This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/j17E10pt-sdCMvdAGXR5fww8P-c.roa File: j17E10pt-sdCMvdAGXR5fww8P-c.roa (raw, json) Hash identifier: imqf20HY+jakU4kZsIAxUjH8TtRUqSCubkaA6JMwuUY= Subject key identifier: 8F:5E:C4:D7:4A:6D:FA:C7:42:32:F7:40:19:74:79:7F:0C:3C:3F:E7 Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019A9B51C1EE32E482C5CFC928E3E7B6DE62 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/j17E10pt-sdCMvdAGXR5fww8P-c.roa Signing time: Wed 19 Nov 2025 08:53:37 +0000 ROA not before: Wed 19 Nov 2025 08:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 185.38.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:51:c1:ee:32:e4:82:c5:cf:c9:28:e3:e7:b6:de:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Nov 19 08:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f5ec4d74a6dfac74232f7401974797f0c3c3fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:53:dd:43:2c:08:47:98:05:63:91:29:87: b4:4b:6a:0a:0b:97:d1:5a:d7:85:07:28:99:9e:c3: da:9e:96:16:39:9a:22:60:41:e7:ee:0d:90:a2:f8: 4d:54:b8:79:60:e1:ca:21:a0:8f:49:1d:c7:e2:85: 7a:7e:23:17:28:f2:c4:51:81:48:10:17:33:54:fd: 92:ba:f5:71:db:e8:fe:7f:9a:2e:24:2c:41:f7:1e: c5:91:9e:f3:b9:e2:7a:d2:e2:dc:34:31:20:d8:ed: 24:b9:93:d0:80:47:9a:4b:9d:75:89:92:20:c2:af: 94:49:6a:ff:01:83:e8:b0:3d:fa:b7:e4:3d:85:ef: e1:3c:99:f2:e5:e9:8e:26:d7:bb:f3:c0:65:19:d1: 54:9a:c7:54:eb:b7:36:9b:bc:a4:0d:80:41:ab:4d: 83:a1:1b:27:51:4c:6b:6b:67:2b:8f:37:3d:7a:0f: dc:81:ad:e5:79:27:a9:32:7a:3f:a0:1a:02:ae:2a: 7c:7c:72:19:84:21:ec:27:5a:95:9a:c1:83:86:0d: 38:6c:e5:a2:62:97:1f:87:e6:b0:2a:c6:62:ba:09: 16:d1:eb:94:a4:91:d1:0f:80:f4:c5:7f:f1:8f:64: 39:c3:79:5d:48:78:4d:f1:1e:2b:11:92:9b:56:91: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5E:C4:D7:4A:6D:FA:C7:42:32:F7:40:19:74:79:7F:0C:3C:3F:E7 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/j17E10pt-sdCMvdAGXR5fww8P-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.25.0/24 Signature Algorithm: sha256WithRSAEncryption 11:a1:4e:f5:46:7d:d5:8e:cb:7c:b6:99:ed:0c:33:b0:1f:74: 7a:d2:d6:be:00:92:6f:18:dc:87:94:e1:4e:8b:64:20:56:b4: 31:02:f0:0d:eb:e9:eb:31:9c:60:26:bb:86:fb:04:96:a5:16: 1b:e7:4c:0e:b0:30:9e:df:1c:c1:0a:49:08:f1:e4:a9:e6:24: 62:c4:85:4a:8b:b9:0f:e3:57:85:1b:09:2e:3e:4b:45:b6:1d: 9d:ff:80:37:1e:20:e9:56:c1:dc:09:09:c9:09:09:0e:69:80: 46:74:a6:aa:d8:da:80:09:6b:d9:90:4c:44:f1:61:53:62:c7: 5b:fd:ac:c2:5a:76:e5:25:b9:da:08:e0:e7:b8:43:80:bb:88: 1a:a0:b1:d8:df:8f:e2:10:6f:e4:e8:27:12:4d:ca:7e:67:98: 79:a7:f9:62:0c:0c:12:97:d6:5e:3c:46:dc:f0:da:0d:1d:76: 08:c5:bc:a2:fa:28:8f:b4:fa:46:f2:be:27:31:16:73:54:8d: 57:68:ff:a6:2d:b2:9c:3b:bf:11:a7:d4:34:f9:70:df:6c:c3: 82:40:b6:d1:a7:9e:dd:a7:c4:4a:30:1b:a3:59:38:71:66:40: 0b:16:eb:7b:ac:33:36:7d:96:1e:d9:e3:7c:76:48:f7:cc:bc: 10:97:a5:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqbUcHuMuSCxc/JKOPntt5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUxMTE5MDg1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjVlYzRkNzRhNmRmYWM3NDIzMmY3NDAxOTc0Nzk3ZjBjM2MzZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8ZT3UMsCEeYBWORKYe0S2oKC5fR WteFByiZnsPanpYWOZoiYEHn7g2QovhNVLh5YOHKIaCPSR3H4oV6fiMXKPLEUYFI EBczVP2SuvVx2+j+f5ouJCxB9x7FkZ7zueJ60uLcNDEg2O0kuZPQgEeaS511iZIg wq+USWr/AYPosD36t+Q9he/hPJny5emOJte788BlGdFUmsdU67c2m7ykDYBBq02D oRsnUUxra2crjzc9eg/cga3leSepMno/oBoCrip8fHIZhCHsJ1qVmsGDhg04bOWi Ypcfh+awKsZiugkW0euUpJHRD4D0xX/xj2Q5w3ldSHhN8R4rEZKbVpEpbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI9exNdKbfrHQjL3QBl0eX8MPD/nMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvajE3RTEwcHQtc2RDTXZkQUdYUjVmd3c4UC1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSYZMA0G CSqGSIb3DQEBCwUAA4IBAQARoU71Rn3Vjst8tpntDDOwH3R60ta+AJJvGNyHlOFO i2QgVrQxAvAN6+nrMZxgJruG+wSWpRYb50wOsDCe3xzBCkkI8eSp5iRixIVKi7kP 41eFGwkuPktFth2d/4A3HiDpVsHcCQnJCQkOaYBGdKaq2NqACWvZkExE8WFTYsdb /azCWnblJbnaCODnuEOAu4gaoLHY34/iEG/k6CcSTcp+Z5h5p/liDAwSl9ZePEbc 8NoNHXYIxbyi+iiPtPpG8r4nMRZzVI1XaP+mLbKcO78Rp9Q0+XDfbMOCQLbRp57d p8RKMBujWThxZkALFut7rDM2fZYe2eN8dkj3zLwQl6Wd -----END CERTIFICATE-----Generated at Thu Dec 4 07:31:52 2025 by rpki-client