This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CD80mOQrk6N46gd0fShWMXU7IHE.roa File: CD80mOQrk6N46gd0fShWMXU7IHE.roa (raw, json) Hash identifier: 3SjPZ9iPdyt/WglFPGMURdXcOXyvhAmW3nazzlMIPeE= Subject key identifier: 08:3F:34:98:E4:2B:93:A3:78:EA:07:74:7D:28:56:31:75:3B:20:71 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019A5CFD07296518A69CE312C07191985861 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CD80mOQrk6N46gd0fShWMXU7IHE.roa Signing time: Fri 07 Nov 2025 06:24:37 +0000 ROA not before: Fri 07 Nov 2025 06:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60931 IP address blocks: 5.101.92.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5c:fd:07:29:65:18:a6:9c:e3:12:c0:71:91:98:58:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Nov 7 06:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=083f3498e42b93a378ea07747d285631753b2071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:d9:48:e7:2d:48:cb:29:de:04:9c:6e:2c: ca:f9:0a:05:58:3c:4c:c3:54:36:85:8d:df:b7:62: 52:5c:87:a4:1b:17:83:77:68:20:11:9f:e0:0c:83: 2b:c8:fc:0a:a3:21:7d:da:53:74:af:05:10:ed:72: cd:5d:b4:d1:16:90:1b:b3:09:66:1d:d0:cd:5e:28: 49:37:2f:5b:35:3b:ae:3a:73:5a:c1:d8:37:5a:f4: da:a7:38:da:13:dd:1f:4c:db:d9:1c:fd:33:87:d5: d9:73:ee:32:42:ba:3d:51:a4:6c:5d:eb:40:26:f1: 57:db:11:06:fd:29:42:f0:51:1b:d6:77:f6:db:93: 1e:7f:a1:bf:f3:29:91:e7:a6:d1:2b:c8:53:65:28: 14:50:a6:d8:b6:cd:31:f0:18:d5:81:7e:ba:df:9f: 3d:4b:78:60:bb:cd:2c:a6:b0:1b:f2:db:1d:9c:e6: 83:aa:b0:b0:51:35:bd:50:4b:26:cc:84:b6:77:cd: 7e:42:ee:82:06:a8:62:6e:52:36:44:01:71:40:89: c7:a5:a5:a1:e4:b2:94:ef:2f:cb:ee:04:8b:31:44: 0b:8e:79:a1:e8:47:09:4e:d7:50:d7:ba:a1:bf:68: c9:4c:eb:4e:56:fb:3f:a5:27:2d:86:db:0c:e5:ae: d9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3F:34:98:E4:2B:93:A3:78:EA:07:74:7D:28:56:31:75:3B:20:71 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CD80mOQrk6N46gd0fShWMXU7IHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.101.92.0/22 Signature Algorithm: sha256WithRSAEncryption c3:53:c1:42:78:1a:17:1d:6e:cf:31:96:25:f0:12:c3:b0:1a: 77:8c:6e:de:12:25:90:56:6d:9a:4c:c2:8a:3c:37:85:f5:11: 14:a2:e2:dd:fb:10:2c:6d:ed:f7:cb:08:6f:5d:3c:0c:dd:19: dd:14:32:3e:e4:ec:8c:34:c2:91:ed:98:d6:5c:c1:0b:c7:86: 7b:a3:d2:da:fc:df:c5:3b:bd:d1:a8:78:aa:19:e3:b4:80:29: a5:c7:e0:4d:3e:0c:dc:80:68:bb:53:4c:47:61:5a:4c:34:9d: bf:40:25:8d:85:5b:c2:c3:20:2a:c9:74:7e:1e:45:08:3a:97: 6f:dd:c3:79:df:f7:4b:42:71:d1:24:96:15:4d:8e:04:46:5e: 50:9a:d4:11:ca:08:c5:5e:76:a2:ab:09:70:99:7d:fb:17:75: 55:c6:68:a8:4a:ef:80:e5:8a:b4:30:fa:d0:13:29:e4:3c:47: 0b:58:93:24:f4:ab:89:22:8e:c6:7c:6c:7b:e7:99:81:85:96: 84:c3:c1:91:4f:db:6e:70:e3:a4:be:b3:4b:07:2a:bd:9a:cb: 63:14:f1:47:e2:85:c7:db:fc:04:ab:1b:1b:e2:b9:27:aa:72: cc:8d:ca:a2:af:4a:52:84:63:ec:0a:f4:c3:4b:b8:e9:90:a4: a9:15:0f:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpc/QcpZRimnOMSwHGRmFhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjUxMTA3MDYyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODNmMzQ5OGU0MmI5M2EzNzhlYTA3NzQ3ZDI4NTYzMTc1M2IyMDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fnZSOctSMsp3gScbizK+QoFWDxM w1Q2hY3ft2JSXIekGxeDd2ggEZ/gDIMryPwKoyF92lN0rwUQ7XLNXbTRFpAbswlm HdDNXihJNy9bNTuuOnNawdg3WvTapzjaE90fTNvZHP0zh9XZc+4yQro9UaRsXetA JvFX2xEG/SlC8FEb1nf225Mef6G/8ymR56bRK8hTZSgUUKbYts0x8BjVgX663589 S3hgu80sprAb8tsdnOaDqrCwUTW9UEsmzIS2d81+Qu6CBqhiblI2RAFxQInHpaWh 5LKU7y/L7gSLMUQLjnmh6EcJTtdQ17qhv2jJTOtOVvs/pScthtsM5a7ZuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAg/NJjkK5OjeOoHdH0oVjF1OyBxMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvQ0Q4MG1PUXJrNk40NmdkMGZTaFdNWFU3SUhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBWVcMA0G CSqGSIb3DQEBCwUAA4IBAQDDU8FCeBoXHW7PMZYl8BLDsBp3jG7eEiWQVm2aTMKK PDeF9REUouLd+xAsbe33ywhvXTwM3RndFDI+5OyMNMKR7ZjWXMELx4Z7o9La/N/F O73RqHiqGeO0gCmlx+BNPgzcgGi7U0xHYVpMNJ2/QCWNhVvCwyAqyXR+HkUIOpdv 3cN53/dLQnHRJJYVTY4ERl5QmtQRygjFXnaiqwlwmX37F3VVxmioSu+A5Yq0MPrQ EynkPEcLWJMk9KuJIo7GfGx755mBhZaEw8GRT9tucOOkvrNLByq9mstjFPFH4oXH 2/wEqxsb4rknqnLMjcqir0pShGPsCvTDS7jpkKSpFQ8b -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:43 2025 by rpki-client