This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U1I_4lY87itkhO4WlbKWhquW-xQ.roa File: U1I_4lY87itkhO4WlbKWhquW-xQ.roa (raw, json) Hash identifier: eju5uCSWLsNAymSliIJQvbrw6NHjlUwT8JWyd930ruw= Subject key identifier: 53:52:3F:E2:56:3C:EE:2B:64:84:EE:16:95:B2:96:86:AB:96:FB:14 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B3733A5D29ABAA6B8869ABB599AFAC986 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U1I_4lY87itkhO4WlbKWhquW-xQ.roa Signing time: Fri 19 Dec 2025 15:21:30 +0000 ROA not before: Fri 19 Dec 2025 15:21:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44547 IP address blocks: 5.181.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:33:a5:d2:9a:ba:a6:b8:86:9a:bb:59:9a:fa:c9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Dec 19 15:21:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=53523fe2563cee2b6484ee1695b29686ab96fb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:fd:0c:05:f3:3d:23:bf:00:b1:de:28:75: ad:98:d2:e8:9c:40:81:eb:22:ba:d5:a7:3f:f8:96: 18:a8:90:32:34:8f:35:24:87:75:50:af:ad:d1:85: b2:0b:d8:2f:51:78:a7:a5:77:14:3b:0b:61:04:2e: f3:d7:bf:13:52:cd:30:a9:38:24:cc:85:d0:e7:fb: cc:04:50:7a:fd:a4:9c:16:6a:4b:34:42:3a:3c:c4: 77:36:0c:f0:b0:b7:2b:54:35:95:c9:83:3d:f0:df: 6e:c6:94:d9:ca:b5:3f:9f:29:5e:b6:6b:ae:48:d8: 85:76:36:36:bd:8d:8c:41:8b:eb:1e:92:14:0c:8c: b2:ab:26:e0:49:6a:0f:99:23:ee:af:e6:6d:3d:d2: 7a:e7:bf:06:f6:f1:dd:d2:8c:a6:09:f2:20:13:18: a0:ba:55:75:9e:99:30:4a:d7:d6:f1:7b:23:ad:f9: 38:99:20:ef:c2:42:24:07:16:0d:cf:72:ae:c2:32: dd:06:29:15:ac:d7:38:9a:bc:32:b4:02:62:8a:6c: 7c:d8:37:87:77:4e:a4:74:72:5d:bf:52:0f:1e:39: 01:3f:d1:8b:cf:1c:3b:4d:3f:59:d1:ce:4e:19:11: e5:b7:86:3c:b8:18:24:ea:4c:ae:5c:e6:c1:60:4b: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:52:3F:E2:56:3C:EE:2B:64:84:EE:16:95:B2:96:86:AB:96:FB:14 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U1I_4lY87itkhO4WlbKWhquW-xQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.87.0/24 Signature Algorithm: sha256WithRSAEncryption 89:cf:a1:bb:32:6b:3d:85:2f:72:da:7f:c4:4e:cd:b7:03:94: a4:06:2e:dc:86:93:1e:b6:f3:b2:57:89:8b:b7:c6:b8:2c:11: d8:f5:7d:97:2b:02:f8:10:c4:46:62:60:53:42:06:b0:ea:ee: 6c:8e:3d:9e:5e:c7:fc:f1:47:f6:87:3b:36:cb:f2:1c:16:45: eb:e3:15:27:58:89:9d:b2:23:45:5f:df:5e:92:99:d8:be:13: 6f:25:62:54:a6:e8:38:e2:a0:64:0b:f8:0d:4c:0b:40:6b:bc: 7a:80:be:b7:8b:7c:10:92:bd:3f:8d:56:df:a4:11:33:5e:a1: 5a:12:33:ac:24:4d:4a:94:db:4d:bb:87:b5:89:4d:48:d6:61: dd:0e:83:6d:ee:54:4f:66:16:f2:31:45:dd:a1:51:ac:1b:44: d7:4a:cf:51:ec:9b:77:d7:ed:23:67:3e:00:b5:fa:00:39:43: cd:f0:dc:ca:a7:25:1a:5b:13:e6:68:29:b4:aa:35:c2:4a:92: 52:85:6e:01:04:96:42:f2:10:86:bc:1e:d9:46:ab:88:25:d5: a6:59:ba:23:d6:95:9c:2b:c0:2f:22:4e:5f:19:85:c3:26:5a: 60:8a:02:dd:a5:fe:e0:fd:9e:f7:08:06:67:bb:dd:68:ab:12: d6:5c:12:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs3M6XSmrqmuIaau1ma+smGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMjE5MTUyMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzUyM2ZlMjU2M2NlZTJiNjQ4NGVlMTY5NWIyOTY4NmFiOTZmYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLv9DAXzPSO/ALHeKHWtmNLonECB 6yK61ac/+JYYqJAyNI81JId1UK+t0YWyC9gvUXinpXcUOwthBC7z178TUs0wqTgk zIXQ5/vMBFB6/aScFmpLNEI6PMR3NgzwsLcrVDWVyYM98N9uxpTZyrU/nyletmuu SNiFdjY2vY2MQYvrHpIUDIyyqybgSWoPmSPur+ZtPdJ6578G9vHd0oymCfIgExig ulV1npkwStfW8Xsjrfk4mSDvwkIkBxYNz3KuwjLdBikVrNc4mrwytAJiimx82DeH d06kdHJdv1IPHjkBP9GLzxw7TT9Z0c5OGRHlt4Y8uBgk6kyuXObBYEvDiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFNSP+JWPO4rZITuFpWyloarlvsUMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvVTFJXzRsWTg3aXRraE80V2xiS1docXVXLXhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbVXMA0G CSqGSIb3DQEBCwUAA4IBAQCJz6G7Mms9hS9y2n/ETs23A5SkBi7chpMetvOyV4mL t8a4LBHY9X2XKwL4EMRGYmBTQgaw6u5sjj2eXsf88Uf2hzs2y/IcFkXr4xUnWImd siNFX99ekpnYvhNvJWJUpug44qBkC/gNTAtAa7x6gL63i3wQkr0/jVbfpBEzXqFa EjOsJE1KlNtNu4e1iU1I1mHdDoNt7lRPZhbyMUXdoVGsG0TXSs9R7Jt31+0jZz4A tfoAOUPN8NzKpyUaWxPmaCm0qjXCSpJShW4BBJZC8hCGvB7ZRquIJdWmWboj1pWc K8AvIk5fGYXDJlpgigLdpf7g/Z73CAZnu91oqxLWXBIz -----END CERTIFICATE-----Generated at Sat Dec 20 16:14:09 2025 by rpki-client