This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/5xHu2vHFU8L2LzAlga4FFXLFsDQ.roa File: 5xHu2vHFU8L2LzAlga4FFXLFsDQ.roa (raw, json) Hash identifier: BxqbGyfwg3x0d8cjNkqLERVhlbxvEM8fM8hDzqzFtzQ= Subject key identifier: E7:11:EE:DA:F1:C5:53:C2:F6:2F:30:25:81:AE:05:15:72:C5:B0:34 Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019A96BDE0D41D9EE05F674E959F9EB3C652 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/5xHu2vHFU8L2LzAlga4FFXLFsDQ.roa Signing time: Tue 18 Nov 2025 11:33:37 +0000 ROA not before: Tue 18 Nov 2025 11:33:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 5.10.213.0/24 maxlen: 24 5.10.216.0/24 maxlen: 24 5.10.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:bd:e0:d4:1d:9e:e0:5f:67:4e:95:9f:9e:b3:c6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Nov 18 11:33:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e711eedaf1c553c2f62f302581ae051572c5b034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:0a:c7:f0:4f:a9:97:52:ed:65:d3:b8:64: d9:f2:e7:57:c0:6e:f0:b8:50:17:63:ec:2c:4f:7e: 30:02:53:94:7f:60:d6:52:4e:c0:2a:53:48:1f:3f: 53:53:f8:15:d5:11:a8:60:18:03:0a:60:8e:12:a6: 42:00:4d:7d:ec:18:d9:6f:bc:2e:56:65:ae:67:d0: fc:40:af:e3:28:7f:7d:61:c8:7c:aa:cb:1b:69:3d: ab:8e:65:a9:d1:f4:b2:db:5b:87:f3:2b:6d:1d:66: fc:74:83:28:8f:0b:d7:08:14:04:e7:98:5a:ea:38: f2:80:8c:03:79:62:9f:be:45:0b:11:e3:53:90:6d: 7c:86:0b:e6:95:54:39:39:a1:45:09:0d:f7:2f:3e: 63:fa:ba:57:68:71:db:c0:8f:13:7f:80:fa:4d:fc: ba:2d:fd:97:84:f1:e9:5d:cc:85:4b:1e:f4:fd:32: 48:84:9c:63:99:c4:54:ad:87:4c:38:ab:d8:d8:ce: e6:25:bf:f8:2c:e7:6b:fb:4d:c3:b0:8a:d7:bc:a4: f5:c9:dc:cc:85:70:dc:cb:fc:ce:0b:fa:d6:82:4b: 61:87:eb:7e:90:b1:c9:82:30:a8:b2:75:2c:d2:99: 40:4f:5a:51:d5:98:d7:ea:e8:db:de:aa:a6:1b:70: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:11:EE:DA:F1:C5:53:C2:F6:2F:30:25:81:AE:05:15:72:C5:B0:34 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/5xHu2vHFU8L2LzAlga4FFXLFsDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.213.0/24 5.10.216.0/24 5.10.222.0/24 Signature Algorithm: sha256WithRSAEncryption 77:e3:5e:5d:a3:7e:f8:37:22:45:b0:a6:c1:99:57:bf:0f:e9: 89:25:91:a4:a8:79:cc:d1:20:9f:c1:33:92:eb:9e:c0:a1:b2: 0b:9b:80:97:ea:53:c2:0f:68:1b:a5:26:0e:04:33:ae:41:90: f0:85:fe:ea:e2:11:c9:01:d8:41:ca:86:f5:21:18:17:f1:38: 3c:8e:07:2b:24:4a:67:71:94:dd:dd:23:a4:dc:93:a5:df:f9: e4:ac:2d:7c:fc:33:e4:78:91:97:15:52:42:93:f3:3b:25:ae: 72:7f:14:94:81:48:d8:c6:4f:2e:44:0f:75:1b:2c:10:1d:3f: 13:07:f6:a6:4d:5d:cc:40:55:ab:b5:46:47:bc:40:98:2b:63: 93:6a:f8:11:cb:b7:da:04:76:87:97:e6:69:73:4e:f4:07:4f: 34:e7:03:16:22:8e:b4:06:a4:1e:34:5a:b6:a0:1d:b1:6e:a0: e5:25:da:88:b7:67:0c:10:13:18:5b:72:ca:16:1c:59:c5:1e: 21:19:22:4b:b0:8d:ae:9b:43:40:b8:09:52:27:af:00:b4:9f: 92:59:46:74:34:9f:9b:a0:2d:56:36:5b:74:ad:3b:2b:c9:05: 0d:64:6f:81:ed:27:d6:bd:c5:c5:7f:94:44:17:76:39:d6:ed: 29:cd:5e:2c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqWveDUHZ7gX2dOlZ+es8ZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUxMTE4MTEzMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzExZWVkYWYxYzU1M2MyZjYyZjMwMjU4MWFlMDUxNTcyYzViMDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfYKx/BPqZdS7WXTuGTZ8udXwG7w uFAXY+wsT34wAlOUf2DWUk7AKlNIHz9TU/gV1RGoYBgDCmCOEqZCAE197BjZb7wu VmWuZ9D8QK/jKH99Ych8qssbaT2rjmWp0fSy21uH8yttHWb8dIMojwvXCBQE55ha 6jjygIwDeWKfvkULEeNTkG18hgvmlVQ5OaFFCQ33Lz5j+rpXaHHbwI8Tf4D6Tfy6 Lf2XhPHpXcyFSx70/TJIhJxjmcRUrYdMOKvY2M7mJb/4LOdr+03DsIrXvKT1ydzM hXDcy/zOC/rWgkthh+t+kLHJgjCosnUs0plAT1pR1ZjX6ujb3qqmG3AVAwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOcR7trxxVPC9i8wJYGuBRVyxbA0MB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvNXhIdTJ2SEZVOEwyTHpBbGdhNEZGWExGc0RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABQrVAwQA BQrYAwQABQreMA0GCSqGSIb3DQEBCwUAA4IBAQB3415do374NyJFsKbBmVe/D+mJ JZGkqHnM0SCfwTOS657AobILm4CX6lPCD2gbpSYOBDOuQZDwhf7q4hHJAdhByob1 IRgX8Tg8jgcrJEpncZTd3SOk3JOl3/nkrC18/DPkeJGXFVJCk/M7Ja5yfxSUgUjY xk8uRA91GywQHT8TB/amTV3MQFWrtUZHvECYK2OTavgRy7faBHaHl+Zpc070B080 5wMWIo60BqQeNFq2oB2xbqDlJdqIt2cMEBMYW3LKFhxZxR4hGSJLsI2um0NAuAlS J68AtJ+SWUZ0NJ+boC1WNlt0rTsryQUNZG+B7SfWvcXFf5REF3Y51u0pzV4s -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:42 2025 by rpki-client