This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v7Y2wXDYaHvQHIThcf90nO-GKF0.roa File: v7Y2wXDYaHvQHIThcf90nO-GKF0.roa (raw, json) Hash identifier: 6LGax00EonKZPA42dryz9ZQy5DvvpT8V4RJwqpf9ib8= Subject key identifier: BF:B6:36:C1:70:D8:68:7B:D0:1C:84:E1:71:FF:74:9C:EF:86:28:5D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AE844BC89B725FB9F23EB362BB24A5028 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v7Y2wXDYaHvQHIThcf90nO-GKF0.roa Signing time: Thu 04 Dec 2025 07:30:10 +0000 ROA not before: Thu 04 Dec 2025 07:30:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215224 IP address blocks: 31.57.144.0/24 maxlen: 24 217.60.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:44:bc:89:b7:25:fb:9f:23:eb:36:2b:b2:4a:50:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 4 07:30:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bfb636c170d8687bd01c84e171ff749cef86285d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:2b:aa:10:9d:90:dd:1d:03:ff:c0:4b:ce: 06:4e:e4:f1:ac:ea:1b:df:ae:0b:a7:50:50:de:3a: 2c:ae:62:51:1a:60:ec:9b:ec:cb:4a:9b:d7:65:d9: 71:ad:8f:90:8c:74:9a:e0:37:da:93:ce:9e:81:af: 8d:e8:6e:c8:dd:ca:d7:57:f3:9d:75:2f:42:78:a1: 8a:a1:3f:05:67:5f:b2:14:d3:9c:3d:e1:82:15:26: ed:8f:60:c6:c9:e1:51:27:d7:b7:f8:8a:a0:86:89: 8a:f2:c2:45:17:e9:04:2a:34:7f:fe:ea:fa:60:b1: bd:94:df:aa:6e:0a:51:47:a0:e9:0c:02:3b:31:a2: 7d:c9:e8:bf:99:e0:72:75:80:5a:c5:88:96:4c:79: 73:27:b7:c8:89:00:ac:de:6b:1c:f0:ca:30:61:53: 51:15:d5:6b:37:8e:22:f3:59:f9:a2:5e:ab:ac:8a: 89:66:26:9f:9a:f2:86:ec:61:a7:de:62:3b:f7:8e: 9f:bd:f7:31:3c:bd:08:ee:62:dd:1b:4d:3f:16:92: 7c:aa:c8:0a:fa:b7:2f:4a:30:a7:d8:34:f9:b4:6f: b2:bd:4a:64:94:3f:a1:e8:25:82:1e:42:0b:fd:58: 92:67:e1:c5:98:8e:18:6b:28:82:25:c0:d7:52:a9: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B6:36:C1:70:D8:68:7B:D0:1C:84:E1:71:FF:74:9C:EF:86:28:5D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v7Y2wXDYaHvQHIThcf90nO-GKF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.144.0/24 217.60.253.0/24 Signature Algorithm: sha256WithRSAEncryption a9:b1:ca:e2:38:45:56:91:a9:4a:d6:3d:d4:40:7f:b3:ee:29: 6a:ee:84:bc:2b:f5:22:e5:1b:fd:41:ca:75:ad:9d:75:97:83: fe:03:46:b0:14:2a:e1:72:c1:62:24:78:2b:ad:c2:84:5e:3d: 64:bf:c5:ad:46:d4:02:2b:cb:4a:01:c6:d2:f4:73:9d:3a:67: f9:36:c0:73:f6:af:af:43:b2:8c:60:74:7c:0e:ac:3f:21:a3: 32:b3:d8:38:30:ef:a9:05:1e:31:16:8b:21:16:37:0b:25:46: 0c:35:51:b7:08:b6:3b:a0:88:95:0f:f4:00:53:c8:88:9b:87: 21:b6:10:54:42:73:25:38:5f:78:54:ed:7a:65:2f:38:fa:87: 9b:4b:a0:0c:15:d2:25:dd:86:90:d2:8a:cd:fc:5c:dd:3e:2d: 00:21:6c:4e:a4:2b:81:1b:ad:38:54:ae:c4:e1:12:06:a3:ee: 8f:37:f5:49:90:a1:ce:67:9b:d0:2b:45:66:01:c0:dd:f0:5c: 02:db:20:12:4d:d9:9a:7d:d1:5e:6e:00:d8:bb:59:37:e3:b8: 7e:1d:17:53:2a:9e:1a:a1:03:48:91:f3:78:18:2c:58:90:3c: 89:5e:af:dc:fa:a2:75:10:93:b8:e7:3b:da:04:68:f7:58:57: d6:b4:08:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZroRLyJtyX7nyPrNiuySlAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA0MDczMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmI2MzZjMTcwZDg2ODdiZDAxYzg0ZTE3MWZmNzQ5Y2VmODYyODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaorqhCdkN0dA//AS84GTuTxrOob 364Lp1BQ3josrmJRGmDsm+zLSpvXZdlxrY+QjHSa4Dfak86ega+N6G7I3crXV/Od dS9CeKGKoT8FZ1+yFNOcPeGCFSbtj2DGyeFRJ9e3+IqghomK8sJFF+kEKjR//ur6 YLG9lN+qbgpRR6DpDAI7MaJ9yei/meBydYBaxYiWTHlzJ7fIiQCs3msc8MowYVNR FdVrN44i81n5ol6rrIqJZiafmvKG7GGn3mI7946fvfcxPL0I7mLdG00/FpJ8qsgK +rcvSjCn2DT5tG+yvUpklD+h6CWCHkIL/ViSZ+HFmI4YayiCJcDXUqnasQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL+2NsFw2Gh70ByE4XH/dJzvhihdMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdjdZMndYRFlhSHZRSElUaGNmOTBuTy1HS0YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzmQAwQA 2Tz9MA0GCSqGSIb3DQEBCwUAA4IBAQCpscriOEVWkalK1j3UQH+z7ilq7oS8K/Ui 5Rv9Qcp1rZ11l4P+A0awFCrhcsFiJHgrrcKEXj1kv8WtRtQCK8tKAcbS9HOdOmf5 NsBz9q+vQ7KMYHR8Dqw/IaMys9g4MO+pBR4xFoshFjcLJUYMNVG3CLY7oIiVD/QA U8iIm4chthBUQnMlOF94VO16ZS84+oebS6AMFdIl3YaQ0orN/FzdPi0AIWxOpCuB G604VK7E4RIGo+6PN/VJkKHOZ5vQK0VmAcDd8FwC2yASTdmafdFebgDYu1k347h+ HRdTKp4aoQNIkfN4GCxYkDyJXq/c+qJ1EJO45zvaBGj3WFfWtAix -----END CERTIFICATE-----Generated at Fri Dec 5 20:06:41 2025 by rpki-client