This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vpOhSsIwTpGzd5xkEp-x2XDiACo.roa File: vpOhSsIwTpGzd5xkEp-x2XDiACo.roa (raw, json) Hash identifier: E7dPbe4kEeCF6UxaCxYEP6bprGV5/ylbu06cLFoEvYA= Subject key identifier: BE:93:A1:4A:C2:30:4E:91:B3:77:9C:64:12:9F:B1:D9:70:E2:00:2A Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A5B610B989E94B6F71A0158A4F881D82C Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vpOhSsIwTpGzd5xkEp-x2XDiACo.roa Signing time: Thu 06 Nov 2025 22:54:37 +0000 ROA not before: Thu 06 Nov 2025 22:54:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23470 IP address blocks: 5.231.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5b:61:0b:98:9e:94:b6:f7:1a:01:58:a4:f8:81:d8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 6 22:54:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be93a14ac2304e91b3779c64129fb1d970e2002a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:eb:ba:ff:52:f5:d3:e0:f6:da:4b:47:8f: 1d:42:b0:8f:cf:9e:4f:f6:21:7e:f6:7f:d5:25:1a: 19:26:33:9d:57:99:ec:e7:2c:34:f6:14:c0:4c:aa: e6:98:b6:52:a8:13:2c:6c:bd:4a:50:58:cb:ed:9f: 57:86:5d:27:86:14:40:fe:51:7d:d4:95:da:98:7a: 5a:87:fe:23:76:85:2c:2d:25:1a:a3:06:8d:b9:b4: 0a:7d:15:7b:1f:a2:f7:8b:63:e1:97:56:06:43:c1: 0c:fc:8e:ac:63:4e:fe:e4:8e:bc:8c:0f:44:2a:91: f4:ba:87:2b:fb:7a:2f:b6:6c:57:20:c3:c9:20:df: ca:27:8c:d6:84:3d:65:54:a9:1c:2b:62:24:d0:d5: 87:bd:b0:4b:f6:dd:dc:91:40:b0:2f:ab:00:67:a8: ee:b5:69:76:ff:6a:df:2d:ad:2e:47:7b:27:38:dc: c7:44:29:2d:02:a0:63:6f:8e:dc:95:5e:b7:6c:86: 91:5a:fd:be:bc:f6:cd:f1:88:4e:83:05:4b:44:06: af:8f:b2:27:90:4a:0d:b5:08:19:75:bd:84:40:f1: 9e:56:9c:f3:84:06:7a:1f:ab:5b:a4:e7:fb:3c:cc: 61:5c:81:87:dc:5f:f1:48:13:23:26:76:8f:3f:69: 41:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:93:A1:4A:C2:30:4E:91:B3:77:9C:64:12:9F:B1:D9:70:E2:00:2A X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vpOhSsIwTpGzd5xkEp-x2XDiACo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.61.0/24 Signature Algorithm: sha256WithRSAEncryption 83:6c:88:06:de:48:6b:23:40:ee:f5:a0:6f:59:d4:4a:3c:b6: dc:88:c4:fb:a7:0d:9a:89:2a:f2:4b:d4:de:32:01:f5:5f:7a: 79:c6:62:51:6d:6f:fd:f5:42:35:89:b1:c0:90:ef:2c:a6:8b: d9:c0:2f:61:cf:96:cc:9e:26:55:c7:9d:9e:fd:e1:77:fd:7e: ab:ec:5a:48:2f:b3:c4:7b:b4:1c:96:57:65:50:91:36:db:c0: 0f:0a:f8:9b:f4:c5:19:b4:a5:96:f5:f8:93:9a:7f:da:07:2d: 27:82:a9:49:b8:94:eb:1f:bd:8d:97:70:89:d5:7f:8d:33:a2: 4d:92:db:88:a3:ec:82:79:10:5b:44:07:5a:95:cd:ae:9a:5b: 6b:b2:f6:08:9e:b8:70:ab:c1:48:2c:a6:45:49:33:7f:b0:7f: 24:26:af:41:65:c8:bc:7b:b0:a7:2d:31:ab:a5:7c:e4:96:e2: 8b:e9:c5:a3:49:b3:e4:e5:1d:d8:86:67:7d:98:4d:a0:d3:66: cd:06:04:75:22:b7:ce:77:2c:7d:df:5a:20:ae:82:f8:2c:d7: 00:06:b9:5f:b0:3b:1b:10:e1:71:ca:c2:f9:9c:b9:b8:fc:84: 6a:5c:30:b1:ca:d0:64:b4:9e:f5:91:53:d5:18:df:fa:de:5f: 05:c2:ec:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpbYQuYnpS29xoBWKT4gdgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTA2MjI1NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTkzYTE0YWMyMzA0ZTkxYjM3NzljNjQxMjlmYjFkOTcwZTIwMDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Druv9S9dPg9tpLR48dQrCPz55P 9iF+9n/VJRoZJjOdV5ns5yw09hTATKrmmLZSqBMsbL1KUFjL7Z9Xhl0nhhRA/lF9 1JXamHpah/4jdoUsLSUaowaNubQKfRV7H6L3i2Phl1YGQ8EM/I6sY07+5I68jA9E KpH0uocr+3ovtmxXIMPJIN/KJ4zWhD1lVKkcK2Ik0NWHvbBL9t3ckUCwL6sAZ6ju tWl2/2rfLa0uR3snONzHRCktAqBjb47clV63bIaRWv2+vPbN8YhOgwVLRAavj7In kEoNtQgZdb2EQPGeVpzzhAZ6H6tbpOf7PMxhXIGH3F/xSBMjJnaPP2lBZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL6ToUrCME6Rs3ecZBKfsdlw4gAqMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvdnBPaFNzSXdUcEd6ZDV4a0VwLXgyWERpQUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABec9MA0G CSqGSIb3DQEBCwUAA4IBAQCDbIgG3khrI0Du9aBvWdRKPLbciMT7pw2aiSryS9Te MgH1X3p5xmJRbW/99UI1ibHAkO8spovZwC9hz5bMniZVx52e/eF3/X6r7FpIL7PE e7QclldlUJE228APCvib9MUZtKWW9fiTmn/aBy0ngqlJuJTrH72Nl3CJ1X+NM6JN ktuIo+yCeRBbRAdalc2umltrsvYInrhwq8FILKZFSTN/sH8kJq9BZci8e7CnLTGr pXzkluKL6cWjSbPk5R3Yhmd9mE2g02bNBgR1IrfOdyx931ogroL4LNcABrlfsDsb EOFxysL5nLm4/IRqXDCxytBktJ71kVPVGN/63l8FwuzT -----END CERTIFICATE-----Generated at Sat Nov 22 22:08:49 2025 by rpki-client