This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pBx54_Kue3lnoyckqhKNO9L30zc.roa File: pBx54_Kue3lnoyckqhKNO9L30zc.roa (raw, json) Hash identifier: gvBxTEHSfPrCLs71oCmrqDwvM/sDBP+Y28lYGpvLUF8= Subject key identifier: A4:1C:79:E3:F2:AE:7B:79:67:A3:27:24:AA:12:8D:3B:D2:F7:D3:37 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019AFE647F12D57CEFA8109F396E925F23B2 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pBx54_Kue3lnoyckqhKNO9L30zc.roa Signing time: Mon 08 Dec 2025 14:36:30 +0000 ROA not before: Mon 08 Dec 2025 14:36:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57271 IP address blocks: 31.24.251.0/24 maxlen: 24 45.90.46.0/24 maxlen: 24 2a0d:e242::/32 maxlen: 32 2a0e:19c6::/32 maxlen: 32 2a11:ec6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:64:7f:12:d5:7c:ef:a8:10:9f:39:6e:92:5f:23:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Dec 8 14:36:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a41c79e3f2ae7b7967a32724aa128d3bd2f7d337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:a3:1f:e9:f6:ed:b8:2f:01:dc:9a:74:d7: 73:b1:49:26:03:f7:2b:f2:30:9c:0b:0f:04:e7:1a: 8a:5b:ac:22:a9:9a:fa:ba:b7:25:93:95:96:36:de: 64:03:11:f9:08:0b:bb:55:6f:64:da:d0:54:df:0d: a2:49:6a:cd:22:c8:6d:28:40:40:e1:3a:4b:13:ef: 5f:46:aa:bb:f8:6f:24:43:90:af:f9:90:a5:c2:30: 08:1c:7b:61:cb:90:3e:7f:07:17:51:71:9d:db:c3: 8e:e1:4f:d6:ea:61:2f:3d:07:74:21:b8:cc:94:fa: d0:12:47:23:23:bc:32:2b:c9:5c:e2:48:bb:78:7d: ae:f8:f8:40:bf:af:bf:75:1d:e9:b4:2c:27:fa:b6: 4d:cc:b5:4c:f5:60:1a:41:d5:a4:d9:60:fc:cc:b4: 91:61:7a:96:f1:83:1f:d5:da:60:1f:51:2c:d6:5e: 6d:ab:c8:1a:ca:48:9a:27:88:09:c8:e9:c5:2a:d4: e0:65:e3:2c:57:c8:68:c2:d3:9c:a9:ac:14:8d:fe: ad:74:85:8f:5c:20:f5:f7:61:6c:9e:18:a1:5d:11: 11:36:ad:12:2d:2f:71:e9:fd:11:51:de:6d:0f:dd: 37:24:60:e4:61:e0:74:d0:11:99:71:88:86:b5:c2: 0c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1C:79:E3:F2:AE:7B:79:67:A3:27:24:AA:12:8D:3B:D2:F7:D3:37 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pBx54_Kue3lnoyckqhKNO9L30zc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.251.0/24 45.90.46.0/24 IPv6: 2a0d:e242::/32 2a0e:19c6::/32 2a11:ec6::/32 Signature Algorithm: sha256WithRSAEncryption 93:2f:cf:d0:0e:05:50:a0:e9:96:f8:81:3d:29:a7:07:42:36: 31:52:64:1a:ce:4c:ad:f3:3e:dc:7c:e5:5f:29:da:66:e7:87: 89:d6:ce:54:ad:5d:66:9b:52:38:a4:99:95:3e:4f:8a:c0:9f: 18:cf:0f:88:fa:27:6d:f2:f6:e1:7e:01:25:ee:0f:b8:38:a5: e1:22:b8:ab:0a:34:cd:d6:40:62:17:28:b8:d7:a2:ba:bf:92: ab:81:f4:e4:72:5b:56:3d:9e:e0:32:22:18:ad:75:c2:17:81: 5b:50:fd:26:84:a1:2e:46:98:3f:08:3b:fd:80:3c:c2:1d:1c: 37:b0:b6:24:52:50:a5:7f:4f:dd:25:83:6c:3a:4f:3c:e6:0a: 7f:33:9a:c5:e1:10:f4:55:66:fd:b3:1c:85:08:79:9e:2a:34: 93:35:39:a0:e3:94:a9:9d:1f:c8:30:66:ae:5b:a0:e5:c4:e4: db:11:13:50:86:67:2d:53:48:2c:3a:39:22:fd:f9:a8:b6:27: 55:ce:f5:c3:88:ac:00:1b:9a:f0:b4:29:d1:3d:bb:08:18:b5: 75:ab:c7:71:e9:34:16:fb:b9:9d:7c:66:12:1e:1d:a4:25:29: 90:87:e9:26:3f:29:70:82:ba:37:53:08:45:7e:d9:aa:d5:4d: 8a:59:8c:e0 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZr+ZH8S1XzvqBCfOW6SXyOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMjA4MTQzNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDFjNzllM2YyYWU3Yjc5NjdhMzI3MjRhYTEyOGQzYmQyZjdkMzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY2jH+n27bgvAdyadNdzsUkmA/cr 8jCcCw8E5xqKW6wiqZr6urclk5WWNt5kAxH5CAu7VW9k2tBU3w2iSWrNIshtKEBA 4TpLE+9fRqq7+G8kQ5Cv+ZClwjAIHHthy5A+fwcXUXGd28OO4U/W6mEvPQd0IbjM lPrQEkcjI7wyK8lc4ki7eH2u+PhAv6+/dR3ptCwn+rZNzLVM9WAaQdWk2WD8zLSR YXqW8YMf1dpgH1Es1l5tq8gaykiaJ4gJyOnFKtTgZeMsV8howtOcqawUjf6tdIWP XCD192FsnhihXRERNq0SLS9x6f0RUd5tD903JGDkYeB00BGZcYiGtcIMewIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFKQceePyrnt5Z6MnJKoSjTvS99M3MB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvcEJ4NTRfS3VlM2xub3lja3FoS05POUwzMHpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTASBAIAATAMAwQAHxj7AwQA LVouMBsEAgACMBUDBQAqDeJCAwUAKg4ZxgMFACoRDsYwDQYJKoZIhvcNAQELBQAD ggEBAJMvz9AOBVCg6Zb4gT0ppwdCNjFSZBrOTK3zPtx85V8p2mbnh4nWzlStXWab UjikmZU+T4rAnxjPD4j6J23y9uF+ASXuD7g4peEiuKsKNM3WQGIXKLjXorq/kquB 9ORyW1Y9nuAyIhitdcIXgVtQ/SaEoS5GmD8IO/2APMIdHDewtiRSUKV/T90lg2w6 TzzmCn8zmsXhEPRVZv2zHIUIeZ4qNJM1OaDjlKmdH8gwZq5boOXE5NsRE1CGZy1T SCw6OSL9+ai2J1XO9cOIrAAbmvC0KdE9uwgYtXWrx3HpNBb7uZ18ZhIeHaQlKZCH 6SY/KXCCujdTCEV+2arVTYpZjOA= -----END CERTIFICATE-----Generated at Fri Dec 19 04:00:03 2025 by rpki-client