This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/c0033PUKHcK0RGnP2G-A-PBcvHI.roa File: c0033PUKHcK0RGnP2G-A-PBcvHI.roa (raw, json) Hash identifier: 2Ou36KzazZ/RW5paKom4FLZjeLVkyhsmjYIVTfOC2XI= Subject key identifier: 73:4D:37:DC:F5:0A:1D:C2:B4:44:69:CF:D8:6F:80:F8:F0:5C:BC:72 Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Certificate serial: 019AECCC170DBB7AE0F5A7F6D4733E2D7BD9 Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/c0033PUKHcK0RGnP2G-A-PBcvHI.roa Signing time: Fri 05 Dec 2025 04:36:29 +0000 ROA not before: Fri 05 Dec 2025 04:36:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 398549 IP address blocks: 176.10.89.0/24 maxlen: 24 2a13:d8c1::/32 maxlen: 32 2a13:d8c2::/32 maxlen: 32 2a13:d8c3::/32 maxlen: 32 2a13:d8c3:5::/48 maxlen: 48 2a13:d8c3:7::/48 maxlen: 48 2a13:d8c5::/32 maxlen: 32 2a13:d8c6::/32 maxlen: 32 2a13:d8c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ec:cc:17:0d:bb:7a:e0:f5:a7:f6:d4:73:3e:2d:7b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Validity Not Before: Dec 5 04:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=734d37dcf50a1dc2b44469cfd86f80f8f05cbc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:13:eb:e2:7d:66:9c:f7:f8:8e:55:ed:2e: 0e:b6:ec:01:cc:80:aa:31:36:bf:b4:fa:3e:a1:e1: 26:ad:2f:29:69:65:fa:0c:3b:7e:60:0c:64:25:ae: 28:4e:c2:65:78:33:7e:31:12:f7:0f:49:86:ae:dd: b4:f0:d0:a8:61:2b:29:73:86:66:ad:ef:51:39:49: cb:a8:fb:8f:2f:f8:f5:00:b9:b5:4a:16:42:b8:df: df:32:d6:64:dc:fe:ff:cf:5a:cd:26:14:cd:53:3f: f5:60:5e:1a:4d:1c:79:3d:2e:4d:60:ed:27:81:c7: 1a:dd:78:9f:2a:ca:a1:a2:a6:24:57:13:90:9a:2b: ed:72:66:6a:e0:06:d1:16:d6:3c:ba:e0:33:1a:74: 00:a0:56:3e:c5:e8:30:b7:29:65:4e:47:dd:dd:75: 0d:eb:a9:ee:83:af:11:d8:39:dc:1b:91:cc:88:35: cc:63:ae:5d:4d:a0:a9:4f:6c:15:90:a4:70:3b:d9: f3:1d:bb:37:3c:71:d4:ac:4c:a0:29:54:bf:49:d1: f8:90:80:44:7a:ca:ab:e6:f8:df:55:5e:0c:bd:25: 6a:47:26:76:b3:a3:0c:e9:cf:16:49:6c:b7:6d:8f: d9:ab:31:98:ab:1b:3c:e1:27:86:7d:95:07:42:d0: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4D:37:DC:F5:0A:1D:C2:B4:44:69:CF:D8:6F:80:F8:F0:5C:BC:72 X509v3 Authority Key Identifier: keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/c0033PUKHcK0RGnP2G-A-PBcvHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.10.89.0/24 IPv6: 2a13:d8c1::-2a13:d8c3:ffff:ffff:ffff:ffff:ffff:ffff 2a13:d8c5::-2a13:d8c7:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 