This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GfN5G8ZVHLjo937hW6JYXT026ns.roa File: GfN5G8ZVHLjo937hW6JYXT026ns.roa (raw, json) Hash identifier: f1GAwxoaA8BOHr4yEwtUrDSkLjRmQVnfJl/fjvLQrvQ= Subject key identifier: 19:F3:79:1B:C6:55:1C:B8:E8:F7:7E:E1:5B:A2:58:5D:3D:36:EA:7B Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B13E939D5C465E64934937C602F218E0D Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GfN5G8ZVHLjo937hW6JYXT026ns.roa Signing time: Fri 12 Dec 2025 18:53:30 +0000 ROA not before: Fri 12 Dec 2025 18:53:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62904 IP address blocks: 5.175.211.0/24 maxlen: 24 5.175.212.0/24 maxlen: 24 5.231.124.0/24 maxlen: 24 5.231.241.0/24 maxlen: 24 89.144.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:e9:39:d5:c4:65:e6:49:34:93:7c:60:2f:21:8e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 12 18:53:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=19f3791bc6551cb8e8f77ee15ba2585d3d36ea7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:32:9f:51:00:9d:2a:cb:f2:82:4d:14:a0:b0: 87:72:3f:fa:82:d2:c3:3b:92:b9:64:ec:7e:20:1b: eb:5b:08:e1:5a:cd:a6:59:3b:3a:9e:20:50:79:a3: 28:65:0e:1f:19:9b:83:68:52:b4:36:a6:6c:be:4a: 3d:18:d0:03:ff:56:dc:47:01:42:1c:c3:83:0f:4b: 23:cb:3f:e8:54:8b:af:c4:7a:be:68:8b:66:5d:04: a2:b4:1a:42:00:fd:f1:a7:b3:e1:79:2a:b5:19:e0: a6:8a:22:1f:5f:30:85:60:79:db:ce:1d:a8:17:f9: 42:f9:88:cd:7e:07:80:c8:40:48:3a:1e:2e:3a:b2: 87:31:eb:3c:be:7b:12:77:3a:e8:6e:90:69:50:b1: 61:28:4c:59:a9:c6:c0:10:02:ac:b7:e9:7d:ee:69: 40:0b:ff:f7:4e:c9:85:0a:77:4b:a8:77:ff:f3:61: 6a:bd:eb:16:66:a1:8f:5b:08:c6:68:d9:30:f4:89: f7:20:e5:1d:ea:fa:61:27:bf:9a:4e:6d:e3:39:22: 29:81:ea:56:cf:54:14:4c:1d:2d:86:05:bd:7d:3f: 33:ea:db:f3:d5:68:1e:a9:9f:92:91:fb:fa:01:97: dd:39:44:81:63:2c:58:de:44:52:ac:fc:c5:f0:b5: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F3:79:1B:C6:55:1C:B8:E8:F7:7E:E1:5B:A2:58:5D:3D:36:EA:7B X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GfN5G8ZVHLjo937hW6JYXT026ns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.211.0-5.175.212.255 5.231.124.0/24 5.231.241.0/24 89.144.40.0/24 Signature Algorithm: sha256WithRSAEncryption bb:7b:7f:cc:8d:e0:7d:e5:bd:2f:ce:a9:cf:f0:cf:be:48:79: 43:e7:68:16:68:c9:dc:88:0e:87:40:e7:41:29:a6:00:d4:d4: 8d:ca:f2:37:67:26:5e:17:01:28:a0:37:e8:29:0a:9f:b5:92: ee:e7:e2:d4:ae:6c:d3:83:80:3f:f1:4e:47:ae:6e:54:44:9f: de:f0:37:21:d4:1d:fe:8a:7a:8f:14:a9:bf:b3:fe:5b:a0:2b: f0:bf:43:37:e7:a9:cd:4a:87:43:ae:97:44:d9:1f:50:08:63: ec:81:94:04:f5:65:96:97:a9:36:28:65:e7:79:e1:c1:1a:c8: 88:02:7a:f5:2e:21:98:62:c0:44:3f:65:cb:a7:b8:9b:c7:66: 56:92:d6:25:6b:08:b6:e8:b2:96:33:31:30:d9:f4:d4:a2:b3: e5:7e:79:b1:60:de:b2:d9:55:56:4a:58:3d:2b:96:fa:22:4b: 5a:0a:3f:d8:b0:0a:5b:87:4f:94:50:88:02:24:a4:5c:fa:94: b0:61:f3:42:8e:e7:cb:04:80:11:38:3b:86:d0:30:13:13:7f: 38:fa:79:68:89:8c:2a:d4:7c:ef:5c:55:dc:f2:b4:f8:aa:76: f1:38:95:89:c8:ff:c5:9c:7d:3b:00:3e:9a:db:09:bd:a5:ae: 37:48:80:e2 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZsT6TnVxGXmSTSTfGAvIY4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjEyMTg1MzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWYzNzkxYmM2NTUxY2I4ZThmNzdlZTE1YmEyNTg1ZDNkMzZlYTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzKfUQCdKsvygk0UoLCHcj/6gtLD O5K5ZOx+IBvrWwjhWs2mWTs6niBQeaMoZQ4fGZuDaFK0NqZsvko9GNAD/1bcRwFC HMODD0sjyz/oVIuvxHq+aItmXQSitBpCAP3xp7PheSq1GeCmiiIfXzCFYHnbzh2o F/lC+YjNfgeAyEBIOh4uOrKHMes8vnsSdzrobpBpULFhKExZqcbAEAKst+l97mlA C//3TsmFCndLqHf/82FqvesWZqGPWwjGaNkw9In3IOUd6vphJ7+aTm3jOSIpgepW z1QUTB0thgW9fT8z6tvz1WgeqZ+Skfv6AZfdOUSBYyxY3kRSrPzF8LWTrQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBnzeRvGVRy46Pd+4VuiWF09Nup7MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvR2ZONUc4WlZITGpvOTM3aFc2SllYVDAyNm5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAFr9MD BAAFr9QDBAAF53wDBAAF5/EDBABZkCgwDQYJKoZIhvcNAQELBQADggEBALt7f8yN 4H3lvS/Oqc/wz75IeUPnaBZoydyIDodA50EppgDU1I3K8jdnJl4XASigN+gpCp+1 ku7n4tSubNODgD/xTkeublREn97wNyHUHf6Keo8Uqb+z/lugK/C/Qzfnqc1Kh0Ou l0TZH1AIY+yBlAT1ZZaXqTYoZed54cEayIgCevUuIZhiwEQ/ZcunuJvHZlaS1iVr CLbospYzMTDZ9NSis+V+ebFg3rLZVVZKWD0rlvoiS1oKP9iwCluHT5RQiAIkpFz6 lLBh80KO58sEgBE4O4bQMBMTfzj6eWiJjCrUfO9cVdzytPiqdvE4lYnI/8WcfTsA PprbCb2lrjdIgOI= -----END CERTIFICATE-----Generated at Thu Dec 18 20:29:57 2025 by rpki-client