:46:86:e9:02:2c:25:9a:a2:2d:a0:df:27:5d: e3:de:ca:05:6e:2c:a8:6c:74:14:da:74:f7:a1:0f: 10:fb:02:2e:55:af:6f:c8:69:9d:b0:1e:66:f5:7d: 29:ff:da:78:87:5b:67:12:12:9c:77:46:64:b5:a9: 70:e3:45:60:27:b0:9e:3f:50:53:38:f1:c0:60:7b: bf:cb:94:83:f9:9c:44:11:25:62:5e:4c:6e:40:e1: 22:32:a1:9a:16:89:a1:82:39:88:50:68:1b:7d:e8: 44:fc:ee:3a:3f:57:01:f4:bf:87:1e:ef:61:5f:c6: 8f:e3:e7:82:aa:7c:b1:02:aa:0d:9e:cc:7b:6b:f2: db:a7:62:38:37:1f:c0:b7:65:2d:4f:0c:c9:ba:53: 76:ab:3e:2c:44:30:1a:29:de:cf:fe:66:04:99:91: a1:5e:e2:dc:79:a0:70:5c:2b:a1:b4:eb:9b:79:30: cd:64:4b:64:64:cc:05:92:64:89:a8:71:f8:68:5f: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FB:63:1C:0E:65:38:B3:8E:8D:86:90:A9:DB:96:4C:53:20:D1:31 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p_tjHA5lOLOOjYaQqduWTFMg0TE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.200.0/21 Signature Algorithm: sha256WithRSAEncryption 45:a5:77:64:c0:0f:a8:9b:47:6f:fd:1c:32:a1:95:da:ae:f3: da:9e:22:45:dc:75:8f:e9:39:da:2c:c2:b6:19:05:b6:43:54: 75:7c:61:01:06:ec:79:5e:da:dd:a5:9a:c1:7f:00:d4:74:8a: 58:c0:76:73:69:d0:b4:e9:11:86:91:06:30:3d:d6:19:c1:2e: ba:65:3e:e0:8c:cb:49:00:e9:96:76:b0:56:e1:51:08:d9:1c: 6f:9a:16:7e:c6:ef:26:cf:9a:41:63:c0:f4:fa:e8:c6:6a:11: 05:93:f0:fb:73:09:eb:b7:66:95:3c:d7:f2:43:de:f4:20:85: 04:03:01:2d:31:38:55:34:d9:90:ed:02:21:13:9d:90:42:2a: f9:5f:66:80:12:0b:db:73:ee:4b:7c:b6:8b:32:4c:2b:99:ea: 61:e8:d8:54:0b:32:8e:ac:6b:1c:3b:74:82:5e:45:6a:31:a2: 5e:ba:7c:1e:dd:86:45:65:16:f5:63:fa:d4:53:1b:1b:51:dd: d1:47:f5:05:c3:e8:60:53:7e:63:98:9b:ff:88:5d:27:2d:5f: bf:5a:7e:f1:d6:e6:0f:03:23:2e:fe:8e:65:23:52:a3:1d:81: ef:76:67:25:de:28:12:78:b4:12:14:70:2b:ad:86:a6:d4:00: 69:21:a0:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZthW+SvHE5/z1af5AaRb+o3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjI3MTk0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZiNjMxYzBlNjUzOGIzOGU4ZDg2OTBhOWRiOTY0YzUzMjBkMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB69iC3ingDgbWxhkr7ABfhahSlH 4a3PDzfAC1qTSo85LuAuLr0hnhenl+8zbtUVqedNfFFonB3GeAZBt0aG6QIsJZqi LaDfJ13j3soFbiyobHQU2nT3oQ8Q+wIuVa9vyGmdsB5m9X0p/9p4h1tnEhKcd0Zk talw40VgJ7CeP1BTOPHAYHu/y5SD+ZxEESViXkxuQOEiMqGaFomhgjmIUGgbfehE /O46P1cB9L+HHu9hX8aP4+eCqnyxAqoNnsx7a/Lbp2I4Nx/At2UtTwzJulN2qz4s RDAaKd7P/mYEmZGhXuLceaBwXCuhtOubeTDNZEtkZMwFkmSJqHH4aF+XqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKf7YxwOZTizjo2GkKnblkxTINExMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvcF90akhBNWxPTE9PallhUXFkdVdURk1nMFRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2TzIMA0G CSqGSIb3DQEBCwUAA4IBAQBFpXdkwA+om0dv/RwyoZXarvPaniJF3HWP6TnaLMK2 GQW2Q1R1fGEBBux5XtrdpZrBfwDUdIpYwHZzadC06RGGkQYwPdYZwS66ZT7gjMtJ AOmWdrBW4VEI2RxvmhZ+xu8mz5pBY8D0+ujGahEFk/D7cwnrt2aVPNfyQ970IIUE AwEtMThVNNmQ7QIhE52QQir5X2aAEgvbc+5LfLaLMkwrmeph6NhUCzKOrGscO3SC XkVqMaJeunwe3YZFZRb1Y/rUUxsbUd3RR/UFw+hgU35jmJv/iF0nLV+/Wn7x1uYP AyMu/o5lI1KjHYHvdmcl3igSeLQSFHArrYam1ABpIaCy -----END CERTIFICATE-----Generated at Tue Dec 30 23:53:56 2025 by rpki-client