This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nn9YR2eGhuQLiaoyRBmhl6n2Gi0.roa File: nn9YR2eGhuQLiaoyRBmhl6n2Gi0.roa (raw, json) Hash identifier: oqNwvfiQOXqP2WFX850H1r8mpY9Z6VrlE4IhIKtDdag= Subject key identifier: 9E:7F:58:47:67:86:86:E4:0B:89:AA:32:44:19:A1:97:A9:F6:1A:2D Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AED87C8C3C6298AF6459CAB56E4086BFB Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nn9YR2eGhuQLiaoyRBmhl6n2Gi0.roa Signing time: Fri 05 Dec 2025 08:01:30 +0000 ROA not before: Fri 05 Dec 2025 08:01:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206996 IP address blocks: 5.83.138.0/24 maxlen: 24 5.175.181.0/24 maxlen: 24 5.175.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:87:c8:c3:c6:29:8a:f6:45:9c:ab:56:e4:08:6b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 5 08:01:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9e7f5847678686e40b89aa324419a197a9f61a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:ff:02:37:3f:af:1d:b7:ef:37:2d:d9:11: 18:73:48:a2:37:d5:f4:8e:b5:15:1c:e4:da:70:25: 14:07:fc:ad:f4:2c:8d:c4:b5:9a:76:f7:fd:59:fd: 99:cf:c4:b7:48:26:ad:2e:b7:6d:b9:02:f9:d1:2e: 53:ce:58:47:ea:fd:04:ec:77:19:7c:a0:1a:76:90: c6:1d:79:a6:7a:87:13:db:d9:f8:2a:a9:38:79:31: 36:25:7c:73:7d:fa:55:6f:43:4a:89:25:ec:10:ad: ed:11:8d:6b:8a:51:1e:25:30:38:40:71:7f:06:66: 5f:5e:64:3a:f0:4d:65:81:7e:e8:54:ba:8f:01:a2: 9d:ff:bf:5d:bd:a9:1c:a2:c5:f7:79:42:6c:d5:0c: a8:8a:16:6a:1b:21:d7:ed:50:6c:51:30:0b:c2:a3: fb:e1:88:3e:1a:12:b2:30:a4:6a:ae:e3:e9:df:53: ce:af:07:c4:4b:60:a5:f0:02:b8:a0:7f:4b:51:fe: 06:bd:6b:d7:78:64:19:c4:f5:0a:70:42:05:e7:e8: 1b:e5:ee:e0:bd:f3:83:f6:f8:58:2a:71:0e:13:08: 77:98:78:d9:4d:21:87:ab:ae:f0:47:71:24:2a:6f: 51:c3:62:9f:e5:d2:b6:72:64:ce:4e:fb:85:38:e2: 37:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7F:58:47:67:86:86:E4:0B:89:AA:32:44:19:A1:97:A9:F6:1A:2D X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nn9YR2eGhuQLiaoyRBmhl6n2Gi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.138.0/24 5.175.181.0/24 5.175.184.0/24 Signature Algorithm: sha256WithRSAEncryption 46:46:38:f8:6a:42:8f:7d:69:12:bf:5a:1b:d0:dc:d2:19:93: 7d:d7:b4:fe:2a:a4:6c:a5:37:4c:e7:7f:8f:85:c3:0e:ec:58: 1a:fa:dc:7c:e1:b2:e1:59:51:5b:70:9a:d5:ed:eb:6d:1b:50: 95:47:29:5d:9c:3c:55:81:56:c4:8d:8e:cf:a8:9d:9d:28:ba: fc:bc:3e:a7:3e:76:8c:9c:df:b3:12:f2:95:d1:d1:40:6d:13: e2:fe:ab:35:b1:ef:aa:42:bb:96:2e:77:79:8a:b3:0b:6f:52: 1c:71:81:26:fc:a7:47:2c:33:2f:42:ac:c2:88:67:cb:50:e7: fa:e9:df:1c:61:f9:d0:95:bb:82:2b:1e:27:97:d0:ba:d7:d3: 83:7f:a8:c4:ad:3d:d5:8c:bd:bf:51:2c:67:8e:a4:5b:48:d7: b5:51:ad:67:7c:8f:e1:aa:78:fe:8d:ec:86:7a:8d:e6:69:c6: 4a:35:3d:70:ed:19:26:52:a1:6a:5d:78:9f:31:40:67:52:50: 9f:8a:b7:43:af:7d:72:0e:f2:a6:eb:60:26:dd:9e:74:0f:1b: 48:d5:a0:de:1a:10:50:8e:1a:7b:bc:a9:57:a8:20:7f:60:0f: 4a:5a:cf:69:dc:3d:70:8a:37:a7:ce:46:72:11:a6:52:53:bd: b6:e2:53:ae -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrth8jDximK9kWcq1bkCGv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjA1MDgwMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTdmNTg0NzY3ODY4NmU0MGI4OWFhMzI0NDE5YTE5N2E5ZjYxYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrT/Ajc/rx237zct2REYc0iiN9X0 jrUVHOTacCUUB/yt9CyNxLWadvf9Wf2Zz8S3SCatLrdtuQL50S5TzlhH6v0E7HcZ fKAadpDGHXmmeocT29n4Kqk4eTE2JXxzffpVb0NKiSXsEK3tEY1rilEeJTA4QHF/ BmZfXmQ68E1lgX7oVLqPAaKd/79dvakcosX3eUJs1QyoihZqGyHX7VBsUTALwqP7 4Yg+GhKyMKRqruPp31POrwfES2Cl8AK4oH9LUf4GvWvXeGQZxPUKcEIF5+gb5e7g vfOD9vhYKnEOEwh3mHjZTSGHq67wR3EkKm9Rw2Kf5dK2cmTOTvuFOOI3OwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ5/WEdnhobkC4mqMkQZoZep9hotMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvbm45WVIyZUdodVFMaWFveVJCbWhsNm4yR2kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABVOKAwQA Ba+1AwQABa+4MA0GCSqGSIb3DQEBCwUAA4IBAQBGRjj4akKPfWkSv1ob0NzSGZN9 17T+KqRspTdM53+PhcMO7Fga+tx84bLhWVFbcJrV7ettG1CVRyldnDxVgVbEjY7P qJ2dKLr8vD6nPnaMnN+zEvKV0dFAbRPi/qs1se+qQruWLnd5irMLb1IccYEm/KdH LDMvQqzCiGfLUOf66d8cYfnQlbuCKx4nl9C619ODf6jErT3VjL2/USxnjqRbSNe1 Ua1nfI/hqnj+jeyGeo3macZKNT1w7RkmUqFqXXifMUBnUlCfirdDr31yDvKm62Am 3Z50DxtI1aDeGhBQjhp7vKlXqCB/YA9KWs9p3D1wijenzkZyEaZSU7224lOu -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:44 2025 by rpki-client