This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dEVFXOla1LgO1wnctrond3IVP0g.roa File: dEVFXOla1LgO1wnctrond3IVP0g.roa (raw, json) Hash identifier: EZtoY1bXxdFeevL3FEb1oZsmp7KkH73DBtpz0sZ+z30= Subject key identifier: 74:45:45:5C:E9:5A:D4:B8:0E:D7:09:DC:B6:BA:27:77:72:15:3F:48 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B4A3ED441DDBCE621ABBFFAA5452599FB Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dEVFXOla1LgO1wnctrond3IVP0g.roa Signing time: Tue 23 Dec 2025 08:06:30 +0000 ROA not before: Tue 23 Dec 2025 08:06:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 5.180.33.0/24 maxlen: 24 5.180.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:3e:d4:41:dd:bc:e6:21:ab:bf:fa:a5:45:25:99:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Dec 23 08:06:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7445455ce95ad4b80ed709dcb6ba277772153f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:16:40:2e:c8:f3:3e:72:43:68:3b:ad:89: be:09:26:3a:fe:84:fe:dc:52:a4:e2:59:ac:a8:ee: 15:ea:ce:61:ec:77:3c:74:d0:c8:69:83:00:32:f7: f5:b3:6b:c4:c1:2b:dd:eb:ac:30:e7:00:b7:0e:7d: 40:a0:a3:50:ac:10:ab:25:19:f2:5f:18:72:66:20: e6:ff:53:43:5a:a1:c2:bc:9f:c7:9d:ab:61:a0:29: d7:1e:68:d3:be:e2:5c:6a:06:ed:fc:87:bf:44:ca: f9:c2:5b:c0:db:b1:95:6d:35:e2:38:36:46:5e:73: 7c:21:2d:53:bc:12:07:9f:9a:73:94:b5:84:0b:92: 41:ef:4d:35:fb:ca:6e:26:d5:17:f0:37:c8:9c:79: bd:58:ff:5d:ca:de:d9:de:1f:69:9f:24:be:ce:83: a1:ab:8a:b3:7e:42:56:4f:d0:4a:4d:cd:74:21:d9: c3:63:dd:cf:18:6f:00:f5:eb:b6:2f:b6:94:ce:49: 8b:22:0a:57:3a:64:bf:d2:f9:46:a5:36:04:31:aa: 04:22:c0:11:cc:bf:36:2a:fe:f5:86:ea:27:d0:72: 3e:1e:81:ae:23:8b:36:c2:29:f0:cd:0e:6e:22:91: c1:c6:7c:ba:e2:3c:d6:97:07:f9:18:b1:60:94:45: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:45:45:5C:E9:5A:D4:B8:0E:D7:09:DC:B6:BA:27:77:72:15:3F:48 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dEVFXOla1LgO1wnctrond3IVP0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.33.0/24 5.180.232.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:c7:6f:1f:23:f2:0b:7a:6c:17:ed:7a:37:14:01:6a:8e:6d: ab:12:d9:9b:66:69:3a:32:2c:5e:38:2a:54:c3:89:87:c7:1c: 2c:ab:38:a0:09:40:63:e1:b3:ff:6a:e3:ab:dc:6e:2a:f1:48: bc:37:bd:2a:f7:2b:aa:59:3b:6a:5d:37:ac:ab:92:93:25:85: 07:c1:7b:06:d6:39:26:d1:f8:16:32:ca:db:7b:e2:0b:81:aa: fb:3b:d9:23:1d:04:7c:f3:35:a6:68:fa:03:1b:8e:0f:f2:82: ca:cb:c5:a2:56:82:67:26:7d:9a:2c:bf:93:fa:f5:93:5b:c1: 4d:50:97:55:fd:5c:ae:69:42:a2:4f:13:d5:a1:fe:11:67:72: 4c:a5:6a:92:84:7a:48:e6:bd:55:6c:94:63:b1:fb:76:43:f9: 8c:09:03:c5:d8:9a:d8:f6:79:7a:11:60:35:2a:61:9d:6f:35: 1d:77:f9:52:9d:1a:ed:4b:62:e2:6f:b0:71:bb:a6:23:d8:98: cc:26:da:57:33:6c:07:8f:c7:4a:27:ef:f7:18:21:be:99:db: 81:65:40:db:cd:66:bc:75:cc:80:39:20:b9:3b:7c:87:2c:e2: 43:35:7a:62:04:83:40:a7:dc:42:a5:a5:fd:89:cf:97:e4:99: 37:72:9a:87 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtKPtRB3bzmIau/+qVFJZn7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMjIzMDgwNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDQ1NDU1Y2U5NWFkNGI4MGVkNzA5ZGNiNmJhMjc3NzcyMTUzZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAoWQC7I8z5yQ2g7rYm+CSY6/oT+ 3FKk4lmsqO4V6s5h7Hc8dNDIaYMAMvf1s2vEwSvd66ww5wC3Dn1AoKNQrBCrJRny XxhyZiDm/1NDWqHCvJ/HnathoCnXHmjTvuJcagbt/Ie/RMr5wlvA27GVbTXiODZG XnN8IS1TvBIHn5pzlLWEC5JB7001+8puJtUX8DfInHm9WP9dyt7Z3h9pnyS+zoOh q4qzfkJWT9BKTc10IdnDY93PGG8A9eu2L7aUzkmLIgpXOmS/0vlGpTYEMaoEIsAR zL82Kv71huon0HI+HoGuI4s2winwzQ5uIpHBxny64jzWlwf5GLFglEXj0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHRFRVzpWtS4DtcJ3La6J3dyFT9IMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvZEVWRlhPbGExTGdPMXduY3Ryb25kM0lWUDBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbQhAwQA BbToMA0GCSqGSIb3DQEBCwUAA4IBAQAMx28fI/ILemwX7Xo3FAFqjm2rEtmbZmk6 MixeOCpUw4mHxxwsqzigCUBj4bP/auOr3G4q8Ui8N70q9yuqWTtqXTesq5KTJYUH wXsG1jkm0fgWMsrbe+ILgar7O9kjHQR88zWmaPoDG44P8oLKy8WiVoJnJn2aLL+T +vWTW8FNUJdV/VyuaUKiTxPVof4RZ3JMpWqShHpI5r1VbJRjsft2Q/mMCQPF2JrY 9nl6EWA1KmGdbzUdd/lSnRrtS2Lib7Bxu6Yj2JjMJtpXM2wHj8dKJ+/3GCG+mduB ZUDbzWa8dcyAOSC5O3yHLOJDNXpiBINAp9xCpaX9ic+X5Jk3cpqH -----END CERTIFICATE-----Generated at Tue Dec 30 21:05:16 2025 by rpki-client