This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/Nu5TRVd26n9AGQYBpz8f5pBcpaw.roa File: Nu5TRVd26n9AGQYBpz8f5pBcpaw.roa (raw, json) Hash identifier: r28RVbjjIKsfCbL6DnjqYHTKslQLlFbIUqLf6uX2ZKw= Subject key identifier: 36:EE:53:45:57:76:EA:7F:40:19:06:01:A7:3F:1F:E6:90:5C:A5:AC Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92 Certificate serial: 019A830C117B31B2FD78D18ACE4823287E06 Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/Nu5TRVd26n9AGQYBpz8f5pBcpaw.roa Signing time: Fri 14 Nov 2025 15:46:37 +0000 ROA not before: Fri 14 Nov 2025 15:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21263 IP address blocks: 5.154.177.0/24 maxlen: 24 5.154.178.0/24 maxlen: 24 178.157.88.0/23 maxlen: 24 185.16.72.0/22 maxlen: 24 2a0e:1d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:83:0c:11:7b:31:b2:fd:78:d1:8a:ce:48:23:28:7e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92 Validity Not Before: Nov 14 15:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=36ee53455776ea7f40190601a73f1fe6905ca5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:70:bf:de:8c:18:23:a2:28:c8:44:bb:73: 05:09:fb:f3:f8:0f:26:ac:a6:e2:fd:f8:02:99:7f: 43:3a:7f:24:0d:55:17:26:8d:0e:f2:b1:d0:49:68: 1e:d0:17:05:54:49:29:39:9a:7b:36:5c:e4:2e:65: 40:d6:61:92:dc:e9:70:a8:83:d5:ff:4a:c0:94:98: 47:c7:ee:f0:85:6b:a2:1f:02:a1:a7:9f:01:29:5f: ea:2a:ef:b1:a1:52:06:02:57:a9:f4:2f:c2:88:5d: 1d:ac:f9:02:28:f6:e9:88:3c:89:4d:ca:2a:25:fe: be:21:9a:8d:db:eb:4f:6c:03:13:c7:c8:f8:89:77: a4:85:26:6d:55:9e:03:e2:bf:70:18:3c:7d:68:33: 96:c4:41:3e:18:45:c2:da:d6:f1:0a:97:d6:34:7a: 7e:6c:0c:9d:44:e4:0b:5d:12:6f:da:17:85:34:a9: f5:3a:68:8b:38:47:17:8c:be:c2:f0:ae:d6:b7:04: 92:2e:7d:84:c6:09:a8:6d:90:33:42:36:08:f4:79: 1a:7b:d0:b5:80:b4:4f:bc:52:75:fd:10:4a:e9:c2: df:d6:9f:be:da:5d:23:80:be:d2:93:66:ac:b7:72: 9c:8b:ba:5e:4e:7f:93:3a:dc:02:92:61:f1:d9:ce: 83:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EE:53:45:57:76:EA:7F:40:19:06:01:A7:3F:1F:E6:90:5C:A5:AC X509v3 Authority Key Identifier: keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/Nu5TRVd26n9AGQYBpz8f5pBcpaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.177.0-5.154.178.255 178.157.88.0/23 185.16.72.0/22 IPv6: 2a0e:1d00::/32 Signature Algorithm: sha256WithRSAEncryption a3:49:53:1d:09:0a:bc:fc:75:20:3e:9b:88:95:9c:0e:00:05: 46:a5:e4:70:eb:82:57:f5:46:45:10:af:6c:0d:7e:58:13:4d: 53:02:e8:51:76:27:56:2c:83:2c:5c:1a:85:fb:4f:fc:c4:57: 7c:99:bc:c6:75:66:0b:2c:c5:7b:8a:e8:c5:ef:f6:f3:df:b9: 43:e7:40:36:ee:cd:ca:f6:da:55:b2:e8:bc:84:86:8c:3e:04: ef:df:4d:5d:3b:4c:8f:d3:9a:4b:02:fc:61:ed:2c:34:5a:3d: 39:04:ad:eb:7c:cb:e6:94:c7:22:70:26:33:9b:b0:0b:01:38: 1d:2b:88:ce:9f:e8:8c:d2:e5:7f:2d:37:ca:2b:8e:7c:42:8a: d0:10:41:ce:a3:8a:dc:ba:25:53:1d:e3:6b:67:4f:f8:31:3f: e8:d7:44:fe:55:86:ff:13:12:b7:74:d0:6c:e6:bf:18:37:c4: 68:39:ef:0b:73:7f:44:0e:35:25:69:4e:8e:30:10:dc:d3:27: b2:c6:c1:da:e7:50:69:df:6e:1a:2b:79:05:f0:7b:9c:fe:97: 34:65:23:26:57:49:42:75:7a:a7:82:b7:72:58:35:98:05:d6: be:79:ba:e2:16:08:40:8a:6a:5a:93:a6:61:71:eb:7e:3a:c0: 90:ed:d0:d6 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZqDDBF7MbL9eNGKzkgjKH4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTgzNjg2NDY0YzUzM2Q0MTUyYmNhMmVkZjNhMDFiNDg3 ZWVhOTIwHhcNMjUxMTE0MTU0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmVlNTM0NTU3NzZlYTdmNDAxOTA2MDFhNzNmMWZlNjkwNWNhNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLpwv96MGCOiKMhEu3MFCfvz+A8m rKbi/fgCmX9DOn8kDVUXJo0O8rHQSWge0BcFVEkpOZp7NlzkLmVA1mGS3OlwqIPV /0rAlJhHx+7whWuiHwKhp58BKV/qKu+xoVIGAlep9C/CiF0drPkCKPbpiDyJTcoq Jf6+IZqN2+tPbAMTx8j4iXekhSZtVZ4D4r9wGDx9aDOWxEE+GEXC2tbxCpfWNHp+ bAydROQLXRJv2heFNKn1OmiLOEcXjL7C8K7WtwSSLn2ExgmobZAzQjYI9Hkae9C1 gLRPvFJ1/RBK6cLf1p++2l0jgL7Sk2ast3Kci7peTn+TOtwCkmHx2c6DJQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFDbuU0VXdup/QBkGAac/H+aQXKWsMB8GA1UdIwQY MBaAFO9YNoZGTFM9QVK8ou3zoBtIfuqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUt ZjQzYWEyNzAwM2M1LzEvTnU1VFJWZDI2bjlBR1FZQnB6OGY1cEJjcGF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUtZjQzYWEyNzAwM2M1 LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAAFmrED BAAFmrIDBAGynVgDBAK5EEgwDQQCAAIwBwMFACoOHQAwDQYJKoZIhvcNAQELBQAD ggEBAKNJUx0JCrz8dSA+m4iVnA4ABUal5HDrglf1RkUQr2wNflgTTVMC6FF2J1Ys gyxcGoX7T/zEV3yZvMZ1ZgssxXuK6MXv9vPfuUPnQDbuzcr22lWy6LyEhow+BO/f TV07TI/TmksC/GHtLDRaPTkEret8y+aUxyJwJjObsAsBOB0riM6f6IzS5X8tN8or jnxCitAQQc6jity6JVMd42tnT/gxP+jXRP5Vhv8TErd00Gzmvxg3xGg57wtzf0QO NSVpTo4wENzTJ7LGwdrnUGnfbhoreQXwe5z+lzRlIyZXSUJ1eqeCt3JYNZgF1r55 uuIWCECKalqTpmFx6346wJDt0NY= -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:45 2025 by rpki-client