This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Slxwmj0X0hym6UN7p0mKGBBmv3k.roa File: Slxwmj0X0hym6UN7p0mKGBBmv3k.roa (raw, json) Hash identifier: Vl/3JSRD+/eSm31FLNGXho8NVLLBaOhE/xbP2NeZBVQ= Subject key identifier: 4A:5C:70:9A:3D:17:D2:1C:A6:E9:43:7B:A7:49:8A:18:10:66:BF:79 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AA7BD0CC89BB556DB3B88EA5A016D01BC Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Slxwmj0X0hym6UN7p0mKGBBmv3k.roa Signing time: Fri 21 Nov 2025 18:46:15 +0000 ROA not before: Fri 21 Nov 2025 18:46:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214929 IP address blocks: 94.249.228.0/24 maxlen: 24 94.249.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:bd:0c:c8:9b:b5:56:db:3b:88:ea:5a:01:6d:01:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 21 18:46:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4a5c709a3d17d21ca6e9437ba7498a181066bf79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ab:7f:ed:c1:62:8c:51:8c:fe:59:8c:48:ea: e3:a0:11:a2:43:84:eb:89:b3:61:29:7a:1e:2a:0c: 14:c1:96:2a:a7:9a:4b:6d:af:51:29:f0:be:48:c6: 56:9b:4b:d1:c8:fb:2c:97:cb:1e:5a:7d:b6:9b:40: 78:54:0a:db:8a:fa:92:dd:d2:d3:37:b8:12:eb:cf: e2:c3:40:b8:ab:6e:ab:db:58:3a:0d:bc:97:b3:d8: 66:22:38:00:37:03:43:05:b7:80:6b:9b:71:66:dc: 84:03:3d:54:21:a0:2f:52:a7:c1:37:90:bc:9c:a6: 36:29:41:6d:b2:1f:05:86:66:fb:2b:68:30:69:20: c3:03:86:2c:c6:ca:3b:d1:db:90:bd:cb:36:c1:c9: 90:96:8b:1f:fb:5c:70:ad:91:08:d1:f5:e2:a5:32: 00:83:d4:5f:62:f1:fb:f7:41:6c:6a:2c:e3:72:85: 60:a5:36:d0:84:af:30:6d:9f:cc:3d:c9:7a:52:a6: 4f:47:bd:e7:bb:d2:03:06:59:92:5b:0f:b7:16:e0: be:e3:74:b0:f2:0c:8b:85:4d:89:8c:1b:e2:8b:db: f7:4a:76:4a:5e:26:9b:45:ea:b9:eb:c6:7e:0e:f4: 4f:8f:99:b9:b9:98:f7:c4:9d:bc:db:7a:ee:25:48: 9a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5C:70:9A:3D:17:D2:1C:A6:E9:43:7B:A7:49:8A:18:10:66:BF:79 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Slxwmj0X0hym6UN7p0mKGBBmv3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.249.228.0/24 94.249.230.0/24 Signature Algorithm: sha256WithRSAEncryption e4:db:f5:48:77:02:cb:66:3c:22:a8:e6:4c:9b:cc:7b:4f:e4: 0d:6d:47:40:44:aa:e6:5b:8f:26:35:d3:0e:9a:69:53:ad:47: f5:ce:ac:0c:07:3b:e1:8d:b1:ea:a1:f6:f9:48:3b:29:d9:a9: c4:2d:40:6a:ee:82:02:3a:5f:59:14:48:e6:6e:46:4d:0f:21: 50:2d:45:e5:eb:65:50:d8:00:42:23:6b:1e:a8:92:a5:96:af: 17:79:ec:2f:8b:80:f7:06:b9:b4:52:13:c7:b8:ef:ab:8d:25: 85:e0:e8:30:05:81:7c:68:b9:e2:e3:62:41:78:05:7b:7b:f0: 8c:3c:2d:9f:d8:7e:d4:f5:66:db:c1:54:98:14:76:ec:be:2c: 19:4c:0d:a3:e2:fe:12:7f:7d:ca:7e:01:59:b1:a3:a6:ac:21: 20:45:46:00:dd:cb:81:fc:bd:08:df:42:e3:77:59:ba:e3:22: 6d:27:92:fd:79:a6:41:11:31:8d:b8:29:84:ac:30:7a:d7:b2: b3:75:d1:e1:6f:ee:a4:55:ff:2d:b4:a8:e3:85:92:e4:9f:01: 74:f1:b8:29:4c:67:9c:8e:fc:ff:dc:e0:4d:44:4d:b3:d1:92: 7d:31:45:7b:c2:7f:75:51:b4:15:7f:3c:19:88:fe:65:56:1d: c0:b9:d2:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqnvQzIm7VW2zuI6loBbQG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTIxMTg0NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTVjNzA5YTNkMTdkMjFjYTZlOTQzN2JhNzQ5OGExODEwNjZiZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3at/7cFijFGM/lmMSOrjoBGiQ4Tr ibNhKXoeKgwUwZYqp5pLba9RKfC+SMZWm0vRyPssl8seWn22m0B4VArbivqS3dLT N7gS68/iw0C4q26r21g6DbyXs9hmIjgANwNDBbeAa5txZtyEAz1UIaAvUqfBN5C8 nKY2KUFtsh8Fhmb7K2gwaSDDA4Ysxso70duQvcs2wcmQlosf+1xwrZEI0fXipTIA g9RfYvH790FsaizjcoVgpTbQhK8wbZ/MPcl6UqZPR73nu9IDBlmSWw+3FuC+43Sw 8gyLhU2JjBvii9v3SnZKXiabReq568Z+DvRPj5m5uZj3xJ2823ruJUia7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEpccJo9F9IcpulDe6dJihgQZr95MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvU2x4d21qMFgwaHltNlVON3AwbUtHQkJtdjNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXvnkAwQA XvnmMA0GCSqGSIb3DQEBCwUAA4IBAQDk2/VIdwLLZjwiqOZMm8x7T+QNbUdARKrm W48mNdMOmmlTrUf1zqwMBzvhjbHqofb5SDsp2anELUBq7oICOl9ZFEjmbkZNDyFQ LUXl62VQ2ABCI2seqJKllq8Xeewvi4D3Brm0UhPHuO+rjSWF4OgwBYF8aLni42JB eAV7e/CMPC2f2H7U9WbbwVSYFHbsviwZTA2j4v4Sf33KfgFZsaOmrCEgRUYA3cuB /L0I30Ljd1m64yJtJ5L9eaZBETGNuCmErDB617KzddHhb+6kVf8ttKjjhZLknwF0 8bgpTGecjvz/3OBNRE2z0ZJ9MUV7wn91UbQVfzwZiP5lVh3AudLU -----END CERTIFICATE-----Generated at Fri Dec 5 17:05:19 2025 by rpki-client