This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VyD0Gbjx-oVbF2JtErj6SHjG_h4.roa File: VyD0Gbjx-oVbF2JtErj6SHjG_h4.roa (raw, json) Hash identifier: NqZfmtitJqxEQXe0XKh7oMrC8lZiLc7W8Nv5yryFOe0= Subject key identifier: 57:20:F4:19:B8:F1:FA:85:5B:17:62:6D:12:B8:FA:48:78:C6:FE:1E Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B13513F5F4BAB9B7AC1FE2A1EA3BAF14D Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VyD0Gbjx-oVbF2JtErj6SHjG_h4.roa Signing time: Fri 12 Dec 2025 16:07:30 +0000 ROA not before: Fri 12 Dec 2025 16:07:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 5.83.153.0/24 maxlen: 24 5.175.168.0/24 maxlen: 24 5.175.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:51:3f:5f:4b:ab:9b:7a:c1:fe:2a:1e:a3:ba:f1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 12 16:07:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5720f419b8f1fa855b17626d12b8fa4878c6fe1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:e3:63:fb:b9:ed:7c:2a:9c:7e:64:1c:6f: b4:94:d3:82:9b:45:11:dd:73:94:7a:f2:91:54:ce: 18:59:60:d1:4f:b7:d2:6e:c9:ca:ca:eb:11:32:c9: ae:ea:c0:d1:67:4c:70:38:bf:e5:ab:dd:52:74:3b: 87:c2:3a:fc:f1:f6:1a:d1:f9:31:92:50:3c:3a:8a: 08:48:da:53:35:16:45:3a:29:40:45:f2:45:cf:a2: 7a:6d:ef:df:87:aa:5e:67:92:a2:b9:33:ec:71:71: 19:38:fb:75:f2:cf:01:18:11:7c:c2:f0:6a:76:d7: d1:a1:9f:26:85:a5:ee:07:27:51:6f:69:48:11:df: e3:65:a6:81:99:1b:a2:cd:77:07:f0:1e:7e:0b:cd: 10:11:71:61:e7:5d:88:66:52:51:be:43:39:91:3d: 4a:19:71:7d:36:24:d8:d0:8c:04:2e:9b:13:5c:e1: 7b:d0:1f:68:ba:6c:07:4c:a8:3d:f6:a8:0d:ab:f3: e3:a3:25:e7:6b:f0:06:a7:28:50:27:ed:56:17:ec: 07:85:fe:84:4d:63:ef:dc:41:29:5a:8b:9a:e8:da: 63:1f:26:ed:7d:88:3a:bd:04:4b:9f:97:3a:74:e6: 5e:a4:14:72:69:6a:2a:39:71:f0:65:eb:68:f3:12: 7f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:20:F4:19:B8:F1:FA:85:5B:17:62:6D:12:B8:FA:48:78:C6:FE:1E X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VyD0Gbjx-oVbF2JtErj6SHjG_h4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.153.0/24 5.175.168.0/24 5.175.195.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:79:72:dc:5a:e8:71:02:7e:66:ba:a2:4e:06:01:33:f8:22: 1a:53:2e:ca:da:c5:b0:fa:ea:e9:fb:13:ef:54:41:e7:6f:da: e6:e9:ae:e8:d2:89:d8:83:75:06:1a:b7:7d:12:2e:df:54:2d: 3a:4b:ea:19:b9:46:a0:ef:2d:ce:f8:35:28:95:01:cc:55:c7: b9:7d:5f:86:9a:35:b7:68:3f:03:4b:05:66:97:bc:f8:23:03: 11:01:5b:53:1d:97:e8:23:14:12:c0:be:96:cd:1a:a2:22:35: ba:53:8d:6b:de:59:be:99:2f:8b:f3:75:b1:77:b6:ac:65:8a: 9d:9d:cf:86:e8:9f:d9:3f:8e:d9:9c:71:42:4e:e9:a1:91:06: a3:ba:4a:0f:03:6f:9b:fd:05:d3:5d:2f:7f:fb:35:75:b7:4b: c5:4e:fe:5d:77:66:35:48:0f:23:ee:c5:f7:12:a7:a4:08:69: 6d:9e:5a:62:6e:3e:fc:1c:97:30:ab:16:bb:7a:8c:e2:3b:d4: 66:94:f9:8b:8e:05:de:98:4b:df:90:70:3d:4b:68:9c:b9:40: 3b:d6:8f:9c:e2:7d:38:60:a9:cb:01:73:30:29:b1:d3:3c:03: 3d:10:39:78:00:4f:70:b4:33:5b:98:f8:e1:34:cb:e6:41:3f: b6:18:c7:c4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsTUT9fS6ubesH+Kh6juvFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjEyMTYwNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzIwZjQxOWI4ZjFmYTg1NWIxNzYyNmQxMmI4ZmE0ODc4YzZmZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w/jY/u57XwqnH5kHG+0lNOCm0UR 3XOUevKRVM4YWWDRT7fSbsnKyusRMsmu6sDRZ0xwOL/lq91SdDuHwjr88fYa0fkx klA8OooISNpTNRZFOilARfJFz6J6be/fh6peZ5KiuTPscXEZOPt18s8BGBF8wvBq dtfRoZ8mhaXuBydRb2lIEd/jZaaBmRuizXcH8B5+C80QEXFh512IZlJRvkM5kT1K GXF9NiTY0IwELpsTXOF70B9oumwHTKg99qgNq/PjoyXna/AGpyhQJ+1WF+wHhf6E TWPv3EEpWoua6NpjHybtfYg6vQRLn5c6dOZepBRyaWoqOXHwZeto8xJ/1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFcg9Bm48fqFWxdibRK4+kh4xv4eMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVnlEMEdiangtb1ZiRjJKdEVyajZTSGpHX2g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABVOZAwQA Ba+oAwQABa/DMA0GCSqGSIb3DQEBCwUAA4IBAQB6eXLcWuhxAn5muqJOBgEz+CIa Uy7K2sWw+urp+xPvVEHnb9rm6a7o0onYg3UGGrd9Ei7fVC06S+oZuUag7y3O+DUo lQHMVce5fV+GmjW3aD8DSwVml7z4IwMRAVtTHZfoIxQSwL6WzRqiIjW6U41r3lm+ mS+L83Wxd7asZYqdnc+G6J/ZP47ZnHFCTumhkQajukoPA2+b/QXTXS9/+zV1t0vF Tv5dd2Y1SA8j7sX3EqekCGltnlpibj78HJcwqxa7eoziO9RmlPmLjgXemEvfkHA9 S2icuUA71o+c4n04YKnLAXMwKbHTPAM9EDl4AE9wtDNbmPjhNMvmQT+2GMfE -----END CERTIFICATE-----Generated at Sun Dec 14 03:40:05 2025 by rpki-client