This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rRfJh5h1OvSwA68tMG8wiO1COM0.roa File: rRfJh5h1OvSwA68tMG8wiO1COM0.roa (raw, json) Hash identifier: Yu2Vd8cvt5rkk54xHpMlJX4kDqxA9npkwDRcXxwFDAc= Subject key identifier: AD:17:C9:87:98:75:3A:F4:B0:03:AF:2D:30:6F:30:88:ED:42:38:CD Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019AD72E05815E1B77656A0E157AC83E2D42 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rRfJh5h1OvSwA68tMG8wiO1COM0.roa Signing time: Sun 30 Nov 2025 23:51:48 +0000 ROA not before: Sun 30 Nov 2025 23:51:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 144.56.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d7:2e:05:81:5e:1b:77:65:6a:0e:15:7a:c8:3e:2d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Nov 30 23:51:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ad17c98798753af4b003af2d306f3088ed4238cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:16:cb:1f:28:dd:70:47:81:42:51:d4:d3: 3d:25:f8:72:aa:12:91:ab:22:dc:f1:2b:07:bc:94: cf:48:39:e3:d5:35:c6:cd:12:13:ee:e5:a5:0d:32: ff:9a:59:73:f0:2a:0f:75:61:a2:02:ff:d5:ea:02: a8:59:18:28:34:e4:88:1d:ca:b6:c8:c0:9f:5d:f0: 31:e5:e8:cb:5f:92:3a:7b:88:a1:cc:9b:81:62:51: dc:0f:6b:5f:63:d8:b5:5b:c1:88:4e:d8:7e:a0:47: 02:37:b0:92:b8:10:cb:90:33:20:a8:51:54:7c:88: 3e:fb:43:08:d2:6b:ff:85:c8:d1:53:bf:12:9e:f2: f8:35:ff:07:bb:f1:af:1f:a4:3a:cf:56:bf:5c:9b: 5b:b5:57:b1:12:4e:99:02:4b:cf:db:9a:a3:3e:ab: 88:70:43:91:0e:d9:5c:e1:ed:fb:49:d0:0b:1a:4d: 35:07:5c:c6:ad:00:80:f0:34:30:1b:fd:f4:cb:dd: ed:ec:61:3f:c2:62:7b:73:f3:30:d6:37:16:99:80: 45:63:35:cc:bc:eb:55:e4:02:c3:56:a1:74:f6:99: d2:3e:b2:8c:7e:49:85:ce:a4:9c:f7:c8:6b:c0:8e: 12:32:35:8c:00:f3:38:a7:f7:c9:9d:31:4a:24:57: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:17:C9:87:98:75:3A:F4:B0:03:AF:2D:30:6F:30:88:ED:42:38:CD X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rRfJh5h1OvSwA68tMG8wiO1COM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.51.0/24 Signature Algorithm: sha256WithRSAEncryption 92:3f:03:bb:0a:7a:f9:59:71:19:00:2f:a3:81:1d:37:79:de: aa:04:ab:18:31:1b:0f:79:6a:dd:38:e6:73:e9:a1:93:9c:01: da:76:b9:79:65:44:75:b8:7b:29:25:06:64:af:82:e5:b2:43: ec:fe:40:d3:4b:f6:ee:c4:f2:dc:ae:18:56:c0:03:d5:55:16: 75:7d:d8:fc:76:16:a9:4f:ad:78:db:a5:5f:cb:11:ec:9b:09: 5d:3e:36:5b:65:07:a9:01:dd:28:4b:20:49:11:1d:de:8d:5d: e7:70:ac:59:34:18:a9:1b:52:bb:e3:7a:51:d1:76:46:3d:33: 1a:8c:a6:78:86:8b:88:6b:4f:3d:c1:62:ff:ae:85:cb:be:83: db:b1:8e:bc:e0:46:cf:58:5e:de:4a:c6:e7:e6:44:fb:6a:71: 6b:41:be:95:4f:df:c1:71:12:cc:61:aa:63:2e:59:bc:da:ad: 55:c9:61:6a:fc:8f:5e:80:3c:9c:74:2b:b3:2d:a4:44:d8:a5: 23:41:59:f3:4c:ad:61:64:df:e7:3e:ff:e2:a5:8e:b8:17:f0: 5d:a7:c9:7d:c6:a6:1b:0f:21:21:d0:75:07:a6:3b:a9:07:af: 96:39:1a:18:46:64:d8:db:06:10:06:0d:b2:c3:97:8c:1b:aa: e0:f4:15:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrXLgWBXht3ZWoOFXrIPi1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMTMwMjM1MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDE3Yzk4Nzk4NzUzYWY0YjAwM2FmMmQzMDZmMzA4OGVkNDIzOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMcWyx8o3XBHgUJR1NM9JfhyqhKR qyLc8SsHvJTPSDnj1TXGzRIT7uWlDTL/mllz8CoPdWGiAv/V6gKoWRgoNOSIHcq2 yMCfXfAx5ejLX5I6e4ihzJuBYlHcD2tfY9i1W8GITth+oEcCN7CSuBDLkDMgqFFU fIg++0MI0mv/hcjRU78SnvL4Nf8Hu/GvH6Q6z1a/XJtbtVexEk6ZAkvP25qjPquI cEORDtlc4e37SdALGk01B1zGrQCA8DQwG/30y93t7GE/wmJ7c/Mw1jcWmYBFYzXM vOtV5ALDVqF09pnSPrKMfkmFzqSc98hrwI4SMjWMAPM4p/fJnTFKJFfZPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK0XyYeYdTr0sAOvLTBvMIjtQjjNMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvclJmSmg1aDFPdlN3QTY4dE1HOHdpTzFDT00wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgzMA0G CSqGSIb3DQEBCwUAA4IBAQCSPwO7Cnr5WXEZAC+jgR03ed6qBKsYMRsPeWrdOOZz 6aGTnAHadrl5ZUR1uHspJQZkr4LlskPs/kDTS/buxPLcrhhWwAPVVRZ1fdj8dhap T61426VfyxHsmwldPjZbZQepAd0oSyBJER3ejV3ncKxZNBipG1K743pR0XZGPTMa jKZ4houIa089wWL/roXLvoPbsY684EbPWF7eSsbn5kT7anFrQb6VT9/BcRLMYapj Llm82q1VyWFq/I9egDycdCuzLaRE2KUjQVnzTK1hZN/nPv/ipY64F/Bdp8l9xqYb DyEh0HUHpjupB6+WORoYRmTY2wYQBg2yw5eMG6rg9BVx -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:44 2025 by rpki-client