This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/5RDb2e6KdQOT-OhV_ME1xFN1F6I.roa File: 5RDb2e6KdQOT-OhV_ME1xFN1F6I.roa (raw, json) Hash identifier: SyQkPoX5BvdhsgG1TrJjRgmMiVGL74WU3/COKe/xgpA= Subject key identifier: E5:10:DB:D9:EE:8A:75:03:93:F8:E8:55:FC:C1:35:C4:53:75:17:A2 Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Certificate serial: 019B3179E15F01916DDD6B5726ABE9EF96FD Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/5RDb2e6KdQOT-OhV_ME1xFN1F6I.roa Signing time: Thu 18 Dec 2025 12:40:29 +0000 ROA not before: Thu 18 Dec 2025 12:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202740 IP address blocks: 46.70.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:79:e1:5f:01:91:6d:dd:6b:57:26:ab:e9:ef:96:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Validity Not Before: Dec 18 12:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e510dbd9ee8a750393f8e855fcc135c4537517a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:ff:33:c0:80:0c:3e:92:0a:cd:e7:98:d5: 6a:4f:bd:cf:0d:a3:f3:64:0c:ac:4c:6b:57:38:03: 3f:32:16:0f:5d:f3:87:c2:55:c6:c1:5e:7f:6d:1f: 96:60:93:0a:1e:62:af:82:df:a3:36:34:a9:3c:24: f2:b2:82:04:51:34:cc:b9:52:7f:94:2a:fe:9f:8d: 93:b4:67:90:d2:b5:cc:9b:a8:ad:c0:85:3f:ad:2d: 8b:7a:f2:b6:0c:c6:bd:0c:d5:a5:12:38:21:62:56: ca:15:ca:40:0f:e9:83:83:f1:cb:c3:8b:c7:77:65: a7:d8:3a:b4:ba:53:8d:1d:ff:44:98:56:e1:e8:df: 74:0a:3d:ec:15:0b:98:72:b8:2c:0a:db:f8:2f:cb: aa:bd:55:3f:18:c1:c5:b2:0a:7c:a9:1b:8f:1c:3b: bb:60:e9:d0:70:0f:33:56:8c:78:2a:76:f3:a3:fd: 56:24:ac:f8:bd:f9:4f:1b:19:81:aa:bd:16:69:ef: 59:6b:06:3a:cd:cc:ec:18:08:ab:ef:e8:97:9a:0d: 1a:4c:4f:f7:96:6d:e7:a8:07:62:d7:db:06:bd:24: 7b:1f:70:11:fc:b9:90:84:23:82:ea:ec:db:4b:75: ef:58:6a:47:8c:5b:3d:d8:aa:50:cc:6d:42:60:3d: b4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:10:DB:D9:EE:8A:75:03:93:F8:E8:55:FC:C1:35:C4:53:75:17:A2 X509v3 Authority Key Identifier: keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/5RDb2e6KdQOT-OhV_ME1xFN1F6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.70.253.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:e8:a4:90:8c:78:8d:35:26:60:40:b7:2f:e9:69:b8:b6:19: cf:20:1d:c5:81:c7:ef:85:4c:88:77:9e:76:98:ba:22:2a:4a: be:0f:6b:7f:51:c0:42:90:cf:1f:6e:e1:54:84:14:b7:ce:f9: a7:70:73:bb:22:67:3a:c1:aa:5c:1d:46:ef:6c:77:26:8c:8c: bc:7e:4d:b1:79:98:78:41:4e:06:cb:85:17:a0:ad:b3:79:82: f0:19:d6:0f:e0:44:4f:c2:4e:93:74:bf:7d:a4:61:da:6a:86: de:2e:35:26:f5:c7:80:4b:40:c5:31:66:aa:74:53:df:c6:54: ee:ec:97:32:32:6c:5c:68:a1:8e:4e:aa:8a:d0:93:6b:ba:af: 41:84:31:68:02:ea:6b:d1:29:93:8e:16:77:6c:06:fa:d7:ae: 03:4a:e2:28:49:56:08:b4:75:ec:53:bc:fa:1c:7f:49:11:64: 66:b5:03:09:b8:1e:b1:d0:ac:48:c0:0f:df:2e:4f:25:c7:ec: 9d:73:f4:1d:75:67:02:a4:78:90:13:d3:70:ff:42:e0:21:03: 38:51:f0:32:8e:d0:8c:86:ed:3c:f1:58:39:e4:cf:46:27:69: 01:6b:0c:94:80:5f:42:4c:95:7d:4c:71:42:dd:9d:35:fd:e8: 4a:ad:d9:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsxeeFfAZFt3WtXJqvp75b9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0 ZmJkOTQwHhcNMjUxMjE4MTI0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTEwZGJkOWVlOGE3NTAzOTNmOGU4NTVmY2MxMzVjNDUzNzUxN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0j/M8CADD6SCs3nmNVqT73PDaPz ZAysTGtXOAM/MhYPXfOHwlXGwV5/bR+WYJMKHmKvgt+jNjSpPCTysoIEUTTMuVJ/ lCr+n42TtGeQ0rXMm6itwIU/rS2LevK2DMa9DNWlEjghYlbKFcpAD+mDg/HLw4vH d2Wn2Dq0ulONHf9EmFbh6N90Cj3sFQuYcrgsCtv4L8uqvVU/GMHFsgp8qRuPHDu7 YOnQcA8zVox4Knbzo/1WJKz4vflPGxmBqr0Wae9ZawY6zczsGAir7+iXmg0aTE/3 lm3nqAdi19sGvSR7H3AR/LmQhCOC6uzbS3XvWGpHjFs92KpQzG1CYD20lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOUQ29nuinUDk/joVfzBNcRTdReiMB8GA1UdIwQY MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt NTY5NzI0OWY1MTI0LzEvNVJEYjJlNktkUU9ULU9oVl9NRTF4Rk4xRjZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0 LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALkb9MA0G CSqGSIb3DQEBCwUAA4IBAQCc6KSQjHiNNSZgQLcv6Wm4thnPIB3FgcfvhUyId552 mLoiKkq+D2t/UcBCkM8fbuFUhBS3zvmncHO7Imc6wapcHUbvbHcmjIy8fk2xeZh4 QU4Gy4UXoK2zeYLwGdYP4ERPwk6TdL99pGHaaobeLjUm9ceAS0DFMWaqdFPfxlTu 7JcyMmxcaKGOTqqK0JNruq9BhDFoAupr0SmTjhZ3bAb6164DSuIoSVYItHXsU7z6 HH9JEWRmtQMJuB6x0KxIwA/fLk8lx+ydc/QddWcCpHiQE9Nw/0LgIQM4UfAyjtCM hu088Vg55M9GJ2kBawyUgF9CTJV9THFC3Z01/ehKrdma -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:02 2025 by rpki-client