This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aNkkMa3ZzKsQkIAChPhVVNk2uho.roa File: aNkkMa3ZzKsQkIAChPhVVNk2uho.roa (raw, json) Hash identifier: RWo9GVxg6lXa7d2SiLuSQ1x8ru1clwCJ1R/MChHq7kU= Subject key identifier: 68:D9:24:31:AD:D9:CC:AB:10:90:80:02:84:F8:55:54:D9:36:BA:1A Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B31C06685C89C08074B61D350DD4D0BDD Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aNkkMa3ZzKsQkIAChPhVVNk2uho.roa Signing time: Thu 18 Dec 2025 13:57:31 +0000 ROA not before: Thu 18 Dec 2025 13:57:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 5.253.64.0/24 maxlen: 24 45.128.235.0/24 maxlen: 24 93.123.74.0/24 maxlen: 24 93.123.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c0:66:85:c8:9c:08:07:4b:61:d3:50:dd:4d:0b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 18 13:57:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68d92431add9ccab1090800284f85554d936ba1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2e:89:6e:be:30:71:88:b1:3c:53:3d:67:38: 20:fc:85:27:3a:01:fc:5c:6e:6b:53:49:9d:3b:3e: 06:c7:95:26:41:d0:5f:60:8a:e1:03:98:24:ba:c6: 87:fe:ad:1f:59:8f:86:ef:f7:9d:a4:ca:a1:03:aa: 8d:64:eb:92:7d:24:e3:5d:88:df:b3:57:c5:3a:54: 54:71:1d:31:cb:a7:8b:b5:8f:de:1d:b8:02:58:a9: 37:6b:0e:4c:25:a3:8b:1c:e0:d9:82:3d:cc:6b:c1: 65:89:be:42:4f:db:e9:64:40:62:c0:32:d8:bd:28: 95:38:33:54:09:6b:18:2d:ce:17:7a:1d:15:86:48: 03:32:c8:e8:14:d5:91:51:5b:8b:2a:3f:66:60:ba: 7b:85:c5:57:f3:87:aa:f2:87:60:c1:71:84:4c:1a: ae:3e:c3:8b:60:66:38:74:74:8e:ae:3a:c9:46:94: 59:76:56:c3:5b:8b:43:f3:99:35:b7:d4:89:a4:84: 19:39:60:5a:14:bd:23:bb:34:2f:ba:61:62:71:c9: 6b:61:80:39:02:fc:95:e0:23:4f:9f:72:b0:49:52: 06:26:48:5a:ed:be:c5:a9:f7:c2:5e:9e:a3:90:3c: 9b:af:bb:f6:05:8c:03:1f:94:bf:44:f5:e0:0e:87: 7a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D9:24:31:AD:D9:CC:AB:10:90:80:02:84:F8:55:54:D9:36:BA:1A X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aNkkMa3ZzKsQkIAChPhVVNk2uho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.64.0/24 45.128.235.0/24 93.123.74.0/23 Signature Algorithm: sha256WithRSAEncryption 43:d8:36:24:93:1e:19:81:0f:6a:df:e7:c3:c0:d8:d6:12:91: e8:19:bb:2a:40:8b:72:21:68:71:13:d6:2f:c2:49:a4:ac:2e: 8d:06:9b:09:25:73:aa:ab:77:61:fe:6a:7f:9f:46:4a:00:1a: 39:f3:1c:3d:35:27:ed:60:1a:14:16:74:0a:88:b7:5d:ca:c9: d5:bc:60:95:9e:7e:96:cf:9c:ca:65:da:78:c6:d4:55:b6:a8: c7:a0:ed:b8:f8:59:c8:78:0d:39:e3:24:f0:4b:0d:02:ce:fa: 18:8d:be:86:03:1a:74:af:cf:0e:2b:63:be:ed:03:39:37:a4: 8f:3c:bd:0a:df:84:49:9c:04:df:6c:87:29:31:56:db:7a:f7: c7:54:83:c7:75:e9:7f:6c:59:72:09:53:c7:43:1a:7d:d6:64: 46:1f:c4:d7:f8:b3:52:5c:01:24:23:ff:78:b9:cf:f6:c0:e3: fe:dc:79:1c:75:af:91:cd:5c:0b:eb:52:94:e5:2d:b1:0e:1c: f4:2e:6b:83:1a:59:0f:07:93:eb:be:ae:ae:3f:a8:63:5c:7d: cf:ca:44:32:09:4f:fd:b7:3b:ab:58:e9:22:2a:14:90:b9:8b: 9e:b5:25:9f:72:40:b3:92:ea:a2:85:2c:28:48:34:bc:7f:f9: 2e:5d:03:fe -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsxwGaFyJwIB0th01DdTQvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE4MTM1NzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGQ5MjQzMWFkZDljY2FiMTA5MDgwMDI4NGY4NTU1NGQ5MzZiYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy6Jbr4wcYixPFM9Zzgg/IUnOgH8 XG5rU0mdOz4Gx5UmQdBfYIrhA5gkusaH/q0fWY+G7/edpMqhA6qNZOuSfSTjXYjf s1fFOlRUcR0xy6eLtY/eHbgCWKk3aw5MJaOLHODZgj3Ma8Flib5CT9vpZEBiwDLY vSiVODNUCWsYLc4Xeh0VhkgDMsjoFNWRUVuLKj9mYLp7hcVX84eq8odgwXGETBqu PsOLYGY4dHSOrjrJRpRZdlbDW4tD85k1t9SJpIQZOWBaFL0juzQvumFicclrYYA5 AvyV4CNPn3KwSVIGJkha7b7FqffCXp6jkDybr7v2BYwDH5S/RPXgDod6EQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGjZJDGt2cyrEJCAAoT4VVTZNroaMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvYU5ra01hM1p6S3NRa0lBQ2hQaFZWTmsydWhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABf1AAwQA LYDrAwQBXXtKMA0GCSqGSIb3DQEBCwUAA4IBAQBD2DYkkx4ZgQ9q3+fDwNjWEpHo GbsqQItyIWhxE9YvwkmkrC6NBpsJJXOqq3dh/mp/n0ZKABo58xw9NSftYBoUFnQK iLddysnVvGCVnn6Wz5zKZdp4xtRVtqjHoO24+FnIeA054yTwSw0CzvoYjb6GAxp0 r88OK2O+7QM5N6SPPL0K34RJnATfbIcpMVbbevfHVIPHdel/bFlyCVPHQxp91mRG H8TX+LNSXAEkI/94uc/2wOP+3Hkcda+RzVwL61KU5S2xDhz0LmuDGlkPB5Prvq6u P6hjXH3PykQyCU/9tzurWOkiKhSQuYuetSWfckCzkuqihSwoSDS8f/kuXQP+ -----END CERTIFICATE-----Generated at Fri Dec 19 10:30:18 2025 by rpki-client