This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/jNIMpqVVBBvGe1wWZEcd_3aMqTE.roa File: jNIMpqVVBBvGe1wWZEcd_3aMqTE.roa (raw, json) Hash identifier: DwN6wlinhuNYDL2QSAaQScCbNulY1NZQGBUVI9igI2E= Subject key identifier: 8C:D2:0C:A6:A5:55:04:1B:C6:7B:5C:16:64:47:1D:FF:76:8C:A9:31 Certificate issuer: /CN=54a0f0811f9c256374448aa015d7769271821bf3 Certificate serial: 019AC9CFC5F01F6EBFBC8B4DB497CA9EF612 Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/jNIMpqVVBBvGe1wWZEcd_3aMqTE.roa Signing time: Fri 28 Nov 2025 09:33:48 +0000 ROA not before: Fri 28 Nov 2025 09:33:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8075 IP address blocks: 5.23.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 09:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:cf:c5:f0:1f:6e:bf:bc:8b:4d:b4:97:ca:9e:f6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3 Validity Not Before: Nov 28 09:33:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8cd20ca6a555041bc67b5c1664471dff768ca931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:65:ff:f8:99:67:61:20:d1:a8:95:47:15: 5a:d8:3a:83:30:2e:77:f1:57:21:34:42:fb:ab:d2: 2c:ae:f8:14:d0:b0:5a:5a:b0:e2:c9:4e:7d:a8:f8: a8:a8:d1:95:1a:91:77:6a:55:7f:dd:f5:e6:b8:da: 6a:dc:b1:37:b6:45:d6:b4:46:bb:de:6e:7e:ad:e0: 52:97:fb:20:04:4f:3b:fb:d7:1a:e0:f1:82:a0:69: a2:5a:02:0f:26:7e:90:b0:07:6b:47:51:3a:d1:35: 31:3d:f4:d7:db:ba:9f:78:8b:63:9c:7c:a6:ef:79: c6:e5:37:72:7d:16:18:0e:9b:68:3a:6c:66:0f:3e: 53:65:9d:e6:c4:0c:ab:23:14:a1:3f:4d:a3:7f:7b: 1a:ee:73:a5:05:da:b3:20:b4:16:c0:10:10:55:c4: d7:e7:46:3b:3e:de:20:1e:59:85:d8:a3:8f:f0:1e: d1:33:4b:35:72:7f:63:85:3e:4f:f2:e5:00:24:cf: 7d:26:c9:39:7f:95:dc:cc:d1:c5:5e:5c:2d:7e:83: 80:6c:ef:2c:69:1f:79:0f:8c:3c:16:1a:2d:cc:f0: 6c:a1:81:85:34:55:10:58:f9:b2:4c:25:7f:3a:44: 70:e0:54:db:c2:bf:76:82:f4:7d:33:4d:1b:c9:95: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D2:0C:A6:A5:55:04:1B:C6:7B:5C:16:64:47:1D:FF:76:8C:A9:31 X509v3 Authority Key Identifier: keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/jNIMpqVVBBvGe1wWZEcd_3aMqTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.34.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:d3:4f:11:50:cc:85:fa:8b:67:e8:aa:f0:01:d4:f7:77:f1: b9:c7:e9:3a:e2:37:e2:66:da:af:07:a0:15:a1:b5:aa:9d:6f: b9:48:22:d0:22:48:3a:c1:ef:51:33:d3:0d:cb:c3:52:e0:58: e2:cf:da:87:b0:f6:4a:a1:55:d0:47:97:d3:5e:1d:b6:77:ff: f0:bc:c6:06:f3:2d:5c:5a:29:1a:cc:9a:6d:fe:cb:25:5e:96: a7:8d:e5:14:ad:cc:48:02:d5:cf:ef:10:63:48:79:d8:7f:37: 84:a0:a3:e4:6c:8a:f0:a8:21:ea:55:81:d7:6e:15:aa:e6:80: 6c:cf:e2:a1:e1:f0:65:10:d9:73:b1:4d:6b:77:80:ef:c7:e6: ee:b6:13:05:0f:e1:41:b1:db:2c:1a:36:68:76:c4:1e:d4:cb: f6:b2:f7:17:ad:ea:63:93:a1:f4:fb:b4:09:1d:34:52:7c:0b: 18:74:45:db:fb:da:84:84:94:be:e0:20:17:de:4a:54:89:bf: 9e:2d:fc:9a:f3:96:56:ff:a2:99:e5:77:78:36:14:da:30:10: 30:b4:4a:02:38:87:20:4e:c9:b2:4e:d1:b4:b8:0f:47:e9:42: 32:ff:8d:53:fd:93:bc:5d:4b:bc:f5:98:82:a0:9c:5b:f0:29: 81:11:ab:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrJz8XwH26/vItNtJfKnvYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTBmMDgxMWY5YzI1NjM3NDQ0OGFhMDE1ZDc3NjkyNzE4 MjFiZjMwHhcNMjUxMTI4MDkzMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2QyMGNhNmE1NTUwNDFiYzY3YjVjMTY2NDQ3MWRmZjc2OGNhOTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx1l//iZZ2Eg0aiVRxVa2DqDMC53 8VchNEL7q9IsrvgU0LBaWrDiyU59qPioqNGVGpF3alV/3fXmuNpq3LE3tkXWtEa7 3m5+reBSl/sgBE87+9ca4PGCoGmiWgIPJn6QsAdrR1E60TUxPfTX27qfeItjnHym 73nG5TdyfRYYDptoOmxmDz5TZZ3mxAyrIxShP02jf3sa7nOlBdqzILQWwBAQVcTX 50Y7Pt4gHlmF2KOP8B7RM0s1cn9jhT5P8uUAJM99Jsk5f5XczNHFXlwtfoOAbO8s aR95D4w8FhotzPBsoYGFNFUQWPmyTCV/OkRw4FTbwr92gvR9M00byZUFNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzSDKalVQQbxntcFmRHHf92jKkxMB8GA1UdIwQY MBaAFFSg8IEfnCVjdESKoBXXdpJxghvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmIt MDI5NjRjNTBkMjEyLzEvak5JTXBxVlZCQnZHZTF3V1pFY2RfM2FNcVRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmItMDI5NjRjNTBkMjEy LzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABRciMA0G CSqGSIb3DQEBCwUAA4IBAQBv008RUMyF+otn6KrwAdT3d/G5x+k64jfiZtqvB6AV obWqnW+5SCLQIkg6we9RM9MNy8NS4Fjiz9qHsPZKoVXQR5fTXh22d//wvMYG8y1c WikazJpt/sslXpanjeUUrcxIAtXP7xBjSHnYfzeEoKPkbIrwqCHqVYHXbhWq5oBs z+Kh4fBlENlzsU1rd4Dvx+buthMFD+FBsdssGjZodsQe1Mv2svcXrepjk6H0+7QJ HTRSfAsYdEXb+9qEhJS+4CAX3kpUib+eLfya85ZW/6KZ5Xd4NhTaMBAwtEoCOIcg TsmyTtG0uA9H6UIy/41T/ZO8XUu89ZiCoJxb8CmBEast -----END CERTIFICATE-----Generated at Thu Dec 4 10:28:19 2025 by rpki-client