This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/PxzPuUVa2hryVcFqS1RSxgTjwqA.roa File: PxzPuUVa2hryVcFqS1RSxgTjwqA.roa (raw, json) Hash identifier: +gcitwqIIi7APjhf/dnLtr2znKOxVEk4a5pTJPB9KaY= Subject key identifier: 3F:1C:CF:B9:45:5A:DA:1A:F2:55:C1:6A:4B:54:52:C6:04:E3:C2:A0 Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019AD9D1ACB8E97C2D5AEE834D169CE8D39C Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/PxzPuUVa2hryVcFqS1RSxgTjwqA.roa Signing time: Mon 01 Dec 2025 12:09:48 +0000 ROA not before: Mon 01 Dec 2025 12:09:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 52000 IP address blocks: 103.76.86.0/24 maxlen: 24 195.78.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:d1:ac:b8:e9:7c:2d:5a:ee:83:4d:16:9c:e8:d3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Dec 1 12:09:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3f1ccfb9455ada1af255c16a4b5452c604e3c2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:92:28:b9:da:ad:65:78:56:f5:31:7f:80: 03:53:28:96:46:02:86:d2:2f:b6:fb:5e:c6:88:ad: bd:45:74:79:e7:76:aa:f9:af:26:2f:b0:5c:9c:4f: 48:68:f6:02:05:7a:48:2f:71:05:ba:01:00:c6:2a: 1f:96:59:6b:dc:5b:27:98:63:dd:a4:08:6f:1a:a7: 4d:84:33:72:f2:9f:3d:72:07:1b:32:b0:cb:5b:f5: fd:eb:67:ee:3c:40:f4:26:45:8f:b1:29:aa:09:05: 71:24:b2:0a:d5:03:62:2e:4f:24:a7:81:f3:6c:6f: 4c:ca:e7:86:f6:1c:a2:c4:3d:a0:1b:9c:32:1b:ef: a6:74:55:b7:3d:bf:64:c9:eb:23:79:4f:8a:89:24: 36:47:e0:dc:c6:3f:3c:16:66:b3:b5:af:40:8f:a5: e2:2d:b1:0c:ac:f6:24:80:4d:36:be:9c:98:72:c6: 81:5f:f6:42:6b:71:b3:c5:a0:62:4f:5f:69:1f:f0: 48:b0:fc:c2:a4:ae:8c:f1:87:06:4c:fd:61:d4:87: 78:37:6d:64:e3:4a:f5:bb:61:22:1f:52:b5:29:b9: 22:e8:1a:00:0b:17:3c:94:99:9e:03:cc:0f:b3:1b: 77:d8:c9:fc:c1:73:3b:af:00:bd:99:36:e9:e8:dc: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1C:CF:B9:45:5A:DA:1A:F2:55:C1:6A:4B:54:52:C6:04:E3:C2:A0 X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/PxzPuUVa2hryVcFqS1RSxgTjwqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.86.0/24 195.78.49.0/24 Signature Algorithm: sha256WithRSAEncryption 52:33:35:b0:52:c3:9c:52:c0:87:b9:e9:5c:af:af:86:9d:6f: c0:01:aa:51:02:ae:d2:43:da:7d:56:79:d4:3f:24:86:69:06: a9:01:a8:79:65:86:d7:4a:f9:cb:cc:2a:ec:30:62:9b:50:92: 93:3c:6c:bc:21:2e:42:d5:94:8e:f8:ce:3d:dc:45:f3:fe:14: cb:a1:8e:54:66:50:7d:a2:c0:f0:7d:af:66:d8:8e:f5:01:da: 34:b6:e5:5b:c7:8c:3a:72:93:b2:a6:8f:cc:68:3c:f7:3a:d3: c4:9f:99:09:d3:5f:d1:fc:d3:4d:ad:5b:b4:69:90:16:b5:b5: 6a:94:20:39:55:8a:b1:87:8d:6d:8f:a4:bd:0a:33:f1:71:91: fd:fb:e6:ec:2d:6a:78:3e:29:1a:1a:63:12:77:d8:72:86:12: 81:d4:08:0c:ab:cc:1d:d0:86:a8:6a:ab:42:31:54:fc:fe:a3: 34:86:bf:71:36:49:34:50:53:74:f2:88:c7:ba:f9:fa:a1:67: 5c:d1:21:36:de:70:bf:1c:5b:76:0f:78:b9:0e:bf:87:23:27: 76:6c:bd:b0:c8:9f:60:2c:5c:42:47:82:18:b9:a6:99:46:e2: 69:06:35:d1:4b:da:cd:22:9d:3c:b9:73:8a:e4:28:1e:19:b8: 70:bf:24:38 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrZ0ay46XwtWu6DTRac6NOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjUxMjAxMTIwOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjFjY2ZiOTQ1NWFkYTFhZjI1NWMxNmE0YjU0NTJjNjA0ZTNjMmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZaSKLnarWV4VvUxf4ADUyiWRgKG 0i+2+17GiK29RXR553aq+a8mL7BcnE9IaPYCBXpIL3EFugEAxioflllr3FsnmGPd pAhvGqdNhDNy8p89cgcbMrDLW/X962fuPED0JkWPsSmqCQVxJLIK1QNiLk8kp4Hz bG9MyueG9hyixD2gG5wyG++mdFW3Pb9kyesjeU+KiSQ2R+Dcxj88Fmazta9Aj6Xi LbEMrPYkgE02vpyYcsaBX/ZCa3GzxaBiT19pH/BIsPzCpK6M8YcGTP1h1Id4N21k 40r1u2EiH1K1Kbki6BoACxc8lJmeA8wPsxt32Mn8wXM7rwC9mTbp6NxcWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD8cz7lFWtoa8lXBaktUUsYE48KgMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvUHh6UHVVVmEyaHJ5VmNGcVMxUlN4Z1Rqd3FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ0xWAwQA w04xMA0GCSqGSIb3DQEBCwUAA4IBAQBSMzWwUsOcUsCHuelcr6+GnW/AAapRAq7S Q9p9VnnUPySGaQapAah5ZYbXSvnLzCrsMGKbUJKTPGy8IS5C1ZSO+M493EXz/hTL oY5UZlB9osDwfa9m2I71Ado0tuVbx4w6cpOypo/MaDz3OtPEn5kJ01/R/NNNrVu0 aZAWtbVqlCA5VYqxh41tj6S9CjPxcZH9++bsLWp4PikaGmMSd9hyhhKB1AgMq8wd 0IaoaqtCMVT8/qM0hr9xNkk0UFN08ojHuvn6oWdc0SE23nC/HFt2D3i5Dr+HIyd2 bL2wyJ9gLFxCR4IYuaaZRuJpBjXRS9rNIp08uXOK5CgeGbhwvyQ4 -----END CERTIFICATE-----Generated at Sat Dec 6 13:42:58 2025 by rpki-client