This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ssK-hT_ZnOL0Z3zLtviu6J76ks0.roa File: ssK-hT_ZnOL0Z3zLtviu6J76ks0.roa (raw, json) Hash identifier: xNqcV+H5AmTkIEoQVLPwJ+iZRSlRtpElXDl5hvMmVa0= Subject key identifier: B2:C2:BE:85:3F:D9:9C:E2:F4:67:7C:CB:B6:F8:AE:E8:9E:FA:92:CD Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A974F7454E0E79A10A7ACA0A9EA85EC10 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ssK-hT_ZnOL0Z3zLtviu6J76ks0.roa Signing time: Tue 18 Nov 2025 14:12:37 +0000 ROA not before: Tue 18 Nov 2025 14:12:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 5.175.204.0/24 maxlen: 24 77.90.59.0/24 maxlen: 24 89.106.80.0/24 maxlen: 24 94.249.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 06:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:4f:74:54:e0:e7:9a:10:a7:ac:a0:a9:ea:85:ec:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 18 14:12:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b2c2be853fd99ce2f4677ccbb6f8aee89efa92cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:9c:fe:be:61:fa:3e:4b:1d:39:83:ca:b8: ac:18:9f:5e:38:4b:9b:98:fe:50:95:dd:83:f9:c3: d8:bc:21:31:a8:5a:fd:37:13:42:a2:a6:62:4a:6d: 0a:05:dc:3a:ae:52:43:c1:d8:e1:ba:c0:4d:b7:c2: fe:d1:76:5a:6c:9b:8d:e6:ed:12:ea:d5:fd:1d:b2: d5:72:f7:40:3b:bf:75:b1:3d:41:19:11:52:33:06: d2:a7:27:ac:b3:9e:44:bc:c1:ef:9a:ad:bb:0d:78: de:bb:67:26:7d:6c:15:d9:03:d9:ee:45:79:6c:03: 85:09:a9:0b:44:51:0e:bc:1c:21:3a:2a:3a:9c:45: e7:06:88:d9:c0:f4:ee:33:a1:d1:b6:01:1e:8d:e5: 3f:89:e0:30:28:86:d4:be:97:05:5d:58:54:bd:a1: 9d:bb:35:d8:83:78:a2:42:4f:fe:01:5e:06:77:a3: f8:ea:0d:af:a5:eb:b6:4c:03:35:4b:a1:62:82:d2: 9e:a5:4e:4e:22:a0:3e:ec:14:73:45:91:72:a9:e2: 1a:e5:b0:31:12:17:e4:9a:38:96:e6:4b:0c:2e:4e: 3d:a5:48:7d:ba:97:c2:d6:bc:da:fa:0b:1f:4b:83: 55:7b:31:3d:25:37:d3:d7:aa:ab:a2:6e:c5:8a:5b: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C2:BE:85:3F:D9:9C:E2:F4:67:7C:CB:B6:F8:AE:E8:9E:FA:92:CD X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ssK-hT_ZnOL0Z3zLtviu6J76ks0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.204.0/24 77.90.59.0/24 89.106.80.0/24 94.249.183.0/24 Signature Algorithm: sha256WithRSAEncryption 83:ee:3e:c0:7d:63:da:b1:14:27:62:9a:bb:a9:aa:59:7e:a0: 8e:14:91:67:ad:77:9b:b2:69:ad:89:47:8d:aa:51:00:c9:eb: fd:48:e0:bc:c0:c0:a7:f1:da:c4:4d:47:69:0a:0a:74:a0:7f: 8d:96:ab:ed:4a:7f:8d:a3:5d:2c:b4:4f:a6:25:61:c6:38:b6: c2:1f:79:ff:96:b9:7f:af:5d:64:ee:22:c7:d6:eb:45:ed:88: 47:42:bc:d5:4c:c2:0d:18:97:b8:34:43:2f:58:f4:2d:32:db: 00:07:5f:1d:e8:88:6a:a7:f5:14:f9:51:25:de:9f:a6:7f:05: e4:3e:96:55:c7:35:86:ef:e6:99:46:df:43:4f:b7:0e:f5:37: 49:54:57:ad:76:8e:dd:ff:b1:c5:0c:b5:58:37:6c:8e:70:ba: de:a0:3f:26:a5:67:c5:14:c2:7f:5d:e3:71:77:fd:cb:00:f0: 56:14:05:8f:47:98:04:0b:09:9e:12:76:ff:54:d3:a3:87:98: cf:fe:01:20:69:73:31:3e:24:fd:d7:12:a7:4a:8c:a2:b2:23: a4:10:6e:93:74:36:6e:27:f2:a7:a4:c2:3a:0e:55:fa:3c:a3: 2a:60:3f:bb:b5:cc:e3:61:70:b2:06:be:7a:c5:59:1a:be:25: 0e:ea:9e:25 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqXT3RU4OeaEKesoKnqhewQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTE4MTQxMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmMyYmU4NTNmZDk5Y2UyZjQ2NzdjY2JiNmY4YWVlODllZmE5MmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0mc/r5h+j5LHTmDyrisGJ9eOEub mP5Qld2D+cPYvCExqFr9NxNCoqZiSm0KBdw6rlJDwdjhusBNt8L+0XZabJuN5u0S 6tX9HbLVcvdAO791sT1BGRFSMwbSpyess55EvMHvmq27DXjeu2cmfWwV2QPZ7kV5 bAOFCakLRFEOvBwhOio6nEXnBojZwPTuM6HRtgEejeU/ieAwKIbUvpcFXVhUvaGd uzXYg3iiQk/+AV4Gd6P46g2vpeu2TAM1S6FigtKepU5OIqA+7BRzRZFyqeIa5bAx EhfkmjiW5ksMLk49pUh9upfC1rza+gsfS4NVezE9JTfT16qrom7FilvroQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLLCvoU/2Zzi9Gd8y7b4ruie+pLNMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvc3NLLWhUX1puT0wwWjN6THR2aXU2Sjc2a3MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABa/MAwQA TVo7AwQAWWpQAwQAXvm3MA0GCSqGSIb3DQEBCwUAA4IBAQCD7j7AfWPasRQnYpq7 qapZfqCOFJFnrXebsmmtiUeNqlEAyev9SOC8wMCn8drETUdpCgp0oH+NlqvtSn+N o10stE+mJWHGOLbCH3n/lrl/r11k7iLH1utF7YhHQrzVTMINGJe4NEMvWPQtMtsA B18d6Ihqp/UU+VEl3p+mfwXkPpZVxzWG7+aZRt9DT7cO9TdJVFetdo7d/7HFDLVY N2yOcLreoD8mpWfFFMJ/XeNxd/3LAPBWFAWPR5gECwmeEnb/VNOjh5jP/gEgaXMx PiT91xKnSoyisiOkEG6TdDZuJ/KnpMI6DlX6PKMqYD+7tczjYXCyBr56xVkaviUO 6p4l -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:28 2025 by rpki-client