This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TBXJjmSJwNex4y2BdCKUTn9phLE.roa File: TBXJjmSJwNex4y2BdCKUTn9phLE.roa (raw, json) Hash identifier: vjUbQh+X/mCa74rsJVtP+Wj7BxOFFONMN42LuQ9WrEo= Subject key identifier: 4C:15:C9:8E:64:89:C0:D7:B1:E3:2D:81:74:22:94:4E:7F:69:84:B1 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B1C0025344A1D1CDD1E1B07CF05809114 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TBXJjmSJwNex4y2BdCKUTn9phLE.roa Signing time: Sun 14 Dec 2025 08:35:30 +0000 ROA not before: Sun 14 Dec 2025 08:35:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49581 IP address blocks: 5.83.128.0/24 maxlen: 24 5.83.131.0/24 maxlen: 24 5.83.132.0/24 maxlen: 24 5.175.216.0/24 maxlen: 24 5.175.218.0/24 maxlen: 24 5.175.219.0/24 maxlen: 24 5.231.26.0/24 maxlen: 24 5.231.105.0/24 maxlen: 24 5.231.242.0/24 maxlen: 24 83.243.86.0/24 maxlen: 24 89.106.69.0/24 maxlen: 24 89.106.71.0/24 maxlen: 24 94.249.175.0/24 maxlen: 24 217.69.167.0/24 maxlen: 24 2a02:2fc0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:00:25:34:4a:1d:1c:dd:1e:1b:07:cf:05:80:91:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 14 08:35:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c15c98e6489c0d7b1e32d817422944e7f6984b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d7:e8:80:50:fe:94:c4:40:96:fc:d5:b6:c6: 9e:63:2a:34:16:f9:4c:43:cf:4c:d8:33:16:59:41: fd:b8:ac:7e:82:77:42:5f:b4:dc:0a:cc:6b:ca:e4: ff:92:fa:7b:f4:fe:21:f5:6a:dd:40:e4:b3:d3:77: 79:5a:49:a7:60:42:fb:d0:9a:ce:b2:30:ce:5c:7b: 2a:a5:3d:5f:e2:09:b0:f9:83:f8:a9:68:88:7a:b3: 91:ee:f4:f1:02:66:cb:bb:23:dc:fb:98:61:ed:ae: af:5b:2a:e0:8b:7c:62:70:64:71:48:d6:b1:d5:a4: 3e:51:8c:1b:21:ec:52:53:d1:91:98:03:bd:ff:31: 74:5b:92:4b:14:d3:a8:7d:63:93:86:b3:72:ba:b4: 7a:8b:4b:54:9a:d2:60:e1:43:fc:38:96:df:d5:ce: 45:1c:3d:55:ea:15:74:9f:78:0c:0d:94:93:c5:ab: fa:46:6a:2f:d3:24:fc:1d:cc:d8:fb:de:00:49:b2: f5:20:54:4c:40:0f:6c:44:c7:c3:ad:07:a2:8c:78: e0:21:ae:f4:08:f0:f4:f3:73:27:b4:79:87:41:fd: 55:ef:fb:08:df:69:36:77:82:b4:65:95:de:0d:3f: be:ba:d6:d3:fa:58:07:19:6b:6c:bf:38:00:43:d5: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:15:C9:8E:64:89:C0:D7:B1:E3:2D:81:74:22:94:4E:7F:69:84:B1 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TBXJjmSJwNex4y2BdCKUTn9phLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.128.0/24 5.83.131.0-5.83.132.255 5.175.216.0/24 5.175.218.0/23 5.231.26.0/24 