This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cGcb34vSsMhLZ2C2LTK1pM6z01k.roa File: cGcb34vSsMhLZ2C2LTK1pM6z01k.roa (raw, json) Hash identifier: JXE6dVFoVmuuQX3t7KMeaew+K+u5v4p9XxAqozFZCRc= Subject key identifier: 70:67:1B:DF:8B:D2:B0:C8:4B:67:60:B6:2D:32:B5:A4:CE:B3:D3:59 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A86DEC7541C73B680C845174819D6A217 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cGcb34vSsMhLZ2C2LTK1pM6z01k.roa Signing time: Sat 15 Nov 2025 09:35:38 +0000 ROA not before: Sat 15 Nov 2025 09:35:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210705 IP address blocks: 5.231.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:86:de:c7:54:1c:73:b6:80:c8:45:17:48:19:d6:a2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 15 09:35:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=70671bdf8bd2b0c84b6760b62d32b5a4ceb3d359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:f7:28:2a:10:8a:3a:b0:0e:06:7a:e3:9c: 5f:27:e3:18:da:e8:ff:0e:0b:9e:e2:4c:37:bc:e5: 08:59:22:a2:42:7c:01:a1:dd:d0:29:f1:42:87:23: a6:f0:fd:4c:99:03:6f:ce:b8:c8:c2:73:94:7d:e7: 64:be:91:9e:c3:0d:fa:6c:52:06:f5:0e:9d:62:f5: 06:7b:d9:9c:99:8c:e6:d7:7d:5a:d5:57:e8:0a:cd: 5b:b9:12:d4:49:76:8d:d4:70:2b:90:5a:8f:f2:3f: 79:5e:8a:ea:d0:85:2d:b9:ca:99:c2:cb:46:66:16: 87:1f:ad:c4:54:0d:a6:e8:dc:da:ba:34:cf:eb:c5: 32:59:12:8e:b8:14:62:4d:9e:99:fb:be:c6:03:cf: e0:4b:b1:98:07:a7:1f:9e:03:0f:28:18:98:b1:83: 51:66:4a:be:5c:bf:38:08:b8:94:8f:df:31:cf:80: fd:b9:a6:52:7e:30:87:ee:63:58:06:75:05:e0:bb: aa:6a:47:7f:ca:3e:b2:e0:10:9b:7d:b8:af:90:2e: 0e:63:ad:8d:0f:1d:53:4b:a3:b5:9a:e1:a9:02:a0: 1b:31:c9:23:1a:fd:63:ed:a0:de:90:13:45:8a:c9: 2f:e2:82:fb:04:a0:79:48:1d:63:a9:6d:27:d2:39: f5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:67:1B:DF:8B:D2:B0:C8:4B:67:60:B6:2D:32:B5:A4:CE:B3:D3:59 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cGcb34vSsMhLZ2C2LTK1pM6z01k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.204.0/24 Signature Algorithm: sha256WithRSAEncryption cc:da:80:73:9d:93:2b:b9:e7:61:11:41:90:14:da:35:34:d2: ca:1f:b2:2d:06:aa:7a:0e:89:ad:6c:17:8a:e1:8b:77:04:d8: fe:b0:9a:b9:62:6a:86:ad:2a:2e:f9:cb:7c:ea:db:b8:91:c0: 2a:7b:3c:c9:60:4a:67:a1:5b:c3:17:f0:9b:77:9e:a5:1e:57: bc:a3:42:aa:e4:12:bf:89:bc:b8:7a:68:0d:37:e7:8e:36:2a: dd:9b:11:77:b2:a5:67:3b:12:88:d5:d4:b3:20:5f:48:9d:f9: e4:63:8e:12:b2:80:81:1f:d7:4e:94:a7:d8:9e:2e:b5:18:e8: 11:c9:4e:a2:73:ed:4f:ab:bc:85:1a:3f:bc:2a:9c:e8:7c:f9: ee:b9:ad:78:ab:e8:5b:f9:6d:82:13:51:b5:9a:80:f5:0c:e9: 51:96:3d:33:5e:12:41:2a:ab:0a:ce:47:64:7b:6b:53:8f:f0: 77:85:b3:36:6e:6d:61:e3:58:7e:e8:ab:6b:c7:2a:29:66:01: 6f:b1:7c:f7:6c:43:9e:1c:46:08:f3:13:c9:9b:fa:6d:7b:f5: ca:99:c6:39:f5:10:63:bf:47:2a:b4:7e:45:72:73:68:02:68: fc:5b:a6:4a:dd:bc:da:e3:9b:2b:eb:1d:d4:1b:88:53:ab:5f: d1:ca:1b:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqG3sdUHHO2gMhFF0gZ1qIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTE1MDkzNTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDY3MWJkZjhiZDJiMGM4NGI2NzYwYjYyZDMyYjVhNGNlYjNkMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBX3KCoQijqwDgZ645xfJ+MY2uj/ Dgue4kw3vOUIWSKiQnwBod3QKfFChyOm8P1MmQNvzrjIwnOUfedkvpGeww36bFIG 9Q6dYvUGe9mcmYzm131a1VfoCs1buRLUSXaN1HArkFqP8j95Xorq0IUtucqZwstG ZhaHH63EVA2m6NzaujTP68UyWRKOuBRiTZ6Z+77GA8/gS7GYB6cfngMPKBiYsYNR Zkq+XL84CLiUj98xz4D9uaZSfjCH7mNYBnUF4Luqakd/yj6y4BCbfbivkC4OY62N Dx1TS6O1muGpAqAbMckjGv1j7aDekBNFiskv4oL7BKB5SB1jqW0n0jn1ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHBnG9+L0rDIS2dgti0ytaTOs9NZMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvY0djYjM0dlNzTWhMWjJDMkxUSzFwTTZ6MDFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABefMMA0G CSqGSIb3DQEBCwUAA4IBAQDM2oBznZMruedhEUGQFNo1NNLKH7ItBqp6DomtbBeK 4Yt3BNj+sJq5YmqGrSou+ct86tu4kcAqezzJYEpnoVvDF/Cbd56lHle8o0Kq5BK/ iby4emgNN+eONirdmxF3sqVnOxKI1dSzIF9InfnkY44SsoCBH9dOlKfYni61GOgR yU6ic+1Pq7yFGj+8KpzofPnuua14q+hb+W2CE1G1moD1DOlRlj0zXhJBKqsKzkdk e2tTj/B3hbM2bm1h41h+6KtrxyopZgFvsXz3bEOeHEYI8xPJm/pte/XKmcY59RBj v0cqtH5FcnNoAmj8W6ZK3bza45sr6x3UG4hTq1/Ryht1 -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:43 2025 by rpki-client