This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/74aB456APULxUHgdzIIwMQJeOFk.roa File: 74aB456APULxUHgdzIIwMQJeOFk.roa (raw, json) Hash identifier: ZZx6vhN79gWJR09wLCSoi/nCK9J7JA05EoKgMm+XHGk= Subject key identifier: EF:86:81:E3:9E:80:3D:42:F1:50:78:1D:CC:82:30:31:02:5E:38:59 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019AFD6423B7FB680087435C75592C76716B Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/74aB456APULxUHgdzIIwMQJeOFk.roa Signing time: Mon 08 Dec 2025 09:56:29 +0000 ROA not before: Mon 08 Dec 2025 09:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199315 IP address blocks: 5.172.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:64:23:b7:fb:68:00:87:43:5c:75:59:2c:76:71:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Dec 8 09:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ef8681e39e803d42f150781dcc823031025e3859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:02:6d:e1:31:6a:75:83:a1:aa:86:40:51: d7:a5:01:fe:0b:34:cd:bf:9b:4b:44:78:90:c8:dd: 9a:25:d0:b0:36:0c:1c:4a:e6:f6:9b:18:4b:38:17: d3:24:95:df:df:76:85:e2:66:cd:80:06:10:f9:25: 82:53:22:05:eb:bc:2b:f9:1d:e7:ec:67:16:88:f7: 7f:5b:c9:e3:50:1a:c7:3e:d8:b7:01:4f:e4:90:34: e1:07:2e:b1:a3:6b:d4:e6:df:de:dd:86:bb:68:48: ed:fc:49:96:56:25:a1:7c:28:48:67:16:ce:bf:b6: 6a:de:b2:ab:c2:cd:2f:d3:35:aa:35:8d:05:a8:ff: c7:d2:93:3e:7a:07:e8:b3:bf:b8:9a:09:15:d4:ca: 63:fd:a5:ac:98:d1:cb:eb:14:36:2e:bb:a4:e0:74: e2:6f:98:71:fe:47:80:a6:25:72:26:cd:30:df:a5: 6f:c0:fd:3c:6c:72:e4:07:77:d2:46:f8:ec:05:37: a0:ea:09:3c:10:e7:58:d3:82:73:8a:ee:d4:c7:72: cb:3b:2e:a4:de:04:d1:a6:3d:4f:99:a2:c5:34:2a: 07:c0:67:bb:45:ce:4a:26:52:2f:72:9c:04:c4:2b: 8c:7e:93:42:de:b2:8b:8b:32:5c:1b:92:3a:c2:a7: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:86:81:E3:9E:80:3D:42:F1:50:78:1D:CC:82:30:31:02:5E:38:59 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/74aB456APULxUHgdzIIwMQJeOFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.38.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:c4:24:b0:a3:81:5c:a6:f2:e6:0a:db:0f:52:2e:68:78:3b: 17:a6:52:40:ef:32:7d:58:09:a9:37:40:b1:f2:3c:06:c4:82: ae:22:4a:40:eb:6e:50:37:12:27:36:e1:d5:9c:77:05:93:3b: de:d1:1d:9d:df:d6:bd:34:cb:db:fe:41:1d:99:5a:c9:54:cc: 00:bb:ea:c3:64:8e:bd:46:62:3e:9f:ba:2f:dd:dd:bf:21:1c: 62:d5:74:e5:fb:8f:a3:15:7a:5d:3a:28:76:fd:7b:a3:80:27: 15:16:94:dd:be:40:e9:ec:85:d4:c0:0d:2a:eb:cc:22:71:aa: d7:5c:ba:f0:73:bf:2d:c1:71:91:4e:d9:83:8e:b4:82:42:7e: 22:67:b0:75:f4:90:7f:cf:b9:92:59:69:3e:2c:ce:61:ed:70: f7:37:61:3f:0e:43:f2:a4:e2:b9:32:e8:1d:12:a0:a0:c3:6b: b8:64:d3:dc:ce:70:4a:7b:03:3e:ca:41:85:c5:74:bd:b4:bc: 60:79:e7:8e:bd:ad:9b:de:a4:de:19:f2:35:5d:bf:e0:01:37: 78:24:a4:a6:e5:ec:31:5a:d3:11:c1:a5:4f:89:fe:8c:73:37: 56:09:42:89:ec:5a:53:f2:f4:e0:4b:e2:b6:34:32:30:a0:25: 07:34:fc:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr9ZCO3+2gAh0NcdVksdnFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMjA4MDk1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjg2ODFlMzllODAzZDQyZjE1MDc4MWRjYzgyMzAzMTAyNWUzODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv0CbeExanWDoaqGQFHXpQH+CzTN v5tLRHiQyN2aJdCwNgwcSub2mxhLOBfTJJXf33aF4mbNgAYQ+SWCUyIF67wr+R3n 7GcWiPd/W8njUBrHPti3AU/kkDThBy6xo2vU5t/e3Ya7aEjt/EmWViWhfChIZxbO v7Zq3rKrws0v0zWqNY0FqP/H0pM+egfos7+4mgkV1Mpj/aWsmNHL6xQ2Lruk4HTi b5hx/keApiVyJs0w36VvwP08bHLkB3fSRvjsBTeg6gk8EOdY04Jziu7Ux3LLOy6k 3gTRpj1PmaLFNCoHwGe7Rc5KJlIvcpwExCuMfpNC3rKLizJcG5I6wqdvaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO+GgeOegD1C8VB4HcyCMDECXjhZMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvNzRhQjQ1NkFQVUx4VUhnZHpJSXdNUUplT0ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABawmMA0G CSqGSIb3DQEBCwUAA4IBAQBLxCSwo4FcpvLmCtsPUi5oeDsXplJA7zJ9WAmpN0Cx 8jwGxIKuIkpA625QNxInNuHVnHcFkzve0R2d39a9NMvb/kEdmVrJVMwAu+rDZI69 RmI+n7ov3d2/IRxi1XTl+4+jFXpdOih2/XujgCcVFpTdvkDp7IXUwA0q68wicarX XLrwc78twXGRTtmDjrSCQn4iZ7B19JB/z7mSWWk+LM5h7XD3N2E/DkPypOK5Mugd EqCgw2u4ZNPcznBKewM+ykGFxXS9tLxgeeeOva2b3qTeGfI1Xb/gATd4JKSm5ewx WtMRwaVPif6MczdWCUKJ7FpT8vTgS+K2NDIwoCUHNPxP -----END CERTIFICATE-----Generated at Wed Dec 17 03:35:42 2025 by rpki-client