60:c6:aa:b6:1e:3b:6e:ff:0c:d9:74:3a:a2:1b:d2:b7:27:f3: f0:c4:16:7d:cc:fe:3c:e5:2f:0d:f9:5d:e9:33:9d:fe:50:b8: 57:11:eb:6b:43:71:c3:9c:94:0b:f0:16:f1:80:78:d8:50:cf: af:13:d0:e7:34:09:a0:ca:3f:95:3f:41:6a:81:f2:01:b4:d7: 3f:f5:a1:41:91:6f:60:f5:c7:10:a1:79:0e:e5:91:df:5b:32: 66:35:7a:fa:1e:95:a7:41:f8:f8:aa:9f:9a:f2:1f:f2:56:0d: 3e:bd:2e:53:36:5b:54:a7:45:13:fa:c7:c6:1e:0d:17:05:40: b9:24:28:6f:c2:10:35:a0:61:1e:3f:31:5b:43:1c:99:21:ba: 6c:42:98:17:9f:a6:1f:e8:47:23:7c:e2:f3:d7:3d:71:50:13: d2:26:be:8d:f4:0d:e9:9e:72:d7:cf:84:32:5a:98:93:df:ef: ce:71:cf:33:16:c9:e2:da:9e:54:db:2f:84:54:32:de:60:a2: 16:10:9c:7f:11:08:4e:21:31:82:c6:4a:d4:4d:c3:7b:20:d2: 6b:56:6a:02:85:95:4c:7a:f8:65:fc:05:27:47:77:3f:d1:a7: bc:e0:ba:9b:ae:d1:45:0c:7d:12:4b:e0:73:65:f9:a0:87:52: 6d:48:cb:13 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZrszBcNu3rg9af21HM+LXvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZjUzYzAzZDJmNGU3ZjA3YTgxZWE5MDNlY2VmMDFkNjhj NjgxMzcwHhcNMjUxMjA1MDQzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzRkMzdkY2Y1MGExZGMyYjQ0NDY5Y2ZkODZmODBmOGYwNWNiYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYQT6+J9Zpz3+I5V7S4OtuwBzICq MTa/tPo+oeEmrS8paWX6DDt+YAxkJa4oTsJleDN+MRL3D0mGrt208NCoYSspc4Zm re9ROUnLqPuPL/j1ALm1ShZCuN/fMtZk3P7/z1rNJhTNUz/1YF4aTRx5PS5NYO0n gcca3XifKsqhoqYkVxOQmivtcmZq4AbRFtY8uuAzGnQAoFY+xegwtyllTkfd3XUN 66nug68R2DncG5HMiDXMY65dTaCpT2wVkKRwO9nzHbs3PHHUrEygKVS/SdH4kIBE esqr5vjfVV4MvSVqRyZ2s6MM6c8WSWy3bY/ZqzGYqxs84SeGfZUHQtCAawIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFHNNN9z1Ch3CtERpz9hvgPjwXLxyMB8GA1UdIwQY MBaAFMb1PAPS9OfweoHqkD7O8B1oxoE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDct OTBlYTM3MjljNTc0LzEvYzAwMzNQVUtIY0swUkduUDJHLUEtUEJjdkhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDctOTBlYTM3MjljNTc0 LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAMBAIAATAGAwQAsApZMCYE AgACMCAwDgMFACoT2MEDBQIqE9jAMA4DBQAqE9jFAwUDKhPYwDANBgkqhkiG9w0B AQsFAAOCAQEAYMaqth47bv8M2XQ6ohvStyfz8MQWfcz+POUvDfld6TOd/lC4VxHr a0Nxw5yUC/AW8YB42FDPrxPQ5zQJoMo/lT9BaoHyAbTXP/WhQZFvYPXHEKF5DuWR 31syZjV6+h6Vp0H4+KqfmvIf8lYNPr0uUzZbVKdFE/rHxh4NFwVAuSQob8IQNaBh Hj8xW0McmSG6bEKYF5+mH+hHI3zi89c9cVAT0ia+jfQN6Z5y18+EMlqYk9/vznHP MxbJ4tqeVNsvhFQy3mCiFhCcfxEITiExgsZK1E3DeyDSa1ZqAoWVTHr4ZfwFJ0d3 P9GnvOC6m67RRQx9Ekvgc2X5oIdSbUjLEw== -----END CERTIFICATE-----Generated at Wed Dec 17 06:29:22 2025 by rpki-client