This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h9HWc91am8bbJGQza8dN7NtR7xM.roa File: h9HWc91am8bbJGQza8dN7NtR7xM.roa (raw, json) Hash identifier: 2QUhSAmjNSUWlOmJunoj9io/Bx5aVSDMmRSFPbZQW80= Subject key identifier: 87:D1:D6:73:DD:5A:9B:C6:DB:24:64:33:6B:C7:4D:EC:DB:51:EF:13 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019ADD80ABDB05DF45A9DE11F6697F26C32C Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h9HWc91am8bbJGQza8dN7NtR7xM.roa Signing time: Tue 02 Dec 2025 05:19:48 +0000 ROA not before: Tue 02 Dec 2025 05:19:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58212 IP address blocks: 5.231.70.0/24 maxlen: 24 5.231.234.0/24 maxlen: 24 77.90.22.0/24 maxlen: 24 77.90.41.0/24 maxlen: 24 77.90.52.0/24 maxlen: 24 85.93.1.0/24 maxlen: 24 89.144.17.0/24 maxlen: 24 89.144.18.0/24 maxlen: 24 89.144.25.0/24 maxlen: 24 89.144.44.0/24 maxlen: 24 89.144.46.0/24 maxlen: 24 178.18.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:80:ab:db:05:df:45:a9:de:11:f6:69:7f:26:c3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 2 05:19:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=87d1d673dd5a9bc6db2464336bc74decdb51ef13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:95:5c:5b:65:fd:60:b4:bb:71:73:96:da:ee: 3f:c7:66:c0:66:cf:32:e8:a5:18:31:82:7c:3e:14: 44:83:96:53:03:17:32:bf:90:70:ea:a3:66:04:26: 2a:72:bf:58:92:91:08:ba:fa:fd:25:d1:d3:b9:9c: ad:eb:9a:1b:24:b4:34:12:5e:25:6f:a0:df:7b:1d: 85:d4:cf:2e:44:8d:31:d0:ce:62:c0:a8:f3:64:41: 5c:ae:33:8e:56:2d:33:0e:32:66:b9:fe:da:bd:e4: 81:da:32:c5:99:81:75:5a:9e:e5:c2:b6:3e:e8:1b: f9:57:81:4b:f5:89:4e:ec:8c:c4:a9:62:bd:71:72: bf:06:0e:38:1d:3b:03:4c:f7:ca:e6:83:3b:fd:12: 43:7d:7c:16:31:c8:e4:ad:16:da:78:e4:39:17:7a: 6f:df:9a:83:b6:9c:d9:fa:f2:ec:d5:23:2f:fb:af: 5b:bf:1a:6e:09:ae:92:5d:78:e6:aa:13:06:10:f9: f4:6e:8e:60:4d:d5:a4:e0:28:fe:3b:d1:41:fb:f0: bb:6b:92:85:c9:e6:15:f9:b1:25:d2:82:9d:86:ed: 8f:92:1a:49:c8:7b:06:7c:e7:87:88:d3:5d:30:ed: 13:6b:44:9e:5a:d1:40:3b:69:93:3b:a2:8f:92:b9: dd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D1:D6:73:DD:5A:9B:C6:DB:24:64:33:6B:C7:4D:EC:DB:51:EF:13 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h9HWc91am8bbJGQza8dN7NtR7xM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.70.0/24 5.231.234.0/24 77.90.22.0/24 77.90.41.0/24 77.90.52.0/24 85.93.1.0/24 