This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Gz2x9m_Yl5Ngl8bnPMTQQ2DEAa0.roa File: Gz2x9m_Yl5Ngl8bnPMTQQ2DEAa0.roa (raw, json) Hash identifier: n6v+5ENtmSfa61/j1qJfHbsT2N6a39RzqA1PspwRG9g= Subject key identifier: 1B:3D:B1:F6:6F:D8:97:93:60:97:C6:E7:3C:C4:D0:43:60:C4:01:AD Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019AC653225CC2872303141E68F963B2FCDA Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Gz2x9m_Yl5Ngl8bnPMTQQ2DEAa0.roa Signing time: Thu 27 Nov 2025 17:18:48 +0000 ROA not before: Thu 27 Nov 2025 17:18:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44486 IP address blocks: 5.39.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:53:22:5c:c2:87:23:03:14:1e:68:f9:63:b2:fc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Nov 27 17:18:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1b3db1f66fd897936097c6e73cc4d04360c401ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:f2:06:f4:5c:3a:26:1e:0f:4b:f6:39:54: 64:72:bc:32:8a:6b:99:81:f6:bd:47:0f:51:2a:fe: 60:e9:b4:a6:bd:39:40:b8:86:7f:a8:e1:fc:45:04: ba:3f:5d:a4:00:64:60:16:02:e6:5f:91:c9:a6:39: 86:c1:f8:7d:76:c6:bb:94:71:69:d9:0c:07:91:dc: 84:ee:cf:ad:1e:7e:82:16:8a:68:78:9b:4f:c2:9c: 0a:86:00:5a:5b:a8:52:8a:ff:9a:52:3f:f0:c0:48: 0f:55:dd:fe:ad:d7:4e:10:d3:81:76:6d:c9:f9:a5: 69:eb:6d:2a:9a:e0:93:e2:94:50:44:57:ab:38:00: b3:69:ef:58:06:6b:84:28:c2:d9:e1:8c:3c:d1:7c: 78:f2:14:59:a6:a4:16:33:6f:b1:d8:4a:4f:f6:89: 88:f1:a3:b6:83:3c:2e:fc:c5:c1:ad:44:d0:6e:b9: fb:fd:4c:4e:21:e3:6c:65:fa:15:fb:d9:4b:1e:f5: 02:68:dd:62:eb:8e:eb:97:cb:da:11:fb:13:10:72: 42:11:ac:f2:7f:a3:bb:74:e8:d0:66:c9:ed:ba:15: 30:12:0a:80:db:95:ef:6f:f5:d1:db:27:6c:ee:d9: a5:10:23:fd:10:4b:1c:db:99:1c:9a:50:0e:a9:1a: fb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3D:B1:F6:6F:D8:97:93:60:97:C6:E7:3C:C4:D0:43:60:C4:01:AD X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Gz2x9m_Yl5Ngl8bnPMTQQ2DEAa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.251.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:c0:cc:1a:c5:ee:5d:dd:9b:1c:0c:48:0e:c2:68:df:d5:b4: f8:ad:d1:6d:a6:8a:fd:b8:24:82:1f:90:f1:26:b3:e7:88:05: 97:d8:a7:71:e6:f1:8f:72:62:2c:38:8c:1f:38:b7:60:35:5b: 8d:95:b5:fd:21:ff:e7:0b:f1:68:70:c4:d2:f1:ee:d4:ab:f4: 14:48:f4:38:62:4d:41:af:07:a2:2f:c7:b0:51:b2:46:cf:20: c6:4a:06:ab:d2:a7:32:84:16:c0:bc:0e:18:ca:bd:dc:bf:78: 39:5a:c6:df:90:1d:de:30:e7:48:30:e4:d4:7e:3e:cd:a9:71: a7:00:49:98:cb:33:62:99:58:11:1a:df:5c:c3:03:b1:e8:17: b7:71:d0:e0:09:87:c3:03:c6:71:94:a9:63:9a:cd:db:89:60: b5:4e:71:9a:81:7e:6b:e3:a5:46:2a:08:40:40:fa:a7:73:d5: 44:3c:22:b5:ab:8d:8c:68:f8:54:8b:d8:2e:ff:1a:00:5d:4c: c5:a4:31:bf:1d:08:75:a9:df:64:fc:ff:02:72:6f:b1:fc:4a: e4:a4:c1:bb:3f:0a:7f:3b:07:c0:d1:00:e7:c8:7b:05:a7:00: 24:dd:41:f7:eb:58:30:10:bd:1c:17:c6:33:f8:8a:d4:cd:e2: f2:88:9b:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrGUyJcwocjAxQeaPljsvzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjUxMTI3MTcxODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjNkYjFmNjZmZDg5NzkzNjA5N2M2ZTczY2M0ZDA0MzYwYzQwMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRvyBvRcOiYeD0v2OVRkcrwyimuZ gfa9Rw9RKv5g6bSmvTlAuIZ/qOH8RQS6P12kAGRgFgLmX5HJpjmGwfh9dsa7lHFp 2QwHkdyE7s+tHn6CFopoeJtPwpwKhgBaW6hSiv+aUj/wwEgPVd3+rddOENOBdm3J +aVp620qmuCT4pRQRFerOACzae9YBmuEKMLZ4Yw80Xx48hRZpqQWM2+x2EpP9omI 8aO2gzwu/MXBrUTQbrn7/UxOIeNsZfoV+9lLHvUCaN1i647rl8vaEfsTEHJCEazy f6O7dOjQZsntuhUwEgqA25Xvb/XR2yds7tmlECP9EEsc25kcmlAOqRr7UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBs9sfZv2JeTYJfG5zzE0ENgxAGtMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvR3oyeDltX1lsNU5nbDhiblBNVFFRMkRFQWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSf7MA0G CSqGSIb3DQEBCwUAA4IBAQB8wMwaxe5d3ZscDEgOwmjf1bT4rdFtpor9uCSCH5Dx JrPniAWX2Kdx5vGPcmIsOIwfOLdgNVuNlbX9If/nC/FocMTS8e7Uq/QUSPQ4Yk1B rweiL8ewUbJGzyDGSgar0qcyhBbAvA4Yyr3cv3g5WsbfkB3eMOdIMOTUfj7NqXGn AEmYyzNimVgRGt9cwwOx6Be3cdDgCYfDA8ZxlKljms3biWC1TnGagX5r46VGKghA QPqnc9VEPCK1q42MaPhUi9gu/xoAXUzFpDG/HQh1qd9k/P8Ccm+x/ErkpMG7Pwp/ OwfA0QDnyHsFpwAk3UH361gwEL0cF8Yz+IrUzeLyiJt2 -----END CERTIFICATE-----Generated at Fri Nov 28 22:19:24 2025 by rpki-client