This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hjE4qCepN4RYgVAWplsKhLYxcb0.roa File: hjE4qCepN4RYgVAWplsKhLYxcb0.roa (raw, json) Hash identifier: qNTCLXqTiJHcW1kiBdKCq9nSCloNwo6JWX1zVp4htHs= Subject key identifier: 86:31:38:A8:27:A9:37:84:58:81:50:16:A6:5B:0A:84:B6:31:71:BD Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B17974E14D459C682C989CCE92DFA8FE0 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hjE4qCepN4RYgVAWplsKhLYxcb0.roa Signing time: Sat 13 Dec 2025 12:02:30 +0000 ROA not before: Sat 13 Dec 2025 12:02:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210537 IP address blocks: 5.83.148.0/24 maxlen: 24 5.175.210.0/24 maxlen: 24 2a02:2fc0:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:97:4e:14:d4:59:c6:82:c9:89:cc:e9:2d:fa:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 13 12:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=863138a827a9378458815016a65b0a84b63171bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:f1:76:29:00:c7:ff:53:05:6e:1c:39:33: 2f:87:cd:d4:a8:4c:51:ba:71:4b:45:e4:2f:7b:2e: dd:e6:79:c8:bb:96:4e:30:53:d2:66:fb:5e:f9:b0: 73:06:8e:f1:d6:3f:40:e1:57:7a:2d:89:72:77:c5: 2e:b5:01:63:a2:4d:1a:a1:dc:da:27:c0:c9:5b:b2: 62:1a:57:fa:a9:9a:89:17:98:44:5a:34:a4:57:6d: 1e:eb:2d:4d:95:4f:ef:53:18:3d:ba:29:53:ad:cd: b0:b3:e1:f1:9e:2e:c6:4c:4e:74:2e:26:ec:44:3f: e4:0f:02:f8:f5:cf:fc:58:1e:e4:15:c3:1e:76:cc: 22:b1:07:7f:17:54:1b:55:32:d3:7e:00:c5:21:cb: f7:61:64:05:00:66:fe:21:d1:50:c8:c4:26:9f:49: 80:82:0d:62:31:e6:46:84:50:67:2e:ad:ba:1e:0f: 9c:77:8d:11:5e:41:6d:0b:20:44:c9:db:e9:18:c1: 9c:96:14:35:6a:88:db:4a:19:66:ea:fa:87:7c:7c: c5:c8:33:d8:66:e6:31:b8:ed:db:17:79:2c:f1:66: c1:c6:15:c3:dd:a0:4b:26:dc:98:b0:b4:49:e5:8b: 3a:18:1c:f0:0f:10:ba:a7:5b:81:07:25:e1:13:d8: 10:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:31:38:A8:27:A9:37:84:58:81:50:16:A6:5B:0A:84:B6:31:71:BD X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hjE4qCepN4RYgVAWplsKhLYxcb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.148.0/24 5.175.210.0/24 IPv6: 2a02:2fc0:19::/48 Signature Algorithm: sha256WithRSAEncryption 94:a9:82:6d:1d:e9:26:a3:14:11:10:c6:6c:1b:5b:b1:c7:1b: f0:20:5a:4f:ef:70:29:74:1a:cd:1d:92:f1:af:0f:7f:73:49: 4f:62:45:c2:81:b4:45:fb:a1:0f:c2:6a:60:39:b8:a4:ed:45: 55:61:b4:e7:f4:e4:8c:50:67:98:2f:4b:e1:04:a3:40:80:4f: 69:e9:a8:c3:a1:82:b2:45:0c:ef:ba:e4:f6:29:31:60:74:69: 45:6f:93:e5:6c:d9:80:d7:f6:1a:1d:9b:af:36:92:97:4d:57: 4e:8f:19:60:27:ef:33:e0:ac:a5:ec:bc:42:32:2e:5c:e2:bf: 88:bf:0e:67:1f:b3:1c:b8:81:9b:ef:dc:0e:ac:f8:46:db:87: d7:29:2e:5b:71:2b:79:62:99:93:4c:ea:44:db:12:fd:1b:65: b9:9d:ca:51:16:9f:0e:67:79:c4:c1:e3:6e:da:93:e1:1b:d9: 84:1d:47:35:36:ef:a7:e7:aa:95:f4:3d:ea:cc:d7:22:4d:06: b3:b4:85:26:90:2a:7b:b3:e2:fa:c5:b0:e8:a5:ef:4d:3f:eb: cf:22:9f:b9:28:7c:62:95:64:cc:26:68:fe:f3:6b:44:96:07: db:c7:d9:4e:71:45:21:c0:48:2d:81:e6:3f:b4:e3:59:19:81: b0:c9:df:fe -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZsXl04U1FnGgsmJzOkt+o/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjEzMTIwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjMxMzhhODI3YTkzNzg0NTg4MTUwMTZhNjViMGE4NGI2MzE3MWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYvxdikAx/9TBW4cOTMvh83UqExR unFLReQvey7d5nnIu5ZOMFPSZvte+bBzBo7x1j9A4Vd6LYlyd8UutQFjok0aodza J8DJW7JiGlf6qZqJF5hEWjSkV20e6y1NlU/vUxg9uilTrc2ws+Hxni7GTE50Libs RD/kDwL49c/8WB7kFcMedswisQd/F1QbVTLTfgDFIcv3YWQFAGb+IdFQyMQmn0mA gg1iMeZGhFBnLq26Hg+cd40RXkFtCyBEydvpGMGclhQ1aojbShlm6vqHfHzFyDPY ZuYxuO3bF3ks8WbBxhXD3aBLJtyYsLRJ5Ys6GBzwDxC6p1uBByXhE9gQrQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIYxOKgnqTeEWIFQFqZbCoS2MXG9MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvaGpFNHFDZXBONFJZZ1ZBV3Bsc0toTFl4Y2IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQABVOUAwQA Ba/SMA8EAgACMAkDBwAqAi/AABkwDQYJKoZIhvcNAQELBQADggEBAJSpgm0d6Saj FBEQxmwbW7HHG/AgWk/vcCl0Gs0dkvGvD39zSU9iRcKBtEX7oQ/CamA5uKTtRVVh tOf05IxQZ5gvS+EEo0CAT2npqMOhgrJFDO+65PYpMWB0aUVvk+Vs2YDX9hodm682 kpdNV06PGWAn7zPgrKXsvEIyLlziv4i/Dmcfsxy4gZvv3A6s+Ebbh9cpLltxK3li mZNM6kTbEv0bZbmdylEWnw5necTB427ak+Eb2YQdRzU276fnqpX0PerM1yJNBrO0 hSaQKnuz4vrFsOil700/688in7kofGKVZMwmaP7za0SWB9vH2U5xRSHASC2B5j+0 41kZgbDJ3/4= -----END CERTIFICATE-----Generated at Sun Dec 14 13:48:07 2025 by rpki-client