This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/14aLVsyEsTHfi0w0lrmDK1Ce0bU.roa File: 14aLVsyEsTHfi0w0lrmDK1Ce0bU.roa (raw, json) Hash identifier: tAnIFaALbXIQEN1AtxbZT4/a23L+keqNXEoeF0vuDkQ= Subject key identifier: D7:86:8B:56:CC:84:B1:31:DF:8B:4C:34:96:B9:83:2B:50:9E:D1:B5 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B10F5006306D85DB0334134C1D62C39B2 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/14aLVsyEsTHfi0w0lrmDK1Ce0bU.roa Signing time: Fri 12 Dec 2025 05:07:30 +0000 ROA not before: Fri 12 Dec 2025 05:07:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209874 IP address blocks: 5.83.150.0/24 maxlen: 24 5.175.179.0/24 maxlen: 24 5.230.184.0/24 maxlen: 24 5.231.25.0/24 maxlen: 24 5.231.82.0/24 maxlen: 24 5.231.96.0/24 maxlen: 24 5.231.244.0/24 maxlen: 24 5.231.247.0/24 maxlen: 24 77.90.39.0/24 maxlen: 24 85.118.165.0/24 maxlen: 24 87.239.129.0/24 maxlen: 24 89.106.77.0/24 maxlen: 24 94.103.167.0/24 maxlen: 24 94.249.150.0/24 maxlen: 24 94.249.153.0/24 maxlen: 24 94.249.197.0/24 maxlen: 24 94.249.201.0/24 maxlen: 24 94.249.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:f5:00:63:06:d8:5d:b0:33:41:34:c1:d6:2c:39:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 12 05:07:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d7868b56cc84b131df8b4c3496b9832b509ed1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:11:99:0a:59:7d:98:c7:9a:24:a1:0f:84:4a: 8a:33:25:94:d8:b0:06:75:f3:3a:d9:eb:d0:db:63: 05:9d:67:1f:1f:00:cc:1e:08:b1:cc:2a:75:31:07: d1:a0:1e:be:40:68:b7:80:98:c6:e8:63:10:e5:de: c2:22:ca:90:35:94:cf:58:cd:00:81:b4:1c:91:4a: 89:52:c2:a8:b6:31:ba:82:7d:58:c1:e0:a0:7f:75: da:86:27:54:56:28:e7:87:cc:06:4a:67:9e:61:c5: 78:5a:77:d7:15:50:23:c7:e4:8f:5a:58:16:fa:cb: 52:7a:65:05:31:5c:1c:44:be:90:0f:14:26:78:37: 67:22:fe:b6:34:22:94:33:fc:c8:b1:1e:ef:73:b0: 66:2d:15:64:c0:f0:35:15:e7:2a:04:51:8d:de:62: 3d:dc:16:2f:fa:f3:2c:95:2d:de:60:bc:3b:a0:5f: ab:fc:be:e2:43:e5:de:62:02:70:84:84:65:7e:80: 15:d2:e1:1f:84:b8:32:81:c9:dc:6b:20:2d:d9:b7: 86:fc:f5:4d:e3:75:d1:b7:d0:e1:b5:44:f4:30:2e: b1:df:44:80:b0:7f:cb:fb:1e:df:f5:cc:dd:a2:ad: ad:19:07:7b:fb:07:94:25:a2:15:dc:23:00:f1:45: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:86:8B:56:CC:84:B1:31:DF:8B:4C:34:96:B9:83:2B:50:9E:D1:B5 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/14aLVsyEsTHfi0w0lrmDK1Ce0bU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.150.0/24 5.175.179.0/24 5.230.184.0/24 5.231.25.0/24 5.231.82.0/24 5.231.96.0/24 