This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mwJAgoRyQtars4c7VVbL9ZfkZbI.roa File: mwJAgoRyQtars4c7VVbL9ZfkZbI.roa (raw, json) Hash identifier: w4gYbZkhdkGDVXeKKIqXEX8y9JRCxIWkd5H4c+htnPA= Subject key identifier: 9B:02:40:82:84:72:42:D6:AB:B3:87:3B:55:56:CB:F5:97:E4:65:B2 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AEE8CB57EE99088B290D285305DED442B Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mwJAgoRyQtars4c7VVbL9ZfkZbI.roa Signing time: Fri 05 Dec 2025 12:46:30 +0000 ROA not before: Fri 05 Dec 2025 12:46:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213636 IP address blocks: 5.175.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:8c:b5:7e:e9:90:88:b2:90:d2:85:30:5d:ed:44:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 5 12:46:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9b024082847242d6abb3873b5556cbf597e465b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:35:2f:f8:fb:87:5c:1c:56:85:9d:cb:49: a5:c8:94:f4:88:d6:a3:3d:f5:38:87:dd:c6:13:0b: ec:a2:22:d8:11:2b:ce:bd:3b:6d:f8:6d:26:2e:aa: 95:0a:cf:c4:a2:37:32:b0:bf:34:f0:30:cc:21:7a: 61:b1:36:45:a5:49:a8:61:bf:ba:6b:d4:d9:aa:5b: 85:a7:c2:a0:9d:0f:27:75:a3:ef:02:94:f8:87:40: c0:48:c1:b8:3e:8f:c1:ed:03:0a:64:2d:9f:be:83: e5:f5:66:f8:39:f2:b4:60:a8:89:9c:75:a5:e2:2c: f1:d6:39:36:8c:53:52:82:d1:a1:0b:1a:ae:a4:3c: 0b:ea:0b:b2:59:4e:78:28:bc:1f:8c:70:ab:3a:60: b7:d1:df:92:c3:6f:f5:d6:09:00:f2:00:9b:8a:e8: 67:69:1c:12:32:83:ac:79:75:3e:af:b7:4a:74:3e: 20:9c:34:9e:dd:2d:3a:75:76:e2:4f:60:13:29:18: b6:ff:f7:5b:50:bc:5e:82:aa:d8:42:39:ff:75:76: 9d:d3:af:aa:12:a4:9e:43:0b:75:00:62:43:98:0e: 36:45:70:a0:02:4b:89:0a:e9:d0:db:56:98:ed:3f: 5a:d0:24:c2:ba:bf:02:96:40:3b:f1:8e:96:7a:7f: f8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:02:40:82:84:72:42:D6:AB:B3:87:3B:55:56:CB:F5:97:E4:65:B2 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mwJAgoRyQtars4c7VVbL9ZfkZbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.236.0/24 Signature Algorithm: sha256WithRSAEncryption 19:c7:ce:ea:48:e1:19:a2:99:33:c1:fd:d3:6f:bf:f8:23:54: f7:d8:24:8a:f7:22:66:09:35:81:b3:d4:ec:1c:58:48:8e:d1: 69:51:f8:94:12:68:79:c0:60:a9:f7:f0:d6:6b:05:21:12:61: 78:cb:f7:17:57:5c:52:c9:b1:65:c4:9c:55:c1:4a:7c:17:58: dd:9a:9a:4f:70:51:75:16:79:90:3a:c0:ca:04:8d:a4:4a:68: bc:73:a7:5c:66:33:93:46:5d:6a:ab:41:9c:7d:b5:06:be:62: 38:fc:d8:e6:a1:bd:52:4e:b6:42:fe:c0:1a:b6:9c:05:8c:b8: 5d:1b:de:bb:62:3b:9d:6c:4d:cd:9a:c7:0f:88:54:8c:eb:84: 14:bd:66:37:ae:95:cb:28:a2:6d:c8:64:83:2e:5e:f9:da:5d: 47:0c:02:4b:ba:5b:7b:f0:a6:d0:31:1d:ab:42:4c:fa:85:06: ca:2e:d0:51:5e:10:ce:d8:27:8e:23:af:90:91:37:b1:53:f7: df:c9:5a:66:92:63:a3:89:43:20:cf:dd:cd:97:f0:d9:ba:8b: ec:56:c2:a3:ab:ce:28:8e:be:4c:60:55:7e:cd:c5:83:ec:c5: 4b:f6:e5:48:e5:18:1d:bb:18:df:a3:4e:49:23:7d:6f:2b:77: c1:5a:20:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrujLV+6ZCIspDShTBd7UQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjA1MTI0NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjAyNDA4Mjg0NzI0MmQ2YWJiMzg3M2I1NTU2Y2JmNTk3ZTQ2NWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Sk1L/j7h1wcVoWdy0mlyJT0iNaj PfU4h93GEwvsoiLYESvOvTtt+G0mLqqVCs/EojcysL808DDMIXphsTZFpUmoYb+6 a9TZqluFp8KgnQ8ndaPvApT4h0DASMG4Po/B7QMKZC2fvoPl9Wb4OfK0YKiJnHWl 4izx1jk2jFNSgtGhCxqupDwL6guyWU54KLwfjHCrOmC30d+Sw2/11gkA8gCbiuhn aRwSMoOseXU+r7dKdD4gnDSe3S06dXbiT2ATKRi2//dbULxegqrYQjn/dXad06+q EqSeQwt1AGJDmA42RXCgAkuJCunQ21aY7T9a0CTCur8ClkA78Y6Wen/4VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJsCQIKEckLWq7OHO1VWy/WX5GWyMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvbXdKQWdvUnlRdGFyczRjN1ZWYkw5WmZrWmJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/sMA0G CSqGSIb3DQEBCwUAA4IBAQAZx87qSOEZopkzwf3Tb7/4I1T32CSK9yJmCTWBs9Ts HFhIjtFpUfiUEmh5wGCp9/DWawUhEmF4y/cXV1xSybFlxJxVwUp8F1jdmppPcFF1 FnmQOsDKBI2kSmi8c6dcZjOTRl1qq0GcfbUGvmI4/Njmob1STrZC/sAatpwFjLhd G967YjudbE3NmscPiFSM64QUvWY3rpXLKKJtyGSDLl752l1HDAJLult78KbQMR2r Qkz6hQbKLtBRXhDO2CeOI6+QkTexU/ffyVpmkmOjiUMgz93Nl/DZuovsVsKjq84o jr5MYFV+zcWD7MVL9uVI5Rgduxjfo05JI31vK3fBWiDh -----END CERTIFICATE-----Generated at Fri Dec 5 17:07:21 2025 by rpki-client