This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wIXf4oB6pN9066yG829JtBiVsaE.roa File: wIXf4oB6pN9066yG829JtBiVsaE.roa (raw, json) Hash identifier: +uwW1BA/vsSow9IFJbNz27Z5fSozAZwA8fNMNi+7wwk= Subject key identifier: C0:85:DF:E2:80:7A:A4:DF:74:EB:AC:86:F3:6F:49:B4:18:95:B1:A1 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A61AF1E7C29B035B6318A145F254B6136 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wIXf4oB6pN9066yG829JtBiVsaE.roa Signing time: Sat 08 Nov 2025 04:17:37 +0000 ROA not before: Sat 08 Nov 2025 04:17:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44547 IP address blocks: 5.175.136.0/24 maxlen: 24 89.144.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:61:af:1e:7c:29:b0:35:b6:31:8a:14:5f:25:4b:61:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 8 04:17:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c085dfe2807aa4df74ebac86f36f49b41895b1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:e8:ac:74:1e:42:e4:fd:11:06:f7:6e:f8: 40:75:fd:16:e4:82:39:33:93:33:7f:38:cb:c7:ca: 31:d6:a2:69:ad:ca:a3:cd:4c:0f:2e:7b:a5:5f:6c: 2f:bb:ea:ae:eb:6f:9b:d6:58:1b:66:5d:54:72:f9: a6:3e:a6:1b:dd:d2:5e:ce:e4:e6:09:93:f1:c3:ef: 9a:09:53:b5:d0:fe:e0:c9:d1:95:08:69:33:cc:b0: d6:a1:2a:f9:e9:f4:ac:72:52:96:b8:4b:57:8b:43: ae:67:8c:74:c3:62:23:0a:cd:f5:ac:84:1d:52:e7: 0b:1e:b9:8e:e6:84:7b:9c:30:f6:d7:e6:3d:fe:64: 68:a1:8d:31:e0:5f:08:35:56:3a:5a:39:07:5d:80: 20:c8:1a:fe:11:24:8b:e4:68:2a:42:ae:60:12:24: 28:77:36:a0:dc:35:39:d9:2f:ac:3a:c8:54:ae:e7: c5:5f:82:27:a8:c5:cc:24:e1:df:0d:66:ba:2b:c7: cf:51:91:d2:2a:10:33:73:1c:0d:0e:23:f5:1f:3c: bc:1e:54:ed:73:11:ac:86:22:87:0f:88:ed:9f:cc: 7b:3a:1a:eb:65:b4:88:cf:96:9d:d2:f5:29:31:37: 0a:a4:ac:68:7c:ac:22:fc:af:b4:42:7f:05:b7:96: 36:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:85:DF:E2:80:7A:A4:DF:74:EB:AC:86:F3:6F:49:B4:18:95:B1:A1 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wIXf4oB6pN9066yG829JtBiVsaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.136.0/24 89.144.20.0/24 Signature Algorithm: sha256WithRSAEncryption 00:1c:6a:d7:a2:eb:5b:1b:28:96:ba:9a:cd:c3:4b:22:dc:03: f6:8d:07:85:b5:30:34:92:2c:88:33:05:5d:80:7d:69:84:b7: 8a:c2:8f:b7:ca:1a:28:10:34:9b:cf:fe:c7:c1:c6:27:5f:8b: fe:d8:03:12:2d:bd:96:d8:4e:2e:1c:19:0f:8c:b5:f8:e8:ad: a5:d3:9a:89:f2:22:6e:f0:2a:74:3b:cb:94:11:30:e9:c9:6b: c1:a7:98:1b:38:fc:81:a0:7a:92:b6:99:f5:02:fb:c8:35:43: d9:03:b1:58:97:e5:2a:51:6b:de:7d:c2:d7:f1:5d:54:4a:68: 40:68:31:34:8e:1b:99:77:54:47:30:54:99:79:d3:45:e7:52: 6d:b6:e6:0c:62:6c:de:12:ab:8f:99:f0:f1:0b:a2:ee:59:46: 24:f3:22:a2:ec:87:87:53:cc:3d:a2:df:33:59:3b:a8:f6:cc: 9d:1f:10:23:ea:b5:ca:0b:17:98:d7:2d:cc:f6:4a:70:fc:f1: 2b:40:64:d2:e6:da:b8:8a:da:80:14:26:09:1e:d7:a9:bd:c2: 77:c4:33:56:49:84:80:a0:a4:2a:56:c3:a0:12:b2:99:46:f3: f5:bf:55:04:a4:d5:6b:86:aa:68:25:ed:87:f9:7f:b4:2e:9a: 60:bd:1b:ca -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZphrx58KbA1tjGKFF8lS2E2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTA4MDQxNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDg1ZGZlMjgwN2FhNGRmNzRlYmFjODZmMzZmNDliNDE4OTViMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugborHQeQuT9EQb3bvhAdf0W5II5 M5MzfzjLx8ox1qJprcqjzUwPLnulX2wvu+qu62+b1lgbZl1UcvmmPqYb3dJezuTm CZPxw++aCVO10P7gydGVCGkzzLDWoSr56fSsclKWuEtXi0OuZ4x0w2IjCs31rIQd UucLHrmO5oR7nDD21+Y9/mRooY0x4F8INVY6WjkHXYAgyBr+ESSL5GgqQq5gEiQo dzag3DU52S+sOshUrufFX4InqMXMJOHfDWa6K8fPUZHSKhAzcxwNDiP1Hzy8HlTt cxGshiKHD4jtn8x7OhrrZbSIz5ad0vUpMTcKpKxofKwi/K+0Qn8Ft5Y2NQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMCF3+KAeqTfdOushvNvSbQYlbGhMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvd0lYZjRvQjZwTjkwNjZ5RzgyOUp0QmlWc2FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa+IAwQA WZAUMA0GCSqGSIb3DQEBCwUAA4IBAQAAHGrXoutbGyiWuprNw0si3AP2jQeFtTA0 kiyIMwVdgH1phLeKwo+3yhooEDSbz/7HwcYnX4v+2AMSLb2W2E4uHBkPjLX46K2l 05qJ8iJu8Cp0O8uUETDpyWvBp5gbOPyBoHqStpn1AvvINUPZA7FYl+UqUWvefcLX 8V1USmhAaDE0jhuZd1RHMFSZedNF51JttuYMYmzeEquPmfDxC6LuWUYk8yKi7IeH U8w9ot8zWTuo9sydHxAj6rXKCxeY1y3M9kpw/PErQGTS5tq4itqAFCYJHtepvcJ3 xDNWSYSAoKQqVsOgErKZRvP1v1UEpNVrhqpoJe2H+X+0LppgvRvK -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:42 2025 by rpki-client