89.144.17.0-89.144.18.255 89.144.25.0/24 89.144.44.0/24 89.144.46.0/24 178.18.147.0/24 Signature Algorithm: sha256WithRSAEncryption d7:8f:c1:b1:b4:cf:e5:ee:2f:05:31:9a:a7:1b:ad:ba:e4:6a: e0:32:9a:f5:83:74:07:54:7c:82:f4:5b:27:c5:cb:ea:f6:f6: 14:49:b8:a4:e5:76:0a:cc:12:a6:36:b7:af:22:b1:21:d4:bf: 19:59:df:fa:88:0f:9c:52:c7:05:c0:ff:21:ed:c4:6d:f6:f0: d8:7c:b6:cf:11:61:17:bd:ab:93:18:d3:70:00:d9:bb:da:f3: 5e:f6:f6:4b:e0:b5:0b:7c:0a:a3:8a:13:52:c5:c7:fb:2e:2a: 9d:74:18:ec:22:e7:f4:e7:3d:af:6f:66:15:21:4b:e3:bb:4b: e1:65:ab:56:88:ef:02:80:9e:90:44:c6:da:3a:91:41:8b:6a: bf:9d:26:0f:60:12:48:39:19:a2:89:69:0a:5f:45:30:19:b8: 2c:04:b9:8a:81:57:5b:72:d3:7a:ee:3d:e0:70:fd:03:47:6b: a6:11:0f:fe:e1:d8:f7:2d:a0:c2:50:10:96:f9:3c:b0:1b:5e: 2f:f8:a8:14:4d:1e:6e:80:e6:98:f0:38:ab:fa:e0:a9:33:90: cc:f8:f5:56:43:09:4b:d6:30:a2:62:7e:05:53:52:f5:e8:82: 50:58:f0:4c:08:96:cc:a2:c6:7a:0c:65:45:4c:47:70:41:bd: e4:e9:4c:30 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZrdgKvbBd9Fqd4R9ml/JsMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjAyMDUxOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2QxZDY3M2RkNWE5YmM2ZGIyNDY0MzM2YmM3NGRlY2RiNTFlZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopVcW2X9YLS7cXOW2u4/x2bAZs8y 6KUYMYJ8PhREg5ZTAxcyv5Bw6qNmBCYqcr9YkpEIuvr9JdHTuZyt65obJLQ0El4l b6Dfex2F1M8uRI0x0M5iwKjzZEFcrjOOVi0zDjJmuf7aveSB2jLFmYF1Wp7lwrY+ 6Bv5V4FL9YlO7IzEqWK9cXK/Bg44HTsDTPfK5oM7/RJDfXwWMcjkrRbaeOQ5F3pv 35qDtpzZ+vLs1SMv+69bvxpuCa6SXXjmqhMGEPn0bo5gTdWk4Cj+O9FB+/C7a5KF yeYV+bEl0oKdhu2PkhpJyHsGfOeHiNNdMO0Ta0SeWtFAO2mTO6KPkrndTQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFIfR1nPdWpvG2yRkM2vHTezbUe8TMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvaDlIV2M5MWFtOGJiSkdRemE4ZE43TnRSN3hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQABedGAwQA BefqAwQATVoWAwQATVopAwQATVo0AwQAVV0BMAwDBABZkBEDBABZkBIDBABZkBkD BABZkCwDBABZkC4DBACyEpMwDQYJKoZIhvcNAQELBQADggEBANePwbG0z+XuLwUx mqcbrbrkauAymvWDdAdUfIL0WyfFy+r29hRJuKTldgrMEqY2t68isSHUvxlZ3/qI D5xSxwXA/yHtxG328Nh8ts8RYRe9q5MY03AA2bva81729kvgtQt8CqOKE1LFx/su Kp10GOwi5/TnPa9vZhUhS+O7S+Flq1aI7wKAnpBExto6kUGLar+dJg9gEkg5GaKJ aQpfRTAZuCwEuYqBV1ty03ruPeBw/QNHa6YRD/7h2PctoMJQEJb5PLAbXi/4qBRN Hm6A5pjwOKv64KkzkMz49VZDCUvWMKJifgVTUvXoglBY8EwIlsyixnoMZUVMR3BB veTpTDA= -----END CERTIFICATE-----Generated at Fri Dec 5 07:01:34 2025 by rpki-client