This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2n3qUeCU0cah8DSxLH3Wa3KhUPQ.roa File: 2n3qUeCU0cah8DSxLH3Wa3KhUPQ.roa (raw, json) Hash identifier: RVP2NyCsQjBW8SO0KnbR4xJFKKg2+E9qbIAdle6sKSo= Subject key identifier: DA:7D:EA:51:E0:94:D1:C6:A1:F0:34:B1:2C:7D:D6:6B:72:A1:50:F4 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B03DD3EDBA450CC209E80A97EAC04B8DD Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2n3qUeCU0cah8DSxLH3Wa3KhUPQ.roa Signing time: Tue 09 Dec 2025 16:06:29 +0000 ROA not before: Tue 09 Dec 2025 16:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216475 IP address blocks: 5.252.118.0/24 maxlen: 24 213.108.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:dd:3e:db:a4:50:cc:20:9e:80:a9:7e:ac:04:b8:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 9 16:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=da7dea51e094d1c6a1f034b12c7dd66b72a150f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:0b:85:b7:64:b8:fc:0e:bd:fb:78:fe:5b: b9:f5:72:47:fd:af:c6:e7:41:02:6a:9c:c1:7d:8e: 51:be:77:14:da:4f:7a:79:87:39:ce:45:3e:38:76: 70:09:19:3a:41:e6:7e:02:1b:2e:b0:5c:a5:59:e4: 49:2c:2e:ea:56:c9:53:d5:6e:39:7b:69:f7:ab:b7: 83:8a:e0:a2:96:b2:1e:4c:8d:09:12:a0:42:53:d1: 2d:b5:06:e9:04:c8:86:8b:fc:4b:8a:14:7c:89:7e: 9e:db:7c:c3:97:ab:2c:a6:d9:ac:e7:a5:02:80:87: dd:9c:33:2f:8a:5b:54:8f:37:84:e9:a6:f5:fe:49: 16:73:c5:47:31:c2:75:a2:b1:b8:3e:23:a2:41:7e: 30:42:e0:af:ed:13:9e:b2:86:0e:86:40:68:56:b5: 49:2d:ce:f5:60:45:eb:63:b5:37:8c:64:19:6a:2a: e0:f8:34:ae:7b:0a:98:fa:7b:e7:23:3e:8d:a2:9a: 74:b9:fd:1f:91:22:be:b7:6b:01:3e:7a:65:4a:45: 89:17:76:3e:97:67:9a:d7:66:a1:70:96:7d:e0:17: 88:64:50:bf:5f:86:2d:b6:48:d1:71:2d:e5:45:04: d6:1d:96:97:bc:ef:1d:ce:45:22:b1:d4:3f:07:92: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7D:EA:51:E0:94:D1:C6:A1:F0:34:B1:2C:7D:D6:6B:72:A1:50:F4 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2n3qUeCU0cah8DSxLH3Wa3KhUPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.118.0/24 213.108.198.0/24 Signature Algorithm: sha256WithRSAEncryption c1:9e:d6:c6:2e:24:a7:b0:1c:26:42:47:b7:a1:0f:a6:cf:66: 21:9d:68:87:d8:71:2a:c4:cf:b3:45:27:d1:18:3c:89:ae:a2: 3c:ea:f6:48:cf:4c:10:ea:78:c1:61:4d:b1:c5:4b:b8:26:e2: 8b:ba:3d:39:b6:84:6b:14:c0:f9:bc:de:3c:21:42:c3:39:e2: 61:b9:d0:59:1a:79:94:bb:58:60:15:4e:da:5f:c9:91:50:27: 78:58:4b:83:47:6d:64:43:19:ae:a2:c7:66:46:bf:88:ac:62: 67:57:aa:08:d3:70:07:98:71:ec:d5:c3:14:92:f4:2f:9f:6a: c6:4b:34:c7:f4:a6:29:b9:12:e6:60:87:a7:18:16:7e:fd:dd: 8a:42:dc:4f:42:b3:22:6b:5a:f1:f3:71:ff:40:be:af:bc:8f: 44:23:d2:7b:bc:8a:02:a0:a3:15:7b:60:3d:44:bd:eb:48:a0: dc:7a:74:2b:19:76:90:6e:53:2f:c0:7b:cf:66:bb:cd:01:3d: d8:08:1e:f0:08:88:47:92:28:e8:c2:78:31:11:17:3f:3a:b9: 5d:28:35:83:16:b0:71:6f:a1:a7:3e:32:cb:9e:54:94:de:f4: 7a:e2:5b:d8:7f:21:40:78:c4:11:e9:72:ac:5d:d8:57:c2:bd: 72:5c:b9:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsD3T7bpFDMIJ6AqX6sBLjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjA5MTYwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTdkZWE1MWUwOTRkMWM2YTFmMDM0YjEyYzdkZDY2YjcyYTE1MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwALhbdkuPwOvft4/lu59XJH/a/G 50ECapzBfY5RvncU2k96eYc5zkU+OHZwCRk6QeZ+AhsusFylWeRJLC7qVslT1W45 e2n3q7eDiuCilrIeTI0JEqBCU9EttQbpBMiGi/xLihR8iX6e23zDl6ssptms56UC gIfdnDMviltUjzeE6ab1/kkWc8VHMcJ1orG4PiOiQX4wQuCv7ROesoYOhkBoVrVJ Lc71YEXrY7U3jGQZairg+DSuewqY+nvnIz6Nopp0uf0fkSK+t2sBPnplSkWJF3Y+ l2ea12ahcJZ94BeIZFC/X4YttkjRcS3lRQTWHZaXvO8dzkUisdQ/B5IZYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNp96lHglNHGofA0sSx91mtyoVD0MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvMm4zcVVlQ1UwY2FoOERTeExIM1dhM0toVVBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABfx2AwQA 1WzGMA0GCSqGSIb3DQEBCwUAA4IBAQDBntbGLiSnsBwmQke3oQ+mz2YhnWiH2HEq xM+zRSfRGDyJrqI86vZIz0wQ6njBYU2xxUu4JuKLuj05toRrFMD5vN48IULDOeJh udBZGnmUu1hgFU7aX8mRUCd4WEuDR21kQxmuosdmRr+IrGJnV6oI03AHmHHs1cMU kvQvn2rGSzTH9KYpuRLmYIenGBZ+/d2KQtxPQrMia1rx83H/QL6vvI9EI9J7vIoC oKMVe2A9RL3rSKDcenQrGXaQblMvwHvPZrvNAT3YCB7wCIhHkijowngxERc/Orld KDWDFrBxb6GnPjLLnlSU3vR64lvYfyFAeMQR6XKsXdhXwr1yXLnw -----END CERTIFICATE-----Generated at Thu Dec 11 17:06:13 2025 by rpki-client