This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eY38x2zw7sqIyETxkEFy005MAP0.roa File: eY38x2zw7sqIyETxkEFy005MAP0.roa (raw, json) Hash identifier: BHmzaeskw97IDPqoXs6ul/syvIJVBkxtU/RZGq7rCmg= Subject key identifier: 79:8D:FC:C7:6C:F0:EE:CA:88:C8:44:F1:90:41:72:D3:4E:4C:00:FD Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AD73818728EB547B16CF1E872D36EC81A Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eY38x2zw7sqIyETxkEFy005MAP0.roa Signing time: Mon 01 Dec 2025 00:02:48 +0000 ROA not before: Mon 01 Dec 2025 00:02:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213413 IP address blocks: 5.175.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d7:38:18:72:8e:b5:47:b1:6c:f1:e8:72:d3:6e:c8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 1 00:02:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=798dfcc76cf0eeca88c844f1904172d34e4c00fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:24:5f:ec:5f:30:d9:6d:49:51:5f:2d:f2: 6e:a5:54:2d:e0:5f:b8:ad:76:70:76:3d:84:09:d7: a3:59:60:d2:b3:1e:13:5e:d4:4a:bc:be:99:05:a4: 58:5c:ab:71:88:86:7c:a2:55:0d:5b:b3:f8:89:0c: 1f:10:37:e4:5e:0c:35:22:c7:aa:ab:35:d8:3e:aa: 42:9d:21:d8:48:80:a5:1d:33:93:86:e8:83:cb:ba: 12:64:3d:e4:e8:95:b2:f3:78:3b:fd:49:1a:4b:ce: 5f:ee:12:88:df:2c:88:63:45:7b:18:95:f3:a2:af: 28:66:18:bd:c6:6c:7e:7b:13:a9:96:8f:ee:04:5a: 4b:37:53:b7:b0:ac:d0:5b:0f:e9:12:aa:8c:1d:41: 06:b7:07:58:c9:a7:b0:f1:37:58:49:57:f7:1a:f6: 2b:e4:76:36:2e:71:3b:77:bc:43:3a:9b:5a:7c:4a: 27:30:72:05:bd:63:f3:15:d3:c0:74:48:fc:1c:79: fa:9a:bf:a3:27:bc:c5:77:94:b9:70:1b:bf:39:9f: 60:60:c7:ee:49:5d:06:c7:d2:77:b3:fc:04:3e:34: 41:ae:e2:7b:f0:ef:62:77:3d:06:25:d4:e5:5e:31: 77:8f:10:84:a0:83:70:00:0d:31:b5:c3:51:d7:45: 04:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8D:FC:C7:6C:F0:EE:CA:88:C8:44:F1:90:41:72:D3:4E:4C:00:FD X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eY38x2zw7sqIyETxkEFy005MAP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.176.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:5c:88:e2:b3:e7:6b:52:bc:f9:77:fe:1d:87:aa:87:54:4c: 9d:8f:9f:ad:fb:b5:e1:ab:2f:61:95:15:8d:a2:1e:10:a6:79: 63:9d:38:bc:ec:23:ba:be:b7:8b:30:43:06:64:f7:a5:d1:bd: 47:fe:54:73:8b:3b:3a:a8:f8:1a:73:8f:6d:d6:d4:58:5f:e3: 47:c8:25:60:b8:5f:7c:87:86:0e:cc:a8:cf:b3:0b:28:46:5e: 7c:fa:7a:2a:2e:18:21:dd:33:b7:f6:d3:25:bc:6e:e5:e3:6b: 36:34:50:0e:af:78:b9:da:d7:8f:28:b3:27:67:d9:d7:d5:1b: 74:47:92:e8:40:95:5a:e5:49:d4:6b:e6:5e:63:c0:c4:5b:2e: ad:d1:51:08:10:16:92:ed:1a:36:e0:51:df:36:ce:9f:ee:fb: c8:89:f0:dd:53:7c:01:4b:f5:63:1e:6f:6d:cc:1c:29:a0:0b: 79:bb:9a:04:28:a3:e6:d1:0d:da:f3:a7:88:92:31:04:12:3a: 37:df:1d:f8:52:f8:67:a9:b3:24:1b:b7:66:01:c9:66:fd:a8: 7f:3b:ed:c1:e3:7a:a6:e7:96:df:ca:5c:ee:24:d0:b7:a7:af: c6:09:06:13:e6:80:af:f8:fb:34:f8:42:71:6f:0c:e4:3e:ab: c9:01:8c:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrXOBhyjrVHsWzx6HLTbsgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjAxMDAwMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OThkZmNjNzZjZjBlZWNhODhjODQ0ZjE5MDQxNzJkMzRlNGMwMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru8kX+xfMNltSVFfLfJupVQt4F+4 rXZwdj2ECdejWWDSsx4TXtRKvL6ZBaRYXKtxiIZ8olUNW7P4iQwfEDfkXgw1Iseq qzXYPqpCnSHYSIClHTOThuiDy7oSZD3k6JWy83g7/UkaS85f7hKI3yyIY0V7GJXz oq8oZhi9xmx+exOplo/uBFpLN1O3sKzQWw/pEqqMHUEGtwdYyaew8TdYSVf3GvYr 5HY2LnE7d7xDOptafEonMHIFvWPzFdPAdEj8HHn6mr+jJ7zFd5S5cBu/OZ9gYMfu SV0Gx9J3s/wEPjRBruJ78O9idz0GJdTlXjF3jxCEoINwAA0xtcNR10UEFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmN/Mds8O7KiMhE8ZBBctNOTAD9MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZVkzOHgyenc3c3FJeUVUeGtFRnkwMDVNQVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+wMA0G CSqGSIb3DQEBCwUAA4IBAQBrXIjis+drUrz5d/4dh6qHVEydj5+t+7Xhqy9hlRWN oh4QpnljnTi87CO6vreLMEMGZPel0b1H/lRzizs6qPgac49t1tRYX+NHyCVguF98 h4YOzKjPswsoRl58+noqLhgh3TO39tMlvG7l42s2NFAOr3i52tePKLMnZ9nX1Rt0 R5LoQJVa5UnUa+ZeY8DEWy6t0VEIEBaS7Ro24FHfNs6f7vvIifDdU3wBS/VjHm9t zBwpoAt5u5oEKKPm0Q3a86eIkjEEEjo33x34UvhnqbMkG7dmAclm/ah/O+3B43qm 55bfylzuJNC3p6/GCQYT5oCv+Ps0+EJxbwzkPqvJAYwD -----END CERTIFICATE-----Generated at Fri Dec 5 17:05:20 2025 by rpki-client