This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Qc9HB0PkAMCZLE3gV-ZMJs6vrtI.roa File: Qc9HB0PkAMCZLE3gV-ZMJs6vrtI.roa (raw, json) Hash identifier: NNHfWTqdbZ0VYh7GppiCynA0cohM+W9GpGmUCnN6R0Y= Subject key identifier: 41:CF:47:07:43:E4:00:C0:99:2C:4D:E0:57:E6:4C:26:CE:AF:AE:D2 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B131C267DF54CCD23E38C26191315B986 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Qc9HB0PkAMCZLE3gV-ZMJs6vrtI.roa Signing time: Fri 12 Dec 2025 15:09:30 +0000 ROA not before: Fri 12 Dec 2025 15:09:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47263 IP address blocks: 5.231.20.0/23 maxlen: 23 5.231.20.0/24 maxlen: 24 5.231.21.0/24 maxlen: 24 5.231.47.0/24 maxlen: 24 77.90.37.0/24 maxlen: 24 89.144.31.0/24 maxlen: 24 94.103.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:1c:26:7d:f5:4c:cd:23:e3:8c:26:19:13:15:b9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 12 15:09:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=41cf470743e400c0992c4de057e64c26ceafaed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8a:bc:b3:bd:62:aa:51:02:e3:58:bb:88:a5: 6a:7f:6b:93:1a:df:e8:da:3d:0d:2e:17:85:1b:57: c5:43:57:ce:f8:53:63:d5:df:d6:a4:55:a3:5b:f1: 2e:71:51:41:7a:e1:c1:1f:5e:bf:23:57:96:35:c0: 8a:77:26:f9:61:09:d3:84:22:5b:aa:b0:9a:c6:97: a7:a1:93:b9:86:28:13:cd:d8:83:b0:7d:b9:8e:1b: f6:37:63:18:c9:90:ff:1b:5b:4a:14:51:50:40:98: 81:cd:a9:9a:89:95:dc:57:47:a6:e6:b2:70:a0:2a: f1:47:6d:95:ba:bd:44:71:12:d3:c0:d7:30:c8:0f: 6f:ca:fc:46:c9:1e:77:2e:62:8b:d7:e1:25:36:69: 34:67:6b:8d:29:59:41:4f:14:2c:2a:d2:6e:16:64: ae:29:a6:4e:b9:5b:5c:fc:ee:a4:05:09:45:04:04: 44:14:a4:e1:7a:fc:7a:f4:5e:fc:45:14:16:ac:07: 41:c4:ff:28:d1:fd:ef:2d:d0:51:20:bd:10:c5:a3: b8:5b:f5:a4:77:6f:ea:9a:66:75:bc:7d:2c:2a:c0: b4:c4:71:0a:2a:63:4e:33:b7:f2:2a:29:a4:b2:1f: 43:51:e7:5a:be:a5:e5:86:d4:be:0f:aa:6d:f2:b6: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CF:47:07:43:E4:00:C0:99:2C:4D:E0:57:E6:4C:26:CE:AF:AE:D2 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Qc9HB0PkAMCZLE3gV-ZMJs6vrtI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.20.0/23 5.231.47.0/24 77.90.37.0/24 89.144.31.0/24 94.103.164.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:05:02:ad:84:69:aa:52:f7:0b:42:e7:ab:85:a7:28:4c:f8: 2f:50:02:8d:a3:30:32:88:f0:d6:b9:78:ac:d3:52:d4:dc:24: ff:32:2c:74:bb:81:cd:fa:47:1a:60:d1:80:50:1d:7f:62:ab: fe:0d:55:84:c5:b6:53:85:9e:f2:86:f2:7f:81:28:80:85:f5: 29:4b:d0:76:d2:55:3e:87:a3:09:e7:b1:6b:2a:3b:5c:d2:d7: bc:55:d8:2e:06:5f:bc:fb:2e:fd:9a:a0:33:31:69:c0:98:ff: 55:ce:c3:05:9f:dc:db:f3:22:e7:46:8e:99:c2:51:14:f8:f3: 1e:c6:b5:90:2f:58:89:3f:3a:4e:4e:d3:03:76:c2:af:28:79: c6:63:cf:5e:f5:97:c6:8e:52:38:ef:d5:83:07:9c:ee:13:74: f9:85:3c:39:09:da:0e:c8:32:cf:c3:de:ef:d2:e5:3d:7e:83: 44:ab:a8:6d:c4:e4:20:19:34:93:75:52:86:7a:3b:94:85:6a: 93:8f:53:d2:4f:38:70:33:d1:a1:97:89:22:83:bc:45:39:ca: 10:d2:7d:c8:1b:5d:f8:c5:d8:0b:5e:14:2e:6b:ad:a9:00:bb: 8a:09:78:7d:ae:e6:c2:12:37:76:6c:64:a2:48:aa:28:d4:34: b0:9d:a2:ff -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsTHCZ99UzNI+OMJhkTFbmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjEyMTUwOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWNmNDcwNzQzZTQwMGMwOTkyYzRkZTA1N2U2NGMyNmNlYWZhZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4q8s71iqlEC41i7iKVqf2uTGt/o 2j0NLheFG1fFQ1fO+FNj1d/WpFWjW/EucVFBeuHBH16/I1eWNcCKdyb5YQnThCJb qrCaxpenoZO5higTzdiDsH25jhv2N2MYyZD/G1tKFFFQQJiBzamaiZXcV0em5rJw oCrxR22Vur1EcRLTwNcwyA9vyvxGyR53LmKL1+ElNmk0Z2uNKVlBTxQsKtJuFmSu KaZOuVtc/O6kBQlFBAREFKThevx69F78RRQWrAdBxP8o0f3vLdBRIL0QxaO4W/Wk d2/qmmZ1vH0sKsC0xHEKKmNOM7fyKimksh9DUedavqXlhtS+D6pt8rYmHQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEHPRwdD5ADAmSxN4FfmTCbOr67SMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvUWM5SEIwUGtBTUNaTEUzZ1YtWk1KczZ2cnRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBBecUAwQA BecvAwQATVolAwQAWZAfAwQAXmekMA0GCSqGSIb3DQEBCwUAA4IBAQAOBQKthGmq UvcLQuerhacoTPgvUAKNozAyiPDWuXis01LU3CT/Mix0u4HN+kcaYNGAUB1/Yqv+ DVWExbZThZ7yhvJ/gSiAhfUpS9B20lU+h6MJ57FrKjtc0te8VdguBl+8+y79mqAz MWnAmP9VzsMFn9zb8yLnRo6ZwlEU+PMexrWQL1iJPzpOTtMDdsKvKHnGY89e9ZfG jlI479WDB5zuE3T5hTw5CdoOyDLPw97v0uU9foNEq6htxOQgGTSTdVKGejuUhWqT j1PSTzhwM9Ghl4kig7xFOcoQ0n3IG134xdgLXhQua62pALuKCXh9rubCEjd2bGSi SKoo1DSwnaL/ -----END CERTIFICATE-----Generated at Tue Dec 16 20:07:44 2025 by rpki-client