5.231.105.0/24 5.231.242.0/24 83.243.86.0/24 89.106.69.0/24 89.106.71.0/24 94.249.175.0/24 217.69.167.0/24 IPv6: 2a02:2fc0:11::/48 Signature Algorithm: sha256WithRSAEncryption 7b:6e:57:ee:04:63:50:a4:8c:9c:1a:55:e5:b5:c9:f9:5c:32: 92:ca:0c:2b:a4:0c:25:54:77:9b:30:7a:48:2f:fe:a3:49:bb: 33:eb:17:c2:d8:da:23:87:02:55:53:51:67:04:35:34:bb:1f: 19:89:64:5e:31:57:9e:33:79:7b:9e:01:4e:c5:cb:78:fe:2c: e2:91:af:da:99:29:af:12:53:f6:a5:b2:57:b1:ce:5e:e0:d5: 77:42:40:dc:89:75:45:04:cc:d1:e0:62:41:42:e6:ac:f7:ef: 6c:68:3f:45:65:97:02:dd:b6:5a:b4:8f:b5:61:92:b7:e2:c5: 02:ee:b1:59:fe:6f:ad:38:f3:75:c5:13:f3:2a:fc:d7:4c:29: d8:25:08:6f:23:60:db:0a:5d:59:c3:4d:a4:76:d0:34:46:f8: 99:80:19:9e:6f:fa:81:6d:cb:54:40:83:4c:dd:46:57:05:e0: 15:d3:ce:af:8d:ab:b6:58:d9:63:26:7a:c8:65:3b:ad:96:b1: 91:50:7c:ef:ef:ba:dd:75:8c:da:31:3e:e4:b2:16:47:0a:93: ed:c6:b4:d7:21:b8:5b:56:ac:44:8d:29:35:20:99:0e:14:c2: 74:37:1b:12:fe:42:f0:d6:c9:26:33:27:86:ad:c2:d2:a5:69: 97:29:1d:e9 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISAZscACU0Sh0c3R4bB88FgJEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE0MDgzNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzE1Yzk4ZTY0ODljMGQ3YjFlMzJkODE3NDIyOTQ0ZTdmNjk4NGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dfogFD+lMRAlvzVtsaeYyo0FvlM Q89M2DMWWUH9uKx+gndCX7TcCsxryuT/kvp79P4h9WrdQOSz03d5WkmnYEL70JrO sjDOXHsqpT1f4gmw+YP4qWiIerOR7vTxAmbLuyPc+5hh7a6vWyrgi3xicGRxSNax 1aQ+UYwbIexSU9GRmAO9/zF0W5JLFNOofWOThrNyurR6i0tUmtJg4UP8OJbf1c5F HD1V6hV0n3gMDZSTxav6Rmov0yT8HczY+94ASbL1IFRMQA9sRMfDrQeijHjgIa70 CPD083MntHmHQf1V7/sI32k2d4K0ZZXeDT++utbT+lgHGWtsvzgAQ9UKuQIDAQAB o4ICZDCCAmAwHQYDVR0OBBYEFEwVyY5kicDXseMtgXQilE5/aYSxMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVEJYSmptU0p3TmV4NHkyQmRDS1VUbjlwaExFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBWBAIAATBQAwQABVOAMAwD BAAFU4MDBAAFU4QDBAAFr9gDBAEFr9oDBAAF5xoDBAAF52kDBAAF5/IDBABT81YD BABZakUDBABZakcDBABe+a8DBADZRacwDwQCAAIwCQMHACoCL8AAETANBgkqhkiG 9w0BAQsFAAOCAQEAe25X7gRjUKSMnBpV5bXJ+VwyksoMK6QMJVR3mzB6SC/+o0m7 M+sXwtjaI4cCVVNRZwQ1NLsfGYlkXjFXnjN5e54BTsXLeP4s4pGv2pkprxJT9qWy V7HOXuDVd0JA3Il1RQTM0eBiQULmrPfvbGg/RWWXAt22WrSPtWGSt+LFAu6xWf5v rTjzdcUT8yr810wp2CUIbyNg2wpdWcNNpHbQNEb4mYAZnm/6gW3LVECDTN1GVwXg FdPOr42rtljZYyZ6yGU7rZaxkVB87++63XWM2jE+5LIWRwqT7ca01yG4W1asRI0p NSCZDhTCdDcbEv5C8NbJJjMnhq3C0qVplykd6Q== -----END CERTIFICATE-----Generated at Wed Dec 17 01:26:08 2025 by rpki-client