This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/x68vcWpU_ikBTi4CUJ8sWzC6vbM.roa File: x68vcWpU_ikBTi4CUJ8sWzC6vbM.roa (raw, json) Hash identifier: 011cklNdpsAyAefkyJoSTvckMH4hsIAj1Kahb51wJwM= Subject key identifier: C7:AF:2F:71:6A:54:FE:29:01:4E:2E:02:50:9F:2C:5B:30:BA:BD:B3 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A978A0BA977509971C1C41A53D78C0439 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/x68vcWpU_ikBTi4CUJ8sWzC6vbM.roa Signing time: Tue 18 Nov 2025 15:16:37 +0000 ROA not before: Tue 18 Nov 2025 15:16:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209824 IP address blocks: 5.231.72.0/24 maxlen: 24 5.231.226.0/24 maxlen: 24 77.90.1.0/24 maxlen: 24 77.90.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:8a:0b:a9:77:50:99:71:c1:c4:1a:53:d7:8c:04:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 18 15:16:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c7af2f716a54fe29014e2e02509f2c5b30babdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:89:89:8d:38:67:ea:74:ca:79:36:92:71: f5:0f:6e:2e:db:2b:67:35:5f:67:85:3b:57:38:4e: 3f:88:e4:25:30:fa:d2:63:f1:c8:c1:c1:95:45:d8: ba:8c:4b:ad:01:18:c7:e2:62:81:f3:59:4c:d0:af: 3e:db:21:2d:87:89:d2:7f:bc:a2:90:e4:96:7f:d5: 7a:27:4a:be:92:86:99:97:9e:cb:90:d6:88:87:c6: 88:10:bc:15:32:ee:99:bf:7d:12:85:8b:e8:9f:ba: df:09:29:cf:9a:fb:3b:37:3c:d6:3f:74:8d:c5:cc: 1b:ed:60:23:ab:d2:b9:a9:19:e6:51:dc:6c:e0:c1: 9a:3c:28:91:1d:29:90:29:36:df:8d:d4:99:0a:3c: a0:e9:3e:fc:f3:49:f2:17:1a:18:52:4b:67:cf:56: 49:a9:9b:df:57:60:c4:e4:9b:ed:84:76:77:a7:9a: c1:69:f1:66:a8:41:df:ed:48:53:d3:81:df:15:6a: 64:ea:fd:87:7c:85:de:a3:5a:44:13:8d:c5:3b:0a: 9b:c7:82:fe:b5:1d:e2:b1:50:3e:8f:3c:3c:d5:17: d4:cf:56:ee:a8:d5:d6:59:55:ba:7f:00:39:97:ab: a6:14:38:aa:61:85:6c:a4:5d:7b:3f:cb:37:03:ac: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AF:2F:71:6A:54:FE:29:01:4E:2E:02:50:9F:2C:5B:30:BA:BD:B3 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/x68vcWpU_ikBTi4CUJ8sWzC6vbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.72.0/24 5.231.226.0/24 77.90.1.0/24 77.90.29.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ff:15:3b:11:bf:51:50:f6:e1:ad:83:4f:79:6b:8f:bd:85: 8d:b7:03:c2:ed:41:60:e7:d1:da:c4:a0:f3:e3:59:13:e8:7b: 8c:69:46:d3:76:28:1e:30:82:46:e3:12:d2:22:b0:ea:7e:61: 38:9b:04:fa:cc:27:25:d2:07:55:05:76:26:cb:af:80:fd:63: ba:3c:01:69:80:cf:db:10:61:8e:f2:c3:4c:1b:03:61:f4:19: 6b:61:a0:5a:7d:f5:42:e3:a1:0e:a5:36:b9:d7:04:7a:6a:84: f7:b9:bd:eb:83:ad:f8:0b:a5:fa:57:73:f8:a0:79:d8:21:fa: a7:1f:93:21:c4:dd:b7:9f:55:e4:cd:1e:f1:88:da:2a:5c:93: 78:10:58:07:18:27:03:df:1b:d9:05:b9:df:7b:28:ee:37:eb: fd:2f:3f:80:31:9a:67:24:a7:5e:9d:8a:d9:ea:43:44:dd:7a: 7e:08:43:79:02:a9:8e:b7:b6:43:40:2b:46:e2:65:62:79:19: f5:d9:83:19:54:fd:be:15:0a:3c:5a:96:6d:6f:38:39:fe:28: ba:41:25:92:e0:e5:fd:87:da:4b:b3:27:ce:4a:f9:63:cf:bf: 47:f6:75:97:77:27:0d:de:9b:8e:8f:a7:25:d1:a7:2f:ea:04: 0c:4f:e3:24 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqXigupd1CZccHEGlPXjAQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTE4MTUxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2FmMmY3MTZhNTRmZTI5MDE0ZTJlMDI1MDlmMmM1YjMwYmFiZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmKJiY04Z+p0ynk2knH1D24u2ytn NV9nhTtXOE4/iOQlMPrSY/HIwcGVRdi6jEutARjH4mKB81lM0K8+2yEth4nSf7yi kOSWf9V6J0q+koaZl57LkNaIh8aIELwVMu6Zv30ShYvon7rfCSnPmvs7NzzWP3SN xcwb7WAjq9K5qRnmUdxs4MGaPCiRHSmQKTbfjdSZCjyg6T7880nyFxoYUktnz1ZJ qZvfV2DE5JvthHZ3p5rBafFmqEHf7UhT04HfFWpk6v2HfIXeo1pEE43FOwqbx4L+ tR3isVA+jzw81RfUz1buqNXWWVW6fwA5l6umFDiqYYVspF17P8s3A6w5ewIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMevL3FqVP4pAU4uAlCfLFswur2zMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEveDY4dmNXcFVfaWtCVGk0Q1VKOHNXekM2dmJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABedIAwQA BefiAwQATVoBAwQATVodMA0GCSqGSIb3DQEBCwUAA4IBAQCc/xU7Eb9RUPbhrYNP eWuPvYWNtwPC7UFg59HaxKDz41kT6HuMaUbTdigeMIJG4xLSIrDqfmE4mwT6zCcl 0gdVBXYmy6+A/WO6PAFpgM/bEGGO8sNMGwNh9BlrYaBaffVC46EOpTa51wR6aoT3 ub3rg634C6X6V3P4oHnYIfqnH5MhxN23n1XkzR7xiNoqXJN4EFgHGCcD3xvZBbnf eyjuN+v9Lz+AMZpnJKdenYrZ6kNE3Xp+CEN5AqmOt7ZDQCtG4mVieRn12YMZVP2+ FQo8WpZtbzg5/ii6QSWS4OX9h9pLsyfOSvljz79H9nWXdycN3puOj6cl0acv6gQM T+Mk -----END CERTIFICATE-----Generated at Fri Dec 5 17:07:20 2025 by rpki-client