This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/P_xRBks_uNjYQXviPVrUaq5Q_gI.roa File: P_xRBks_uNjYQXviPVrUaq5Q_gI.roa (raw, json) Hash identifier: SvQ0s2oY3yaHmPxMjIJyaQAK4PoRQVrNurSdA9ukLVE= Subject key identifier: 3F:FC:51:06:4B:3F:B8:D8:D8:41:7B:E2:3D:5A:D4:6A:AE:50:FE:02 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019ABF9A5B112C7EC9DF454ED3E436DB3C45 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/P_xRBks_uNjYQXviPVrUaq5Q_gI.roa Signing time: Wed 26 Nov 2025 09:59:15 +0000 ROA not before: Wed 26 Nov 2025 09:59:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200845 IP address blocks: 5.154.42.0/24 maxlen: 24 31.14.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:9a:5b:11:2c:7e:c9:df:45:4e:d3:e4:36:db:3c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Nov 26 09:59:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3ffc51064b3fb8d8d8417be23d5ad46aae50fe02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:39:74:81:96:2d:18:41:2f:aa:ef:29:3b: 20:18:91:e1:94:a7:7f:9f:ff:52:64:24:e4:41:d0: ab:5c:a3:94:3c:43:69:77:eb:b8:da:c4:99:56:fc: f1:4f:3c:38:52:cc:c4:87:f7:34:b1:3a:da:70:14: 7c:f2:21:41:ef:6b:07:a4:10:fe:b7:bd:35:5e:97: 9e:57:63:31:6e:9c:e8:f3:74:20:a6:1e:09:6e:9d: f7:f6:3f:f1:b4:64:bc:d5:43:d8:18:d1:7e:ad:8e: a9:5b:c1:1d:54:2d:b9:87:9c:32:84:10:af:56:8b: df:ab:7a:40:00:0f:81:81:ee:a7:99:68:d3:0d:ef: 1d:23:97:f0:79:d9:e8:47:08:23:98:c8:40:7a:d4: 05:f4:d7:88:8e:8b:ce:29:75:34:45:2f:83:83:20: cf:dd:ff:85:f9:a6:22:5c:b7:28:65:71:00:a8:c5: bd:07:96:70:f9:d3:f2:e5:7c:55:ca:0c:8d:12:bd: 10:31:19:d1:06:07:2c:65:b9:9a:70:15:75:02:a7: 50:a3:fd:d0:74:5d:a0:36:b3:db:b0:c9:e8:61:79: c7:07:f4:49:95:5d:b2:c0:0c:a1:c9:a3:11:37:97: 92:57:cc:cc:f3:fc:26:ae:2f:d8:c3:34:23:30:dd: d6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:51:06:4B:3F:B8:D8:D8:41:7B:E2:3D:5A:D4:6A:AE:50:FE:02 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/P_xRBks_uNjYQXviPVrUaq5Q_gI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.42.0/24 31.14.207.0/24 Signature Algorithm: sha256WithRSAEncryption 56:65:a5:63:dc:3a:26:a0:83:51:20:27:cf:34:89:7d:32:41: d2:7c:b4:38:98:8d:20:4a:b9:7e:af:13:6d:9e:d0:48:7f:6e: 99:ae:36:60:ff:1c:ea:d7:54:f2:9c:bc:6c:e3:31:74:80:4b: 38:99:f6:e2:d7:4e:cb:c8:26:47:58:76:49:69:01:f4:8e:69: e8:4b:ce:66:86:89:97:42:0e:37:38:20:27:a1:4d:1d:86:3f: d9:31:55:71:50:66:14:10:71:b8:d3:ab:7a:f2:6c:5f:0a:c3: 39:cd:88:4b:64:0f:92:78:c2:9c:80:aa:b8:4f:63:be:40:0b: b2:aa:c9:3b:f4:6b:10:57:23:05:96:ac:c3:54:c3:c2:20:61: da:5e:52:34:0d:aa:2a:35:29:99:05:52:aa:f2:53:c2:c3:f2: b1:04:de:fb:d5:4f:e0:65:51:b0:f5:64:ab:1d:a9:34:39:19: 8a:9e:d4:0e:27:6b:fc:26:b0:6c:5b:13:a9:2a:be:2c:0c:3f: b4:5f:03:c5:57:73:5b:98:94:a9:12:9f:f2:50:da:a8:d9:08: 93:32:38:67:b4:c9:bd:1c:72:21:8f:7a:65:4a:43:b5:cd:ce: 79:cd:6a:df:22:99:0e:82:f7:9b:30:50:ae:d7:f9:37:13:5d: 7f:9d:49:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq/mlsRLH7J30VO0+Q22zxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMTI2MDk1OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmZjNTEwNjRiM2ZiOGQ4ZDg0MTdiZTIzZDVhZDQ2YWFlNTBmZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QE5dIGWLRhBL6rvKTsgGJHhlKd/ n/9SZCTkQdCrXKOUPENpd+u42sSZVvzxTzw4UszEh/c0sTracBR88iFB72sHpBD+ t701XpeeV2Mxbpzo83Qgph4Jbp339j/xtGS81UPYGNF+rY6pW8EdVC25h5wyhBCv Vovfq3pAAA+Bge6nmWjTDe8dI5fwednoRwgjmMhAetQF9NeIjovOKXU0RS+DgyDP 3f+F+aYiXLcoZXEAqMW9B5Zw+dPy5XxVygyNEr0QMRnRBgcsZbmacBV1AqdQo/3Q dF2gNrPbsMnoYXnHB/RJlV2ywAyhyaMRN5eSV8zM8/wmri/YwzQjMN3WHQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD/8UQZLP7jY2EF74j1a1GquUP4CMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvUF94UkJrc191TmpZUVh2aVBWclVhcTVRX2dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABZoqAwQA Hw7PMA0GCSqGSIb3DQEBCwUAA4IBAQBWZaVj3DomoINRICfPNIl9MkHSfLQ4mI0g Srl+rxNtntBIf26ZrjZg/xzq11TynLxs4zF0gEs4mfbi107LyCZHWHZJaQH0jmno S85mhomXQg43OCAnoU0dhj/ZMVVxUGYUEHG406t68mxfCsM5zYhLZA+SeMKcgKq4 T2O+QAuyqsk79GsQVyMFlqzDVMPCIGHaXlI0DaoqNSmZBVKq8lPCw/KxBN771U/g ZVGw9WSrHak0ORmKntQOJ2v8JrBsWxOpKr4sDD+0XwPFV3NbmJSpEp/yUNqo2QiT MjhntMm9HHIhj3plSkO1zc55zWrfIpkOgvebMFCu1/k3E11/nUl6 -----END CERTIFICATE-----Generated at Thu Dec 11 16:42:11 2025 by rpki-client