This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8xhLXxbQOtnyjKw4Zw1ThE5yRjE.roa File: 8xhLXxbQOtnyjKw4Zw1ThE5yRjE.roa (raw, json) Hash identifier: VknW91NM9oWqI6ACUXSo8hhNVHSDis5ojYzA1R5AZig= Subject key identifier: F3:18:4B:5F:16:D0:3A:D9:F2:8C:AC:38:67:0D:53:84:4E:72:46:31 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B2C30BD338F0B58BE2EA9AC6149A836A8 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8xhLXxbQOtnyjKw4Zw1ThE5yRjE.roa Signing time: Wed 17 Dec 2025 12:02:30 +0000 ROA not before: Wed 17 Dec 2025 12:02:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 5.231.30.0/24 maxlen: 24 77.90.54.0/24 maxlen: 24 217.69.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:30:bd:33:8f:0b:58:be:2e:a9:ac:61:49:a8:36:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 17 12:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3184b5f16d03ad9f28cac38670d53844e724631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:3c:3f:d1:9e:a2:cd:bb:31:42:6c:4f:c8: 79:bc:ad:5d:43:7a:0a:a2:4f:5c:2e:86:44:b3:31: ff:ca:fd:fc:26:67:8b:32:25:7f:e0:a1:21:6a:8d: 1c:54:57:b3:1d:5b:2d:16:da:e1:68:cd:6d:4b:8c: 58:35:16:5a:a5:69:5d:21:71:6f:90:34:f3:92:1e: d3:c6:c7:f0:29:a7:71:96:5f:27:a9:86:1c:69:63: 80:c7:39:34:e5:ca:a0:2f:4e:88:a0:4a:da:1e:f2: 17:cc:20:79:de:c1:8b:93:ad:01:82:f5:8f:30:ee: ca:6e:d7:bf:f1:ce:fe:e5:4e:39:f3:f6:7d:b6:a2: 31:1e:c1:e9:2a:a0:b7:fa:10:01:8f:c0:5e:15:ac: 62:e6:be:9b:4b:68:50:7f:03:a3:be:43:8d:e1:87: 67:5e:74:8f:27:4c:f2:79:0c:8f:c0:e4:ba:c6:f9: d9:ad:4b:1f:90:1e:d7:91:a7:b8:3c:f4:74:97:97: ca:a4:37:ee:c4:b0:7e:c0:3d:35:d4:37:29:12:7c: 8f:fd:76:1a:bf:10:28:ed:a6:68:84:84:8f:80:1c: 5d:27:f3:bc:3c:f5:56:3b:e4:34:07:92:77:82:7f: f8:19:e4:d3:f2:5a:5e:df:9a:36:07:84:72:b6:32: 9c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:18:4B:5F:16:D0:3A:D9:F2:8C:AC:38:67:0D:53:84:4E:72:46:31 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8xhLXxbQOtnyjKw4Zw1ThE5yRjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.30.0/24 77.90.54.0/24 217.69.166.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:b4:16:2b:a7:5d:b4:04:4c:f6:ad:b1:69:5b:ef:fa:eb:d3: 8a:43:81:99:58:29:6b:b3:03:98:36:db:91:e6:26:e9:c7:d6: 2c:70:90:a9:c6:a6:c4:4c:fc:83:25:bd:38:bd:c3:5b:6f:cc: 6d:02:2e:27:a9:90:57:4e:17:66:d4:f6:6a:f1:af:37:69:5a: 47:a8:20:4e:f3:f7:23:3a:a0:67:fe:33:32:61:59:8d:a1:67: 0f:66:9f:7c:0a:6c:03:75:0c:a7:3a:79:91:6d:9a:14:9a:39: e6:96:df:b7:a3:c2:f8:50:8d:37:cf:e1:30:71:a4:47:b5:aa: f1:83:0b:5e:22:3a:cd:df:e4:79:a2:7b:5d:55:81:56:8f:06: 8e:5d:79:37:81:93:a1:8b:65:b6:9a:6c:fa:e3:b9:28:ef:79: 12:71:20:87:a3:35:e4:33:a4:48:1b:6f:33:47:6f:9d:25:27: a7:9f:b0:da:16:02:d2:ee:d1:22:62:24:b7:36:7d:d7:fa:91: 9e:4b:26:62:75:d3:e2:5c:07:90:f3:50:de:8f:c6:0d:b5:75: 22:de:40:18:29:4f:13:01:90:00:05:68:ac:31:6a:f3:82:ec: ae:e7:e4:8f:ef:96:41:41:d2:9d:b4:28:c3:de:41:85:1c:18: 65:76:63:d4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZssML0zjwtYvi6prGFJqDaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE3MTIwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzE4NGI1ZjE2ZDAzYWQ5ZjI4Y2FjMzg2NzBkNTM4NDRlNzI0NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjM8P9Geos27MUJsT8h5vK1dQ3oK ok9cLoZEszH/yv38JmeLMiV/4KEhao0cVFezHVstFtrhaM1tS4xYNRZapWldIXFv kDTzkh7TxsfwKadxll8nqYYcaWOAxzk05cqgL06IoEraHvIXzCB53sGLk60BgvWP MO7Kbte/8c7+5U458/Z9tqIxHsHpKqC3+hABj8BeFaxi5r6bS2hQfwOjvkON4Ydn XnSPJ0zyeQyPwOS6xvnZrUsfkB7Xkae4PPR0l5fKpDfuxLB+wD011DcpEnyP/XYa vxAo7aZohISPgBxdJ/O8PPVWO+Q0B5J3gn/4GeTT8lpe35o2B4RytjKcIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPMYS18W0DrZ8oysOGcNU4ROckYxMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvOHhoTFh4YlFPdG55akt3NFp3MVRoRTV5UmpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABeceAwQA TVo2AwQA2UWmMA0GCSqGSIb3DQEBCwUAA4IBAQAPtBYrp120BEz2rbFpW+/669OK Q4GZWClrswOYNtuR5ibpx9YscJCpxqbETPyDJb04vcNbb8xtAi4nqZBXThdm1PZq 8a83aVpHqCBO8/cjOqBn/jMyYVmNoWcPZp98CmwDdQynOnmRbZoUmjnmlt+3o8L4 UI03z+EwcaRHtarxgwteIjrN3+R5ontdVYFWjwaOXXk3gZOhi2W2mmz647ko73kS cSCHozXkM6RIG28zR2+dJSenn7DaFgLS7tEiYiS3Nn3X+pGeSyZiddPiXAeQ81De j8YNtXUi3kAYKU8TAZAABWisMWrzguyu5+SP75ZBQdKdtCjD3kGFHBhldmPU -----END CERTIFICATE-----Generated at Thu Dec 18 15:39:56 2025 by rpki-client