This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/46xMy2FyLzrdlWC0fM580Daa2YY.roa File: 46xMy2FyLzrdlWC0fM580Daa2YY.roa (raw, json) Hash identifier: uXtgLVepSIenhwh1kma+IcXvfhhYiW/icRe98o0oK8s= Subject key identifier: E3:AC:4C:CB:61:72:2F:3A:DD:95:60:B4:7C:CE:7C:D0:36:9A:D9:86 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A6FE6571D37131C77BA27E4E6BB17F380 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/46xMy2FyLzrdlWC0fM580Daa2YY.roa Signing time: Mon 10 Nov 2025 22:32:37 +0000 ROA not before: Mon 10 Nov 2025 22:32:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200993 IP address blocks: 5.175.134.0/24 maxlen: 24 89.144.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6f:e6:57:1d:37:13:1c:77:ba:27:e4:e6:bb:17:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 10 22:32:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e3ac4ccb61722f3add9560b47cce7cd0369ad986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:97:cf:45:8c:c7:55:50:65:68:58:af:7d: 0b:fc:aa:e0:50:da:43:e9:e1:fb:43:fb:9f:8c:f6: 47:bf:48:57:4a:fd:b1:e6:db:96:32:38:10:3a:3e: 24:45:12:cb:8f:40:ba:60:e9:b3:8a:a4:49:b8:62: 4e:8a:cb:e2:ab:aa:f9:b0:c0:4f:97:c7:41:de:bb: 2e:77:9c:49:1a:fd:47:d0:7d:2b:25:62:6b:f6:b6: aa:75:25:b7:40:fc:72:ae:5f:75:f4:85:76:69:7f: 6a:42:17:71:02:5f:3c:2a:7f:3f:9d:5c:91:26:b0: 09:4c:e5:58:f4:db:09:3e:77:b1:7a:2a:9b:f2:3f: 10:e2:e8:7b:53:9e:9e:f4:10:e7:5c:dc:c2:69:3e: cd:33:48:74:ec:62:72:31:0b:cf:ae:e1:df:ff:b3: 71:c6:5e:cc:4b:a6:95:19:24:9c:d0:e1:2a:c8:e3: ec:8c:70:3e:84:97:17:39:60:d6:0b:33:85:da:81: 0b:40:9a:30:d2:99:92:98:f6:b3:00:cf:5f:62:c0: d9:3d:65:0c:06:28:f6:3d:ef:ed:a2:65:38:73:98: 8c:e0:81:0b:d7:58:23:be:04:cb:1f:c2:eb:3b:96: 7f:6c:5a:61:d3:98:0d:79:f3:c2:d0:ba:c3:83:ee: 17:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AC:4C:CB:61:72:2F:3A:DD:95:60:B4:7C:CE:7C:D0:36:9A:D9:86 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/46xMy2FyLzrdlWC0fM580Daa2YY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.134.0/24 89.144.22.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:0b:d7:23:a5:b1:c6:d1:5a:03:db:50:ea:e6:8f:d6:60:59: 30:a5:b5:bd:22:e8:b9:f4:b4:f0:f2:55:e9:f0:0a:1d:86:f5: 76:5c:02:7f:1b:68:6e:fb:c6:af:f5:41:15:98:34:69:d6:9f: 11:1d:e4:38:6a:90:a4:dc:25:3e:95:b4:a8:ef:9c:5f:2a:99: 6d:e3:5b:a5:6a:f6:d0:c2:f6:39:82:f1:df:74:a0:5b:fb:0a: 54:c1:53:13:93:4e:96:a3:12:d2:02:ba:df:3d:26:ce:a8:79: 79:92:a9:f6:ac:af:fa:bb:4a:c4:cf:d4:db:49:34:a2:2e:36: bf:a7:2c:b6:c2:1e:1e:40:d5:a0:64:03:83:41:56:85:9f:64: 7d:7d:40:68:40:61:9f:e1:4e:0b:21:49:fb:82:a0:e6:de:f2: 69:ef:20:8b:01:fe:d4:1f:0e:85:17:4e:44:76:51:a2:94:0e: 42:e0:d9:79:8a:89:b7:b0:51:f5:fa:fd:32:fd:52:ac:4a:80: fd:97:f6:07:d1:54:14:cf:56:57:55:20:98:fa:cf:85:2b:59: 0c:29:78:a8:33:24:11:63:b9:ac:fc:0b:a1:4a:a9:3b:e6:cf: 2b:40:f3:39:25:30:95:a0:bb:1a:dd:63:6b:fe:c4:22:46:f2: a6:aa:4b:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpv5lcdNxMcd7on5Oa7F/OAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTEwMjIzMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2FjNGNjYjYxNzIyZjNhZGQ5NTYwYjQ3Y2NlN2NkMDM2OWFkOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAaXz0WMx1VQZWhYr30L/KrgUNpD 6eH7Q/ufjPZHv0hXSv2x5tuWMjgQOj4kRRLLj0C6YOmziqRJuGJOisviq6r5sMBP l8dB3rsud5xJGv1H0H0rJWJr9raqdSW3QPxyrl919IV2aX9qQhdxAl88Kn8/nVyR JrAJTOVY9NsJPnexeiqb8j8Q4uh7U56e9BDnXNzCaT7NM0h07GJyMQvPruHf/7Nx xl7MS6aVGSSc0OEqyOPsjHA+hJcXOWDWCzOF2oELQJow0pmSmPazAM9fYsDZPWUM Bij2Pe/tomU4c5iM4IEL11gjvgTLH8LrO5Z/bFph05gNefPC0LrDg+4XfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOOsTMthci863ZVgtHzOfNA2mtmGMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNDZ4TXkyRnlMenJkbFdDMGZNNTgwRGFhMllZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa+GAwQA WZAWMA0GCSqGSIb3DQEBCwUAA4IBAQCPC9cjpbHG0VoD21Dq5o/WYFkwpbW9Iui5 9LTw8lXp8AodhvV2XAJ/G2hu+8av9UEVmDRp1p8RHeQ4apCk3CU+lbSo75xfKplt 41ulavbQwvY5gvHfdKBb+wpUwVMTk06WoxLSArrfPSbOqHl5kqn2rK/6u0rEz9Tb STSiLja/pyy2wh4eQNWgZAODQVaFn2R9fUBoQGGf4U4LIUn7gqDm3vJp7yCLAf7U Hw6FF05EdlGilA5C4Nl5iom3sFH1+v0y/VKsSoD9l/YH0VQUz1ZXVSCY+s+FK1kM KXioMyQRY7ms/AuhSqk75s8rQPM5JTCVoLsa3WNr/sQiRvKmqkt6 -----END CERTIFICATE-----Generated at Fri Dec 5 17:07:20 2025 by rpki-client