This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9vU0BtSqXDyYDYUZkNcyr8nQuP8.roa File: 9vU0BtSqXDyYDYUZkNcyr8nQuP8.roa (raw, json) Hash identifier: zDyvGoLOQ1S9uhRuamI0VcUMINggSLr5BCZR2mP+F8Q= Subject key identifier: F6:F5:34:06:D4:AA:5C:3C:98:0D:85:19:90:D7:32:AF:C9:D0:B8:FF Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AD2557C0C08B288FB4B8E06EE84E2ECCE Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9vU0BtSqXDyYDYUZkNcyr8nQuP8.roa Signing time: Sun 30 Nov 2025 01:16:48 +0000 ROA not before: Sun 30 Nov 2025 01:16:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215849 IP address blocks: 5.175.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 17:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d2:55:7c:0c:08:b2:88:fb:4b:8e:06:ee:84:e2:ec:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 30 01:16:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f6f53406d4aa5c3c980d851990d732afc9d0b8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6f:12:1b:79:b8:eb:bf:51:9b:75:79:fe:6e: c0:78:76:4c:4f:71:75:88:f7:51:2d:24:76:59:c1: 96:87:d3:a5:1f:f6:3f:86:70:2b:cb:b0:67:7f:9b: 2a:2d:55:f0:43:65:58:0a:db:79:e9:a5:d6:19:47: a6:47:da:66:4a:84:1a:11:0f:01:54:28:cf:93:46: c2:4c:ce:41:02:99:1a:1c:b9:65:7e:03:ce:48:74: bd:df:00:94:88:81:b5:6b:64:d2:5f:03:fa:c0:7c: f6:e0:b1:86:d8:c3:73:03:11:6a:72:5f:f6:a5:0b: 36:ab:86:1f:f1:2c:2d:b0:34:16:e3:4d:89:58:c7: 38:5f:c3:89:81:8e:96:b8:e5:b1:6c:8e:ba:98:01: b2:71:f0:a0:af:3f:2c:9a:1c:54:b9:63:c3:ba:0e: 40:6b:c2:92:09:9f:d4:a5:93:a2:08:c5:0b:df:8e: 6c:1d:f8:00:58:c6:69:2d:ce:44:0b:62:6d:98:e0: b0:18:39:51:fc:55:a9:21:22:1c:f6:eb:e7:61:fc: 78:e5:54:35:bc:54:5d:13:2c:37:6d:19:5b:72:60: ef:81:bb:5b:51:f2:bb:5e:62:b8:96:4e:85:1d:5c: d3:a5:46:83:45:54:a3:8f:b2:4b:6c:b3:07:40:61: e8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F5:34:06:D4:AA:5C:3C:98:0D:85:19:90:D7:32:AF:C9:D0:B8:FF X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9vU0BtSqXDyYDYUZkNcyr8nQuP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.177.0/24 Signature Algorithm: sha256WithRSAEncryption 42:db:9d:53:26:c6:03:00:d5:aa:28:a3:73:0f:e7:a2:75:15: ea:6f:8a:46:f4:4e:99:b3:ac:23:3d:50:82:a4:8b:b5:db:f3: 41:d1:6e:d5:b0:a9:5d:76:ba:7d:15:72:a8:d1:90:01:40:d9: 66:df:8b:5c:94:c6:ca:b6:8e:54:02:93:c3:ab:02:53:51:37: 11:83:21:d0:f0:10:ea:c6:3f:7d:64:b2:11:61:e2:43:0b:7f: 52:ea:81:ee:87:b0:84:97:b5:89:6f:38:f0:12:2d:e7:66:83: 56:1d:0d:ef:46:56:c9:50:d7:1c:8d:8c:ac:aa:dd:13:d0:19: cc:45:a1:2f:87:2b:cd:6e:4c:3a:c4:71:67:fd:e8:7d:95:7f: 9c:bf:e1:4d:93:7b:10:cb:3e:13:f9:04:42:c8:1a:af:83:21: 9c:da:ea:9e:bc:4e:c0:3c:8b:a8:29:cb:3a:76:b8:37:67:0e: 3f:8a:47:94:3e:54:5a:fa:e3:97:27:e8:ee:2c:ff:8e:bb:fa: f0:12:a2:4f:6b:b9:f9:2b:30:6d:7e:b2:1a:16:8e:36:7d:2e: 8c:3c:73:bb:c8:f7:f5:ce:8b:74:a9:a1:ed:e3:7e:e6:9d:5a: a7:9c:6a:71:f0:3f:77:00:22:2d:89:36:3d:fb:36:ab:00:4a: de:e0:30:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrSVXwMCLKI+0uOBu6E4uzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTMwMDExNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmY1MzQwNmQ0YWE1YzNjOTgwZDg1MTk5MGQ3MzJhZmM5ZDBiOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG8SG3m4679Rm3V5/m7AeHZMT3F1 iPdRLSR2WcGWh9OlH/Y/hnAry7Bnf5sqLVXwQ2VYCtt56aXWGUemR9pmSoQaEQ8B VCjPk0bCTM5BApkaHLllfgPOSHS93wCUiIG1a2TSXwP6wHz24LGG2MNzAxFqcl/2 pQs2q4Yf8SwtsDQW402JWMc4X8OJgY6WuOWxbI66mAGycfCgrz8smhxUuWPDug5A a8KSCZ/UpZOiCMUL345sHfgAWMZpLc5EC2JtmOCwGDlR/FWpISIc9uvnYfx45VQ1 vFRdEyw3bRlbcmDvgbtbUfK7XmK4lk6FHVzTpUaDRVSjj7JLbLMHQGHoEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPb1NAbUqlw8mA2FGZDXMq/J0Lj/MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvOXZVMEJ0U3FYRHlZRFlVWmtOY3lyOG5RdVA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+xMA0G CSqGSIb3DQEBCwUAA4IBAQBC251TJsYDANWqKKNzD+eidRXqb4pG9E6Zs6wjPVCC pIu12/NB0W7VsKlddrp9FXKo0ZABQNlm34tclMbKto5UApPDqwJTUTcRgyHQ8BDq xj99ZLIRYeJDC39S6oHuh7CEl7WJbzjwEi3nZoNWHQ3vRlbJUNccjYysqt0T0BnM RaEvhyvNbkw6xHFn/eh9lX+cv+FNk3sQyz4T+QRCyBqvgyGc2uqevE7APIuoKcs6 drg3Zw4/ikeUPlRa+uOXJ+juLP+Ou/rwEqJPa7n5KzBtfrIaFo42fS6MPHO7yPf1 zot0qaHt437mnVqnnGpx8D93ACItiTY9+zarAEre4DC8 -----END CERTIFICATE-----Generated at Tue Dec 2 00:28:44 2025 by rpki-client