This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d-nZpJQynlLaNYjLEaC8R2UYhcQ.roa File: d-nZpJQynlLaNYjLEaC8R2UYhcQ.roa (raw, json) Hash identifier: hPk4bf/Oo8dFEAwx5VHQ6DOn1Z9ChTWtvD7lSUWci/Q= Subject key identifier: 77:E9:D9:A4:94:32:9E:52:DA:35:88:CB:11:A0:BC:47:65:18:85:C4 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A853F1F053DE5A0F268F324B53EFF021A Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d-nZpJQynlLaNYjLEaC8R2UYhcQ.roa Signing time: Sat 15 Nov 2025 02:01:37 +0000 ROA not before: Sat 15 Nov 2025 02:01:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203446 IP address blocks: 5.83.141.0/24 maxlen: 24 2a02:2fc0:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:85:3f:1f:05:3d:e5:a0:f2:68:f3:24:b5:3e:ff:02:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 15 02:01:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=77e9d9a494329e52da3588cb11a0bc47651885c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:fe:b1:49:6e:5e:51:2b:86:b1:75:7f:3d: b8:2a:94:37:5f:92:f5:7f:1d:5f:33:39:2d:03:76: 29:a8:3b:85:84:55:18:0c:0f:9b:a4:26:cb:b1:40: a4:68:54:8e:67:10:04:5a:22:13:a1:10:d1:57:71: 5a:42:0c:b2:10:1f:41:3f:57:c2:b8:0d:8d:81:fd: a5:78:15:9a:b7:08:ba:96:2b:69:eb:82:f4:e3:19: a3:d2:5b:82:6f:c1:65:90:eb:86:51:06:f9:fd:5a: 2f:03:d2:cb:9c:11:61:a4:1d:72:b8:2c:04:23:23: 9d:e7:a4:74:d0:ba:6f:23:0b:ac:dd:d1:32:90:26: 1f:17:4f:9e:8c:3f:29:63:d0:7e:1f:3a:fc:9c:a8: 1a:d5:08:1b:82:d4:e6:ef:92:33:09:63:4a:15:d4: a2:c6:28:c5:24:30:e6:d0:bc:67:2f:9a:f0:34:76: 20:f5:a6:7f:07:90:0a:58:f1:de:f9:fa:4b:0a:55: fa:74:13:b9:f7:7c:0c:06:a7:d9:0e:94:52:b5:e2: 65:13:75:f1:cc:d4:37:8f:40:9b:63:f2:e0:e6:21: 02:12:db:af:28:79:0e:2e:a7:7c:cf:f8:6f:7a:47: c7:f3:c9:ec:d4:6c:11:7b:b9:9d:58:84:81:5c:3d: cd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E9:D9:A4:94:32:9E:52:DA:35:88:CB:11:A0:BC:47:65:18:85:C4 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d-nZpJQynlLaNYjLEaC8R2UYhcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.141.0/24 IPv6: 2a02:2fc0:17::/48 Signature Algorithm: sha256WithRSAEncryption c9:e6:09:6e:30:94:45:41:99:79:44:d0:8b:48:1e:b1:16:1a: 60:51:69:c6:35:77:20:62:34:1f:82:af:7e:83:a1:a9:6f:78: 55:4d:5d:51:43:7e:36:11:eb:0a:80:d5:b4:2d:91:d8:ef:13: 7f:59:22:b6:5f:7d:cb:d0:91:a6:98:de:1b:39:d4:d3:34:34: 7a:5d:68:39:e1:0e:15:81:19:82:7c:90:a0:eb:60:7b:b7:24: 20:c1:6c:3a:fc:3c:1f:a6:d3:b4:a0:d1:ef:43:13:ab:98:a2: 40:8c:d7:25:c2:ca:7b:3a:0a:df:c8:54:dc:22:71:1f:97:44: 19:6c:82:73:92:a4:3e:ee:ee:f8:9a:5a:85:b9:b3:db:41:4b: 9b:0c:b2:1b:19:ca:92:7c:83:f5:d3:9d:f4:4f:3b:97:25:b6: 45:4d:b7:2c:8a:54:37:70:e3:34:18:94:ba:aa:fc:e7:fb:64: 8d:81:93:56:17:38:f2:63:28:0a:73:f8:37:a8:63:b5:5b:e9: da:ed:b6:a0:a1:f7:4d:93:17:f3:dd:55:df:b0:fc:c7:e6:6d: 98:d4:dc:08:d3:50:13:ae:df:46:28:d4:69:72:e4:75:d3:db: 49:e8:f9:b6:b7:a1:c1:7c:ba:57:fa:d5:02:f4:a0:8f:5c:c1: aa:f4:c9:7b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqFPx8FPeWg8mjzJLU+/wIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTE1MDIwMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2U5ZDlhNDk0MzI5ZTUyZGEzNTg4Y2IxMWEwYmM0NzY1MTg4NWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6/+sUluXlErhrF1fz24KpQ3X5L1 fx1fMzktA3YpqDuFhFUYDA+bpCbLsUCkaFSOZxAEWiIToRDRV3FaQgyyEB9BP1fC uA2Ngf2leBWatwi6litp64L04xmj0luCb8FlkOuGUQb5/VovA9LLnBFhpB1yuCwE IyOd56R00LpvIwus3dEykCYfF0+ejD8pY9B+Hzr8nKga1QgbgtTm75IzCWNKFdSi xijFJDDm0LxnL5rwNHYg9aZ/B5AKWPHe+fpLClX6dBO593wMBqfZDpRSteJlE3Xx zNQ3j0CbY/Lg5iECEtuvKHkOLqd8z/hvekfH88ns1GwRe7mdWISBXD3NBQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHfp2aSUMp5S2jWIyxGgvEdlGIXEMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZC1uWnBKUXlubExhTllqTEVhQzhSMlVZaGNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQABVONMA8E AgACMAkDBwAqAi/AABcwDQYJKoZIhvcNAQELBQADggEBAMnmCW4wlEVBmXlE0ItI HrEWGmBRacY1dyBiNB+Cr36DoalveFVNXVFDfjYR6wqA1bQtkdjvE39ZIrZffcvQ kaaY3hs51NM0NHpdaDnhDhWBGYJ8kKDrYHu3JCDBbDr8PB+m07Sg0e9DE6uYokCM 1yXCyns6Ct/IVNwicR+XRBlsgnOSpD7u7viaWoW5s9tBS5sMshsZypJ8g/XTnfRP O5cltkVNtyyKVDdw4zQYlLqq/Of7ZI2Bk1YXOPJjKApz+DeoY7Vb6drttqCh902T F/PdVd+w/MfmbZjU3AjTUBOu30Yo1Gly5HXT20no+ba3ocF8ulf61QL0oI9cwar0 yXs= -----END CERTIFICATE-----Generated at Fri Dec 5 17:03:53 2025 by rpki-client