This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NlPR1jIZQkh8YIpiOW4Uyrt6-8I.roa File: NlPR1jIZQkh8YIpiOW4Uyrt6-8I.roa (raw, json) Hash identifier: P3QJ1w/jEA69mswzJGiLfpREuhLkT3w1uFBwIWiZZpk= Subject key identifier: 36:53:D1:D6:32:19:42:48:7C:60:8A:62:39:6E:14:CA:BB:7A:FB:C2 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AB44424539B0B0B745DDC0109F1C91E06 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NlPR1jIZQkh8YIpiOW4Uyrt6-8I.roa Signing time: Mon 24 Nov 2025 05:09:15 +0000 ROA not before: Mon 24 Nov 2025 05:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47263 IP address blocks: 5.231.20.0/23 maxlen: 23 5.231.20.0/24 maxlen: 24 5.231.21.0/24 maxlen: 24 5.231.47.0/24 maxlen: 24 77.90.37.0/24 maxlen: 24 89.144.31.0/24 maxlen: 24 94.103.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:44:24:53:9b:0b:0b:74:5d:dc:01:09:f1:c9:1e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 24 05:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3653d1d6321942487c608a62396e14cabb7afbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:34:cf:ed:7f:ad:f2:44:e1:6f:59:50:bb:b7: 36:46:1b:28:53:5f:6f:d4:9a:0f:04:2e:08:df:71: c8:75:73:6f:8c:96:36:48:9a:41:0b:e0:cc:54:85: 4f:b2:89:0e:fd:0f:65:99:db:30:09:2b:00:d7:35: ee:67:5c:78:67:d1:09:4d:34:06:33:2e:fa:cc:6d: 74:92:9b:7d:50:b2:ed:52:11:f1:52:b6:54:fa:80: 1f:0f:d7:3a:56:ff:d4:6b:bd:2b:43:c0:e3:c8:60: 60:7d:2c:b2:72:37:a3:74:13:07:d2:c7:b0:a5:ac: d7:b5:a5:17:fb:d1:d1:a1:cd:38:04:92:fa:d8:b5: ff:78:4c:ca:7b:37:ac:c7:b4:08:55:2a:93:fa:f3: 74:31:08:3c:f0:4d:6a:07:f6:35:05:42:e8:af:ac: cf:2f:e7:75:c5:de:3d:46:f3:7b:53:7a:46:0b:a3: 71:c5:c2:0b:01:dc:bf:76:6d:fd:e5:91:af:6e:77: 50:68:a3:86:98:b6:aa:31:75:6b:32:03:94:1a:9d: a9:1d:43:c5:d2:9c:59:29:c8:9e:3f:50:8b:19:bf: ba:50:af:79:30:80:42:56:97:79:ff:fa:7d:16:e2: cf:18:ec:f2:5a:c1:8f:83:79:d6:e7:5c:ac:de:9c: 5b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:53:D1:D6:32:19:42:48:7C:60:8A:62:39:6E:14:CA:BB:7A:FB:C2 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NlPR1jIZQkh8YIpiOW4Uyrt6-8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.20.0/23 5.231.47.0/24 77.90.37.0/24 89.144.31.0/24 94.103.164.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:81:7e:d1:53:41:75:66:43:1b:64:7c:7b:43:4f:d1:d7:4d: 98:4a:f1:45:f7:df:4f:86:09:60:cc:19:57:45:91:2c:ea:46: 10:08:fc:3a:64:d0:84:a1:5f:9f:fd:cc:b1:65:19:4f:23:0a: 8e:98:5a:56:35:3e:0b:3c:44:65:3f:4a:ab:56:a4:bb:95:92: 12:83:ca:db:a5:00:93:27:ce:56:25:7d:cd:bb:1a:3c:19:14: c0:8c:6a:ac:35:cc:7f:8b:25:39:51:55:dc:31:31:32:cd:73: 6d:a8:be:10:7c:0d:d3:ef:8e:ec:45:ff:f7:64:e6:cd:8f:cd: 70:a9:11:f6:98:b4:4c:41:26:dc:4d:bd:cb:15:de:25:b5:79: 34:18:06:e8:66:e5:89:49:2b:f7:9a:b4:95:19:a2:c3:29:d6: f4:da:0c:50:11:cc:7c:a0:d5:5b:59:e7:de:a6:21:ed:8f:38: 66:fa:ae:06:f7:93:ac:48:eb:ea:24:1e:8f:4d:aa:47:e9:2d: b1:b7:1b:af:73:8a:80:24:57:7f:a5:80:4c:2d:28:51:da:9a: 0f:09:99:ce:cd:a2:13:c4:7d:65:1a:b2:2e:24:3b:c7:b6:4e: 6a:8c:83:f2:0a:a7:61:7f:71:35:87:72:68:1a:54:82:67:58: 66:72:f0:b1 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZq0RCRTmwsLdF3cAQnxyR4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI0MDUwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjUzZDFkNjMyMTk0MjQ4N2M2MDhhNjIzOTZlMTRjYWJiN2FmYmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDTP7X+t8kThb1lQu7c2RhsoU19v 1JoPBC4I33HIdXNvjJY2SJpBC+DMVIVPsokO/Q9lmdswCSsA1zXuZ1x4Z9EJTTQG My76zG10kpt9ULLtUhHxUrZU+oAfD9c6Vv/Ua70rQ8DjyGBgfSyycjejdBMH0sew pazXtaUX+9HRoc04BJL62LX/eEzKezesx7QIVSqT+vN0MQg88E1qB/Y1BULor6zP L+d1xd49RvN7U3pGC6NxxcILAdy/dm395ZGvbndQaKOGmLaqMXVrMgOUGp2pHUPF 0pxZKcieP1CLGb+6UK95MIBCVpd5//p9FuLPGOzyWsGPg3nW51ys3pxbowIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDZT0dYyGUJIfGCKYjluFMq7evvCMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvTmxQUjFqSVpRa2g4WUlwaU9XNFV5cnQ2LThJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBBecUAwQA BecvAwQATVolAwQAWZAfAwQAXmekMA0GCSqGSIb3DQEBCwUAA4IBAQAcgX7RU0F1 ZkMbZHx7Q0/R102YSvFF999PhglgzBlXRZEs6kYQCPw6ZNCEoV+f/cyxZRlPIwqO mFpWNT4LPERlP0qrVqS7lZISg8rbpQCTJ85WJX3Nuxo8GRTAjGqsNcx/iyU5UVXc MTEyzXNtqL4QfA3T747sRf/3ZObNj81wqRH2mLRMQSbcTb3LFd4ltXk0GAboZuWJ SSv3mrSVGaLDKdb02gxQEcx8oNVbWefepiHtjzhm+q4G95OsSOvqJB6PTapH6S2x txuvc4qAJFd/pYBMLShR2poPCZnOzaITxH1lGrIuJDvHtk5qjIPyCqdhf3E1h3Jo GlSCZ1hmcvCx -----END CERTIFICATE-----Generated at Fri Dec 5 17:03:53 2025 by rpki-client