This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zB4fGfXSjLDD5dJyFoV8BV5nu3A.roa File: zB4fGfXSjLDD5dJyFoV8BV5nu3A.roa (raw, json) Hash identifier: 5BZ0HsV9ioJcFidllj1w8Gzd2vZ+OLRcFt/tn1M8DQ4= Subject key identifier: CC:1E:1F:19:F5:D2:8C:B0:C3:E5:D2:72:16:85:7C:05:5E:67:BB:70 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B1C6D1A8006BFC18D68ABD60B4889FDBB Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zB4fGfXSjLDD5dJyFoV8BV5nu3A.roa Signing time: Sun 14 Dec 2025 10:34:30 +0000 ROA not before: Sun 14 Dec 2025 10:34:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216169 IP address blocks: 217.60.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:6d:1a:80:06:bf:c1:8d:68:ab:d6:0b:48:89:fd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 14 10:34:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cc1e1f19f5d28cb0c3e5d27216857c055e67bb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0b:f4:27:c0:18:f1:e2:08:09:2c:ce:17:e6: d0:6f:f5:3c:56:a7:63:e3:11:1b:3f:01:bc:13:4d: 61:28:c2:a5:7c:82:59:a1:9c:d7:0c:b3:3a:d6:34: f6:22:ab:f2:05:2e:3b:32:7c:1c:c1:b3:c6:8c:aa: 4e:81:4c:80:b9:22:7c:0f:66:16:ec:ac:b8:bc:b5: a1:d0:83:3e:36:04:43:ff:ad:23:9d:34:42:41:b1: eb:72:38:dc:a6:c2:ba:d7:25:7b:05:db:20:56:9c: 0e:2b:0b:15:d8:c4:d8:f5:94:7d:9d:4a:e6:86:77: 04:cb:0a:85:23:64:48:90:69:43:cf:00:83:ba:38: 0f:1b:76:28:f1:39:28:be:32:b7:a4:f3:fb:06:e5: 14:ec:e2:21:33:9b:c7:ae:e4:e5:81:3f:23:51:be: 8d:88:86:9c:26:e3:ab:f1:4b:fd:c8:d9:55:c9:04: 1e:40:35:57:9e:5a:1e:51:49:51:74:09:9c:89:71: b6:32:d4:2e:a1:0b:4f:83:c6:37:da:d0:59:aa:1f: 28:b3:95:e4:1f:47:b4:35:61:dd:b8:e5:98:74:bc: 7b:ea:ee:90:47:6f:dc:3a:78:6f:75:fa:c9:d7:7f: 95:b6:94:cc:db:23:8a:27:2d:53:91:e4:83:87:64: 6a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1E:1F:19:F5:D2:8C:B0:C3:E5:D2:72:16:85:7C:05:5E:67:BB:70 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zB4fGfXSjLDD5dJyFoV8BV5nu3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.243.0/24 Signature Algorithm: sha256WithRSAEncryption 68:83:d1:2e:cc:a2:ae:88:8e:79:a6:9a:71:a0:d6:2c:a4:d1: f2:d1:24:e0:0b:de:ee:cd:81:0d:fe:c8:6b:2c:9f:c3:22:13: 60:35:bf:c5:4a:90:84:b1:e1:bb:39:ed:7f:6e:4e:85:30:c9: 88:c1:98:14:27:0f:f5:fa:39:c8:20:88:c3:55:a1:f8:be:a0: 06:2c:ab:c8:98:19:cf:6d:24:e8:e7:e9:71:e3:75:2e:51:88: eb:9a:f1:c0:d8:f0:90:08:61:aa:61:4c:c0:67:81:75:24:ea: fb:32:82:b1:cc:ce:e4:0a:90:bf:9e:1e:1d:ca:de:95:1d:0b: 67:cb:9f:4e:5f:63:2d:28:84:1e:36:64:53:1d:8e:48:8c:2a: c4:c8:d9:b3:94:80:31:79:1c:97:96:54:a5:34:ea:31:5a:35: 40:ff:9c:90:ac:38:a1:8e:c6:74:d3:da:5c:4f:27:6f:8a:19: c2:21:8c:f2:64:e0:0c:4c:af:92:64:07:ca:e0:a7:86:32:1d: 1c:ec:f0:ce:09:8a:a9:9d:78:93:ef:a9:34:cc:0f:ca:1d:92: 43:9a:cd:1c:b8:8d:22:7e:00:16:96:2d:fd:29:51:01:f8:d0: 67:4f:8c:66:ed:c7:91:60:b9:95:e1:e3:5c:d6:36:a7:8a:1c: ad:87:bc:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZscbRqABr/BjWir1gtIif27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE0MTAzNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzFlMWYxOWY1ZDI4Y2IwYzNlNWQyNzIxNjg1N2MwNTVlNjdiYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgv0J8AY8eIICSzOF+bQb/U8Vqdj 4xEbPwG8E01hKMKlfIJZoZzXDLM61jT2IqvyBS47MnwcwbPGjKpOgUyAuSJ8D2YW 7Ky4vLWh0IM+NgRD/60jnTRCQbHrcjjcpsK61yV7BdsgVpwOKwsV2MTY9ZR9nUrm hncEywqFI2RIkGlDzwCDujgPG3Yo8TkovjK3pPP7BuUU7OIhM5vHruTlgT8jUb6N iIacJuOr8Uv9yNlVyQQeQDVXnloeUUlRdAmciXG2MtQuoQtPg8Y32tBZqh8os5Xk H0e0NWHduOWYdLx76u6QR2/cOnhvdfrJ13+VtpTM2yOKJy1TkeSDh2Rq5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMweHxn10oyww+XSchaFfAVeZ7twMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvekI0ZkdmWFNqTERENWRKeUZvVjhCVjVudTNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2TzzMA0G CSqGSIb3DQEBCwUAA4IBAQBog9EuzKKuiI55pppxoNYspNHy0STgC97uzYEN/shr LJ/DIhNgNb/FSpCEseG7Oe1/bk6FMMmIwZgUJw/1+jnIIIjDVaH4vqAGLKvImBnP bSTo5+lx43UuUYjrmvHA2PCQCGGqYUzAZ4F1JOr7MoKxzM7kCpC/nh4dyt6VHQtn y59OX2MtKIQeNmRTHY5IjCrEyNmzlIAxeRyXllSlNOoxWjVA/5yQrDihjsZ009pc TydvihnCIYzyZOAMTK+SZAfK4KeGMh0c7PDOCYqpnXiT76k0zA/KHZJDms0cuI0i fgAWli39KVEB+NBnT4xm7ceRYLmV4eNc1janihyth7ys -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:35 2025 by rpki-client