This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/TO_SSwf6-eWoLaY3pBc8ewOhpiA.roa File: TO_SSwf6-eWoLaY3pBc8ewOhpiA.roa (raw, json) Hash identifier: ee63RZitNOPdcRNyJ4aJ7hmGttuUOvT0FBG6CRMod/s= Subject key identifier: 4C:EF:D2:4B:07:FA:F9:E5:A8:2D:A6:37:A4:17:3C:7B:03:A1:A6:20 Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Certificate serial: 019A77D5E40596ECD045D0B65D7FA6E295E2 Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/TO_SSwf6-eWoLaY3pBc8ewOhpiA.roa Signing time: Wed 12 Nov 2025 11:31:37 +0000 ROA not before: Wed 12 Nov 2025 11:31:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57344 IP address blocks: 5.181.81.0/24 maxlen: 24 5.181.82.0/23 maxlen: 24 147.78.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:d5:e4:05:96:ec:d0:45:d0:b6:5d:7f:a6:e2:95:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Validity Not Before: Nov 12 11:31:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4cefd24b07faf9e5a82da637a4173c7b03a1a620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:0f:1e:bc:07:5c:44:03:1c:97:db:2d:04: 28:20:59:41:fe:ef:00:0b:97:0c:d5:03:81:ab:c4: bd:06:00:22:85:3e:2f:50:0d:a7:1c:cf:61:81:94: fd:50:08:4e:20:2c:30:56:0f:89:9d:e3:12:83:17: c0:b4:80:b6:b8:4f:21:ab:08:9b:58:9c:56:a1:17: e3:49:9a:e2:96:dd:6d:d2:3e:d1:49:e3:2c:e7:ea: 1e:52:0b:68:f4:e7:c4:a3:43:85:96:14:8d:a8:65: 02:cf:94:57:4c:7d:e3:34:b8:8d:da:63:e8:7e:22: 70:63:b1:ef:d2:6e:ab:ba:a3:81:79:15:db:42:d2: fb:86:d0:ee:e9:97:4b:f6:e8:b7:8f:b8:41:ad:f4: 93:fb:81:60:16:2e:f6:c2:d7:3f:e7:55:04:51:73: e2:72:78:1b:da:20:38:f6:b0:02:b6:11:4e:79:40: f4:14:52:d7:0a:0d:00:a1:15:ed:33:ae:c5:62:cd: 5c:8b:6b:9d:b7:df:a5:6e:80:d4:66:8e:61:91:56: f9:7c:3b:b6:06:70:f5:f9:6e:64:fc:cb:12:b6:ec: 03:f7:af:93:94:2c:94:0d:e2:8e:ec:67:f1:1e:f1: b1:59:b1:75:c9:a1:24:91:7f:0f:c9:47:55:ab:9d: 06:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EF:D2:4B:07:FA:F9:E5:A8:2D:A6:37:A4:17:3C:7B:03:A1:A6:20 X509v3 Authority Key Identifier: keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/TO_SSwf6-eWoLaY3pBc8ewOhpiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.81.0-5.181.83.255 147.78.141.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:19:2d:40:ea:60:9c:c6:d3:cf:eb:d3:3a:0d:95:2a:3b:c2: 2c:9a:50:58:0d:1b:45:ad:b5:5b:a2:59:aa:5d:26:aa:1e:49: 91:d5:85:e2:bb:ac:8b:5b:0a:ea:f8:62:ae:80:1b:68:47:17: bd:6d:6d:30:88:ba:6a:2e:b3:3f:4b:31:c4:6a:47:47:b0:73: 1d:3b:7f:3c:3c:87:c7:b3:e5:94:e6:55:ef:3b:7b:ff:fa:52: ed:76:ad:3d:e9:c8:f1:f6:e8:94:ba:41:62:ee:08:0a:fb:f7: dc:5e:f8:08:3e:a8:a3:b0:a9:34:6e:6a:cb:e4:ff:01:03:17: fa:e2:73:43:55:b9:45:2b:38:02:b3:e8:9f:c3:e5:c7:a5:fa: a1:b7:3f:62:90:99:22:5c:36:91:36:4d:6c:a7:80:ac:dc:54: d1:74:ba:dc:92:41:8b:e2:17:34:93:47:a4:0b:e2:d7:4d:1d: e7:aa:60:54:fd:90:4c:51:7f:61:d6:02:04:68:9f:61:98:8d: 53:19:ae:3f:fb:5a:04:2b:61:f1:73:60:cd:92:50:02:e6:c1: ad:c2:39:f0:a1:8b:23:c4:d5:41:7b:00:5c:05:b7:2c:23:55: 55:5b:e7:54:e9:dc:1b:70:cf:0e:f8:f6:4f:5a:53:8d:79:88: 40:c5:5a:2e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZp31eQFluzQRdC2XX+m4pXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDY5ZDlmNzQ5NjMwZjAyNTZjZjBjZWFiNTg4MzZiNDkx YTU4ZjYwHhcNMjUxMTEyMTEzMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2VmZDI0YjA3ZmFmOWU1YTgyZGE2MzdhNDE3M2M3YjAzYTFhNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGMPHrwHXEQDHJfbLQQoIFlB/u8A C5cM1QOBq8S9BgAihT4vUA2nHM9hgZT9UAhOICwwVg+JneMSgxfAtIC2uE8hqwib WJxWoRfjSZrilt1t0j7RSeMs5+oeUgto9OfEo0OFlhSNqGUCz5RXTH3jNLiN2mPo fiJwY7Hv0m6ruqOBeRXbQtL7htDu6ZdL9ui3j7hBrfST+4FgFi72wtc/51UEUXPi cngb2iA49rACthFOeUD0FFLXCg0AoRXtM67FYs1ci2udt9+lboDUZo5hkVb5fDu2 BnD1+W5k/MsStuwD96+TlCyUDeKO7GfxHvGxWbF1yaEkkX8PyUdVq50GawIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEzv0ksH+vnlqC2mN6QXPHsDoaYgMB8GA1UdIwQY MBaAFF3WnZ90ljDwJWzwzqtYg2tJGlj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWIt ZjNmZDY0MzMxNzA5LzEvVE9fU1N3ZjYtZVdvTGFZM3BCYzhld09ocGlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWItZjNmZDY0MzMxNzA5 LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAFtVED BAIFtVADBACTTo0wDQYJKoZIhvcNAQELBQADggEBAHoZLUDqYJzG08/r0zoNlSo7 wiyaUFgNG0WttVuiWapdJqoeSZHVheK7rItbCur4Yq6AG2hHF71tbTCIumousz9L McRqR0ewcx07fzw8h8ez5ZTmVe87e//6Uu12rT3pyPH26JS6QWLuCAr799xe+Ag+ qKOwqTRuasvk/wEDF/ric0NVuUUrOAKz6J/D5cel+qG3P2KQmSJcNpE2TWyngKzc VNF0utySQYviFzSTR6QL4tdNHeeqYFT9kExRf2HWAgRon2GYjVMZrj/7WgQrYfFz YM2SUALmwa3COfChiyPE1UF7AFwFtywjVVVb51Tp3Btwzw749k9aU415iEDFWi4= -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:12 2025 by rpki-client