This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/d83pqeKiLQhLliuN6pcj5rdzr8I.roa File: d83pqeKiLQhLliuN6pcj5rdzr8I.roa (raw, json) Hash identifier: w/WdVJXy4ZPvV9vYHP3UeCe1IyTQx7yuPgXNPi29GH4= Subject key identifier: 77:CD:E9:A9:E2:A2:2D:08:4B:96:2B:8D:EA:97:23:E6:B7:73:AF:C2 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019A5420BDC68B4063F67995BD4C1ED778B6 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/d83pqeKiLQhLliuN6pcj5rdzr8I.roa Signing time: Wed 05 Nov 2025 13:07:03 +0000 ROA not before: Wed 05 Nov 2025 13:07:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60781 IP address blocks: 109.236.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:20:bd:c6:8b:40:63:f6:79:95:bd:4c:1e:d7:78:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Nov 5 13:07:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=77cde9a9e2a22d084b962b8dea9723e6b773afc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:b1:7b:63:e5:ea:ac:2c:db:56:1b:52:83: b3:6a:6b:85:bc:75:0f:e3:e0:9a:df:68:36:66:e6: 4a:9c:ff:b5:36:1b:91:a3:2c:13:fc:94:68:e1:a2: f8:4b:c0:ce:ff:e9:30:7e:e1:81:f9:6b:a1:13:c7: 2b:bb:86:2e:e9:76:02:8f:23:30:a5:09:76:10:f2: 35:95:82:6a:c4:8c:72:2f:f5:f4:d9:2f:dd:2a:f5: 4e:36:95:70:fa:ee:30:11:51:64:3e:c6:ab:a3:f3: fb:33:47:75:54:7a:77:b9:dc:f2:49:a2:8f:25:7a: 9b:82:72:ad:1d:6b:46:79:54:07:44:b3:d9:45:3d: 1a:6a:cf:55:19:dd:4a:2c:be:b0:c0:94:a9:0e:69: b1:4c:ba:63:ef:c4:90:ff:ba:58:23:c2:e6:84:64: d6:7b:d0:f7:92:19:7f:dd:a2:d1:7f:83:86:35:58: 98:fe:53:1d:2b:0b:1e:f5:a9:75:79:08:7b:52:5e: 40:8e:68:1b:4f:20:bc:fe:5b:b4:f5:b8:81:9c:8b: ef:90:f7:45:67:bc:96:d7:09:8b:3f:a9:73:c9:fb: bc:85:91:51:b9:88:01:ff:e9:48:94:5e:34:94:30: ac:17:fd:ac:e8:6f:b2:26:15:bc:53:96:68:b0:a3: f2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CD:E9:A9:E2:A2:2D:08:4B:96:2B:8D:EA:97:23:E6:B7:73:AF:C2 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/d83pqeKiLQhLliuN6pcj5rdzr8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.50.0/24 Signature Algorithm: sha256WithRSAEncryption 59:ce:99:01:01:ef:ad:29:9e:e8:b3:67:77:54:c3:20:cd:bf: 2b:45:0f:92:14:6f:8c:0f:db:65:d4:be:0c:08:86:ed:a2:5e: 60:c2:80:9b:3b:2f:14:d4:09:aa:94:57:22:f6:b2:7f:d5:d1: b9:e6:c3:d1:ec:b5:84:51:11:1f:a1:3e:d7:3c:5e:ea:0a:f6: dd:d1:c7:f3:cf:24:c5:de:f5:f2:44:ea:c0:98:37:ae:b8:0a: 1c:46:1c:f1:05:ad:75:b7:be:0d:3a:3a:be:2c:77:74:91:2e: a3:dc:04:c5:7f:70:f9:ae:49:3f:24:55:fb:e0:ad:de:63:17: 15:3e:8e:ce:1d:81:8a:b1:a5:37:26:cc:57:05:0e:df:ba:98: f6:3f:58:bb:f3:6a:09:65:72:d7:88:33:a1:9a:db:32:c7:a0: 2c:90:2a:e0:00:93:91:41:44:f1:ec:5d:95:85:a3:28:08:39: 90:51:be:94:e8:e7:12:53:c0:e5:6f:f5:46:42:67:7a:a6:28: 90:0c:33:a3:30:59:12:7e:39:92:20:4b:7d:a9:12:5f:d3:38: 71:9f:2b:e6:1f:cc:47:a2:e1:d0:0e:60:c8:f5:21:21:71:5c: c5:e5:1d:27:04:ec:b7:a9:6b:84:c8:ac:f2:9a:8d:38:23:5b: 61:45:ef:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpUIL3Gi0Bj9nmVvUwe13i2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjUxMTA1MTMwNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2NkZTlhOWUyYTIyZDA4NGI5NjJiOGRlYTk3MjNlNmI3NzNhZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKuxe2Pl6qws21YbUoOzamuFvHUP 4+Ca32g2ZuZKnP+1NhuRoywT/JRo4aL4S8DO/+kwfuGB+WuhE8cru4Yu6XYCjyMw pQl2EPI1lYJqxIxyL/X02S/dKvVONpVw+u4wEVFkPsaro/P7M0d1VHp3udzySaKP JXqbgnKtHWtGeVQHRLPZRT0aas9VGd1KLL6wwJSpDmmxTLpj78SQ/7pYI8LmhGTW e9D3khl/3aLRf4OGNViY/lMdKwse9al1eQh7Ul5AjmgbTyC8/lu09biBnIvvkPdF Z7yW1wmLP6lzyfu8hZFRuYgB/+lIlF40lDCsF/2s6G+yJhW8U5ZosKPyxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHfN6anioi0IS5YrjeqXI+a3c6/CMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvZDgzcHFlS2lMUWhMbGl1TjZwY2o1cmR6cjhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbewyMA0G CSqGSIb3DQEBCwUAA4IBAQBZzpkBAe+tKZ7os2d3VMMgzb8rRQ+SFG+MD9tl1L4M CIbtol5gwoCbOy8U1AmqlFci9rJ/1dG55sPR7LWEUREfoT7XPF7qCvbd0cfzzyTF 3vXyROrAmDeuuAocRhzxBa11t74NOjq+LHd0kS6j3ATFf3D5rkk/JFX74K3eYxcV Po7OHYGKsaU3JsxXBQ7fupj2P1i782oJZXLXiDOhmtsyx6AskCrgAJORQUTx7F2V haMoCDmQUb6U6OcSU8Dlb/VGQmd6piiQDDOjMFkSfjmSIEt9qRJf0zhxnyvmH8xH ouHQDmDI9SEhcVzF5R0nBOy3qWuEyKzymo04I1thRe+v -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:48 2025 by rpki-client