This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1_jlHAGWL1weT87MYKNx4aG6WO4.roa File: 1_jlHAGWL1weT87MYKNx4aG6WO4.roa (raw, json) Hash identifier: 0Dr2/Vv1Ws9aarbjtfqc9OAWJJOvKFR4uStV+9bQd7o= Subject key identifier: D7:F8:E5:1C:01:96:2F:5C:1E:4F:CE:CC:60:A3:71:E1:A1:BA:58:EE Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B25A4682EE832C3A72186A12B89B591EE Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1_jlHAGWL1weT87MYKNx4aG6WO4.roa Signing time: Tue 16 Dec 2025 05:31:30 +0000 ROA not before: Tue 16 Dec 2025 05:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214639 IP address blocks: 5.83.129.0/24 maxlen: 24 5.175.178.0/24 maxlen: 24 5.175.188.0/24 maxlen: 24 89.144.35.0/24 maxlen: 24 94.249.176.0/24 maxlen: 24 94.249.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:a4:68:2e:e8:32:c3:a7:21:86:a1:2b:89:b5:91:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 16 05:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d7f8e51c01962f5c1e4fcecc60a371e1a1ba58ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:04:6e:22:e3:36:d3:03:3a:a2:41:4a:bd: a6:82:0a:14:93:70:ee:53:46:5b:83:3b:1e:af:85: 14:cc:d7:48:cf:d4:79:8e:75:a0:84:49:4e:81:31: 50:b1:a8:31:f6:35:c9:b0:d9:06:28:50:70:d3:67: 95:ac:f3:40:6e:72:5f:7d:a1:a2:89:de:43:41:b7: 72:45:20:5d:61:8a:bd:25:11:b3:5b:f3:59:b5:bb: 42:07:57:6c:d6:2e:68:04:c8:46:39:ee:c6:24:75: 08:66:a8:20:e2:b4:8b:24:ff:e8:a3:1a:20:3c:20: 6d:f2:00:6b:46:67:d8:96:e2:8a:1a:12:0d:59:ac: 90:11:7b:53:24:ad:4d:5c:b5:9c:8c:c8:e2:69:8a: 49:04:d6:15:49:05:14:fd:fa:7c:c0:8c:f4:bb:9c: a1:81:3c:5b:0a:0a:8a:16:7a:45:b8:33:41:32:0c: 6b:81:7e:e9:10:22:2c:12:43:4d:b9:f7:9a:01:b6: a5:89:66:15:27:b6:10:aa:bd:95:42:49:8b:2c:20: e4:79:35:fc:b0:5f:b8:c6:2c:92:b0:a0:52:7a:d4: 69:83:1f:93:cf:07:92:d6:ad:37:41:5f:ca:3f:19: 02:89:81:db:ab:0c:2d:38:0b:1b:f7:92:fa:00:84: 68:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F8:E5:1C:01:96:2F:5C:1E:4F:CE:CC:60:A3:71:E1:A1:BA:58:EE X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1_jlHAGWL1weT87MYKNx4aG6WO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.129.0/24 5.175.178.0/24 5.175.188.0/24 89.144.35.0/24 94.249.176.0/24 94.249.251.0/24 Signature Algorithm: sha256WithRSAEncryption e3:66:49:50:4c:82:7f:7a:f0:16:86:1e:9b:01:56:9f:36:cb: 1f:c6:23:86:12:69:b2:e1:df:bd:2b:b3:19:35:36:d5:52:8c: fa:ea:a6:f5:33:ab:5d:92:0f:12:98:07:d4:22:64:04:32:20: 12:13:40:0d:8a:5e:ca:2c:e8:86:10:85:72:17:c6:a4:4a:46: 21:b2:12:8e:1f:e9:ad:16:83:b6:19:83:c8:dc:b7:a2:bb:ee: 7d:ae:77:f4:8e:df:7e:92:87:d6:e5:96:3f:71:3d:9f:1f:ca: 88:56:28:6a:2d:c9:f8:2b:a4:82:9b:3f:bd:b0:02:6a:67:15: 64:8b:9f:fd:46:de:95:e8:55:90:8c:cf:4a:b9:f1:9f:d3:63: 63:74:c4:78:eb:30:cc:7c:80:cd:84:41:7b:d0:4d:9c:be:11: f5:97:0f:1b:e0:58:0c:e6:61:09:91:b4:07:60:ab:fc:51:73: 87:3c:22:6a:56:79:e5:6e:34:9e:c4:9c:25:8b:24:fb:c3:21: ed:9a:42:e0:e6:2d:b2:e7:6a:6d:34:16:3b:01:db:73:71:3a: 6d:73:0a:42:a8:13:1c:fb:45:08:fa:3e:bb:5d:85:fb:c0:5e: ca:6d:a3:93:f4:fc:53:dd:44:cb:d0:3f:71:71:9a:9f:a3:bf: 11:33:61:8f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZslpGgu6DLDpyGGoSuJtZHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE2MDUzMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2Y4ZTUxYzAxOTYyZjVjMWU0ZmNlY2M2MGEzNzFlMWExYmE1OGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7YEbiLjNtMDOqJBSr2mggoUk3Du U0Zbgzser4UUzNdIz9R5jnWghElOgTFQsagx9jXJsNkGKFBw02eVrPNAbnJffaGi id5DQbdyRSBdYYq9JRGzW/NZtbtCB1ds1i5oBMhGOe7GJHUIZqgg4rSLJP/ooxog PCBt8gBrRmfYluKKGhINWayQEXtTJK1NXLWcjMjiaYpJBNYVSQUU/fp8wIz0u5yh gTxbCgqKFnpFuDNBMgxrgX7pECIsEkNNufeaAbaliWYVJ7YQqr2VQkmLLCDkeTX8 sF+4xiySsKBSetRpgx+TzweS1q03QV/KPxkCiYHbqwwtOAsb95L6AIRoyQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNf45RwBli9cHk/OzGCjceGhuljuMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMV9qbEhBR1dMMXdlVDg3TVlLTng0YUc2V080LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABVOBAwQA Ba+yAwQABa+8AwQAWZAjAwQAXvmwAwQAXvn7MA0GCSqGSIb3DQEBCwUAA4IBAQDj ZklQTIJ/evAWhh6bAVafNssfxiOGEmmy4d+9K7MZNTbVUoz66qb1M6tdkg8SmAfU ImQEMiASE0ANil7KLOiGEIVyF8akSkYhshKOH+mtFoO2GYPI3Leiu+59rnf0jt9+ kofW5ZY/cT2fH8qIVihqLcn4K6SCmz+9sAJqZxVki5/9Rt6V6FWQjM9KufGf02Nj dMR46zDMfIDNhEF70E2cvhH1lw8b4FgM5mEJkbQHYKv8UXOHPCJqVnnlbjSexJwl iyT7wyHtmkLg5i2y52ptNBY7AdtzcTptcwpCqBMc+0UI+j67XYX7wF7KbaOT9PxT 3UTL0D9xcZqfo78RM2GP -----END CERTIFICATE-----Generated at Tue Dec 16 14:17:11 2025 by rpki-client