This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3hEmPWpxlwQ0K2Mukyyebz59jVE.roa File: 3hEmPWpxlwQ0K2Mukyyebz59jVE.roa (raw, json) Hash identifier: pYA1gKVOqwnhiB8AQiV2HMXabR4docBG7IT+bT23wnY= Subject key identifier: DE:11:26:3D:6A:71:97:04:34:2B:63:2E:93:2C:9E:6F:3E:7D:8D:51 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A6F176F0F120FEE93127D8C35C73A11F9 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3hEmPWpxlwQ0K2Mukyyebz59jVE.roa Signing time: Mon 10 Nov 2025 18:46:37 +0000 ROA not before: Mon 10 Nov 2025 18:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58087 IP address blocks: 5.231.116.0/24 maxlen: 24 89.144.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6f:17:6f:0f:12:0f:ee:93:12:7d:8c:35:c7:3a:11:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 10 18:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de11263d6a719704342b632e932c9e6f3e7d8d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:c7:a9:66:d4:fc:ca:d0:8c:f1:44:72:0c: 92:ab:27:a8:17:b1:4f:87:b2:2d:1c:11:f2:42:e0: 1d:45:be:11:60:1e:44:fb:0d:da:ed:28:5c:da:75: 21:e3:a0:eb:11:20:58:4d:be:be:1f:b4:b2:b2:b2: d6:d5:0d:66:95:0b:13:7f:b3:6a:61:4d:84:55:5f: 3e:ce:d6:d5:60:92:14:ec:96:1f:a2:28:9c:02:23: 3d:63:e4:65:74:c2:68:40:d0:02:9e:63:30:1b:40: 59:00:84:39:10:e5:a1:f6:0b:47:62:6e:78:1b:43: 1e:45:09:86:d2:99:6e:b2:6f:4e:6f:d8:4e:40:05: 58:4b:0a:38:af:54:b0:10:59:7c:96:ce:d4:9b:9e: 7d:18:c4:0f:4d:a0:a8:22:d4:0b:b9:05:ae:72:ac: 4a:16:0d:25:8b:99:98:47:06:a0:cb:b5:36:1d:18: 2e:31:06:b9:6c:1e:cf:a7:11:06:be:79:49:ca:f9: 53:58:d7:a0:dc:91:80:2d:9b:70:d2:47:99:9a:34: 8c:8f:50:4b:49:31:8b:5f:da:94:1f:1d:9d:98:50: 92:4b:11:e4:ce:54:fc:10:40:82:b8:7c:0b:d0:23: 91:3e:9b:12:f6:f9:93:c6:bc:dd:69:32:50:91:d7: 65:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:11:26:3D:6A:71:97:04:34:2B:63:2E:93:2C:9E:6F:3E:7D:8D:51 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3hEmPWpxlwQ0K2Mukyyebz59jVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.116.0/24 89.144.37.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:05:b1:a5:3b:95:bb:37:e9:a1:17:e0:ca:ec:64:e4:be:35: a4:02:27:02:c0:de:d5:45:ce:3d:a9:e6:98:d3:54:dd:af:f8: 93:bd:8b:09:32:da:be:d0:de:ec:e0:74:c8:07:b8:b7:7c:83: 7f:26:eb:6a:cd:72:4b:cd:0e:af:fe:07:6d:1a:fa:c0:6b:80: 39:24:66:2d:ba:c9:20:fd:ac:be:83:27:0c:e2:cc:37:96:bc: 99:63:51:ae:a5:e6:e4:c0:79:19:40:c4:a3:94:ac:13:37:8a: 7c:b9:7c:f4:57:32:e6:b5:8b:22:fa:f7:72:dc:fe:78:2a:7a: 20:38:ad:a0:cd:7b:de:dd:65:66:50:13:06:15:3b:29:f1:1a: 3c:3d:a9:f7:ee:c3:0b:3b:86:7d:8e:d5:70:59:2c:5c:84:5a: bf:8d:b4:26:cb:53:7e:b6:c8:a2:b2:dd:60:1d:19:aa:67:fe: ff:3c:ef:2d:50:6c:0c:08:ef:8c:06:d7:84:48:be:77:c9:7c: 0b:d2:fb:14:53:d0:d4:f3:a7:7b:cf:2b:c3:97:f3:6a:60:c5: a7:8e:e0:f5:1b:ba:b4:5e:63:ec:8f:79:bc:1b:7d:49:5f:41: 65:b4:9a:9d:0b:31:b9:88:22:29:3b:0c:d8:b1:fc:72:db:fe: b9:e4:fc:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpvF28PEg/ukxJ9jDXHOhH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTEwMTg0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTExMjYzZDZhNzE5NzA0MzQyYjYzMmU5MzJjOWU2ZjNlN2Q4ZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsvHqWbU/MrQjPFEcgySqyeoF7FP h7ItHBHyQuAdRb4RYB5E+w3a7Shc2nUh46DrESBYTb6+H7SysrLW1Q1mlQsTf7Nq YU2EVV8+ztbVYJIU7JYfoiicAiM9Y+RldMJoQNACnmMwG0BZAIQ5EOWh9gtHYm54 G0MeRQmG0plusm9Ob9hOQAVYSwo4r1SwEFl8ls7Um559GMQPTaCoItQLuQWucqxK Fg0li5mYRwagy7U2HRguMQa5bB7PpxEGvnlJyvlTWNeg3JGALZtw0keZmjSMj1BL STGLX9qUHx2dmFCSSxHkzlT8EECCuHwL0CORPpsS9vmTxrzdaTJQkddlHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN4RJj1qcZcENCtjLpMsnm8+fY1RMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvM2hFbVBXcHhsd1EwSzJNdWt5eWViejU5alZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABed0AwQA WZAlMA0GCSqGSIb3DQEBCwUAA4IBAQBsBbGlO5W7N+mhF+DK7GTkvjWkAicCwN7V Rc49qeaY01Tdr/iTvYsJMtq+0N7s4HTIB7i3fIN/JutqzXJLzQ6v/gdtGvrAa4A5 JGYtuskg/ay+gycM4sw3lryZY1GupebkwHkZQMSjlKwTN4p8uXz0VzLmtYsi+vdy 3P54KnogOK2gzXve3WVmUBMGFTsp8Ro8Pan37sMLO4Z9jtVwWSxchFq/jbQmy1N+ tsiist1gHRmqZ/7/PO8tUGwMCO+MBteESL53yXwL0vsUU9DU86d7zyvDl/NqYMWn juD1G7q0XmPsj3m8G31JX0FltJqdCzG5iCIpOwzYsfxy2/655Py4 -----END CERTIFICATE-----Generated at Fri Dec 5 17:05:20 2025 by rpki-client