This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/mTK71BiAahOGNOj1gIjcUiycIis.roa File: mTK71BiAahOGNOj1gIjcUiycIis.roa (raw, json) Hash identifier: Kml3f2UysjEUhXvE3jKGWnv4uk2wh6/Ey/fuSSOhyUc= Subject key identifier: 99:32:BB:D4:18:80:6A:13:86:34:E8:F5:80:88:DC:52:2C:9C:22:2B Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea Certificate serial: 019ABBE22AFCAE0D892D4E386DF39F7CC792 Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/mTK71BiAahOGNOj1gIjcUiycIis.roa Signing time: Tue 25 Nov 2025 16:39:12 +0000 ROA not before: Tue 25 Nov 2025 16:39:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209050 IP address blocks: 5.183.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:e2:2a:fc:ae:0d:89:2d:4e:38:6d:f3:9f:7c:c7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea Validity Not Before: Nov 25 16:39:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9932bbd418806a138634e8f58088dc522c9c222b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9d:21:af:c2:76:09:5a:84:8b:85:54:94:e2: f7:a0:4a:a1:16:d9:89:d2:03:9d:c1:fc:3f:e7:0b: 70:65:2a:f5:cd:1f:a0:ff:30:42:8d:4c:a2:1a:c8: 19:09:85:6a:c2:7f:07:e0:2d:04:55:29:1f:fd:f1: 81:b5:6b:2a:8b:05:fa:4b:d7:63:b6:e7:c2:fb:db: 32:6b:21:94:89:3e:a2:10:76:5d:b8:59:bf:b5:39: 08:b9:71:8d:a7:d5:aa:51:b2:50:aa:d2:8a:da:44: ad:92:de:c4:32:4b:09:8e:68:91:52:5a:73:ab:04: 31:81:29:29:8c:d1:61:b1:d7:cb:66:41:92:37:82: 46:f4:5a:6a:9f:ed:73:7a:2f:dd:f7:75:94:86:66: 65:d9:41:9e:f4:19:40:92:90:9f:45:13:a0:27:1b: fb:a5:70:ae:2f:39:cf:2f:3b:f7:7a:b9:ab:98:eb: 04:1b:1c:99:1e:f4:ac:3d:c7:04:ec:fd:48:e9:03: d7:0a:79:96:a8:b4:05:8c:77:b5:2d:08:5a:c0:48: 38:ee:a4:f2:a0:9c:d7:24:ab:71:b0:02:a1:00:11: 9a:b3:38:10:8f:ef:be:ea:be:a5:76:be:28:d3:ec: ea:f8:66:d0:de:10:93:2d:51:06:41:7a:66:90:41: ae:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:32:BB:D4:18:80:6A:13:86:34:E8:F5:80:88:DC:52:2C:9C:22:2B X509v3 Authority Key Identifier: keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/mTK71BiAahOGNOj1gIjcUiycIis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.175.0/24 Signature Algorithm: sha256WithRSAEncryption 95:73:01:cd:a8:fd:70:aa:1e:b0:06:04:b5:e0:4b:86:20:b8: 07:b5:f7:46:8a:6c:3b:0b:a1:29:10:76:68:42:4c:dc:87:9d: cf:69:01:b1:4b:77:cd:72:ca:41:f6:02:20:e8:a3:fb:76:3f: db:73:c8:53:4e:23:72:39:8e:4d:a1:14:7d:32:ab:6c:fb:84: 6b:cd:02:9f:d0:aa:30:55:0b:0e:7d:4a:21:3d:5b:86:ff:90: d4:39:50:bb:1c:3a:0e:13:ce:f6:b7:92:ee:96:86:51:9d:d5: a9:0b:74:8c:bc:a3:c5:14:6a:76:03:05:aa:96:46:1b:c9:35: 50:e5:c8:8c:42:6a:8e:6b:b6:72:a6:9d:fa:8e:d1:8e:02:6e: 81:b5:6a:5b:0e:59:7a:25:b7:00:1a:e4:5b:00:ce:64:2a:51: 89:31:e8:68:20:af:45:b1:13:1f:b4:1e:82:0c:c2:92:04:e2: 86:90:ca:96:6f:2a:6e:2e:fc:c2:97:45:4c:5c:cd:10:b2:3c: 06:2e:72:54:03:9d:e6:4c:d9:7d:62:ba:e1:94:81:3f:5e:1b: 06:e9:5a:d6:3a:28:42:ff:f1:ea:fd:77:a3:cc:10:1c:43:60: 45:17:df:51:95:23:59:5e:0c:b9:9e:5c:39:f0:d3:bc:21:6b: bf:48:1a:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq74ir8rg2JLU44bfOffMeSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkM2ExZTg0NjViZmM0ZGY3MDA4OTQzNzJkMGI5ODA4ZThi NjI5ZWEwHhcNMjUxMTI1MTYzOTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTMyYmJkNDE4ODA2YTEzODYzNGU4ZjU4MDg4ZGM1MjJjOWMyMjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z0hr8J2CVqEi4VUlOL3oEqhFtmJ 0gOdwfw/5wtwZSr1zR+g/zBCjUyiGsgZCYVqwn8H4C0EVSkf/fGBtWsqiwX6S9dj tufC+9syayGUiT6iEHZduFm/tTkIuXGNp9WqUbJQqtKK2kStkt7EMksJjmiRUlpz qwQxgSkpjNFhsdfLZkGSN4JG9Fpqn+1zei/d93WUhmZl2UGe9BlAkpCfRROgJxv7 pXCuLznPLzv3ermrmOsEGxyZHvSsPccE7P1I6QPXCnmWqLQFjHe1LQhawEg47qTy oJzXJKtxsAKhABGaszgQj+++6r6ldr4o0+zq+GbQ3hCTLVEGQXpmkEGuLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJkyu9QYgGoThjTo9YCI3FIsnCIrMB8GA1UdIwQY MBaAFP06HoRlv8TfcAiUNy0LmAjotinqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYt OTU1NWQzMGY2ZjhmLzEvbVRLNzFCaUFhaE9HTk9qMWdJamNVaXljSWlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYtOTU1NWQzMGY2Zjhm LzEvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbevMA0G CSqGSIb3DQEBCwUAA4IBAQCVcwHNqP1wqh6wBgS14EuGILgHtfdGimw7C6EpEHZo Qkzch53PaQGxS3fNcspB9gIg6KP7dj/bc8hTTiNyOY5NoRR9Mqts+4RrzQKf0Kow VQsOfUohPVuG/5DUOVC7HDoOE872t5LuloZRndWpC3SMvKPFFGp2AwWqlkYbyTVQ 5ciMQmqOa7Zypp36jtGOAm6BtWpbDll6JbcAGuRbAM5kKlGJMehoIK9FsRMftB6C DMKSBOKGkMqWbypuLvzCl0VMXM0QsjwGLnJUA53mTNl9YrrhlIE/XhsG6VrWOihC //Hq/XejzBAcQ2BFF99RlSNZXgy5nlw58NO8IWu/SBrG -----END CERTIFICATE-----Generated at Sat Dec 6 15:06:53 2025 by rpki-client