This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jSVjXvTjcKzu_8SSoHnfyD6HOM4.roa File: jSVjXvTjcKzu_8SSoHnfyD6HOM4.roa (raw, json) Hash identifier: VhjPn4RZCJWYdfLvsQqPvX1I/Sq2nVkcSFoz9UhHeWs= Subject key identifier: 8D:25:63:5E:F4:E3:70:AC:EE:FF:C4:92:A0:79:DF:C8:3E:87:38:CE Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AD91BC977023E8EB34F0BCA377DC4A3FF Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jSVjXvTjcKzu_8SSoHnfyD6HOM4.roa Signing time: Mon 01 Dec 2025 08:51:08 +0000 ROA not before: Mon 01 Dec 2025 08:51:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209216 IP address blocks: 5.175.210.0/24 maxlen: 24 2a02:2fc0:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:1b:c9:77:02:3e:8e:b3:4f:0b:ca:37:7d:c4:a3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 1 08:51:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d25635ef4e370aceeffc492a079dfc83e8738ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:6d:55:32:f6:bf:3a:93:76:71:50:8a:06: db:8c:c6:4e:f9:05:fd:24:2e:d9:96:9f:dd:a0:63: d2:fa:48:74:ca:1b:f6:ae:33:25:cf:06:d9:dd:72: 51:61:07:5d:04:48:35:b5:f3:fa:43:b3:13:f3:ff: 69:7e:cc:3a:e0:6f:5f:6d:1f:e2:7d:eb:4e:0b:0a: a4:09:56:a9:c9:cb:80:1f:5f:00:bd:37:4a:1e:ef: f7:fa:73:66:96:66:ea:d8:65:97:8f:56:0a:36:c1: 6f:8f:81:f9:78:42:33:a8:a4:99:1e:03:35:10:36: ac:46:40:7a:f7:34:f0:c8:fc:8d:24:5e:b7:c6:5c: e7:bb:0a:d2:18:ef:e1:0a:db:45:7a:51:e4:e6:62: 1f:d4:12:c0:dd:c5:0e:3a:29:21:04:58:ef:72:a5: 02:72:ed:d1:2e:12:1b:e2:d2:5a:61:72:a2:fc:59: bd:e6:e7:fd:ba:0d:c7:10:08:f7:03:11:0d:51:dc: 94:bf:40:8e:27:e9:e3:94:aa:3d:54:f3:5c:fb:38: 97:0b:19:b9:aa:6a:a0:a5:a8:c1:13:55:95:26:91: 77:7c:2f:4a:09:1a:65:e4:c1:fd:7e:a6:ca:44:4a: 7c:c0:58:22:58:eb:88:4c:03:b9:ce:51:aa:aa:9f: 2a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:25:63:5E:F4:E3:70:AC:EE:FF:C4:92:A0:79:DF:C8:3E:87:38:CE X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jSVjXvTjcKzu_8SSoHnfyD6HOM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.210.0/24 IPv6: 2a02:2fc0:16::/48 Signature Algorithm: sha256WithRSAEncryption 72:fa:d9:b9:7d:83:43:10:23:8d:df:9c:b1:7b:4c:33:91:51: 16:3c:8a:34:67:0c:21:04:50:78:05:5f:03:e4:48:3b:d2:a0: 47:0e:05:b8:5f:d9:d0:ba:0c:dc:55:86:2d:59:5d:36:c1:78: 98:bd:95:2e:12:e4:64:9a:10:18:51:c4:01:81:0f:90:80:0e: 28:d9:af:2a:47:27:be:95:b9:fc:6a:0a:1a:b9:84:36:d3:2f: c0:ec:c1:51:08:67:8a:0b:19:80:34:47:ff:49:5c:bc:57:db: 1e:8c:c1:d8:07:25:2c:2a:a9:df:5d:48:88:8c:7d:08:19:97: 8d:72:4b:5b:69:1f:c9:ca:e1:1a:2e:4f:19:7a:be:d4:4a:2d: 43:3a:48:f7:52:c7:da:c5:bc:13:90:8b:3a:4a:bc:b2:f1:bb: 20:a2:72:45:15:cb:ce:6d:13:ca:85:da:8f:77:50:8e:c9:2e: 8c:8e:c7:c9:a8:ee:75:de:62:65:85:1e:b3:93:0f:ae:47:b6: ea:ef:c7:bc:1a:25:e5:29:7d:6f:03:54:a1:bb:63:12:c8:88: 5b:3d:cd:c3:01:bf:64:19:35:55:ce:5e:5a:8d:4b:87:2f:eb: c3:5f:8e:a4:68:96:73:fc:ca:bd:21:28:c5:95:bf:62:7d:1c: 7e:8d:a5:ac -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZrZG8l3Aj6Os08Lyjd9xKP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjAxMDg1MTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDI1NjM1ZWY0ZTM3MGFjZWVmZmM0OTJhMDc5ZGZjODNlODczOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKxtVTL2vzqTdnFQigbbjMZO+QX9 JC7Zlp/doGPS+kh0yhv2rjMlzwbZ3XJRYQddBEg1tfP6Q7MT8/9pfsw64G9fbR/i fetOCwqkCVapycuAH18AvTdKHu/3+nNmlmbq2GWXj1YKNsFvj4H5eEIzqKSZHgM1 EDasRkB69zTwyPyNJF63xlznuwrSGO/hCttFelHk5mIf1BLA3cUOOikhBFjvcqUC cu3RLhIb4tJaYXKi/Fm95uf9ug3HEAj3AxENUdyUv0COJ+njlKo9VPNc+ziXCxm5 qmqgpajBE1WVJpF3fC9KCRpl5MH9fqbKREp8wFgiWOuITAO5zlGqqp8qSwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFI0lY17043Cs7v/EkqB538g+hzjOMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvalNWalh2VGpjS3p1XzhTU29IbmZ5RDZIT000LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQABa/SMA8E AgACMAkDBwAqAi/AABYwDQYJKoZIhvcNAQELBQADggEBAHL62bl9g0MQI43fnLF7 TDORURY8ijRnDCEEUHgFXwPkSDvSoEcOBbhf2dC6DNxVhi1ZXTbBeJi9lS4S5GSa EBhRxAGBD5CADijZrypHJ76VufxqChq5hDbTL8DswVEIZ4oLGYA0R/9JXLxX2x6M wdgHJSwqqd9dSIiMfQgZl41yS1tpH8nK4RouTxl6vtRKLUM6SPdSx9rFvBOQizpK vLLxuyCickUVy85tE8qF2o93UI7JLoyOx8mo7nXeYmWFHrOTD65Hturvx7waJeUp fW8DVKG7YxLIiFs9zcMBv2QZNVXOXlqNS4cv68NfjqRolnP8yr0hKMWVv2J9HH6N paw= -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:58 2025 by rpki-client