This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CKePYt8xZUex7-aZvfO3WNrnM8g.roa File: CKePYt8xZUex7-aZvfO3WNrnM8g.roa (raw, json) Hash identifier: K8MAu675yi5jrsCgpR4Ap54fEUyFgXqH1n+GoeX2590= Subject key identifier: 08:A7:8F:62:DF:31:65:47:B1:EF:E6:99:BD:F3:B7:58:DA:E7:33:C8 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019ABB29477AE66BC54477B6ED2BF28FAAFF Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CKePYt8xZUex7-aZvfO3WNrnM8g.roa Signing time: Tue 25 Nov 2025 13:17:15 +0000 ROA not before: Tue 25 Nov 2025 13:17:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206479 IP address blocks: 5.175.189.0/24 maxlen: 24 5.175.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:29:47:7a:e6:6b:c5:44:77:b6:ed:2b:f2:8f:aa:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 25 13:17:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=08a78f62df316547b1efe699bdf3b758dae733c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a4:bc:02:54:c3:df:7a:8c:af:71:8e:09:78: 5b:ed:33:91:41:89:4e:49:b0:91:49:f1:ab:51:15: f8:dc:c9:46:32:da:6f:70:09:34:1c:1f:e2:c1:16: 5f:f0:e6:34:11:c9:28:f5:2b:eb:89:38:2f:9c:14: 31:da:49:10:c3:d2:4f:87:e7:b3:b0:f5:40:5f:40: 91:bd:ee:b9:10:04:f8:5f:ad:98:ee:5c:29:6d:62: e8:80:02:7e:cd:f3:5d:68:21:dc:43:c3:3b:9d:7a: 73:ba:ee:d9:17:c1:f8:08:f0:ca:b1:44:4a:26:fa: 56:80:03:cf:b7:4b:bf:14:d9:4a:5e:e2:3f:42:79: 26:43:a9:34:30:c2:00:f1:76:dc:39:c7:f5:b3:33: 5c:5c:5f:8d:af:8d:00:9e:35:92:7d:6a:23:78:60: e3:8e:82:19:5e:72:c2:d4:6f:03:e0:45:5f:84:24: 41:d7:a4:7e:4a:ee:3d:2b:a5:ec:e9:65:37:58:28: 1f:c4:09:2b:6c:c0:1a:88:6f:1b:2f:c5:07:54:77: 25:e1:be:77:59:44:b4:a4:23:16:17:6d:0d:25:b4: cc:e6:2b:bc:97:8a:04:c7:1f:b7:0d:6d:5e:ab:5b: 42:a1:57:e1:77:ee:3f:29:23:2c:d6:ba:25:ad:bc: e3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A7:8F:62:DF:31:65:47:B1:EF:E6:99:BD:F3:B7:58:DA:E7:33:C8 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CKePYt8xZUex7-aZvfO3WNrnM8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.189.0/24 5.175.234.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:03:92:f3:01:ed:ae:16:85:d5:26:34:dc:a3:5c:62:1d:3a: e8:10:ba:8b:d1:c5:5e:9b:83:06:6f:ac:89:df:ca:1b:ca:4a: 12:82:27:eb:a6:b3:12:a5:e0:42:51:32:25:84:1a:41:ce:ef: bd:46:1d:63:d9:42:9f:cc:16:d4:4b:62:ac:60:9d:be:b9:55: 45:fb:72:a3:c8:7c:33:24:4c:96:10:23:f1:51:88:1d:28:1e: 0e:91:cd:fc:10:89:ae:95:6b:1f:92:51:6a:ed:98:ba:58:98: 9b:b7:50:65:31:7a:c0:ca:48:a3:f9:d9:54:4e:ab:d2:72:9f: 75:2f:d5:45:eb:90:2c:05:dd:f4:06:12:71:b4:bc:9c:88:fc: 7d:d8:49:7b:1d:1a:d4:6e:9c:37:1a:49:62:b4:cb:49:0e:e0: 76:e7:6b:b1:2b:46:ae:ff:14:ae:65:64:af:bd:a2:36:8f:c7: d6:b4:9f:22:ec:df:fd:79:8a:45:3b:de:76:46:60:6a:af:5e: ba:8e:fa:4f:7d:22:90:83:56:1c:b6:0c:c0:08:77:13:99:29: be:d5:a6:68:24:32:a3:41:20:1c:0d:d5:a9:86:c9:b1:cf:77: 1b:0d:eb:5f:3d:ba:76:e6:2c:2d:60:c4:9e:31:3c:6b:20:9f: 6c:68:31:68 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq7KUd65mvFRHe27Svyj6r/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI1MTMxNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGE3OGY2MmRmMzE2NTQ3YjFlZmU2OTliZGYzYjc1OGRhZTczM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aS8AlTD33qMr3GOCXhb7TORQYlO SbCRSfGrURX43MlGMtpvcAk0HB/iwRZf8OY0Ecko9SvriTgvnBQx2kkQw9JPh+ez sPVAX0CRve65EAT4X62Y7lwpbWLogAJ+zfNdaCHcQ8M7nXpzuu7ZF8H4CPDKsURK JvpWgAPPt0u/FNlKXuI/QnkmQ6k0MMIA8XbcOcf1szNcXF+Nr40AnjWSfWojeGDj joIZXnLC1G8D4EVfhCRB16R+Su49K6Xs6WU3WCgfxAkrbMAaiG8bL8UHVHcl4b53 WUS0pCMWF20NJbTM5iu8l4oExx+3DW1eq1tCoVfhd+4/KSMs1rolrbzjvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAinj2LfMWVHse/mmb3zt1ja5zPIMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvQ0tlUFl0OHhaVWV4Ny1hWnZmTzNXTnJuTThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa+9AwQA Ba/qMA0GCSqGSIb3DQEBCwUAA4IBAQAaA5LzAe2uFoXVJjTco1xiHTroELqL0cVe m4MGb6yJ38obykoSgifrprMSpeBCUTIlhBpBzu+9Rh1j2UKfzBbUS2KsYJ2+uVVF +3KjyHwzJEyWECPxUYgdKB4Okc38EImulWsfklFq7Zi6WJibt1BlMXrAykij+dlU TqvScp91L9VF65AsBd30BhJxtLyciPx92El7HRrUbpw3GklitMtJDuB252uxK0au /xSuZWSvvaI2j8fWtJ8i7N/9eYpFO952RmBqr166jvpPfSKQg1YctgzACHcTmSm+ 1aZoJDKjQSAcDdWphsmxz3cbDetfPbp25iwtYMSeMTxrIJ9saDFo -----END CERTIFICATE-----Generated at Fri Dec 5 17:03:55 2025 by rpki-client