This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/5W0xSirT6C1CiMZou6nPx-j2tZ0.roa File: 5W0xSirT6C1CiMZou6nPx-j2tZ0.roa (raw, json) Hash identifier: Yy5ahpZ052eGFW05fr9TBioYLRU2U0IPVK4rrj4Nsvo= Subject key identifier: E5:6D:31:4A:2A:D3:E8:2D:42:88:C6:68:BB:A9:CF:C7:E8:F6:B5:9D Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Certificate serial: 019AA5E849E1093F5E2FD4495E7EE32D766D Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/5W0xSirT6C1CiMZou6nPx-j2tZ0.roa Signing time: Fri 21 Nov 2025 10:14:15 +0000 ROA not before: Fri 21 Nov 2025 10:14:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56822 IP address blocks: 176.32.51.0/24 maxlen: 24 176.32.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:e8:49:e1:09:3f:5e:2f:d4:49:5e:7e:e3:2d:76:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Validity Not Before: Nov 21 10:14:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e56d314a2ad3e82d4288c668bba9cfc7e8f6b59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:ea:78:8b:5f:c0:9d:13:a1:6c:10:39:b3: 32:06:ea:57:fb:d4:f6:8d:9e:ab:1d:10:86:08:03: a0:a2:00:6c:e5:ea:fc:04:a9:74:9b:fa:9b:e7:ec: 8c:c4:1b:b3:17:30:82:62:0c:24:7d:0e:bd:10:73: dc:7c:0d:68:a2:1c:4b:2c:b5:8e:23:73:09:87:26: 44:5b:a7:8f:1b:85:94:19:73:83:5f:c9:48:ec:61: cd:61:14:c9:ed:48:b0:66:ea:ee:ae:e8:8a:67:e0: 82:00:22:7e:25:09:2f:a7:81:24:30:d5:e4:87:92: ae:a9:dd:77:7c:ce:9d:ea:a2:b8:d9:cb:2c:28:c8: 01:07:c9:50:69:51:a8:85:6d:c0:fe:01:8b:2f:59: 7d:61:4a:0b:29:92:8d:a1:71:1c:e7:93:a1:b7:59: 94:93:e4:69:85:fc:43:71:16:92:1f:10:02:f2:2e: 06:0b:73:5e:c7:eb:3b:39:d0:2e:cc:8d:3b:6e:41: 62:39:e6:ee:6a:9a:a4:64:33:4e:d2:2d:48:13:8c: 51:47:bb:09:77:cf:6c:33:ed:3d:de:ee:c6:3c:15: f6:ce:ce:76:95:fd:75:5b:47:c0:48:3b:c7:4c:c5: 26:b2:cf:40:46:88:4f:e2:a2:2c:ba:3d:9f:51:ff: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6D:31:4A:2A:D3:E8:2D:42:88:C6:68:BB:A9:CF:C7:E8:F6:B5:9D X509v3 Authority Key Identifier: keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/5W0xSirT6C1CiMZou6nPx-j2tZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.32.51.0/24 176.32.55.0/24 Signature Algorithm: sha256WithRSAEncryption 36:9e:d2:7b:f3:74:60:9c:22:08:15:5e:ee:2e:c0:88:d7:73: 20:86:8d:97:1c:0d:e6:27:36:63:24:12:e0:d6:ec:f4:70:62: 08:f3:7c:20:9d:0c:dc:d0:0d:74:0f:d4:14:fc:50:a4:fd:ac: 2f:c8:56:b9:43:77:21:28:da:b4:31:ac:91:2a:df:4a:25:fe: 64:41:35:a3:8e:dd:cf:03:28:55:07:95:e7:66:2a:f1:30:e4: d5:15:4d:1e:d2:16:03:e2:35:5e:d9:aa:d0:3a:e5:c6:9a:fd: ba:76:f2:08:5b:a7:58:59:71:3e:36:9f:70:9b:7c:90:a2:86: 83:52:c1:66:9c:e8:60:22:29:68:0c:4d:b9:60:a3:8e:6c:6b: dd:fe:cb:63:47:94:8d:e9:bd:33:55:68:f0:0b:52:e5:3d:0b: 60:dc:c5:18:e0:65:b4:1a:e4:02:f9:66:9e:09:81:c0:d4:02: 2d:80:01:4e:7b:eb:6f:cc:b1:81:49:d2:cf:7b:c5:a0:be:78: f8:2f:07:ad:9c:90:60:4b:25:73:77:9c:d2:7f:d6:ef:1b:8b: 31:f6:80:eb:96:c7:56:6a:af:79:4d:74:e9:7c:0f:13:c3:d3: b5:b9:93:23:05:90:dd:d2:f6:fb:22:e7:50:1d:59:d4:12:e2: bc:7e:06:10 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZql6EnhCT9eL9RJXn7jLXZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWI2MTExZTAwNGMyYTA0NGYxNjhiOGQyODI3M2NmNjc0 NGYzYTgwHhcNMjUxMTIxMTAxNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTZkMzE0YTJhZDNlODJkNDI4OGM2NjhiYmE5Y2ZjN2U4ZjZiNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvDqeItfwJ0ToWwQObMyBupX+9T2 jZ6rHRCGCAOgogBs5er8BKl0m/qb5+yMxBuzFzCCYgwkfQ69EHPcfA1oohxLLLWO I3MJhyZEW6ePG4WUGXODX8lI7GHNYRTJ7UiwZururuiKZ+CCACJ+JQkvp4EkMNXk h5Kuqd13fM6d6qK42cssKMgBB8lQaVGohW3A/gGLL1l9YUoLKZKNoXEc55Oht1mU k+RphfxDcRaSHxAC8i4GC3Nex+s7OdAuzI07bkFiOebuapqkZDNO0i1IE4xRR7sJ d89sM+093u7GPBX2zs52lf11W0fASDvHTMUmss9ARohP4qIsuj2fUf8aTwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOVtMUoq0+gtQojGaLupz8fo9rWdMB8GA1UdIwQY MBaAFKqrYRHgBMKgRPFouNKCc89nRPOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDkt ODJlZGVkYTdmZTdhLzEvNVcweFNpclQ2QzFDaU1ab3U2blB4LWoydFowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDktODJlZGVkYTdmZTdh LzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsCAzAwQA sCA3MA0GCSqGSIb3DQEBCwUAA4IBAQA2ntJ783RgnCIIFV7uLsCI13Mgho2XHA3m JzZjJBLg1uz0cGII83wgnQzc0A10D9QU/FCk/awvyFa5Q3chKNq0MayRKt9KJf5k QTWjjt3PAyhVB5XnZirxMOTVFU0e0hYD4jVe2arQOuXGmv26dvIIW6dYWXE+Np9w m3yQooaDUsFmnOhgIiloDE25YKOObGvd/stjR5SN6b0zVWjwC1LlPQtg3MUY4GW0 GuQC+WaeCYHA1AItgAFOe+tvzLGBSdLPe8Wgvnj4LwetnJBgSyVzd5zSf9bvG4sx 9oDrlsdWaq95TXTpfA8Tw9O1uZMjBZDd0vb7IudQHVnUEuK8fgYQ -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:29 2025 by rpki-client