This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0O255aJvBDJKPHdJGuMYmDHDpSs.roa File: 0O255aJvBDJKPHdJGuMYmDHDpSs.roa (raw, json) Hash identifier: 7IQPrHd3MWQfhlSzMYvoJMwLI8p2KAlgMmWB1ivqICM= Subject key identifier: D0:ED:B9:E5:A2:6F:04:32:4A:3C:77:49:1A:E3:18:98:31:C3:A5:2B Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AD72973175BAD40E7C284088B35F95856 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0O255aJvBDJKPHdJGuMYmDHDpSs.roa Signing time: Sun 30 Nov 2025 23:46:49 +0000 ROA not before: Sun 30 Nov 2025 23:46:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211780 IP address blocks: 5.231.26.0/24 maxlen: 24 5.231.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d7:29:73:17:5b:ad:40:e7:c2:84:08:8b:35:f9:58:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 30 23:46:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d0edb9e5a26f04324a3c77491ae3189831c3a52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:c3:b5:82:50:30:77:cf:5a:13:7b:a4:5a: 18:35:7b:b9:db:49:53:2b:9a:59:1c:13:37:d4:55: 62:e1:b6:45:52:58:c1:b6:38:5f:1a:28:d8:59:3d: c1:95:f7:95:36:33:96:01:1d:f1:37:62:5b:56:fd: 88:fc:0d:31:d4:77:04:fb:77:67:ea:dc:29:4e:fc: 25:b5:a1:14:fd:9f:e6:3b:70:89:e0:c9:31:42:8f: 44:33:23:33:76:c0:61:cb:94:02:b6:11:13:70:1c: 28:01:f8:22:bb:00:b0:25:64:51:f9:d5:a5:e2:6c: 44:6b:80:cf:79:56:df:8b:36:2c:a0:27:d9:89:68: 5e:a9:d2:89:12:34:c0:c3:33:10:c7:44:65:b7:dd: 4a:13:a4:f1:54:56:82:6d:0e:d8:ec:fc:78:b2:9b: 75:ca:78:be:3a:5d:38:e8:14:e9:10:bd:e6:9b:49: 3d:3a:10:e4:c7:9f:f2:0a:c3:56:75:8e:9d:c0:1b: cf:7b:8c:32:b1:f1:a4:cb:82:85:7b:d1:38:45:c8: b4:01:fd:63:05:b3:10:dc:0f:2d:17:0d:2e:9b:3a: 67:9f:30:c5:1e:ed:db:eb:ed:3d:27:b5:d2:0f:53: 72:28:72:e2:de:68:61:14:ed:c1:37:14:e9:73:63: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:ED:B9:E5:A2:6F:04:32:4A:3C:77:49:1A:E3:18:98:31:C3:A5:2B X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0O255aJvBDJKPHdJGuMYmDHDpSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.26.0/24 5.231.115.0/24 Signature Algorithm: sha256WithRSAEncryption a7:23:d1:2b:09:ae:10:69:12:3e:8e:2b:d8:c3:7c:cc:7e:26: d2:d1:8b:22:7e:47:82:65:ef:09:36:d9:19:01:44:f4:b4:20: 41:7e:51:f2:ff:8b:2a:57:f7:00:c3:e9:e0:4f:f9:66:6c:7d: b9:cb:2b:06:1d:dc:68:6b:e6:3b:2b:15:e7:95:9e:74:b0:43: bc:46:5d:ee:f2:49:99:ea:8f:07:32:d2:51:0b:aa:52:f0:02: 52:6e:d3:35:9f:c2:bc:91:48:bf:e0:fd:75:08:7a:b4:54:71: 05:54:85:bc:2f:d0:bd:5a:af:2e:b1:be:6c:a2:9e:67:1e:e3: f2:2d:32:d5:04:f0:df:8f:10:5a:51:88:14:01:4e:db:64:2e: 73:6f:de:ee:e7:76:6f:67:31:79:0c:a3:ad:49:1c:65:1b:93: a0:71:c6:4f:8e:c3:19:a4:67:8d:dc:83:4b:ae:81:81:e2:26: 63:7b:81:67:8c:21:a5:8d:65:d9:e2:e2:e0:a0:bd:52:24:8e: 1d:2a:23:a9:0d:15:50:6a:a6:67:d8:2a:46:34:50:f6:8a:ce: f1:2c:f7:a0:bb:10:25:66:ef:0a:55:e7:71:84:25:7c:6e:77: bf:a2:b6:71:a6:20:06:42:12:34:80:ea:49:ec:15:a4:eb:02: 1e:64:3f:9f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrXKXMXW61A58KECIs1+VhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTMwMjM0NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGVkYjllNWEyNmYwNDMyNGEzYzc3NDkxYWUzMTg5ODMxYzNhNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL/DtYJQMHfPWhN7pFoYNXu520lT K5pZHBM31FVi4bZFUljBtjhfGijYWT3BlfeVNjOWAR3xN2JbVv2I/A0x1HcE+3dn 6twpTvwltaEU/Z/mO3CJ4MkxQo9EMyMzdsBhy5QCthETcBwoAfgiuwCwJWRR+dWl 4mxEa4DPeVbfizYsoCfZiWheqdKJEjTAwzMQx0Rlt91KE6TxVFaCbQ7Y7Px4spt1 yni+Ol046BTpEL3mm0k9OhDkx5/yCsNWdY6dwBvPe4wysfGky4KFe9E4Rci0Af1j BbMQ3A8tFw0umzpnnzDFHu3b6+09J7XSD1NyKHLi3mhhFO3BNxTpc2PAswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNDtueWibwQySjx3SRrjGJgxw6UrMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvME8yNTVhSnZCREpLUEhkSkd1TVltREhEcFNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABecaAwQA BedzMA0GCSqGSIb3DQEBCwUAA4IBAQCnI9ErCa4QaRI+jivYw3zMfibS0YsifkeC Ze8JNtkZAUT0tCBBflHy/4sqV/cAw+ngT/lmbH25yysGHdxoa+Y7KxXnlZ50sEO8 Rl3u8kmZ6o8HMtJRC6pS8AJSbtM1n8K8kUi/4P11CHq0VHEFVIW8L9C9Wq8usb5s op5nHuPyLTLVBPDfjxBaUYgUAU7bZC5zb97u53ZvZzF5DKOtSRxlG5OgccZPjsMZ pGeN3INLroGB4iZje4FnjCGljWXZ4uLgoL1SJI4dKiOpDRVQaqZn2CpGNFD2is7x LPeguxAlZu8KVedxhCV8bne/orZxpiAGQhI0gOpJ7BWk6wIeZD+f -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:40 2025 by rpki-client