This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Nscg0PNdo3AwkNfEtc2KJeRVEeg.roa File: Nscg0PNdo3AwkNfEtc2KJeRVEeg.roa (raw, json) Hash identifier: 4K66FQ4A0ptusmPsMkkHhlu1gEjJpMVtKpIFXLz/5Sc= Subject key identifier: 36:C7:20:D0:F3:5D:A3:70:30:90:D7:C4:B5:CD:8A:25:E4:55:11:E8 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AC3B47BBD6FFB9E891F19E0400A0FBA9E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Nscg0PNdo3AwkNfEtc2KJeRVEeg.roa Signing time: Thu 27 Nov 2025 05:06:16 +0000 ROA not before: Thu 27 Nov 2025 05:06:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48314 IP address blocks: 5.175.233.0/24 maxlen: 24 77.90.0.0/24 maxlen: 24 77.90.2.0/24 maxlen: 24 77.90.8.0/24 maxlen: 24 77.90.13.0/24 maxlen: 24 77.90.18.0/24 maxlen: 24 77.90.51.0/24 maxlen: 24 94.249.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c3:b4:7b:bd:6f:fb:9e:89:1f:19:e0:40:0a:0f:ba:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 27 05:06:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=36c720d0f35da3703090d7c4b5cd8a25e45511e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:bc:21:ee:eb:2e:99:18:56:71:96:77:06: 32:b1:04:91:eb:36:1f:5a:33:df:8a:1b:e9:64:57: 7a:7e:04:b0:89:fe:ec:37:7b:d4:40:73:2f:89:ad: 50:1d:ee:95:77:b2:de:47:6b:59:08:bf:0b:a2:e2: eb:36:80:9f:d9:28:06:9d:ec:b4:ed:c0:ad:40:ac: 4f:66:5f:47:e8:22:4c:ff:cb:05:0d:bc:5b:87:22: 57:e2:43:2f:0a:77:a8:40:c5:74:63:85:2d:a8:9d: 21:30:0c:22:50:81:bf:bb:11:a7:84:0a:2e:c1:c2: 8f:dc:78:0d:4a:fe:45:fd:71:99:1d:25:18:e3:58: 9a:20:36:4a:7e:fc:a0:54:68:5c:f8:5a:1e:aa:66: 8c:44:f6:8d:d7:87:9b:b1:b2:69:02:81:39:d6:5f: ba:67:66:4f:a2:69:c1:5b:82:90:d6:1a:4a:8a:2c: 06:3c:36:fb:8e:ed:18:f7:ba:4f:0a:7d:f5:b4:74: a2:ad:0d:ef:a0:d9:cd:86:58:03:65:2e:82:4a:e8: f4:da:79:55:07:9a:68:3a:f4:71:54:3c:1b:4c:8e: 68:07:bf:db:9e:f3:3b:fb:3d:ad:22:b6:77:89:59: 8c:42:bb:57:69:ec:12:5c:08:b4:8a:75:d3:d8:a0: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C7:20:D0:F3:5D:A3:70:30:90:D7:C4:B5:CD:8A:25:E4:55:11:E8 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Nscg0PNdo3AwkNfEtc2KJeRVEeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.233.0/24 77.90.0.0/24 77.90.2.0/24 77.90.8.0/24 77.90.13.0/24 77.90.18.0/24 77.90.51.0/24 94.249.193.0/24 Signature Algorithm: sha256WithRSAEncryption 95:d0:18:c7:fe:63:9d:c8:22:62:cd:b8:3a:4e:0c:b5:75:03: 79:9c:88:85:40:94:7e:3d:83:48:a8:e7:27:b9:97:6e:f3:90: 00:38:01:5d:94:48:57:cf:81:ca:76:bc:0d:a4:4f:22:ca:56: 26:90:ba:12:78:ae:79:f0:6d:05:6d:df:df:f3:9e:65:1d:1e: ac:5c:1b:d5:1b:f8:41:01:71:21:94:4b:da:25:06:0b:06:d9: 6d:c7:7c:d0:09:72:46:b9:c7:b3:24:16:a1:bd:a9:5c:61:cd: 53:93:bc:7a:43:a0:00:38:53:c5:9f:80:ff:bf:a2:bf:3d:d5: 6b:42:31:65:97:0f:14:ca:c7:8a:a7:53:30:a0:82:36:08:13: ad:1e:3d:d4:49:55:f6:d8:11:a3:d2:e4:29:f1:96:98:3a:4d: e6:79:92:5d:e5:03:50:65:be:f5:61:b1:71:6b:03:95:a4:e2: 3d:dc:b1:19:0a:9a:31:83:f3:9c:73:b5:c4:00:5f:dd:4d:ff: 45:a6:52:f8:04:7f:12:26:7c:c6:2b:02:80:2b:49:4c:e8:80: 31:e0:1a:b3:c7:c4:5d:47:34:2b:41:83:0d:6c:42:11:99:b5: 85:d8:79:92:a0:96:3c:73:3d:43:0b:8b:0a:50:da:64:35:7a: 16:f8:ce:e0 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZrDtHu9b/ueiR8Z4EAKD7qeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI3MDUwNjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmM3MjBkMGYzNWRhMzcwMzA5MGQ3YzRiNWNkOGEyNWU0NTUxMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuC8Ie7rLpkYVnGWdwYysQSR6zYf WjPfihvpZFd6fgSwif7sN3vUQHMvia1QHe6Vd7LeR2tZCL8LouLrNoCf2SgGney0 7cCtQKxPZl9H6CJM/8sFDbxbhyJX4kMvCneoQMV0Y4UtqJ0hMAwiUIG/uxGnhAou wcKP3HgNSv5F/XGZHSUY41iaIDZKfvygVGhc+FoeqmaMRPaN14ebsbJpAoE51l+6 Z2ZPomnBW4KQ1hpKiiwGPDb7ju0Y97pPCn31tHSirQ3voNnNhlgDZS6CSuj02nlV B5poOvRxVDwbTI5oB7/bnvM7+z2tIrZ3iVmMQrtXaewSXAi0inXT2KDgSwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFDbHINDzXaNwMJDXxLXNiiXkVRHoMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvTnNjZzBQTmRvM0F3a05mRXRjMktKZVJWRWVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABa/pAwQA TVoAAwQATVoCAwQATVoIAwQATVoNAwQATVoSAwQATVozAwQAXvnBMA0GCSqGSIb3 DQEBCwUAA4IBAQCV0BjH/mOdyCJizbg6Tgy1dQN5nIiFQJR+PYNIqOcnuZdu85AA OAFdlEhXz4HKdrwNpE8iylYmkLoSeK558G0Fbd/f855lHR6sXBvVG/hBAXEhlEva JQYLBtltx3zQCXJGucezJBahvalcYc1Tk7x6Q6AAOFPFn4D/v6K/PdVrQjFllw8U yseKp1MwoII2CBOtHj3USVX22BGj0uQp8ZaYOk3meZJd5QNQZb71YbFxawOVpOI9 3LEZCpoxg/Occ7XEAF/dTf9FplL4BH8SJnzGKwKAK0lM6IAx4Bqzx8RdRzQrQYMN bEIRmbWF2HmSoJY8cz1DC4sKUNpkNXoW+M7g -----END CERTIFICATE-----Generated at Fri Dec 5 17:03:54 2025 by rpki-client