This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/chL9JCnfCx93e8ilMKHKRaNXkXQ.roa File: chL9JCnfCx93e8ilMKHKRaNXkXQ.roa (raw, json) Hash identifier: VTzzAttQCixnci7GMqwrLabsPTRY1SEdiWoSs+gGgzM= Subject key identifier: 72:12:FD:24:29:DF:0B:1F:77:7B:C8:A5:30:A1:CA:45:A3:57:91:74 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019ADD7784D10EB39856F7B681E148C0892E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/chL9JCnfCx93e8ilMKHKRaNXkXQ.roa Signing time: Tue 02 Dec 2025 05:09:48 +0000 ROA not before: Tue 02 Dec 2025 05:09:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 5.231.74.0/24 maxlen: 24 5.231.92.0/24 maxlen: 24 5.231.253.0/24 maxlen: 24 94.249.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:77:84:d1:0e:b3:98:56:f7:b6:81:e1:48:c0:89:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 2 05:09:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7212fd2429df0b1f777bc8a530a1ca45a3579174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d0:70:df:3e:9a:95:8b:44:0e:cc:03:71:95: 71:8a:1c:f1:a0:a0:b2:bb:03:4b:c1:5e:a8:35:e8: 43:a9:b1:10:5a:d2:a7:d0:df:17:01:d5:47:3a:7a: 69:58:d0:a8:c4:3b:6f:40:89:88:b6:98:d6:81:d0: a2:71:b8:ce:2e:16:05:1f:0a:d0:16:23:a8:e5:21: 27:e8:17:c2:fa:20:21:56:e6:2d:03:da:b8:45:c5: a3:a6:03:88:b6:cb:b6:ae:f7:85:2f:34:24:40:72: 3d:c6:56:a8:cd:b6:9e:a1:d5:74:eb:ca:e3:27:63: 91:d4:60:97:20:a1:7b:a4:b5:16:82:be:d2:2b:e0: 7a:4a:25:cd:b7:aa:01:3d:ad:bd:67:9c:4d:af:0e: 07:ef:f9:49:29:56:18:2d:39:46:2f:cd:e6:7e:71: 9c:5f:65:1d:16:03:3d:56:45:b3:d2:8d:72:ad:fc: 8b:34:7f:36:57:9f:00:16:f5:af:4a:01:5f:d4:20: 1d:04:a2:7e:9c:7a:75:17:72:fd:2b:90:28:45:41: 38:ce:6f:94:76:82:27:24:ea:64:52:4c:f2:36:ae: d0:2a:01:15:ec:7e:27:9e:c2:76:37:cd:00:68:7e: 69:7c:22:bf:8d:74:a4:89:93:b5:4b:31:7f:c5:7e: 52:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:12:FD:24:29:DF:0B:1F:77:7B:C8:A5:30:A1:CA:45:A3:57:91:74 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/chL9JCnfCx93e8ilMKHKRaNXkXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.74.0/24 5.231.92.0/24 5.231.253.0/24 94.249.205.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:72:48:26:0e:62:dc:a1:ab:34:ab:af:95:b5:96:c5:a8:d1: 12:7a:bf:e8:f7:fa:52:06:be:01:6a:4a:a3:5c:0a:fb:0a:c2: 48:e2:e6:fb:48:6b:b9:92:23:ee:67:56:a4:c5:d3:7c:bc:38: ab:05:80:ab:11:32:63:3e:7e:9c:cd:ac:9c:f4:5a:83:f8:23: 5a:af:11:f3:e7:a8:2f:73:c4:93:84:a4:35:0b:91:c5:3e:fc: 02:a4:f1:2c:99:12:8b:73:a0:19:1a:10:25:15:a6:05:09:bd: e6:a3:df:38:19:9e:e9:78:d6:4a:ae:de:3f:81:6f:53:35:2f: 27:86:7a:c9:b4:e7:f7:48:8a:11:ce:b8:f4:01:ac:65:70:dc: 21:6e:b5:81:6f:bf:06:3c:b5:43:87:71:af:2e:7a:03:b0:95: 84:0c:55:8d:89:fb:32:2e:8c:10:c6:6e:cd:31:5b:28:b0:12: 57:7f:07:b9:d9:d9:f7:56:2f:7f:69:94:91:0b:ff:18:82:53: 83:5e:9e:f7:64:d9:63:64:5d:0c:bb:c0:da:f7:a2:d9:bc:e4: f2:cc:e3:f5:53:af:c7:c4:ef:64:21:5f:74:4c:7d:fe:5a:ed: 7f:30:9a:df:82:38:7d:8a:2b:24:93:81:e2:c7:94:29:5c:fb: b9:3d:42:35 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrdd4TRDrOYVve2geFIwIkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjAyMDUwOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjEyZmQyNDI5ZGYwYjFmNzc3YmM4YTUzMGExY2E0NWEzNTc5MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNBw3z6alYtEDswDcZVxihzxoKCy uwNLwV6oNehDqbEQWtKn0N8XAdVHOnppWNCoxDtvQImItpjWgdCicbjOLhYFHwrQ FiOo5SEn6BfC+iAhVuYtA9q4RcWjpgOItsu2rveFLzQkQHI9xlaozbaeodV068rj J2OR1GCXIKF7pLUWgr7SK+B6SiXNt6oBPa29Z5xNrw4H7/lJKVYYLTlGL83mfnGc X2UdFgM9VkWz0o1yrfyLNH82V58AFvWvSgFf1CAdBKJ+nHp1F3L9K5AoRUE4zm+U doInJOpkUkzyNq7QKgEV7H4nnsJ2N80AaH5pfCK/jXSkiZO1SzF/xX5SSQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHIS/SQp3wsfd3vIpTChykWjV5F0MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvY2hMOUpDbmZDeDkzZThpbE1LSEtSYU5Ya1hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABedKAwQA BedcAwQABef9AwQAXvnNMA0GCSqGSIb3DQEBCwUAA4IBAQAsckgmDmLcoas0q6+V tZbFqNESer/o9/pSBr4BakqjXAr7CsJI4ub7SGu5kiPuZ1akxdN8vDirBYCrETJj Pn6czayc9FqD+CNarxHz56gvc8SThKQ1C5HFPvwCpPEsmRKLc6AZGhAlFaYFCb3m o984GZ7peNZKrt4/gW9TNS8nhnrJtOf3SIoRzrj0AaxlcNwhbrWBb78GPLVDh3Gv LnoDsJWEDFWNifsyLowQxm7NMVsosBJXfwe52dn3Vi9/aZSRC/8YglODXp73ZNlj ZF0Mu8Da96LZvOTyzOP1U6/HxO9kIV90TH3+Wu1/MJrfgjh9iiskk4Hix5QpXPu5 PUI1 -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:42 2025 by rpki-client