This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Jx7Zy-NW88qIjubdbnfsP6WvkeM.roa File: Jx7Zy-NW88qIjubdbnfsP6WvkeM.roa (raw, json) Hash identifier: GC9kGCOxPDmQCJoGza3DVhBvvCLswzv831ifgYwZVo8= Subject key identifier: 27:1E:D9:CB:E3:56:F3:CA:88:8E:E6:DD:6E:77:EC:3F:A5:AF:91:E3 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019AB65F61716A24C881221C1438F5E57C2C Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Jx7Zy-NW88qIjubdbnfsP6WvkeM.roa Signing time: Mon 24 Nov 2025 14:58:15 +0000 ROA not before: Mon 24 Nov 2025 14:58:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58325 IP address blocks: 46.231.167.0/24 maxlen: 24 69.5.172.0/24 maxlen: 24 93.118.40.0/22 maxlen: 24 94.177.17.0/24 maxlen: 24 2a01:4020:40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:5f:61:71:6a:24:c8:81:22:1c:14:38:f5:e5:7c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Nov 24 14:58:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=271ed9cbe356f3ca888ee6dd6e77ec3fa5af91e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:80:cf:74:fb:77:31:b2:fc:05:22:75:de: 71:95:bb:90:5f:7e:b9:91:97:52:39:13:3d:8a:c4: 94:22:c4:f5:17:c5:8d:80:69:75:6a:23:c5:29:42: 0f:0f:ee:90:6c:f2:7d:7a:c8:2a:88:75:5f:61:ca: a4:d9:2d:07:61:81:80:0e:a6:b3:34:b2:d8:9b:ff: 3f:97:4b:1e:f2:8a:cf:1b:10:a4:48:e4:aa:55:94: 50:11:ca:96:35:2f:a0:53:69:58:52:07:7a:e4:81: 7e:5c:2f:cb:b9:d6:8a:7e:f1:90:24:be:28:bc:59: 0b:89:cd:e4:0e:bb:f2:9f:52:20:50:14:2c:7c:54: 8b:e0:b1:95:62:74:29:ff:07:f0:0b:2b:7d:45:0c: 6e:56:59:b5:e4:8a:1a:b3:3a:ea:ae:f8:30:44:5e: 12:21:58:b2:a5:45:79:09:48:2a:6b:e0:5e:a0:38: cc:53:f9:db:41:b1:4a:44:d2:6c:9a:a4:37:f4:9f: f0:ca:de:87:a4:8f:8e:aa:ff:96:9e:68:21:91:c8: ad:85:4b:5e:de:eb:88:54:9f:08:5e:05:70:2f:0c: e1:48:6c:6d:af:09:95:92:49:b0:27:5b:82:c1:32: 4e:51:44:37:7e:fa:38:b8:c7:61:a5:42:f9:3f:6a: b7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1E:D9:CB:E3:56:F3:CA:88:8E:E6:DD:6E:77:EC:3F:A5:AF:91:E3 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Jx7Zy-NW88qIjubdbnfsP6WvkeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.167.0/24 69.5.172.0/24 93.118.40.0/22 94.177.17.0/24 IPv6: 2a01:4020:40::/44 Signature Algorithm: sha256WithRSAEncryption 79:c4:eb:a0:49:ce:ad:a7:5b:ae:3e:dc:39:03:b2:a5:ab:3f: c1:0e:37:8d:07:89:c3:3f:06:2d:e3:77:fc:0c:e3:55:9b:c5: b2:75:65:9d:3a:4a:67:77:aa:5e:80:49:f2:af:54:ef:7a:91: 23:9c:5c:e5:43:c2:99:8b:11:5a:2e:65:cc:2e:ef:92:65:e9: cd:2a:49:d6:ae:45:24:d5:cb:8b:f3:7a:3e:21:b1:53:b8:fe: 98:8c:4e:47:60:a9:60:94:c1:7d:b4:6e:45:a1:6b:a1:92:cc: ce:57:7a:df:1d:6b:8e:56:56:51:4d:aa:bf:a2:9a:0d:ed:43: 01:e7:02:63:8a:d4:63:41:51:72:2f:2e:c8:03:a7:a8:4f:d0: c2:74:ee:b8:76:c3:a9:3c:0e:e5:70:1b:5f:db:bc:db:55:6a: 91:1c:dd:2c:10:9b:17:30:b7:ff:f7:c4:70:8b:f7:56:f4:9f: c7:8d:d1:88:20:b9:cd:8c:4f:c2:5e:47:58:35:39:f8:e5:54: 4c:8e:47:f8:3d:c2:f9:2f:0e:3b:bd:b1:3e:5a:e0:31:cd:0b: 8b:b0:2c:5b:6a:e2:87:15:c4:3b:18:d0:89:d7:df:9c:59:0c: ee:a1:f2:e5:bc:f9:d1:d5:f8:da:ee:c1:cb:e3:7d:a2:21:4c: 69:9d:d3:a1 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZq2X2FxaiTIgSIcFDj15XwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUxMTI0MTQ1ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzFlZDljYmUzNTZmM2NhODg4ZWU2ZGQ2ZTc3ZWMzZmE1YWY5MWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMuAz3T7dzGy/AUidd5xlbuQX365 kZdSORM9isSUIsT1F8WNgGl1aiPFKUIPD+6QbPJ9esgqiHVfYcqk2S0HYYGADqaz NLLYm/8/l0se8orPGxCkSOSqVZRQEcqWNS+gU2lYUgd65IF+XC/LudaKfvGQJL4o vFkLic3kDrvyn1IgUBQsfFSL4LGVYnQp/wfwCyt9RQxuVlm15IoaszrqrvgwRF4S IViypUV5CUgqa+BeoDjMU/nbQbFKRNJsmqQ39J/wyt6HpI+Oqv+WnmghkcithUte 3uuIVJ8IXgVwLwzhSGxtrwmVkkmwJ1uCwTJOUUQ3fvo4uMdhpUL5P2q3uwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFCce2cvjVvPKiI7m3W537D+lr5HjMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvSng3WnktTlc4OHFJanViZGJuZnNQNld2a2VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALuenAwQA RQWsAwQCXXYoAwQAXrERMA8EAgACMAkDBwQqAUAgAEAwDQYJKoZIhvcNAQELBQAD ggEBAHnE66BJzq2nW64+3DkDsqWrP8EON40HicM/Bi3jd/wM41WbxbJ1ZZ06Smd3 ql6ASfKvVO96kSOcXOVDwpmLEVouZcwu75Jl6c0qSdauRSTVy4vzej4hsVO4/piM TkdgqWCUwX20bkWha6GSzM5Xet8da45WVlFNqr+img3tQwHnAmOK1GNBUXIvLsgD p6hP0MJ07rh2w6k8DuVwG1/bvNtVapEc3SwQmxcwt//3xHCL91b0n8eN0Ygguc2M T8JeR1g1OfjlVEyOR/g9wvkvDju9sT5a4DHNC4uwLFtq4ocVxDsY0InX35xZDO6h 8uW8+dHV+NruwcvjfaIhTGmd06E= -----END CERTIFICATE-----Generated at Tue Dec 16 13:38:19 2025 by rpki-client