This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/5m1b01hL5BcjzP8FrpknmUKlQbs.roa File: 5m1b01hL5BcjzP8FrpknmUKlQbs.roa (raw, json) Hash identifier: T3XZKupiy6iYEpA63mlPw7Ubl9igvLOEfmR+hPcujQk= Subject key identifier: E6:6D:5B:D3:58:4B:E4:17:23:CC:FF:05:AE:99:27:99:42:A5:41:BB Certificate issuer: /CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb Certificate serial: 019ADEE4130C341E34EEED6B256C43F46446 Authority key identifier: 4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/5m1b01hL5BcjzP8FrpknmUKlQbs.roa Signing time: Tue 02 Dec 2025 11:48:00 +0000 ROA not before: Tue 02 Dec 2025 11:48:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39803 IP address blocks: 195.189.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:e4:13:0c:34:1e:34:ee:ed:6b:25:6c:43:f4:64:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb Validity Not Before: Dec 2 11:48:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e66d5bd3584be41723ccff05ae99279942a541bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:b5:af:fe:fb:2c:cb:fd:be:e1:de:a1:7e: 6f:38:ed:7d:ef:56:a4:c5:74:cb:b3:b2:6c:2a:73: 85:cb:57:f1:85:3c:1b:0d:ae:f3:f1:61:cd:69:a4: 65:51:5b:3e:99:dc:f7:61:18:27:65:29:c5:5d:4a: 2a:4a:fc:c5:82:c8:0a:d8:e9:23:6e:c3:f2:da:b4: 0d:a5:37:bf:6c:b5:56:78:aa:8b:d8:d2:75:27:bb: a0:e7:c2:a6:81:08:f5:0e:74:47:5c:ad:fd:13:81: 58:cc:64:00:82:fd:0b:9a:39:a3:98:4a:8e:ea:ba: 1c:f6:36:f0:38:5e:86:3f:cc:ac:a4:e3:c4:45:bb: d5:7b:27:14:53:a6:21:65:8c:51:63:4c:1b:4b:81: c0:45:e3:9d:b9:21:8c:8c:a5:9f:53:86:fc:5b:ec: fd:0b:a1:8c:a8:37:46:a6:9a:2d:64:3e:6f:21:4b: 56:45:cc:59:34:fe:3a:6d:f1:6d:35:c3:33:76:e0: 5e:3a:bf:96:90:8c:79:92:61:0c:76:be:9a:76:7a: 75:81:65:4f:21:f5:2e:21:0d:62:33:0f:c0:c6:03: 69:88:80:c3:28:0a:20:b1:a2:35:ed:0a:d0:af:e5: d8:67:38:36:e6:ec:25:4b:af:8c:5b:c1:00:a2:0d: a2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6D:5B:D3:58:4B:E4:17:23:CC:FF:05:AE:99:27:99:42:A5:41:BB X509v3 Authority Key Identifier: keyid:4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/5m1b01hL5BcjzP8FrpknmUKlQbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.189.138.0/23 Signature Algorithm: sha256WithRSAEncryption 68:81:56:28:40:35:e6:0c:4d:3d:d0:4b:28:06:0c:17:38:e6: 67:bc:97:db:dd:48:e8:67:b1:d3:86:e5:3f:7e:76:e5:06:3c: 96:a9:53:c2:45:a9:ac:95:ab:8f:59:9d:27:e8:d0:35:ee:dc: 16:0a:0b:d3:51:96:66:1a:23:67:3b:a1:ae:b1:5c:cf:5e:a7: 69:88:72:69:db:b0:d9:e6:a1:73:62:a9:f8:40:44:82:f5:ec: 76:1a:9d:b9:68:42:ab:ce:14:48:08:3e:ce:1c:af:49:66:3e: 7f:a0:e8:d9:79:e2:92:17:14:55:21:9c:f9:a5:ca:d4:ec:ef: dd:a5:64:72:76:e8:a1:54:35:69:b4:09:c5:e2:38:de:83:0f: e5:e1:b0:12:93:37:c5:1f:2a:a5:f1:5a:f1:11:b0:97:12:a1: 1c:33:75:89:b5:9c:7d:75:14:de:e3:7c:fb:87:19:99:37:d9: 50:01:0f:6a:60:85:ad:7f:89:41:6f:88:d5:34:3f:a4:a6:d9: 93:eb:61:68:33:81:f9:b5:6a:da:f0:dc:5a:de:96:04:87:8e: a8:07:d8:78:29:57:2b:d1:69:e1:83:01:da:eb:89:1d:7c:a7: 46:3d:63:6a:69:46:16:4d:c1:c9:6d:7f:01:a3:7c:85:a5:27: 75:94:80:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZre5BMMNB407u1rJWxD9GRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNGQyYTdkMmYxZWE4OGZmYjVhMDMyNTljYjNmNGVhOGQy ZjU1ZmIwHhcNMjUxMjAyMTE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjZkNWJkMzU4NGJlNDE3MjNjY2ZmMDVhZTk5Mjc5OTQyYTU0MWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpO1r/77LMv9vuHeoX5vOO1971ak xXTLs7JsKnOFy1fxhTwbDa7z8WHNaaRlUVs+mdz3YRgnZSnFXUoqSvzFgsgK2Okj bsPy2rQNpTe/bLVWeKqL2NJ1J7ug58KmgQj1DnRHXK39E4FYzGQAgv0LmjmjmEqO 6roc9jbwOF6GP8yspOPERbvVeycUU6YhZYxRY0wbS4HAReOduSGMjKWfU4b8W+z9 C6GMqDdGppotZD5vIUtWRcxZNP46bfFtNcMzduBeOr+WkIx5kmEMdr6adnp1gWVP IfUuIQ1iMw/AxgNpiIDDKAogsaI17QrQr+XYZzg25uwlS6+MW8EAog2igQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZtW9NYS+QXI8z/Ba6ZJ5lCpUG7MB8GA1UdIwQY MBaAFE1NKn0vHqiP+1oDJZyz9OqNL1X7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNzJjODAtNmFkNy00YjFmLTk4OWEt YTZiNTEzYzQ3Zjg1LzEvNW0xYjAxaEw1QmNqelA4RnJwa25tVUtsUWJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNzJjODAtNmFkNy00YjFmLTk4OWEtYTZiNTEzYzQ3Zjg1 LzEvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw72KMA0G CSqGSIb3DQEBCwUAA4IBAQBogVYoQDXmDE090EsoBgwXOOZnvJfb3UjoZ7HThuU/ fnblBjyWqVPCRamslauPWZ0n6NA17twWCgvTUZZmGiNnO6GusVzPXqdpiHJp27DZ 5qFzYqn4QESC9ex2Gp25aEKrzhRICD7OHK9JZj5/oOjZeeKSFxRVIZz5pcrU7O/d pWRyduihVDVptAnF4jjegw/l4bASkzfFHyql8VrxEbCXEqEcM3WJtZx9dRTe43z7 hxmZN9lQAQ9qYIWtf4lBb4jVND+kptmT62FoM4H5tWra8Nxa3pYEh46oB9h4KVcr 0WnhgwHa64kdfKdGPWNqaUYWTcHJbX8Bo3yFpSd1lIBi -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:58 2025 by rpki-client