This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nJflsqcvLnW0MLFr0B0Ru5LV9eQ.roa File: nJflsqcvLnW0MLFr0B0Ru5LV9eQ.roa (raw, json) Hash identifier: TeI/LV08sfLbSclkIr02XO0Z5AtDJF1eLxk/ftuwoAE= Subject key identifier: 9C:97:E5:B2:A7:2F:2E:75:B4:30:B1:6B:D0:1D:11:BB:92:D5:F5:E4 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AE0FA910AB9F69DCF0C0975B5FA3E25B2 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nJflsqcvLnW0MLFr0B0Ru5LV9eQ.roa Signing time: Tue 02 Dec 2025 21:31:48 +0000 ROA not before: Tue 02 Dec 2025 21:31:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215365 IP address blocks: 5.83.142.0/23 maxlen: 23 5.83.142.0/24 maxlen: 24 5.83.143.0/24 maxlen: 24 77.90.15.0/24 maxlen: 24 77.90.60.0/24 maxlen: 24 77.90.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:fa:91:0a:b9:f6:9d:cf:0c:09:75:b5:fa:3e:25:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 2 21:31:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9c97e5b2a72f2e75b430b16bd01d11bb92d5f5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ea:cc:41:db:90:b6:2e:0a:e8:fa:9c:b7:33: 06:86:77:3b:f9:b5:f6:50:4f:42:54:ce:7f:ce:8b: 9f:ce:8e:3d:e2:90:c2:d0:65:24:0b:c9:ac:38:a1: d3:2d:52:53:f3:09:a6:e0:3b:46:0f:af:e4:75:b4: bb:d9:9f:cb:4b:9c:ce:30:2d:dd:e3:da:76:f9:59: 21:64:32:32:e9:ab:9d:b7:35:67:f6:05:a3:f9:aa: de:71:d7:64:7b:09:a6:5b:03:e9:28:be:86:44:7e: 17:fe:65:1c:8e:3c:a7:df:d7:df:2d:77:2f:97:35: 17:ec:c6:c7:fd:af:4d:31:59:69:45:ef:5e:17:6d: 84:a9:41:7d:7b:10:6a:6e:c8:bf:f0:89:62:fb:83: 9b:c6:d6:59:f0:e5:cc:52:2b:e9:f6:d5:b7:74:b0: ed:c6:8c:d1:40:e5:53:90:b4:b8:49:7b:cc:53:2f: f0:3d:ed:84:01:c1:39:f6:93:69:3e:68:30:94:44: 9a:af:88:6e:b5:fd:57:00:8a:68:30:0c:49:a2:ca: 48:bc:df:bc:71:b2:be:f9:9f:b0:20:5c:8b:79:0e: ce:fc:ff:62:1c:58:bb:01:e1:93:ea:08:b8:d3:21: 9b:eb:89:11:b3:95:e8:1b:c6:d9:2e:81:19:86:8d: f1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:97:E5:B2:A7:2F:2E:75:B4:30:B1:6B:D0:1D:11:BB:92:D5:F5:E4 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nJflsqcvLnW0MLFr0B0Ru5LV9eQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.142.0/23 77.90.15.0/24 77.90.60.0/23 Signature Algorithm: sha256WithRSAEncryption 75:60:6c:35:0e:63:ca:9d:f6:80:30:03:27:ce:02:03:2e:90: cb:95:9d:0c:32:c1:f1:a1:02:26:78:21:4d:be:b9:21:96:25: 34:77:b9:c3:17:fe:ac:ef:9f:d2:f7:9c:d3:b9:88:ff:36:51: 6f:27:c5:d7:54:6a:f7:d2:6d:fa:0c:d7:19:8b:01:2e:77:43: 9e:d0:14:a4:e6:da:29:d8:ad:7e:fa:ad:c3:f4:2e:27:04:2f: 64:0e:0f:c8:53:a2:a0:14:df:8f:12:4d:b1:f0:a1:34:2d:1b: f1:78:c1:80:2a:cf:fe:da:79:a9:8d:9b:56:82:1d:5a:24:e7: b5:95:c5:97:3f:0a:da:79:23:ae:a9:42:3c:27:aa:86:3d:4c: b9:d7:84:3f:56:f4:2b:d4:58:50:26:c7:a4:5c:22:fe:89:d0: 6e:f7:a8:3e:a8:bb:0c:5d:76:17:35:c0:72:d4:be:40:32:c8: 86:a1:4e:1a:8d:33:2e:04:a8:26:24:ed:6f:a1:6b:cd:96:b5: 23:03:45:19:21:0f:61:cc:e2:80:01:b4:3d:fd:7a:22:c1:79: 0a:e8:8e:2f:05:f4:d2:81:03:7f:fc:d7:21:3d:62:2a:a9:5e: 16:82:82:fe:c3:2a:43:d6:25:ab:c8:c7:e7:7c:91:9b:76:79: 67:75:a1:13 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrg+pEKufadzwwJdbX6PiWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjAyMjEzMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yzk3ZTViMmE3MmYyZTc1YjQzMGIxNmJkMDFkMTFiYjkyZDVmNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OrMQduQti4K6PqctzMGhnc7+bX2 UE9CVM5/zoufzo494pDC0GUkC8msOKHTLVJT8wmm4DtGD6/kdbS72Z/LS5zOMC3d 49p2+VkhZDIy6audtzVn9gWj+arecddkewmmWwPpKL6GRH4X/mUcjjyn39ffLXcv lzUX7MbH/a9NMVlpRe9eF22EqUF9exBqbsi/8Ili+4ObxtZZ8OXMUivp9tW3dLDt xozRQOVTkLS4SXvMUy/wPe2EAcE59pNpPmgwlESar4hutf1XAIpoMAxJospIvN+8 cbK++Z+wIFyLeQ7O/P9iHFi7AeGT6gi40yGb64kRs5XoG8bZLoEZho3xcwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJyX5bKnLy51tDCxa9AdEbuS1fXkMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvbkpmbHNxY3ZMblcwTUxGcjBCMFJ1NUxWOWVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBBVOOAwQA TVoPAwQBTVo8MA0GCSqGSIb3DQEBCwUAA4IBAQB1YGw1DmPKnfaAMAMnzgIDLpDL lZ0MMsHxoQImeCFNvrkhliU0d7nDF/6s75/S95zTuYj/NlFvJ8XXVGr30m36DNcZ iwEud0Oe0BSk5top2K1++q3D9C4nBC9kDg/IU6KgFN+PEk2x8KE0LRvxeMGAKs/+ 2nmpjZtWgh1aJOe1lcWXPwraeSOuqUI8J6qGPUy514Q/VvQr1FhQJsekXCL+idBu 96g+qLsMXXYXNcBy1L5AMsiGoU4ajTMuBKgmJO1voWvNlrUjA0UZIQ9hzOKAAbQ9 /XoiwXkK6I4vBfTSgQN//NchPWIqqV4WgoL+wypD1iWryMfnfJGbdnlndaET -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:43 2025 by rpki-client