This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PsAW80zT1r0p-mT0kHFj901m85w.roa File: PsAW80zT1r0p-mT0kHFj901m85w.roa (raw, json) Hash identifier: F0AOLWRhCEi7kHojCq3ec1hFtgzv3tbjP+D/bqSEiCY= Subject key identifier: 3E:C0:16:F3:4C:D3:D6:BD:29:FA:64:F4:90:71:63:F7:4D:66:F3:9C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B177AEBA5683772FFB908C3227877CEAB Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PsAW80zT1r0p-mT0kHFj901m85w.roa Signing time: Sat 13 Dec 2025 11:31:30 +0000 ROA not before: Sat 13 Dec 2025 11:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213493 IP address blocks: 5.175.246.0/24 maxlen: 24 5.175.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:7a:eb:a5:68:37:72:ff:b9:08:c3:22:78:77:ce:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 13 11:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3ec016f34cd3d6bd29fa64f4907163f74d66f39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:b0:03:3a:32:ba:87:2a:9c:b2:24:28:c7: f3:94:d3:60:6c:9f:9d:a4:84:54:38:91:b8:b2:aa: 1c:dc:86:3b:2b:ea:fc:06:a4:23:6c:cf:34:64:95: cd:9b:fd:6d:95:36:49:85:90:b5:5a:11:be:de:8f: 27:ca:ec:44:ef:58:d3:39:3c:ba:d7:0c:6d:23:4f: 9d:a1:97:b2:d5:8a:d8:5f:ea:f5:b5:6b:67:1a:2d: 83:51:38:89:8b:cc:33:03:99:bd:3c:9a:35:66:6a: 00:5d:c5:d2:af:c5:81:be:32:f7:5d:e8:a9:67:0d: 59:61:8f:79:84:d4:6d:17:bf:c7:a5:2c:19:c5:0d: 94:fb:78:26:5e:a9:0f:3e:3c:4f:aa:af:99:91:3f: 5e:30:50:84:19:aa:b3:c8:34:84:36:d9:44:23:5e: e3:25:ec:89:f9:c2:ee:91:6f:28:d4:9d:8a:05:c3: 02:70:db:6b:02:c9:59:fc:1f:55:2a:69:af:78:fc: e5:83:a7:1a:74:b6:dc:3d:fc:e8:e1:2c:ed:e4:6a: 7a:5b:ac:65:30:cb:7a:08:79:96:82:08:6e:96:ca: 0a:89:59:64:63:4c:85:bf:24:87:13:22:20:1d:75: 87:b8:b4:0c:65:0f:c1:dd:2d:79:c9:b9:3f:a1:89: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C0:16:F3:4C:D3:D6:BD:29:FA:64:F4:90:71:63:F7:4D:66:F3:9C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PsAW80zT1r0p-mT0kHFj901m85w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.246.0/24 5.175.248.0/24 Signature Algorithm: sha256WithRSAEncryption 97:7e:2a:81:c3:fc:0f:7d:da:34:c2:a9:32:2b:a3:e9:aa:a8: 39:1b:6e:1f:d8:9a:70:73:e9:36:1a:77:3d:41:88:a9:03:48: 30:05:d5:3a:6f:ba:9f:34:ec:5c:08:dc:34:03:67:30:4d:5a: 03:28:d2:21:27:35:fc:fc:f3:74:e6:90:95:5f:1c:61:7b:ce: c4:d5:87:a5:02:40:63:82:1a:ac:13:38:fa:d7:e0:fa:95:3e: bc:68:91:ab:bf:fa:76:29:5e:e5:1c:b5:c4:e0:84:85:c3:e3: 4d:cf:fd:6d:7e:36:cb:91:b6:2a:90:f8:0e:ff:af:9c:5b:ba: be:92:4d:3d:6f:9b:9d:ca:eb:2b:30:53:f1:ff:66:41:42:47: 34:17:92:08:eb:5a:89:2c:91:c7:1d:8e:67:f4:f0:e2:be:03: a9:1f:f7:28:81:f0:01:09:d2:d4:29:00:5a:26:bc:d9:e3:5f: 2d:e8:30:9f:bd:6a:63:3a:05:f0:49:45:12:42:0a:3d:81:09: 09:7a:86:3e:7d:63:97:51:b7:8f:74:d3:a4:98:c6:0e:da:42: d9:de:f1:0a:d6:e0:6a:57:67:04:b2:0a:5a:59:2b:63:05:f6: c7:ab:ed:1a:d1:58:f5:ac:cf:39:0b:eb:6f:87:74:f5:ab:2f: 85:af:c5:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsXeuulaDdy/7kIwyJ4d86rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjEzMTEzMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWMwMTZmMzRjZDNkNmJkMjlmYTY0ZjQ5MDcxNjNmNzRkNjZmMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohawAzoyuocqnLIkKMfzlNNgbJ+d pIRUOJG4sqoc3IY7K+r8BqQjbM80ZJXNm/1tlTZJhZC1WhG+3o8nyuxE71jTOTy6 1wxtI0+doZey1YrYX+r1tWtnGi2DUTiJi8wzA5m9PJo1ZmoAXcXSr8WBvjL3Xeip Zw1ZYY95hNRtF7/HpSwZxQ2U+3gmXqkPPjxPqq+ZkT9eMFCEGaqzyDSENtlEI17j JeyJ+cLukW8o1J2KBcMCcNtrAslZ/B9VKmmvePzlg6cadLbcPfzo4Szt5Gp6W6xl MMt6CHmWgghulsoKiVlkY0yFvySHEyIgHXWHuLQMZQ/B3S15ybk/oYkUxwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD7AFvNM09a9Kfpk9JBxY/dNZvOcMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvUHNBVzgwelQxcjBwLW1UMGtIRmo5MDFtODV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa/2AwQA Ba/4MA0GCSqGSIb3DQEBCwUAA4IBAQCXfiqBw/wPfdo0wqkyK6Ppqqg5G24f2Jpw c+k2Gnc9QYipA0gwBdU6b7qfNOxcCNw0A2cwTVoDKNIhJzX8/PN05pCVXxxhe87E 1YelAkBjghqsEzj61+D6lT68aJGrv/p2KV7lHLXE4ISFw+NNz/1tfjbLkbYqkPgO /6+cW7q+kk09b5udyusrMFPx/2ZBQkc0F5II61qJLJHHHY5n9PDivgOpH/cogfAB CdLUKQBaJrzZ418t6DCfvWpjOgXwSUUSQgo9gQkJeoY+fWOXUbePdNOkmMYO2kLZ 3vEK1uBqV2cEsgpaWStjBfbHq+0a0Vj1rM85C+tvh3T1qy+Fr8Uy -----END CERTIFICATE-----Generated at Fri Dec 19 00:07:11 2025 by rpki-client