This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H7aqEyxqt0b9nZgv66WYRLLd9Iw.roa File: H7aqEyxqt0b9nZgv66WYRLLd9Iw.roa (raw, json) Hash identifier: j55TBNvHqoDDUFxGLF8L7rPLLpbEP26JeFxUJt32tGE= Subject key identifier: 1F:B6:AA:13:2C:6A:B7:46:FD:9D:98:2F:EB:A5:98:44:B2:DD:F4:8C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AF089BE6C3E4ECFBF1DFE4B072CD86049 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H7aqEyxqt0b9nZgv66WYRLLd9Iw.roa Signing time: Fri 05 Dec 2025 22:02:30 +0000 ROA not before: Fri 05 Dec 2025 22:02:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213449 IP address blocks: 5.175.170.0/24 maxlen: 24 89.106.95.0/24 maxlen: 24 89.144.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:89:be:6c:3e:4e:cf:bf:1d:fe:4b:07:2c:d8:60:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 5 22:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1fb6aa132c6ab746fd9d982feba59844b2ddf48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:5d:6f:40:ab:79:ea:c5:63:38:cd:44:4a: 5b:f6:85:e0:11:fa:7e:3e:a3:6a:c4:59:3b:45:e0: db:38:98:6a:c5:8e:94:94:26:39:9c:dc:92:b5:f7: a6:8c:f5:62:bc:09:08:03:d9:c3:e6:5c:f0:6a:1d: aa:a5:5c:60:29:1f:e5:28:9f:e5:ab:f5:9d:77:fe: 65:af:1c:fe:f8:59:b2:76:56:86:a3:f1:d3:07:e1: 84:2c:26:0e:ee:e1:9a:9a:48:1c:d6:11:6e:d0:fa: 04:68:48:58:81:5b:78:84:ec:79:b4:47:f2:31:b8: ac:7b:e5:7e:b6:23:81:c8:36:de:a7:0c:b3:55:e1: 28:0a:5c:99:b4:4a:2f:a4:f2:eb:ad:c9:f5:11:a8: e7:99:d9:8e:33:2a:78:2a:53:6b:fe:93:3e:b2:22: 2f:29:59:3d:48:35:f4:d6:da:89:38:f1:ac:bf:fc: 5a:a5:54:2f:10:e9:d0:14:37:37:86:40:9e:dd:99: e3:36:4c:59:e7:0f:77:37:bc:27:e5:72:b4:00:5d: 40:15:5a:59:21:db:ea:81:0b:de:26:ee:66:61:cc: 23:a8:31:61:17:db:94:9c:33:18:1e:44:2e:27:92: e3:b0:57:ca:5d:b6:53:e1:77:e6:7d:0a:89:6c:06: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B6:AA:13:2C:6A:B7:46:FD:9D:98:2F:EB:A5:98:44:B2:DD:F4:8C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H7aqEyxqt0b9nZgv66WYRLLd9Iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.170.0/24 89.106.95.0/24 89.144.63.0/24 Signature Algorithm: sha256WithRSAEncryption 96:7d:55:55:c6:3a:85:4c:1c:0b:ca:41:b4:2e:75:c3:c7:61: 9e:7b:a7:a5:67:61:38:8b:b7:91:f3:d4:51:52:a8:6b:18:04: b8:e1:dc:38:eb:9b:a5:6e:c6:97:d0:ac:09:f7:53:e5:9d:59: f4:48:89:d3:fd:80:2f:31:9b:48:da:88:2b:4d:e0:66:e9:ea: 52:f0:98:c9:af:b1:1b:9b:92:c5:fa:dd:1a:fd:b5:30:74:fd: 5f:0a:ae:51:78:d4:78:d6:6a:57:0b:88:b1:8a:da:78:8c:f4: 63:0b:f8:16:69:23:3b:42:5c:ec:76:eb:85:21:de:2f:26:08: 2d:36:5f:87:93:19:33:b9:05:8f:9d:d5:ae:38:bd:82:54:af: 0a:7c:00:89:95:77:a8:5a:49:60:89:8e:f5:19:86:3f:e0:8e: 3e:41:2c:95:62:a8:26:12:8d:91:f1:a2:4f:a3:eb:0d:95:38: 22:f1:0f:51:5c:47:18:1e:a8:f9:26:01:01:7d:7e:a0:b3:ee: 8b:fd:0d:59:8e:2e:1b:20:2f:f2:56:75:cf:94:ae:0d:a2:cf: 25:f5:d2:34:ae:70:e5:14:1a:b5:a1:5d:ce:d5:99:a5:de:9f: 9e:28:9f:42:d3:15:52:45:fb:69:30:21:dc:6a:53:64:96:49: 5f:82:0c:b0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrwib5sPk7Pvx3+Swcs2GBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjA1MjIwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmI2YWExMzJjNmFiNzQ2ZmQ5ZDk4MmZlYmE1OTg0NGIyZGRmNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aBdb0CreerFYzjNREpb9oXgEfp+ PqNqxFk7ReDbOJhqxY6UlCY5nNyStfemjPVivAkIA9nD5lzwah2qpVxgKR/lKJ/l q/Wdd/5lrxz++FmydlaGo/HTB+GELCYO7uGamkgc1hFu0PoEaEhYgVt4hOx5tEfy Mbise+V+tiOByDbepwyzVeEoClyZtEovpPLrrcn1EajnmdmOMyp4KlNr/pM+siIv KVk9SDX01tqJOPGsv/xapVQvEOnQFDc3hkCe3ZnjNkxZ5w93N7wn5XK0AF1AFVpZ IdvqgQveJu5mYcwjqDFhF9uUnDMYHkQuJ5LjsFfKXbZT4XfmfQqJbAYR5wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB+2qhMsardG/Z2YL+ulmESy3fSMMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvSDdhcUV5eHF0MGI5blpndjY2V1lSTExkOUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABa+qAwQA WWpfAwQAWZA/MA0GCSqGSIb3DQEBCwUAA4IBAQCWfVVVxjqFTBwLykG0LnXDx2Ge e6elZ2E4i7eR89RRUqhrGAS44dw465ulbsaX0KwJ91PlnVn0SInT/YAvMZtI2ogr TeBm6epS8JjJr7Ebm5LF+t0a/bUwdP1fCq5ReNR41mpXC4ixitp4jPRjC/gWaSM7 QlzsduuFId4vJggtNl+HkxkzuQWPndWuOL2CVK8KfACJlXeoWklgiY71GYY/4I4+ QSyVYqgmEo2R8aJPo+sNlTgi8Q9RXEcYHqj5JgEBfX6gs+6L/Q1Zji4bIC/yVnXP lK4Nos8l9dI0rnDlFBq1oV3O1Zml3p+eKJ9C0xVSRftpMCHcalNklklfggyw -----END CERTIFICATE-----Generated at Sat Dec 6 05:43:53 2025 by rpki-client