This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U8N_fKvTO0llMYSFvqVkDZj2OKs.roa File: U8N_fKvTO0llMYSFvqVkDZj2OKs.roa (raw, json) Hash identifier: qoPGR+np8YcaJVkAXgFxpl1qZDTpG09qidDPdKoFvx4= Subject key identifier: 53:C3:7F:7C:AB:D3:3B:49:65:31:84:85:BE:A5:64:0D:98:F6:38:AB Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A8B1351865812FF03EB51E3834C05BCD6 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U8N_fKvTO0llMYSFvqVkDZj2OKs.roa Signing time: Sun 16 Nov 2025 05:11:30 +0000 ROA not before: Sun 16 Nov 2025 05:11:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62904 IP address blocks: 5.175.211.0/24 maxlen: 24 5.175.212.0/24 maxlen: 24 5.231.124.0/24 maxlen: 24 89.144.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8b:13:51:86:58:12:ff:03:eb:51:e3:83:4c:05:bc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 16 05:11:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=53c37f7cabd33b4965318485bea5640d98f638ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:28:a4:c5:3d:a5:0a:c1:cd:05:b0:72:7c:a8: 5d:ba:d5:42:c0:88:7c:84:c1:3c:c4:00:53:dc:77: c0:a2:91:76:e1:0e:53:6a:94:41:fd:21:fa:c7:2e: 77:77:a4:5c:14:ec:f6:df:48:20:0a:3b:20:0d:5e: 0c:f5:1e:ae:fe:ef:16:94:5f:6a:bc:f1:47:15:bf: 1d:48:3e:40:24:a9:8e:54:c1:bf:6a:93:29:27:ab: 3d:4a:cb:79:c8:a4:e0:b0:6a:13:d6:e4:53:80:2b: 0d:74:ea:2e:32:7b:07:59:f7:07:ed:44:e7:b0:85: ce:64:f7:5b:66:d0:cf:75:dc:52:f8:bd:88:a6:85: e8:47:e2:ba:02:c2:06:ef:95:7d:57:74:c6:06:e4: 15:f7:22:15:ab:b8:d1:ac:76:84:a3:bd:e1:e4:38: 68:22:c9:a0:91:35:5b:14:36:41:bd:bb:84:23:e6: 7e:8f:ef:6b:81:5c:1f:34:a3:89:77:3b:7a:d6:38: 28:a3:ae:55:79:38:6f:ed:49:0f:cc:be:7e:42:8d: 75:ab:bb:8e:bf:95:61:0f:38:7d:67:a8:4b:53:0e: bc:e7:58:03:0c:dc:c2:59:6a:ff:c7:dc:41:34:1b: 1a:65:d1:42:25:65:e8:f3:26:a9:fd:7c:8e:bf:eb: 61:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:7F:7C:AB:D3:3B:49:65:31:84:85:BE:A5:64:0D:98:F6:38:AB X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U8N_fKvTO0llMYSFvqVkDZj2OKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.211.0-5.175.212.255 5.231.124.0/24 89.144.40.0/24 Signature Algorithm: sha256WithRSAEncryption 83:19:5a:6d:24:0a:0e:0c:90:71:a5:9d:76:22:f5:10:e7:0a: da:68:2e:84:6c:bc:9d:9f:c6:9e:a8:b9:df:5e:6d:bb:45:71: 16:81:c3:16:23:c1:39:bc:43:c2:5d:8b:62:6d:bd:6c:28:97: b3:e7:6a:7b:cc:8f:b5:e5:95:f4:4e:69:73:8b:1b:24:cb:57: 0c:5d:fd:f8:cb:5f:dd:a3:d1:c6:8c:70:1b:25:29:00:6f:30: c9:07:5d:68:2c:7e:df:d8:ac:30:7d:cd:d6:f3:04:7c:ae:04: e2:c0:9a:be:ca:e2:00:d0:2a:46:7a:53:b0:bc:50:17:4c:0d: 47:14:98:dc:7d:25:dc:82:00:ab:fd:c2:10:e8:e1:61:16:73: de:56:2c:e8:79:64:15:48:f8:67:84:51:33:df:ad:3f:ea:60: af:eb:6a:15:4f:50:0b:4c:5a:1e:08:69:94:26:4b:6d:a5:11: cb:f3:89:a0:4b:2f:97:46:ea:5a:9c:e8:59:7d:9d:ae:fd:5c: 5e:9c:ec:13:8c:8f:bb:08:1b:1c:a0:1b:9d:70:6d:fb:89:c9: ac:47:bd:f8:49:c9:10:08:9a:01:65:57:ae:75:e3:41:c7:bf: 96:eb:0d:28:8c:37:d4:b4:f6:34:14:97:bd:22:9e:ab:3c:17: 9c:c3:90:2d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZqLE1GGWBL/A+tR44NMBbzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTE2MDUxMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2MzN2Y3Y2FiZDMzYjQ5NjUzMTg0ODViZWE1NjQwZDk4ZjYzOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySikxT2lCsHNBbByfKhdutVCwIh8 hME8xABT3HfAopF24Q5TapRB/SH6xy53d6RcFOz230ggCjsgDV4M9R6u/u8WlF9q vPFHFb8dSD5AJKmOVMG/apMpJ6s9Sst5yKTgsGoT1uRTgCsNdOouMnsHWfcH7UTn sIXOZPdbZtDPddxS+L2IpoXoR+K6AsIG75V9V3TGBuQV9yIVq7jRrHaEo73h5Dho IsmgkTVbFDZBvbuEI+Z+j+9rgVwfNKOJdzt61jgoo65VeThv7UkPzL5+Qo11q7uO v5VhDzh9Z6hLUw6851gDDNzCWWr/x9xBNBsaZdFCJWXo8yap/XyOv+thBwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFPDf3yr0ztJZTGEhb6lZA2Y9jirMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVThOX2ZLdlRPMGxsTVlTRnZxVmtEWmoyT0tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAFr9MD BAAFr9QDBAAF53wDBABZkCgwDQYJKoZIhvcNAQELBQADggEBAIMZWm0kCg4MkHGl nXYi9RDnCtpoLoRsvJ2fxp6oud9ebbtFcRaBwxYjwTm8Q8Jdi2JtvWwol7PnanvM j7XllfROaXOLGyTLVwxd/fjLX92j0caMcBslKQBvMMkHXWgsft/YrDB9zdbzBHyu BOLAmr7K4gDQKkZ6U7C8UBdMDUcUmNx9JdyCAKv9whDo4WEWc95WLOh5ZBVI+GeE UTPfrT/qYK/rahVPUAtMWh4IaZQmS22lEcvziaBLL5dG6lqc6Fl9na79XF6c7BOM j7sIGxygG51wbfuJyaxHvfhJyRAImgFlV65140HHv5brDSiMN9S09jQUl70inqs8 F5zDkC0= -----END CERTIFICATE-----Generated at Fri Dec 5 17:07:21 2025 by rpki-client