This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5JcyTfXIEXKHCj7P1XQ7cdewtwg.roa File: 5JcyTfXIEXKHCj7P1XQ7cdewtwg.roa (raw, json) Hash identifier: 3qkP7DkXHaUgwLI6CLF2tMxdpcpM9XMj/mPJu7Mprrs= Subject key identifier: E4:97:32:4D:F5:C8:11:72:87:0A:3E:CF:D5:74:3B:71:D7:B0:B7:08 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B2F30DF03AD6A300770690FE4A010D3D7 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5JcyTfXIEXKHCj7P1XQ7cdewtwg.roa Signing time: Thu 18 Dec 2025 02:01:30 +0000 ROA not before: Thu 18 Dec 2025 02:01:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202742 IP address blocks: 185.47.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:df:03:ad:6a:30:07:70:69:0f:e4:a0:10:d3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 18 02:01:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e497324df5c81172870a3ecfd5743b71d7b0b708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1a:7b:4d:55:69:bf:db:8c:1d:51:91:38:44: 10:f2:c1:5b:34:5a:32:a4:7c:99:42:5b:03:f6:03: 66:a6:35:96:c5:f5:2a:6d:f3:fd:76:f4:29:8c:38: 5f:3b:21:db:81:cd:37:5f:9e:ab:fd:99:57:9f:48: a7:25:22:3e:81:01:c9:42:4a:98:48:0a:ac:68:fe: c7:80:8b:01:33:36:c2:43:ca:77:70:a9:66:04:01: 99:52:1d:f5:19:17:48:a4:33:b5:07:10:5f:60:bf: 9e:fe:ec:90:b9:e5:d8:c6:90:84:60:04:10:0a:d5: 43:34:dd:95:f1:ac:46:ee:6d:07:42:f8:fc:ef:88: d5:c5:65:a0:3e:fc:a8:31:1f:68:2d:5a:f4:97:45: d9:32:59:8a:b4:84:43:68:c0:e9:00:69:37:57:d7: 48:f7:a6:c3:b7:7e:19:ea:e7:cc:97:af:91:16:8d: b8:fc:5e:ee:38:26:4d:76:d3:1d:1a:02:3e:4f:4f: e9:f5:a7:85:d4:85:2f:48:b9:ad:5a:05:f3:96:4e: 57:34:f9:e0:c3:a7:65:73:d2:57:8c:ae:5a:5c:cd: 02:d7:71:b9:2a:41:70:fd:0c:c2:71:ab:bf:fa:7e: c4:5e:73:36:92:f6:2f:ba:ea:c2:88:28:03:14:e1: 5c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:97:32:4D:F5:C8:11:72:87:0A:3E:CF:D5:74:3B:71:D7:B0:B7:08 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5JcyTfXIEXKHCj7P1XQ7cdewtwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.47.140.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:bd:16:a9:c6:4f:90:59:65:17:00:c7:31:b0:b7:58:03:c5: f9:ce:a4:b0:d5:50:97:35:63:38:58:66:91:1a:a9:1b:f5:7b: 30:48:43:5a:b1:5b:9c:3b:6f:45:66:0a:3d:3a:a5:24:f1:95: 1b:8b:cd:1e:e2:27:d2:84:de:7e:7d:1f:a9:63:1f:5b:f6:af: ef:95:68:82:6b:55:ae:7e:26:be:bf:d2:ef:b8:cb:ad:e4:17: f9:42:ad:c6:d0:e9:8d:80:66:d4:f9:af:68:11:ce:d3:9a:4c: 2f:8b:42:02:9c:4b:d7:3b:bd:69:16:b4:47:71:e8:c1:8c:7a: 09:5e:2b:84:81:e2:02:71:1d:7a:39:bb:b0:f9:6f:56:21:43: cc:ff:65:93:f4:74:4e:4d:ea:0a:8c:ab:9b:47:3c:74:99:26: df:89:b9:29:70:1c:28:28:d3:4f:9a:40:75:02:39:d2:1d:ef: 03:40:a6:11:7e:f8:63:a0:dd:af:00:5f:5c:e4:52:1e:ee:21: ec:35:cc:53:32:8c:dd:7c:b5:ae:9e:f4:82:3a:62:2d:73:f2: 85:89:09:72:c4:14:f6:5c:6a:35:8d:bf:c5:13:ad:6f:79:e9: 1d:87:2a:15:a5:ae:4c:9b:f6:b2:eb:6e:99:8f:e8:4c:77:41: b0:fc:c5:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsvMN8DrWowB3BpD+SgENPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE4MDIwMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDk3MzI0ZGY1YzgxMTcyODcwYTNlY2ZkNTc0M2I3MWQ3YjBiNzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxp7TVVpv9uMHVGROEQQ8sFbNFoy pHyZQlsD9gNmpjWWxfUqbfP9dvQpjDhfOyHbgc03X56r/ZlXn0inJSI+gQHJQkqY SAqsaP7HgIsBMzbCQ8p3cKlmBAGZUh31GRdIpDO1BxBfYL+e/uyQueXYxpCEYAQQ CtVDNN2V8axG7m0HQvj874jVxWWgPvyoMR9oLVr0l0XZMlmKtIRDaMDpAGk3V9dI 96bDt34Z6ufMl6+RFo24/F7uOCZNdtMdGgI+T0/p9aeF1IUvSLmtWgXzlk5XNPng w6dlc9JXjK5aXM0C13G5KkFw/QzCcau/+n7EXnM2kvYvuurCiCgDFOFc/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOSXMk31yBFyhwo+z9V0O3HXsLcIMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNUpjeVRmWElFWEtIQ2o3UDFYUTdjZGV3dHdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS+MMA0G CSqGSIb3DQEBCwUAA4IBAQBMvRapxk+QWWUXAMcxsLdYA8X5zqSw1VCXNWM4WGaR Gqkb9XswSENasVucO29FZgo9OqUk8ZUbi80e4ifShN5+fR+pYx9b9q/vlWiCa1Wu fia+v9LvuMut5Bf5Qq3G0OmNgGbU+a9oEc7Tmkwvi0ICnEvXO71pFrRHcejBjHoJ XiuEgeICcR16Obuw+W9WIUPM/2WT9HROTeoKjKubRzx0mSbfibkpcBwoKNNPmkB1 AjnSHe8DQKYRfvhjoN2vAF9c5FIe7iHsNcxTMozdfLWunvSCOmItc/KFiQlyxBT2 XGo1jb/FE61veekdhyoVpa5Mm/ay626Zj+hMd0Gw/MWu -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:21 2025 by rpki-client