This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_LKIUs4FAxIYzk974vjQqurp0qI.roa File: _LKIUs4FAxIYzk974vjQqurp0qI.roa (raw, json) Hash identifier: njhe6HfDe+BTg5QZW8AzL/glEpD0pSmUYfqk9HSi29U= Subject key identifier: FC:B2:88:52:CE:05:03:12:18:CE:4F:7B:E2:F8:D0:AA:EA:E9:D2:A2 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AD84E69C40236B22287EE0D50D6A81624 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_LKIUs4FAxIYzk974vjQqurp0qI.roa Signing time: Mon 01 Dec 2025 05:06:48 +0000 ROA not before: Mon 01 Dec 2025 05:06:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 5.83.153.0/24 maxlen: 24 5.175.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:4e:69:c4:02:36:b2:22:87:ee:0d:50:d6:a8:16:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 1 05:06:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fcb28852ce05031218ce4f7be2f8d0aaeae9d2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:b4:57:8d:99:ab:cb:ae:70:66:42:8b:df:4c: 97:b1:14:4f:ca:8f:8d:b4:f0:b1:35:1a:fc:f8:d1: cc:6b:08:17:72:7b:87:5f:b0:b2:67:a0:fe:a2:85: 90:71:8f:ad:47:e9:cc:07:42:01:9c:af:ef:3a:b5: 50:d7:39:88:b4:d8:f4:fd:c5:15:1b:a8:e7:64:43: 4c:83:0c:9a:15:7c:65:34:3a:f9:47:3a:86:28:0e: 3d:1f:c2:2e:03:96:35:ad:2c:45:84:63:19:05:a5: fa:e2:98:27:18:9b:db:b5:81:38:c1:06:cf:d8:88: 20:4e:eb:10:6d:65:69:ae:b1:ed:79:c8:c2:aa:6e: f0:05:f1:8f:23:29:ac:28:ed:47:72:99:dd:de:72: c0:aa:4d:df:0e:dd:d7:25:75:4a:96:49:e9:ba:4b: bd:73:e9:4d:d9:fa:bb:ae:be:5c:09:86:dd:41:20: 91:44:8b:9a:09:f0:df:61:89:22:8c:6b:77:7a:1a: 72:1a:8d:4f:5e:59:16:35:ce:04:65:da:bb:51:5e: 65:d8:56:33:9a:49:a8:66:b8:d3:c1:62:19:aa:b7: 80:9f:1b:c3:88:56:3c:f9:f4:30:2e:15:fc:3c:24: 5a:1f:32:64:39:59:e9:48:0d:f7:c2:2d:47:21:1b: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B2:88:52:CE:05:03:12:18:CE:4F:7B:E2:F8:D0:AA:EA:E9:D2:A2 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_LKIUs4FAxIYzk974vjQqurp0qI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.153.0/24 5.175.195.0/24 Signature Algorithm: sha256WithRSAEncryption c2:03:59:e5:a1:af:ec:f5:2d:b6:3c:c6:d0:bf:59:16:be:3d: 21:38:cf:b1:8c:0c:98:79:42:82:e0:64:2c:a8:c3:5b:e1:81: 5e:d0:e8:9b:dd:25:16:af:2b:e3:75:03:cc:c1:95:8c:6a:56: 06:60:0c:88:31:15:2e:9e:56:af:8a:4d:e7:d9:1e:f5:d2:f7: 99:2b:c0:96:79:88:d8:e1:88:88:ae:5f:01:f3:ed:1a:6c:5c: 0f:40:95:fa:c1:42:bb:c9:8e:4d:53:93:a8:07:27:96:b7:7d: e7:f7:e1:60:aa:10:af:1a:09:76:29:97:b4:6e:38:70:71:54: 42:bd:71:6e:4b:aa:42:e5:72:93:37:f5:a8:c8:1a:0f:68:cd: 46:fb:af:63:c3:cd:3b:62:dc:24:5e:3b:8c:56:35:90:95:f8: 49:ce:eb:70:c1:cb:fb:e7:a8:dc:e4:fc:a5:1f:d1:88:bd:5b: 07:ce:1e:2a:b6:ba:f1:af:51:ce:1f:cd:83:d5:fe:8f:a0:0b: b5:c1:de:a2:5a:e1:7e:8a:26:d2:46:4c:84:e9:46:75:76:a6: 0d:70:dd:15:21:ae:93:65:26:15:e1:83:95:70:60:f3:6b:1e: d8:78:55:d5:02:ef:3d:f0:ec:90:b4:f4:fc:67:e2:d8:af:7c: a6:82:f4:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrYTmnEAjayIofuDVDWqBYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjAxMDUwNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2IyODg1MmNlMDUwMzEyMThjZTRmN2JlMmY4ZDBhYWVhZTlkMmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bRXjZmry65wZkKL30yXsRRPyo+N tPCxNRr8+NHMawgXcnuHX7CyZ6D+ooWQcY+tR+nMB0IBnK/vOrVQ1zmItNj0/cUV G6jnZENMgwyaFXxlNDr5RzqGKA49H8IuA5Y1rSxFhGMZBaX64pgnGJvbtYE4wQbP 2IggTusQbWVprrHtecjCqm7wBfGPIymsKO1Hcpnd3nLAqk3fDt3XJXVKlknpuku9 c+lN2fq7rr5cCYbdQSCRRIuaCfDfYYkijGt3ehpyGo1PXlkWNc4EZdq7UV5l2FYz mkmoZrjTwWIZqreAnxvDiFY8+fQwLhX8PCRaHzJkOVnpSA33wi1HIRursQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPyyiFLOBQMSGM5Pe+L40Krq6dKiMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvX0xLSVVzNEZBeElZems5NzR2alFxdXJwMHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOZAwQA Ba/DMA0GCSqGSIb3DQEBCwUAA4IBAQDCA1nloa/s9S22PMbQv1kWvj0hOM+xjAyY eUKC4GQsqMNb4YFe0Oib3SUWryvjdQPMwZWMalYGYAyIMRUunlavik3n2R710veZ K8CWeYjY4YiIrl8B8+0abFwPQJX6wUK7yY5NU5OoByeWt33n9+FgqhCvGgl2KZe0 bjhwcVRCvXFuS6pC5XKTN/WoyBoPaM1G+69jw807YtwkXjuMVjWQlfhJzutwwcv7 56jc5PylH9GIvVsHzh4qtrrxr1HOH82D1f6PoAu1wd6iWuF+iibSRkyE6UZ1dqYN cN0VIa6TZSYV4YOVcGDzax7YeFXVAu898OyQtPT8Z+LYr3ymgvTP -----END CERTIFICATE-----Generated at Fri Dec 5 04:29:26 2025 by rpki-client