This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QCpPlUIradyN9Uw2yaOTPfvQfwg.roa File: QCpPlUIradyN9Uw2yaOTPfvQfwg.roa (raw, json) Hash identifier: S82dF4+brmkr5b+f2Y2il2tAs83/gt0QI0zobAQTPGo= Subject key identifier: 40:2A:4F:95:42:2B:69:DC:8D:F5:4C:36:C9:A3:93:3D:FB:D0:7F:08 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019ABB285D717155B9882081CA596EA11DAA Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QCpPlUIradyN9Uw2yaOTPfvQfwg.roa Signing time: Tue 25 Nov 2025 13:16:15 +0000 ROA not before: Tue 25 Nov 2025 13:16:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214639 IP address blocks: 5.83.129.0/24 maxlen: 24 5.175.188.0/24 maxlen: 24 89.144.35.0/24 maxlen: 24 94.249.176.0/24 maxlen: 24 94.249.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:28:5d:71:71:55:b9:88:20:81:ca:59:6e:a1:1d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 25 13:16:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=402a4f95422b69dc8df54c36c9a3933dfbd07f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:17:99:36:6c:d6:89:15:db:8c:6c:80:55:bd: 92:5d:73:54:5b:ed:6d:7a:12:c6:34:a5:8c:78:cb: da:d8:cb:1d:08:92:d8:0b:50:ec:80:0f:d3:99:24: 39:8f:11:54:a9:67:c2:be:5a:58:fb:75:bf:20:16: a7:1a:d3:79:65:b5:45:26:6b:b3:f9:c3:c2:3e:50: 64:a5:3d:bf:01:cd:7b:2b:59:22:e6:26:1d:7d:d1: b7:6b:03:3e:b6:73:ee:07:da:1c:b7:5c:9a:f6:b7: 12:58:fe:d3:ea:a5:97:dc:a1:2b:8f:7a:7b:5d:20: 10:8c:9e:3d:40:05:0b:b6:44:64:27:0d:5a:0c:1a: a2:45:06:46:52:92:c6:9f:8b:82:30:af:bf:20:da: 1f:7c:be:86:0d:d4:cc:0e:9b:0a:31:16:d0:4c:72: d0:0b:f2:b1:d0:a3:02:4a:13:6b:4a:53:62:cf:4f: 9e:0e:d4:08:91:e7:14:08:b2:39:10:ce:43:81:29: aa:6b:89:1e:4a:58:e7:6a:c1:f5:62:14:c6:1b:cb: 20:5a:e7:d4:d8:09:26:8a:b4:17:ac:10:e1:87:ff: dc:c9:26:91:eb:d3:aa:2e:75:c1:f8:4c:68:52:94: 41:0b:53:ed:fa:8a:2a:a1:9f:5a:a2:90:d3:a5:4d: 02:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2A:4F:95:42:2B:69:DC:8D:F5:4C:36:C9:A3:93:3D:FB:D0:7F:08 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QCpPlUIradyN9Uw2yaOTPfvQfwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.129.0/24 5.175.188.0/24 89.144.35.0/24 94.249.176.0/24 94.249.251.0/24 Signature Algorithm: sha256WithRSAEncryption 85:95:1f:59:a9:18:1b:96:1b:7a:e9:c8:4f:da:3c:2c:68:e6: 7d:0d:5b:3b:c5:1b:22:9d:9b:2e:00:e1:a7:ad:ce:99:0d:c7: b9:f2:da:20:b4:a8:a7:5a:12:df:ce:24:31:ae:97:49:f3:66: ae:b1:c4:f0:82:91:9a:8b:5f:ed:2f:e3:44:66:d6:09:bd:29: 92:9e:db:b7:0f:9f:47:28:8d:f9:18:bb:be:9f:51:67:83:f5: fd:c1:9b:d5:21:15:46:6a:c1:57:79:c1:c0:d6:c6:68:d1:13: 2a:62:73:4f:0e:80:7c:65:b4:6b:c8:e2:87:44:83:f1:1c:79: a2:a9:8e:b2:e3:d5:5c:6c:da:c7:6c:ed:c5:b0:e1:d0:4d:2f: 35:b3:6f:8f:e9:a1:22:9e:8d:0a:0b:c5:e1:05:5a:1d:48:36: 37:92:4e:52:5d:c3:ec:54:2f:1d:91:12:e6:c1:ff:70:7c:bf: ad:46:12:28:dd:b9:0a:1e:38:28:42:ac:35:23:90:1b:13:67: 8c:04:2b:3c:f8:08:f4:cb:d2:47:87:c6:15:26:4e:a8:c6:b9: 85:db:4c:95:d8:a7:dd:b6:91:03:82:27:35:e4:0b:c8:f8:91: 19:aa:01:dc:b7:87:f4:15:16:a6:00:b0:ea:33:46:f5:ee:54: 93:be:01:6b -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZq7KF1xcVW5iCCBylluoR2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI1MTMxNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDJhNGY5NTQyMmI2OWRjOGRmNTRjMzZjOWEzOTMzZGZiZDA3ZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+heZNmzWiRXbjGyAVb2SXXNUW+1t ehLGNKWMeMva2MsdCJLYC1DsgA/TmSQ5jxFUqWfCvlpY+3W/IBanGtN5ZbVFJmuz +cPCPlBkpT2/Ac17K1ki5iYdfdG3awM+tnPuB9oct1ya9rcSWP7T6qWX3KErj3p7 XSAQjJ49QAULtkRkJw1aDBqiRQZGUpLGn4uCMK+/INoffL6GDdTMDpsKMRbQTHLQ C/Kx0KMCShNrSlNiz0+eDtQIkecUCLI5EM5DgSmqa4keSljnasH1YhTGG8sgWufU 2AkmirQXrBDhh//cySaR69OqLnXB+ExoUpRBC1Pt+ooqoZ9aopDTpU0CUQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEAqT5VCK2ncjfVMNsmjkz370H8IMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvUUNwUGxVSXJhZHlOOVV3MnlhT1RQZnZRZndnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABVOBAwQA Ba+8AwQAWZAjAwQAXvmwAwQAXvn7MA0GCSqGSIb3DQEBCwUAA4IBAQCFlR9ZqRgb lht66chP2jwsaOZ9DVs7xRsinZsuAOGnrc6ZDce58togtKinWhLfziQxrpdJ82au scTwgpGai1/tL+NEZtYJvSmSntu3D59HKI35GLu+n1Fng/X9wZvVIRVGasFXecHA 1sZo0RMqYnNPDoB8ZbRryOKHRIPxHHmiqY6y49VcbNrHbO3FsOHQTS81s2+P6aEi no0KC8XhBVodSDY3kk5SXcPsVC8dkRLmwf9wfL+tRhIo3bkKHjgoQqw1I5AbE2eM BCs8+Aj0y9JHh8YVJk6oxrmF20yV2KfdtpEDgic15AvI+JEZqgHct4f0FRamALDq M0b17lSTvgFr -----END CERTIFICATE-----Generated at Fri Dec 5 17:03:50 2025 by rpki-client