This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0P0nqIo3LFNwGKpB3gw5pHqzsNo.roa File: 0P0nqIo3LFNwGKpB3gw5pHqzsNo.roa (raw, json) Hash identifier: 49pOyDjvTbx7IscxLs61Mj7LzBOhWQ5HIwA+aECrLp0= Subject key identifier: D0:FD:27:A8:8A:37:2C:53:70:18:AA:41:DE:0C:39:A4:7A:B3:B0:DA Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AC3277DA7D4FB003C76CEAC6D63DA6254 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0P0nqIo3LFNwGKpB3gw5pHqzsNo.roa Signing time: Thu 27 Nov 2025 02:32:16 +0000 ROA not before: Thu 27 Nov 2025 02:32:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213495 IP address blocks: 5.175.183.0/24 maxlen: 24 5.231.56.0/24 maxlen: 24 77.90.40.0/24 maxlen: 24 94.249.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c3:27:7d:a7:d4:fb:00:3c:76:ce:ac:6d:63:da:62:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 27 02:32:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d0fd27a88a372c537018aa41de0c39a47ab3b0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:5c:a6:40:13:91:3c:f9:ca:53:bf:66:52: c2:1c:6e:50:c1:b2:15:f1:d7:d6:c0:16:6e:36:d3: 4c:0b:43:70:62:3f:8e:31:dc:a8:8b:4f:65:01:83: 52:ec:18:bb:75:1e:4c:bd:51:d4:89:b3:79:e8:a1: f4:87:13:4a:40:ea:cc:e3:4c:cd:e0:65:ca:bd:d0: c6:07:75:8e:da:df:fa:ce:7e:4a:c8:58:be:4d:4f: d5:b8:0b:a1:b2:ce:23:99:82:f9:14:56:d8:af:33: ad:99:06:16:42:be:84:7e:5b:14:6b:0e:e1:3e:ed: 21:5d:16:c0:69:24:76:c1:b1:53:84:ad:8b:b4:60: c2:36:6f:c8:dc:39:ae:c3:ec:c6:5a:fd:64:21:f5: 7e:b8:23:22:da:50:52:7f:16:9d:c5:a3:2f:e9:44: d7:fd:49:1c:4a:70:b4:00:8b:aa:c1:59:20:0f:65: 8f:30:28:37:b2:5c:f5:f8:02:0e:f5:c6:b2:ce:b4: 0a:3a:c9:dc:71:04:ab:e1:07:1f:51:1a:21:ac:ac: 0f:b4:4d:84:a7:45:65:8e:b9:e1:4c:44:a2:97:08: 42:fd:e6:a9:5a:a0:eb:a3:39:af:5e:50:2f:2c:f6: 89:73:35:9d:28:cc:80:15:0f:30:2f:d1:3f:33:5e: 4c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FD:27:A8:8A:37:2C:53:70:18:AA:41:DE:0C:39:A4:7A:B3:B0:DA X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0P0nqIo3LFNwGKpB3gw5pHqzsNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.183.0/24 5.231.56.0/24 77.90.40.0/24 94.249.207.0/24 Signature Algorithm: sha256WithRSAEncryption 18:33:78:f0:14:64:64:19:e2:3a:5d:af:41:24:00:16:63:8d: f5:90:a4:f0:ac:8c:70:a5:73:33:c2:93:87:24:c6:2c:1a:91: 93:a5:87:18:b7:83:89:b1:9c:7c:5f:61:78:b2:7e:44:aa:23: e5:96:09:b7:ed:c4:08:36:6e:b5:0e:2e:0e:f4:09:60:78:b8: 00:df:9e:23:a1:92:d1:72:04:d1:c5:49:b4:24:5e:72:d6:fd: dd:79:f3:a7:18:23:52:d1:26:39:af:4b:29:2d:c0:9b:0b:df: 99:96:21:ba:e3:4e:8f:d7:e7:eb:61:6e:43:29:c2:5f:73:11: 02:e0:d8:ab:46:1a:93:cd:0e:00:fa:af:78:ae:95:00:a8:3b: e5:ac:91:26:c5:7e:19:13:52:e6:fe:60:18:1b:6d:ce:1b:72: 47:51:0c:14:a3:de:7c:0a:e5:7d:8c:d3:1d:7c:fb:ab:3c:3e: 63:95:d4:c6:cb:59:fc:5c:46:55:f1:8b:69:f6:4f:b3:e7:1c: 14:5f:8c:f9:87:ba:1f:fe:3f:db:3b:5c:33:8f:cc:47:46:c2: 88:88:a6:83:29:aa:76:9f:ab:58:c2:d5:c6:3c:e1:41:62:6d: b2:96:df:e0:00:ff:74:2b:3b:3e:19:7a:1a:4c:35:7f:a5:73: 4b:4b:35:48 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrDJ32n1PsAPHbOrG1j2mJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI3MDIzMjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGZkMjdhODhhMzcyYzUzNzAxOGFhNDFkZTBjMzlhNDdhYjNiMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe1cpkATkTz5ylO/ZlLCHG5QwbIV 8dfWwBZuNtNMC0NwYj+OMdyoi09lAYNS7Bi7dR5MvVHUibN56KH0hxNKQOrM40zN 4GXKvdDGB3WO2t/6zn5KyFi+TU/VuAuhss4jmYL5FFbYrzOtmQYWQr6EflsUaw7h Pu0hXRbAaSR2wbFThK2LtGDCNm/I3Dmuw+zGWv1kIfV+uCMi2lBSfxadxaMv6UTX /UkcSnC0AIuqwVkgD2WPMCg3slz1+AIO9cayzrQKOsnccQSr4QcfURohrKwPtE2E p0VljrnhTESilwhC/eapWqDrozmvXlAvLPaJczWdKMyAFQ8wL9E/M15M+wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFND9J6iKNyxTcBiqQd4MOaR6s7DaMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMFAwbnFJbzNMRk53R0twQjNndzVwSHF6c05vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABa+3AwQA Bec4AwQATVooAwQAXvnPMA0GCSqGSIb3DQEBCwUAA4IBAQAYM3jwFGRkGeI6Xa9B JAAWY431kKTwrIxwpXMzwpOHJMYsGpGTpYcYt4OJsZx8X2F4sn5EqiPllgm37cQI Nm61Di4O9AlgeLgA354joZLRcgTRxUm0JF5y1v3defOnGCNS0SY5r0spLcCbC9+Z liG6406P1+frYW5DKcJfcxEC4NirRhqTzQ4A+q94rpUAqDvlrJEmxX4ZE1Lm/mAY G23OG3JHUQwUo958CuV9jNMdfPurPD5jldTGy1n8XEZV8Ytp9k+z5xwUX4z5h7of /j/bO1wzj8xHRsKIiKaDKap2n6tYwtXGPOFBYm2ylt/gAP90Kzs+GXoaTDV/pXNL SzVI -----END CERTIFICATE-----Generated at Fri Dec 5 17:05:21 2025 by rpki-client