This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9_cyAxQ53_9441kJaWIsUH33hLc.roa File: 9_cyAxQ53_9441kJaWIsUH33hLc.roa (raw, json) Hash identifier: 36Nx/9SJCrnV1Iw/u2P1kYAMDGFiLFNp19dGQWZoRmI= Subject key identifier: F7:F7:32:03:14:39:DF:FF:78:E3:59:09:69:62:2C:50:7D:F7:84:B7 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B0BD16242402A83E89C5BEC6B4EF1321B Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9_cyAxQ53_9441kJaWIsUH33hLc.roa Signing time: Thu 11 Dec 2025 05:10:30 +0000 ROA not before: Thu 11 Dec 2025 05:10:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200993 IP address blocks: 5.175.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:d1:62:42:40:2a:83:e8:9c:5b:ec:6b:4e:f1:32:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 11 05:10:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f7f732031439dfff78e3590969622c507df784b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:ab:0d:80:b9:44:c9:b7:22:f3:82:c4:30: 42:61:45:55:16:6e:55:9e:b4:c2:83:05:4c:5a:0b: fe:b6:54:51:11:cd:4e:46:dd:99:1e:87:d5:e6:f6: 37:78:45:85:59:0c:14:95:fc:12:cb:4b:e7:50:ac: 1d:b5:a5:94:74:6a:07:09:00:c6:89:c6:da:80:8a: 9c:f7:8d:6f:6a:97:d5:bb:22:49:22:05:61:f5:4a: f4:85:b8:7b:e4:88:f0:bc:07:80:24:08:dd:9f:96: 92:1d:b6:fc:8a:d2:30:fd:f4:3b:24:e4:e0:36:e9: 14:24:bd:3b:03:49:b5:ea:af:ca:62:49:d3:0f:b3: c7:fc:6b:a6:74:fe:b5:51:23:b7:6d:37:12:d8:56: b5:3d:6f:3b:a1:c8:a4:14:3f:86:89:e9:1c:e2:d4: 6b:ef:8b:52:ca:8f:28:72:36:30:2d:e6:f4:1f:95: 8d:a4:4b:b7:a0:19:70:e6:6c:1c:1e:f0:de:1b:d4: 0c:6e:ed:7f:c8:e1:fe:05:9e:63:ae:8d:38:dc:a4: fc:5b:26:c6:da:4e:fc:ac:fd:90:e3:d1:0c:c9:7e: 4e:6a:1e:9a:3e:fb:61:6c:2c:bb:dc:22:13:ba:0b: ce:45:bc:22:66:47:99:cd:72:6b:c2:55:ea:0f:4f: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F7:32:03:14:39:DF:FF:78:E3:59:09:69:62:2C:50:7D:F7:84:B7 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9_cyAxQ53_9441kJaWIsUH33hLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.134.0/24 Signature Algorithm: sha256WithRSAEncryption 34:05:dd:a0:2c:b3:89:26:f0:b8:7e:4a:bb:7d:cc:8d:89:78: 85:9b:ab:bf:12:78:72:b7:f7:9f:ae:fe:e7:25:8d:7a:bd:61: 2f:43:39:a0:89:dc:7d:71:d3:8d:ec:0a:71:2b:93:3a:72:ee: c6:41:6a:8d:76:e2:73:94:cb:34:bd:29:1d:2a:a1:ae:ff:6d: ad:19:dd:f6:f2:6d:de:d5:5d:e1:33:53:f8:bd:55:8a:e8:25: 93:f5:db:cf:2d:63:23:ba:1f:5e:63:bf:14:78:7f:61:7d:2e: 6a:87:fb:e3:5e:ab:3c:7c:17:7d:40:e5:8d:53:4a:22:cb:ee: d0:3f:00:9d:f2:dd:5c:4b:05:af:ee:70:75:3b:c4:c2:7c:63: bf:89:6b:04:95:09:5f:74:d4:de:6b:51:aa:a4:5f:04:3a:f7: 9d:0e:9d:98:26:21:c2:6b:b8:bc:1f:b3:fd:0b:83:07:55:39: 03:b2:23:9f:9d:76:4a:1a:54:d1:59:62:84:ed:a8:fe:96:56: 92:9f:a4:df:25:f6:0c:38:67:8c:8c:65:0d:3a:e1:bd:fe:5a: 46:ef:50:32:4d:e7:e7:9b:11:44:cc:93:7a:19:72:70:d3:17: d2:14:76:e1:c5:bc:ac:7a:c1:18:fa:83:32:f9:5d:dd:fb:ca: a7:6c:4b:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsL0WJCQCqD6Jxb7GtO8TIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjExMDUxMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2Y3MzIwMzE0MzlkZmZmNzhlMzU5MDk2OTYyMmM1MDdkZjc4NGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqyrDYC5RMm3IvOCxDBCYUVVFm5V nrTCgwVMWgv+tlRREc1ORt2ZHofV5vY3eEWFWQwUlfwSy0vnUKwdtaWUdGoHCQDG icbagIqc941vapfVuyJJIgVh9Ur0hbh75IjwvAeAJAjdn5aSHbb8itIw/fQ7JOTg NukUJL07A0m16q/KYknTD7PH/GumdP61USO3bTcS2Fa1PW87ocikFD+Giekc4tRr 74tSyo8ocjYwLeb0H5WNpEu3oBlw5mwcHvDeG9QMbu1/yOH+BZ5jro043KT8WybG 2k78rP2Q49EMyX5Oah6aPvthbCy73CITugvORbwiZkeZzXJrwlXqD080XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPf3MgMUOd//eONZCWliLFB994S3MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvOV9jeUF4UTUzXzk0NDFrSmFXSXNVSDMzaExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+GMA0G CSqGSIb3DQEBCwUAA4IBAQA0Bd2gLLOJJvC4fkq7fcyNiXiFm6u/Enhyt/efrv7n JY16vWEvQzmgidx9cdON7ApxK5M6cu7GQWqNduJzlMs0vSkdKqGu/22tGd328m3e 1V3hM1P4vVWK6CWT9dvPLWMjuh9eY78UeH9hfS5qh/vjXqs8fBd9QOWNU0oiy+7Q PwCd8t1cSwWv7nB1O8TCfGO/iWsElQlfdNTea1GqpF8EOvedDp2YJiHCa7i8H7P9 C4MHVTkDsiOfnXZKGlTRWWKE7aj+llaSn6TfJfYMOGeMjGUNOuG9/lpG71AyTefn mxFEzJN6GXJw0xfSFHbhxbysesEY+oMy+V3d+8qnbEt7 -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:21 2025 by rpki-client