This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/dHX9OeJUjAZUllLt71Z0XjT-y9s.roa File: dHX9OeJUjAZUllLt71Z0XjT-y9s.roa (raw, json) Hash identifier: p5O6HZkXJi4qcSxI8/WOPJB/VfnyI5jr5L/PpYxKHy4= Subject key identifier: 74:75:FD:39:E2:54:8C:06:54:96:52:ED:EF:56:74:5E:34:FE:CB:DB Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019AFF07755D995742BC0AF71CC3946F5867 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/dHX9OeJUjAZUllLt71Z0XjT-y9s.roa Signing time: Mon 08 Dec 2025 17:34:29 +0000 ROA not before: Mon 08 Dec 2025 17:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197450 IP address blocks: 5.180.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:07:75:5d:99:57:42:bc:0a:f7:1c:c3:94:6f:58:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Dec 8 17:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7475fd39e2548c06549652edef56745e34fecbdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1c:b0:fa:89:40:39:dc:b3:5d:98:22:22:64: 3c:49:bc:18:c1:9e:99:bf:16:92:af:5f:71:d1:d5: 66:f7:1d:ee:cf:30:09:45:eb:26:11:19:8b:5e:33: be:70:21:e0:c5:e6:27:ba:00:b7:96:09:ff:f7:28: b5:6d:d9:58:a7:2c:d9:b9:f6:35:e7:ba:f7:a1:60: a1:2d:0e:ee:14:df:59:87:25:40:c5:87:0d:2a:b4: 7f:05:f1:84:98:be:16:b5:9f:8e:67:e9:3f:c3:93: 16:2b:b3:6d:e3:c4:16:b0:d4:d0:74:b0:ad:de:6d: 60:e5:0d:52:8f:87:8a:b6:03:ca:45:c2:e4:d1:3b: e5:e9:2f:e4:d5:9a:82:8e:31:c9:0c:e7:06:68:b5: 09:44:45:91:32:fc:73:a8:51:b5:76:a3:53:33:e9: f9:0a:f0:4d:42:b6:af:7d:cf:58:21:7a:18:2d:98: b0:76:61:59:45:cb:04:67:0b:81:d7:49:73:77:1e: 3f:4c:d8:f0:ea:e6:fa:22:90:59:1f:56:b5:39:6d: 79:68:7f:7a:87:3a:aa:50:ac:61:8e:6f:ca:2f:65: fb:fe:df:9a:a7:bf:6e:36:c5:7b:2e:7d:44:42:90: ea:c7:b9:b9:04:28:f2:0e:b3:d5:c6:bd:5c:5a:09: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:75:FD:39:E2:54:8C:06:54:96:52:ED:EF:56:74:5E:34:FE:CB:DB X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/dHX9OeJUjAZUllLt71Z0XjT-y9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.104.0/24 Signature Algorithm: sha256WithRSAEncryption 22:e2:ef:3a:76:d9:45:2e:07:76:af:e4:8c:a7:3f:5e:0e:8c: f7:73:85:5a:3f:30:9b:1d:7f:3b:ce:62:ea:d8:37:ae:17:ea: 03:fa:6c:6f:e9:c9:7b:49:88:8c:b2:4e:3b:0c:48:6e:8f:d2: 79:57:97:c1:1c:e1:8f:f1:2e:8e:2a:b0:14:14:ca:c9:91:8c: f2:5d:c3:75:89:57:9e:3e:37:60:af:a9:ed:9b:eb:bb:c6:ca: a8:d2:ab:5c:24:f2:a8:0b:7d:84:5f:ec:c8:e1:a8:3e:dc:a2: 9d:45:8f:6a:f2:fb:2b:62:38:1b:af:a3:ec:c9:af:f9:62:44: ec:3c:ed:4c:09:bb:e5:b7:b8:e7:c0:a9:7b:1a:98:69:16:db: 43:be:ad:0a:ce:f4:26:75:b1:fe:5e:bf:1c:8d:b1:e0:6b:53: b3:a1:90:db:f1:30:f9:e2:17:51:f4:ae:fc:2f:13:fd:43:9c: 09:27:6e:4b:8a:6d:0e:a2:96:0c:62:b5:50:1f:c2:67:fc:17: 08:47:7b:40:24:14:b9:dc:6e:05:14:0d:26:19:20:63:eb:3f: 3b:0e:f0:3e:2e:e3:ee:fe:c9:b0:c4:c6:62:c9:da:7d:c2:bb: 70:14:56:c3:37:f1:b9:64:04:f9:35:8a:9d:03:53:1e:c7:fa: 05:bd:2e:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr/B3VdmVdCvAr3HMOUb1hnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMjA4MTczNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDc1ZmQzOWUyNTQ4YzA2NTQ5NjUyZWRlZjU2NzQ1ZTM0ZmVjYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxyw+olAOdyzXZgiImQ8SbwYwZ6Z vxaSr19x0dVm9x3uzzAJResmERmLXjO+cCHgxeYnugC3lgn/9yi1bdlYpyzZufY1 57r3oWChLQ7uFN9ZhyVAxYcNKrR/BfGEmL4WtZ+OZ+k/w5MWK7Nt48QWsNTQdLCt 3m1g5Q1Sj4eKtgPKRcLk0Tvl6S/k1ZqCjjHJDOcGaLUJREWRMvxzqFG1dqNTM+n5 CvBNQravfc9YIXoYLZiwdmFZRcsEZwuB10lzdx4/TNjw6ub6IpBZH1a1OW15aH96 hzqqUKxhjm/KL2X7/t+ap79uNsV7Ln1EQpDqx7m5BCjyDrPVxr1cWgkv2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHR1/TniVIwGVJZS7e9WdF40/svbMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvZEhYOU9lSlVqQVpVbGxMdDcxWjBYalQteTlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbRoMA0G CSqGSIb3DQEBCwUAA4IBAQAi4u86dtlFLgd2r+SMpz9eDoz3c4VaPzCbHX87zmLq 2DeuF+oD+mxv6cl7SYiMsk47DEhuj9J5V5fBHOGP8S6OKrAUFMrJkYzyXcN1iVee Pjdgr6ntm+u7xsqo0qtcJPKoC32EX+zI4ag+3KKdRY9q8vsrYjgbr6Psya/5YkTs PO1MCbvlt7jnwKl7GphpFttDvq0KzvQmdbH+Xr8cjbHga1OzoZDb8TD54hdR9K78 LxP9Q5wJJ25Lim0OopYMYrVQH8Jn/BcIR3tAJBS53G4FFA0mGSBj6z87DvA+LuPu /smwxMZiydp9wrtwFFbDN/G5ZAT5NYqdA1Mex/oFvS40 -----END CERTIFICATE-----Generated at Sat Dec 13 08:17:11 2025 by rpki-client