This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-oQ3-czBzr7QNxLTf581xm-Iz8E.roa File: 1-oQ3-czBzr7QNxLTf581xm-Iz8E.roa (raw, json) Hash identifier: sKRkjxvyaTET+MRWpY99qZ+Fp6APTY0LT1N+iAXg+pk= Subject key identifier: FA:84:37:F9:CC:C1:CE:BE:D0:37:12:D3:7F:9F:35:C6:6F:88:CF:C1 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019ACBD422BDD46280A6D31DDB22C0631962 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-oQ3-czBzr7QNxLTf581xm-Iz8E.roa Signing time: Fri 28 Nov 2025 18:57:48 +0000 ROA not before: Fri 28 Nov 2025 18:57:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216084 IP address blocks: 5.83.155.0/24 maxlen: 24 77.90.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:d4:22:bd:d4:62:80:a6:d3:1d:db:22:c0:63:19:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 28 18:57:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa8437f9ccc1cebed03712d37f9f35c66f88cfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:02:2e:c5:41:6a:88:28:2e:4f:9e:e5:f2: e3:83:a7:c8:3f:0e:ab:1d:c5:3e:5c:24:f9:20:da: 06:30:ff:f0:36:b3:56:4d:74:f8:0e:5e:7b:b6:e9: 94:61:0e:f4:bf:3b:1f:65:2b:75:c0:5b:09:ec:bd: 00:90:5c:99:18:54:a6:cf:b7:18:8b:80:12:87:65: 9c:64:ff:08:da:a2:c4:04:ea:3b:f0:59:0f:36:69: 00:56:b7:a5:5a:da:66:57:9d:7d:1f:62:6e:a9:dc: a6:7c:6e:52:16:d0:20:50:6c:44:41:2f:00:2a:ae: 89:c0:16:bf:a6:95:58:d0:9e:ca:c2:a3:82:25:9d: a3:56:18:55:74:2a:d5:cb:63:65:51:0f:33:d4:1e: 79:9f:c7:a9:96:a0:62:79:4d:79:ee:c7:e5:18:ca: dc:8a:45:f0:88:85:60:93:c7:b8:9f:ff:35:48:2e: 8d:14:96:e4:23:63:b5:37:62:96:a6:33:b9:2c:7e: 87:0e:a0:57:0f:e4:95:ea:ce:35:68:53:e5:1d:a3: 5b:ac:8f:7f:83:c2:31:df:3b:b0:36:0f:24:36:54: 98:14:d7:77:91:1d:3f:fa:66:91:76:70:5d:b3:4f: cb:6b:2a:44:95:00:69:db:9c:9f:e7:6f:c4:6d:70: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:84:37:F9:CC:C1:CE:BE:D0:37:12:D3:7F:9F:35:C6:6F:88:CF:C1 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-oQ3-czBzr7QNxLTf581xm-Iz8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.155.0/24 77.90.62.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:81:da:ab:22:df:76:55:e6:7c:cc:69:59:62:3e:b0:a6:ff: a7:e0:f7:68:eb:96:e2:6d:d9:22:ef:26:23:56:2a:c8:d4:31: bb:b5:90:ef:f5:5b:ec:56:26:72:1d:18:85:49:89:01:55:8c: be:f5:07:c2:cc:88:6a:aa:ca:f9:33:c3:ff:81:18:ec:bc:c9: 06:1d:60:6f:00:db:fe:3d:f6:78:cf:55:10:a1:db:bd:90:57: ec:8b:7f:da:ec:67:5b:2f:05:d2:6b:5c:5d:fc:86:b7:33:5e: 5c:a2:c5:71:63:7c:00:4d:8e:2f:bb:a5:24:a3:c6:9f:52:41: aa:1a:93:4e:5d:c0:d3:f9:bd:78:aa:88:4d:fc:57:d3:bf:e2: af:7a:f0:27:75:5f:1f:af:ac:b1:1d:e8:7a:d8:9b:52:f8:1d: 5c:ad:e7:e5:3a:ef:53:ea:05:48:34:ac:40:74:2c:9a:d6:6d: 40:0d:85:4b:f2:7a:d4:a7:58:35:88:4c:4a:91:f9:c6:bb:9f: 74:8b:6c:6b:a3:2d:f6:f2:49:a5:30:f7:be:3c:5c:d2:b7:2f: 25:0d:4e:ee:66:b6:a6:b0:af:16:06:04:75:ae:df:8c:86:4c: 4f:1b:1e:2b:52:32:db:75:64:a5:f5:a1:25:c7:94:d7:65:76: eb:cc:cc:ac -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZrL1CK91GKAptMd2yLAYxliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI4MTg1NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTg0MzdmOWNjYzFjZWJlZDAzNzEyZDM3ZjlmMzVjNjZmODhjZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPECLsVBaogoLk+e5fLjg6fIPw6r HcU+XCT5INoGMP/wNrNWTXT4Dl57tumUYQ70vzsfZSt1wFsJ7L0AkFyZGFSmz7cY i4ASh2WcZP8I2qLEBOo78FkPNmkAVrelWtpmV519H2JuqdymfG5SFtAgUGxEQS8A Kq6JwBa/ppVY0J7KwqOCJZ2jVhhVdCrVy2NlUQ8z1B55n8eplqBieU157sflGMrc ikXwiIVgk8e4n/81SC6NFJbkI2O1N2KWpjO5LH6HDqBXD+SV6s41aFPlHaNbrI9/ g8Ix3zuwNg8kNlSYFNd3kR0/+maRdnBds0/LaypElQBp25yf52/EbXChZQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPqEN/nMwc6+0DcS03+fNcZviM/BMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMS1vUTMtY3pCenI3UU54TFRmNTgxeG0tSXo4RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTAvOTY1ODM3LTUyY2ItNDZiNC1hZWRiLWUxYmQ4OGQzZmQw Ny8xL1BtQ1hhWWFHNFZWZlVmYklnN3hhV0ZTYkkySS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAVTmwME AE1aPjANBgkqhkiG9w0BAQsFAAOCAQEAToHaqyLfdlXmfMxpWWI+sKb/p+D3aOuW 4m3ZIu8mI1YqyNQxu7WQ7/Vb7FYmch0YhUmJAVWMvvUHwsyIaqrK+TPD/4EY7LzJ Bh1gbwDb/j32eM9VEKHbvZBX7It/2uxnWy8F0mtcXfyGtzNeXKLFcWN8AE2OL7ul JKPGn1JBqhqTTl3A0/m9eKqITfxX07/ir3rwJ3VfH6+ssR3oetibUvgdXK3n5Trv U+oFSDSsQHQsmtZtQA2FS/J61KdYNYhMSpH5xrufdItsa6Mt9vJJpTD3vjxc0rcv JQ1O7ma2prCvFgYEda7fjIZMTxseK1Iy23VkpfWhJceU12V268zMrA== -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:56 2025 by rpki-client