This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wOxUrlR9xSSL2-VllYwojVH28no.roa File: wOxUrlR9xSSL2-VllYwojVH28no.roa (raw, json) Hash identifier: MEhfAX6RRFgh7b7WP7PYYnQDe8oUwdBiLQJUrrUQppQ= Subject key identifier: C0:EC:54:AE:54:7D:C5:24:8B:DB:E5:65:95:8C:28:8D:51:F6:F2:7A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AA0FC8BBCE36669F7CF27C7711F67607F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wOxUrlR9xSSL2-VllYwojVH28no.roa Signing time: Thu 20 Nov 2025 11:18:16 +0000 ROA not before: Thu 20 Nov 2025 11:18:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 395222 IP address blocks: 217.60.128.0/22 maxlen: 24 217.60.132.0/22 maxlen: 24 217.60.136.0/22 maxlen: 24 217.60.140.0/22 maxlen: 24 217.60.152.0/22 maxlen: 24 217.60.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 00:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:fc:8b:bc:e3:66:69:f7:cf:27:c7:71:1f:67:60:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 20 11:18:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0ec54ae547dc5248bdbe565958c288d51f6f27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:53:68:1a:d3:6f:7a:80:41:fe:bf:4b:16: f0:18:ba:32:5f:08:99:05:ae:e5:72:c3:88:0d:77: 8c:8a:94:ec:d5:0d:d2:f3:ba:d1:2b:59:ff:29:09: b3:72:fd:07:6c:83:18:5f:0e:c5:8a:62:54:2c:a7: a3:cd:95:66:5e:5d:2f:eb:18:44:da:b0:ef:5c:bc: 0e:c5:71:a6:87:8b:f0:2c:ba:82:2f:64:29:01:91: fa:a7:7a:c7:a7:07:25:99:55:be:a6:79:33:2d:00: e6:5f:fd:5c:0b:4f:a1:85:c0:99:82:f2:99:22:0e: 78:21:0d:6c:bf:c4:c0:23:af:7a:48:c5:19:bf:cd: 85:25:a1:10:9f:46:bf:c6:3e:51:22:43:9b:3a:62: 21:59:d0:3a:fa:61:8d:41:56:d7:aa:e6:07:e6:d1: 2d:16:0e:71:10:78:4e:8b:25:c6:df:03:70:77:e8: 45:68:0a:09:67:20:9e:76:6e:2c:f6:d8:31:d1:33: 7d:85:9d:73:e6:b4:fb:52:5c:da:f3:c7:1e:bd:cb: de:83:d2:93:fc:dc:18:03:d7:ea:f4:5c:6c:b7:92: 89:9b:73:ca:44:19:76:1f:4b:a0:b1:78:cd:9e:49: ec:cf:e0:8d:69:ce:77:6f:29:3b:03:06:74:7e:9a: 18:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EC:54:AE:54:7D:C5:24:8B:DB:E5:65:95:8C:28:8D:51:F6:F2:7A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wOxUrlR9xSSL2-VllYwojVH28no.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.128.0/20 217.60.152.0/21 Signature Algorithm: sha256WithRSAEncryption 51:8e:e6:36:c7:d8:43:3f:5f:44:09:e6:a9:6a:5c:80:1d:e8: c3:c2:a3:33:71:fd:45:68:ab:78:1c:22:12:2e:08:e6:70:f8: 08:7a:bc:df:47:72:56:7c:77:b9:9f:6e:26:a1:57:f5:4b:4b: 70:1f:5d:f0:d3:3d:19:47:c8:d5:bf:08:81:70:96:64:3b:3f: 32:4d:f9:97:87:8f:3d:e5:22:e2:42:1e:d6:83:4a:21:85:1a: e6:08:fe:ac:db:89:e3:96:ee:93:7b:cd:78:93:0c:12:52:60: a9:27:71:2c:d6:fa:64:bf:ba:b3:7d:1c:37:e7:e5:0b:73:d8: a1:3a:9f:58:c2:15:4c:e8:9d:87:37:82:98:8f:66:75:8f:67: 13:3d:84:a7:66:65:e6:11:cb:f5:f8:93:b5:12:6f:f8:74:c2: c5:67:14:72:01:39:9a:7d:2f:a6:2b:aa:fd:27:f8:e2:e0:8d: 93:b3:91:76:e9:29:83:d3:ea:ff:84:88:75:63:87:63:1c:74: ae:0c:b1:9d:4b:46:43:06:1c:01:98:fe:54:04:5e:4c:1a:f3: 8e:52:a9:2e:80:68:bf:9c:02:55:1b:ee:4c:d8:e6:5f:84:a1: fb:46:5f:a8:19:2b:c8:37:a9:1f:ad:5b:ec:43:02:06:5e:05: 40:49:81:3c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqg/Iu842Zp988nx3EfZ2B/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIwMTExODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGVjNTRhZTU0N2RjNTI0OGJkYmU1NjU5NThjMjg4ZDUxZjZmMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeZTaBrTb3qAQf6/SxbwGLoyXwiZ Ba7lcsOIDXeMipTs1Q3S87rRK1n/KQmzcv0HbIMYXw7FimJULKejzZVmXl0v6xhE 2rDvXLwOxXGmh4vwLLqCL2QpAZH6p3rHpwclmVW+pnkzLQDmX/1cC0+hhcCZgvKZ Ig54IQ1sv8TAI696SMUZv82FJaEQn0a/xj5RIkObOmIhWdA6+mGNQVbXquYH5tEt Fg5xEHhOiyXG3wNwd+hFaAoJZyCedm4s9tgx0TN9hZ1z5rT7Ulza88cevcveg9KT /NwYA9fq9Fxst5KJm3PKRBl2H0ugsXjNnknsz+CNac53byk7AwZ0fpoY1wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMDsVK5UfcUki9vlZZWMKI1R9vJ6MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvd094VXJsUjl4U1NMMi1WbGxZd29qVkgyOG5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQE2TyAAwQD 2TyYMA0GCSqGSIb3DQEBCwUAA4IBAQBRjuY2x9hDP19ECeapalyAHejDwqMzcf1F aKt4HCISLgjmcPgIerzfR3JWfHe5n24moVf1S0twH13w0z0ZR8jVvwiBcJZkOz8y TfmXh4895SLiQh7Wg0ohhRrmCP6s24njlu6Te814kwwSUmCpJ3Es1vpkv7qzfRw3 5+ULc9ihOp9YwhVM6J2HN4KYj2Z1j2cTPYSnZmXmEcv1+JO1Em/4dMLFZxRyATma fS+mK6r9J/ji4I2Ts5F26SmD0+r/hIh1Y4djHHSuDLGdS0ZDBhwBmP5UBF5MGvOO UqkugGi/nAJVG+5M2OZfhKH7Rl+oGSvIN6kfrVvsQwIGXgVASYE8 -----END CERTIFICATE-----Generated at Fri Nov 21 07:28:55 2025 by rpki-client