This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XIwQD9W7gT3JB6OAxMemusxPTz8.roa File: XIwQD9W7gT3JB6OAxMemusxPTz8.roa (raw, json) Hash identifier: MA5MTkCjnX0XfobH2291iXBhUjQ4JTY1cKwV897tyA0= Subject key identifier: 5C:8C:10:0F:D5:BB:81:3D:C9:07:A3:80:C4:C7:A6:BA:CC:4F:4F:3F Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A93E9B3A2EF273C128966F412AA39EEF3 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XIwQD9W7gT3JB6OAxMemusxPTz8.roa Signing time: Mon 17 Nov 2025 22:22:37 +0000 ROA not before: Mon 17 Nov 2025 22:22:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 5.231.30.0/24 maxlen: 24 77.90.54.0/24 maxlen: 24 217.69.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:93:e9:b3:a2:ef:27:3c:12:89:66:f4:12:aa:39:ee:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 17 22:22:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5c8c100fd5bb813dc907a380c4c7a6bacc4f4f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:99:a7:34:b6:a0:29:37:3f:c7:7c:b5:65:62: 4e:4e:1b:cf:97:27:64:ea:7a:55:e7:a0:0f:16:3d: e1:5c:78:69:c1:13:20:80:58:d1:e5:09:16:c6:5d: ff:9f:82:48:16:dc:5f:80:90:30:0f:9b:81:51:cc: 37:fc:74:91:88:2a:e6:d1:04:e9:a7:14:f5:99:16: d1:97:41:fb:64:df:ac:0e:5a:2b:11:d8:f1:be:19: 76:d3:89:3d:15:16:f5:f9:53:ef:16:1b:6f:16:57: aa:c5:e1:3e:cb:76:8e:23:95:03:97:78:fd:88:28: f4:bd:62:27:7d:53:68:a5:66:2d:0f:36:da:b5:3a: c9:38:64:68:d7:db:5f:e1:76:1a:5a:b7:af:dd:af: 16:0f:59:00:6f:cc:26:b9:18:21:12:d5:4a:fd:0d: f2:50:37:fd:93:4f:a6:98:51:03:ad:cb:67:0d:09: 61:a0:27:e0:33:1b:41:0c:93:3f:de:ac:88:9c:cb: a0:d1:66:2e:b0:ae:f8:28:e5:54:f2:d8:1f:37:6b: 78:8b:0b:59:04:64:95:ec:42:8f:d8:1f:f7:32:15: 79:76:a3:fa:1e:60:6c:eb:9a:4e:a7:c9:96:cf:11: 7c:d0:44:98:97:53:ca:2c:a2:63:2c:1f:e3:2d:a0: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8C:10:0F:D5:BB:81:3D:C9:07:A3:80:C4:C7:A6:BA:CC:4F:4F:3F X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XIwQD9W7gT3JB6OAxMemusxPTz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.30.0/24 77.90.54.0/24 217.69.166.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:89:3e:65:00:4a:7a:93:51:75:d0:14:37:eb:a2:2b:89:bf: 8c:49:b6:cd:00:f9:0e:1c:45:8a:a7:ac:a2:68:ea:77:a1:d5: b8:f1:83:4e:1d:fa:23:ba:87:a1:f9:89:ef:ad:36:79:62:c9: 68:f8:02:78:68:fc:f5:db:5a:30:c0:d6:22:13:42:d9:a1:6c: df:c0:70:11:18:25:02:ba:f4:dd:5c:dd:e4:98:d0:3b:54:37: cc:f3:3e:b8:9f:5a:84:b7:f8:eb:7c:54:75:01:ef:69:45:2c: 8e:f7:15:34:87:1a:13:1a:e0:57:a2:97:bc:86:41:a4:95:24: 5d:e7:1e:64:09:25:7c:fe:28:47:b6:57:50:1c:0f:55:28:80: d1:f8:87:58:d4:d9:82:6c:72:22:2e:71:16:7d:c9:ea:5b:cd: 69:d1:46:4d:57:3f:55:d5:f8:77:1d:86:f8:47:76:ad:c1:c9: 6a:6a:77:95:98:c7:0e:2d:59:13:41:9e:da:eb:72:8d:cf:bf: c1:90:c9:14:02:d8:62:dc:e8:34:62:ad:2c:0b:32:4c:d4:f7: 6e:d9:5b:d0:da:af:7b:43:70:02:91:48:09:6e:cb:24:74:50: 44:34:e6:9f:75:ed:a1:66:7b:53:3c:8d:69:fe:25:5c:5a:d9: e1:b6:06:2d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqT6bOi7yc8Eolm9BKqOe7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTE3MjIyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzhjMTAwZmQ1YmI4MTNkYzkwN2EzODBjNGM3YTZiYWNjNGY0ZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5mnNLagKTc/x3y1ZWJOThvPlydk 6npV56APFj3hXHhpwRMggFjR5QkWxl3/n4JIFtxfgJAwD5uBUcw3/HSRiCrm0QTp pxT1mRbRl0H7ZN+sDlorEdjxvhl204k9FRb1+VPvFhtvFleqxeE+y3aOI5UDl3j9 iCj0vWInfVNopWYtDzbatTrJOGRo19tf4XYaWrev3a8WD1kAb8wmuRghEtVK/Q3y UDf9k0+mmFEDrctnDQlhoCfgMxtBDJM/3qyInMug0WYusK74KOVU8tgfN2t4iwtZ BGSV7EKP2B/3MhV5dqP6HmBs65pOp8mWzxF80ESYl1PKLKJjLB/jLaBXewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFyMEA/Vu4E9yQejgMTHprrMT08/MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvWEl3UUQ5VzdnVDNKQjZPQXhNZW11c3hQVHo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABeceAwQA TVo2AwQA2UWmMA0GCSqGSIb3DQEBCwUAA4IBAQBMiT5lAEp6k1F10BQ366Irib+M SbbNAPkOHEWKp6yiaOp3odW48YNOHfojuoeh+YnvrTZ5Yslo+AJ4aPz121owwNYi E0LZoWzfwHARGCUCuvTdXN3kmNA7VDfM8z64n1qEt/jrfFR1Ae9pRSyO9xU0hxoT GuBXope8hkGklSRd5x5kCSV8/ihHtldQHA9VKIDR+IdY1NmCbHIiLnEWfcnqW81p 0UZNVz9V1fh3HYb4R3atwclqaneVmMcOLVkTQZ7a63KNz7/BkMkUAthi3Og0Yq0s CzJM1Pdu2VvQ2q97Q3ACkUgJbsskdFBENOafde2hZntTPI1p/iVcWtnhtgYt -----END CERTIFICATE-----Generated at Fri Dec 5 07:03:39 2025 by rpki-client