5.231.244.0/24 5.231.247.0/24 77.90.39.0/24 85.118.165.0/24 87.239.129.0/24 89.106.77.0/24 94.103.167.0/24 94.249.150.0/24 94.249.153.0/24 94.249.197.0/24 94.249.201.0/24 94.249.247.0/24 Signature Algorithm: sha256WithRSAEncryption c0:ce:c3:a5:30:08:d6:33:93:48:8e:58:4c:7b:94:61:3d:f2: 79:b2:62:6c:9f:3f:f6:ce:89:ef:10:13:8d:b9:12:fc:17:5e: e7:45:a8:90:53:e0:5f:da:93:81:b1:c3:bd:2a:1f:be:2d:6b: 51:7a:72:4f:06:d2:73:d4:72:75:fa:35:dc:6a:b8:4a:34:ce: c2:33:40:19:95:35:e0:89:17:e6:8c:a7:ca:e7:87:0f:d5:21: 6d:35:38:02:cc:38:98:29:b5:c6:55:c4:45:c6:d9:6e:ae:b7: bb:82:fe:31:c7:bb:f9:ce:87:86:5a:50:d2:48:e8:3f:71:40: d4:c8:a8:01:3b:e9:97:8f:07:fb:96:3e:92:e8:7a:2c:d1:60: 5a:1b:97:ec:4b:a9:26:85:87:df:06:69:7b:8d:a2:d8:63:c1: 2d:e6:0d:7b:59:99:41:f5:3c:b8:03:91:ed:bc:7a:e0:77:6e: ff:6f:f7:02:31:03:49:96:e4:f7:08:a4:aa:ed:a3:ef:32:f3: 8d:44:42:79:16:52:d6:ea:8e:2b:61:6c:59:e1:58:44:c3:57: 69:89:a9:cc:2b:05:75:7b:ce:4a:b5:c9:47:bd:7d:a5:e5:19: 24:25:0e:0c:48:5d:b6:53:79:34:3f:d4:42:4b:e2:3d:51:09: 9f:ba:81:3c -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZsQ9QBjBthdsDNBNMHWLDmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjEyMDUwNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzg2OGI1NmNjODRiMTMxZGY4YjRjMzQ5NmI5ODMyYjUwOWVkMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhGZCll9mMeaJKEPhEqKMyWU2LAG dfM62evQ22MFnWcfHwDMHgixzCp1MQfRoB6+QGi3gJjG6GMQ5d7CIsqQNZTPWM0A gbQckUqJUsKotjG6gn1YweCgf3XahidUVijnh8wGSmeeYcV4WnfXFVAjx+SPWlgW +stSemUFMVwcRL6QDxQmeDdnIv62NCKUM/zIsR7vc7BmLRVkwPA1FecqBFGN3mI9 3BYv+vMslS3eYLw7oF+r/L7iQ+XeYgJwhIRlfoAV0uEfhLgygcncayAt2beG/PVN 43XRt9DhtUT0MC6x30SAsH/L+x7f9czdoq2tGQd7+weUJaIV3CMA8UWnSwIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFNeGi1bMhLEx34tMNJa5gytQntG1MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMTRhTFZzeUVzVEhmaTB3MGxybURLMUNlMGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAAVTlgME AAWvswMEAAXmuAMEAAXnGQMEAAXnUgMEAAXnYAMEAAXn9AMEAAXn9wMEAE1aJwME AFV2pQMEAFfvgQMEAFlqTQMEAF5npwMEAF75lgMEAF75mQMEAF75xQMEAF75yQME AF759zANBgkqhkiG9w0BAQsFAAOCAQEAwM7DpTAI1jOTSI5YTHuUYT3yebJibJ8/ 9s6J7xATjbkS/Bde50WokFPgX9qTgbHDvSofvi1rUXpyTwbSc9Rydfo13Gq4SjTO wjNAGZU14IkX5oynyueHD9UhbTU4Asw4mCm1xlXERcbZbq63u4L+Mce7+c6HhlpQ 0kjoP3FA1MioATvpl48H+5Y+kuh6LNFgWhuX7EupJoWH3wZpe42i2GPBLeYNe1mZ QfU8uAOR7bx64Hdu/2/3AjEDSZbk9wikqu2j7zLzjURCeRZS1uqOK2FsWeFYRMNX aYmpzCsFdXvOSrXJR719peUZJCUODEhdtlN5ND/UQkviPVEJn7qBPA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:21:43 2025 by rpki-client