This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/Cp4gcvamYBfnZC5YYMArdCgHAWc.roa File: Cp4gcvamYBfnZC5YYMArdCgHAWc.roa (raw, json) Hash identifier: HDmnQw9rzA9hJV9zOcmuzMYOeMFvqznOPkwQbUVIAdc= Subject key identifier: 0A:9E:20:72:F6:A6:60:17:E7:64:2E:58:60:C0:2B:74:28:07:01:67 Certificate issuer: /CN=54a0f0811f9c256374448aa015d7769271821bf3 Certificate serial: 019AC9CFC58BEEEA27D9F42E1D5474A2BB3C Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/Cp4gcvamYBfnZC5YYMArdCgHAWc.roa Signing time: Fri 28 Nov 2025 09:33:48 +0000 ROA not before: Fri 28 Nov 2025 09:33:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5610 IP address blocks: 5.23.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 09:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:cf:c5:8b:ee:ea:27:d9:f4:2e:1d:54:74:a2:bb:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3 Validity Not Before: Nov 28 09:33:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0a9e2072f6a66017e7642e5860c02b7428070167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:b1:5e:3f:31:00:d4:aa:fe:52:e7:93:53: 03:da:49:07:46:18:35:90:49:8a:be:f3:0b:da:e9: 68:0a:16:e1:63:90:64:36:2a:f4:f2:8d:ad:bd:35: 23:3c:ec:76:8d:c8:db:41:9f:3b:ba:ad:39:8b:70: c1:e0:d3:3a:ad:67:f2:89:b2:d6:ba:32:61:12:e0: 1e:52:3b:1f:dc:0b:5d:72:ed:a1:06:39:41:25:bc: f3:25:7e:b1:f9:b3:9e:10:2d:d4:41:36:f3:9e:07: 14:b2:09:66:ba:ef:9f:64:2b:61:a0:2b:22:b2:0b: f6:e2:2d:63:b2:7c:ec:f1:40:b3:45:48:8c:c0:56: 50:6f:5e:3f:64:20:cd:03:31:cd:87:71:35:45:ca: e2:fd:6d:b0:29:98:a6:60:a8:92:4a:2b:0e:bd:a4: cb:2d:3e:f4:30:09:b2:57:53:d3:c7:e2:7b:8a:63: 54:0d:e9:d0:41:6a:8d:c2:89:5c:34:41:e7:3b:a2: 64:cc:49:56:c5:cb:d6:3a:86:4b:fb:22:55:fb:07: de:71:d6:5a:40:97:de:87:3f:4c:f8:7c:2b:d5:c0: 26:29:3f:13:01:cc:66:d1:4b:aa:c1:7f:86:a2:60: 0a:13:0b:ce:71:d5:ac:30:d5:06:26:24:34:af:cb: 86:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9E:20:72:F6:A6:60:17:E7:64:2E:58:60:C0:2B:74:28:07:01:67 X509v3 Authority Key Identifier: keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/Cp4gcvamYBfnZC5YYMArdCgHAWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.39.0/24 Signature Algorithm: sha256WithRSAEncryption aa:fc:92:26:52:a6:c1:30:74:c3:f1:41:74:85:90:41:2e:05: 26:d5:e5:77:d1:69:62:5d:48:24:a7:0b:91:2e:03:69:09:04: 0a:c1:73:98:7d:10:39:dc:ba:60:4b:61:02:c1:c6:e9:c7:41: 9e:ee:83:11:e6:f6:af:8e:26:68:e2:ab:8e:e6:e4:4e:4e:2b: 48:09:4c:e9:0d:aa:f7:a6:83:72:ea:86:18:da:bf:de:e1:97: dd:29:b1:c5:a3:e0:76:15:2f:13:7b:1a:df:e4:a2:80:a2:cf: ad:81:77:2a:34:29:f9:a4:39:d3:e5:57:3d:f4:e1:6a:1a:e2: d8:8e:84:81:9d:f1:65:6a:4c:da:01:cd:25:39:01:a9:ab:53: 1c:0d:64:81:b4:b0:f4:0e:08:c6:23:1e:40:4a:cc:8a:8b:b2: 0a:a7:82:18:13:25:b0:91:b5:14:9c:ca:12:db:67:54:44:f5: 2e:69:9e:4e:36:45:75:fe:ae:7e:a8:17:c1:04:15:f0:36:13: 6a:04:e9:9d:2f:f3:02:68:52:9a:6f:ab:6e:17:d0:c3:f8:66: f4:bb:20:03:ff:09:81:5a:30:e3:86:91:24:9b:14:82:0a:2f: 5d:ed:98:6f:e8:f8:a3:66:cf:47:cb:a9:84:52:bd:5d:72:c5: 60:a9:15:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrJz8WL7uon2fQuHVR0ors8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTBmMDgxMWY5YzI1NjM3NDQ0OGFhMDE1ZDc3NjkyNzE4 MjFiZjMwHhcNMjUxMTI4MDkzMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTllMjA3MmY2YTY2MDE3ZTc2NDJlNTg2MGMwMmI3NDI4MDcwMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobCxXj8xANSq/lLnk1MD2kkHRhg1 kEmKvvML2uloChbhY5BkNir08o2tvTUjPOx2jcjbQZ87uq05i3DB4NM6rWfyibLW ujJhEuAeUjsf3Atdcu2hBjlBJbzzJX6x+bOeEC3UQTbzngcUsglmuu+fZCthoCsi sgv24i1jsnzs8UCzRUiMwFZQb14/ZCDNAzHNh3E1Rcri/W2wKZimYKiSSisOvaTL LT70MAmyV1PTx+J7imNUDenQQWqNwolcNEHnO6JkzElWxcvWOoZL+yJV+wfecdZa QJfehz9M+Hwr1cAmKT8TAcxm0UuqwX+GomAKEwvOcdWsMNUGJiQ0r8uGRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqeIHL2pmAX52QuWGDAK3QoBwFnMB8GA1UdIwQY MBaAFFSg8IEfnCVjdESKoBXXdpJxghvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmIt MDI5NjRjNTBkMjEyLzEvQ3A0Z2N2YW1ZQmZuWkM1WVlNQXJkQ2dIQVdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmItMDI5NjRjNTBkMjEy LzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABRcnMA0G CSqGSIb3DQEBCwUAA4IBAQCq/JImUqbBMHTD8UF0hZBBLgUm1eV30WliXUgkpwuR LgNpCQQKwXOYfRA53LpgS2ECwcbpx0Ge7oMR5vavjiZo4quO5uROTitICUzpDar3 poNy6oYY2r/e4ZfdKbHFo+B2FS8Texrf5KKAos+tgXcqNCn5pDnT5Vc99OFqGuLY joSBnfFlakzaAc0lOQGpq1McDWSBtLD0DgjGIx5ASsyKi7IKp4IYEyWwkbUUnMoS 22dURPUuaZ5ONkV1/q5+qBfBBBXwNhNqBOmdL/MCaFKab6tuF9DD+Gb0uyAD/wmB WjDjhpEkmxSCCi9d7Zhv6PijZs9Hy6mEUr1dcsVgqRX+ -----END CERTIFICATE-----Generated at Thu Dec 4 12:03:27 2025 by rpki-client