This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/5YHCipVLiFoqapNXFPlwZIwCjpE.roa File: 5YHCipVLiFoqapNXFPlwZIwCjpE.roa (raw, json) Hash identifier: sbQ0g1yAhSHTLGyhEZ7Z1KPdhNYk8R5ZHF+38mwJM/I= Subject key identifier: E5:81:C2:8A:95:4B:88:5A:2A:6A:93:57:14:F9:70:64:8C:02:8E:91 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019AC451F203A230ADC920AA73A8DAAFE0F1 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/5YHCipVLiFoqapNXFPlwZIwCjpE.roa Signing time: Thu 27 Nov 2025 07:58:15 +0000 ROA not before: Thu 27 Nov 2025 07:58:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30937 IP address blocks: 46.253.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:51:f2:03:a2:30:ad:c9:20:aa:73:a8:da:af:e0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Nov 27 07:58:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e581c28a954b885a2a6a935714f970648c028e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:cb:c9:20:02:b6:df:9a:17:81:e6:35:73: ec:a7:2b:35:60:99:85:c6:61:21:6c:7a:28:04:50: 40:56:81:3d:42:1a:6f:33:02:a3:16:85:e9:24:1a: a9:12:2d:3f:e0:8a:49:23:0b:ed:84:19:73:f5:0e: 7e:28:b1:28:f7:38:99:db:39:6a:cc:1f:f9:cd:64: 49:cd:e5:55:f8:09:97:9c:07:2b:19:50:39:8f:e1: 41:88:7f:b0:1a:ed:64:b6:1e:76:ce:fd:2d:f5:7e: 03:a6:ef:ef:3b:90:39:eb:96:88:01:9d:41:c0:d0: 53:18:ad:51:c8:1c:c4:a2:cf:13:96:ac:0c:39:a0: f1:35:7b:43:37:2a:6f:1a:2c:50:89:ed:17:29:15: 5d:6e:7a:27:95:4f:67:3d:5e:58:30:68:b9:77:ce: d2:6f:45:f6:84:e8:63:2a:61:de:e0:63:87:f9:a8: 16:cc:03:14:49:7a:c3:4a:2b:81:c3:7e:16:51:80: 4f:ca:80:98:27:77:44:be:65:d9:a8:ce:af:9f:75: ed:35:7e:9c:63:dd:fc:96:ef:90:ad:6f:0a:2a:4b: c7:a6:cf:1c:c7:74:79:79:ff:f8:3c:c7:1c:07:e8: 10:81:f9:12:6b:8e:49:7e:a6:b2:49:e4:79:75:85: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:81:C2:8A:95:4B:88:5A:2A:6A:93:57:14:F9:70:64:8C:02:8E:91 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/5YHCipVLiFoqapNXFPlwZIwCjpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.138.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:b3:ac:53:fd:d4:b5:a4:03:a7:19:ea:9d:5e:42:b6:8b:31: d6:fd:97:6c:dc:60:0b:5b:07:c6:56:ea:90:ca:51:11:0d:d5: d5:a8:7d:c1:4b:b2:40:0e:87:52:93:20:9f:de:98:a4:10:e7: b7:c1:46:f3:ea:c4:9f:c0:bb:21:69:e4:23:07:7d:c6:de:f0: 6d:aa:26:91:31:98:02:dd:f7:13:61:9e:f8:c9:8b:93:22:d6: 01:8e:78:de:e0:48:07:4a:e8:bb:d8:cf:35:3f:17:40:89:f5: 00:40:b7:3c:ed:be:8c:33:f4:b4:30:9d:a2:1b:c7:2f:a9:39: 13:6f:ba:72:f3:2c:31:dc:8c:31:48:3c:38:36:d2:57:3b:59: 98:9a:45:58:0e:52:51:48:35:44:3a:0b:96:f3:51:e4:ff:13: eb:0f:24:b3:8b:f0:4c:c4:01:1a:ab:ca:26:21:f4:75:91:47: a8:b7:b2:93:e4:77:b0:4d:7c:2d:e0:8c:5c:0c:cd:e3:85:53: bc:9a:2e:62:2b:cb:4c:95:64:55:01:73:ad:34:29:08:76:ae: a0:cd:9f:b5:17:a3:76:fe:68:01:b9:4e:bb:14:72:62:32:31: 7f:f8:b6:d0:b2:55:ac:b3:78:68:de:12:21:d3:13:2d:f9:8f: 66:6d:c9:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrEUfIDojCtySCqc6jar+DxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjUxMTI3MDc1ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTgxYzI4YTk1NGI4ODVhMmE2YTkzNTcxNGY5NzA2NDhjMDI4ZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRzLySACtt+aF4HmNXPspys1YJmF xmEhbHooBFBAVoE9QhpvMwKjFoXpJBqpEi0/4IpJIwvthBlz9Q5+KLEo9ziZ2zlq zB/5zWRJzeVV+AmXnAcrGVA5j+FBiH+wGu1kth52zv0t9X4Dpu/vO5A565aIAZ1B wNBTGK1RyBzEos8TlqwMOaDxNXtDNypvGixQie0XKRVdbnonlU9nPV5YMGi5d87S b0X2hOhjKmHe4GOH+agWzAMUSXrDSiuBw34WUYBPyoCYJ3dEvmXZqM6vn3XtNX6c Y938lu+QrW8KKkvHps8cx3R5ef/4PMccB+gQgfkSa45JfqaySeR5dYXVuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOWBwoqVS4haKmqTVxT5cGSMAo6RMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvNVlIQ2lwVkxpRm9xYXBOWEZQbHdaSXdDanBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv2KMA0G CSqGSIb3DQEBCwUAA4IBAQAcs6xT/dS1pAOnGeqdXkK2izHW/Zds3GALWwfGVuqQ ylERDdXVqH3BS7JADodSkyCf3pikEOe3wUbz6sSfwLshaeQjB33G3vBtqiaRMZgC 3fcTYZ74yYuTItYBjnje4EgHSui72M81PxdAifUAQLc87b6MM/S0MJ2iG8cvqTkT b7py8ywx3IwxSDw4NtJXO1mYmkVYDlJRSDVEOguW81Hk/xPrDySzi/BMxAEaq8om IfR1kUeot7KT5HewTXwt4IxcDM3jhVO8mi5iK8tMlWRVAXOtNCkIdq6gzZ+1F6N2 /mgBuU67FHJiMjF/+LbQslWss3ho3hIh0xMt+Y9mbcnA -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:19 2025 by rpki-client