This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NozPIwsH6evnKbaCOKZ3BvdjqZ8.roa File: NozPIwsH6evnKbaCOKZ3BvdjqZ8.roa (raw, json) Hash identifier: JrtB57ApGQMT8TkwesyQsEDHeDHBuDlCzruBtnHeIzA= Subject key identifier: 36:8C:CF:23:0B:07:E9:EB:E7:29:B6:82:38:A6:77:06:F7:63:A9:9F Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AFD5AC1D7B9A8CCDB9A5B073A5DBCA5A1 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NozPIwsH6evnKbaCOKZ3BvdjqZ8.roa Signing time: Mon 08 Dec 2025 09:46:14 +0000 ROA not before: Mon 08 Dec 2025 09:46:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58212 IP address blocks: 5.231.70.0/24 maxlen: 24 5.231.234.0/24 maxlen: 24 77.90.22.0/24 maxlen: 24 77.90.41.0/24 maxlen: 24 77.90.52.0/24 maxlen: 24 85.93.1.0/24 maxlen: 24 89.144.17.0/24 maxlen: 24 89.144.18.0/24 maxlen: 24 89.144.25.0/24 maxlen: 24 89.144.44.0/24 maxlen: 24 89.144.46.0/24 maxlen: 24 178.18.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:5a:c1:d7:b9:a8:cc:db:9a:5b:07:3a:5d:bc:a5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 8 09:46:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=368ccf230b07e9ebe729b68238a67706f763a99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d2:f7:ae:90:de:0f:d9:85:49:3c:a5:96:7c: 76:eb:a2:5f:82:95:01:e9:2f:d5:a3:3b:ee:06:d5: 8a:e1:f3:e0:0b:12:cc:18:d0:91:27:71:27:5f:1d: 7b:75:60:b5:ab:43:21:4f:36:4b:1d:db:da:f2:0f: 2f:f3:6a:f8:bd:b7:c0:a1:92:19:33:64:16:64:31: ba:eb:aa:b1:1d:0d:ee:63:3a:78:6c:19:f4:c5:ed: 37:a6:78:6c:c9:5c:d8:c5:fc:a4:7c:c2:3f:d5:66: ad:aa:df:c3:e2:75:8b:43:da:63:c7:f9:34:46:d6: 8e:74:c8:8b:47:6a:cf:fc:f2:fa:d5:10:ff:50:22: 91:bd:6e:f4:97:8e:35:16:6e:48:97:c3:ca:57:a9: b2:31:da:01:7c:d0:ab:d9:91:6a:6d:9f:cf:15:ca: 31:c4:37:1b:8f:e0:31:10:50:21:8d:d6:00:7a:59: 2f:ef:09:cb:dc:97:0c:10:f8:de:69:85:57:29:c7: 5b:f0:e7:41:7b:38:1b:97:f9:38:3e:8e:58:14:18: fe:98:3b:16:d7:13:7c:77:65:d1:f4:86:d2:85:40: 1e:67:a3:a7:34:22:8b:91:2e:01:9d:33:e5:3f:43: 8e:a7:7f:c1:1f:56:e4:5c:0f:48:22:67:10:1d:04: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8C:CF:23:0B:07:E9:EB:E7:29:B6:82:38:A6:77:06:F7:63:A9:9F X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NozPIwsH6evnKbaCOKZ3BvdjqZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.70.0/24 5.231.234.0/24 77.90.22.0/24 77.90.41.0/24 77.90.52.0/24 85.93.1.0/24 89.144.17.0-89.144.18.255 89.144.25.0/24 89.144.44.0/24 89.144.46.0/24 178.18.147.0/24 Signature Algorithm: sha256WithRSAEncryption 40:3a:a0:d4:b0:cb:ec:f1:25:55:43:3c:86:d3:1c:b6:54:cf: 61:e2:0b:13:4e:0b:71:65:a8:f6:95:7c:b2:52:cd:4c:df:77: 75:d0:48:db:c8:91:36:37:69:97:f7:07:ad:7b:ec:86:48:6f: 0c:3d:99:4b:0b:01:bc:69:48:6b:cb:6c:0c:b5:c5:a0:88:76: 34:0c:38:cc:b0:7e:30:2a:8c:bf:3b:f6:32:34:58:0c:0a:ba: 59:d1:06:31:8a:ad:6c:d4:8c:c2:5e:ef:f3:2d:06:85:e5:ad: 52:79:99:02:4e:f2:2e:9a:14:62:0b:d4:6e:6a:ee:85:af:b1: 42:d8:5a:dd:40:4c:ca:05:72:7c:4b:13:67:0e:67:5a:0d:98: 8e:7b:cc:5e:cf:86:76:53:4c:d8:4f:e2:2f:61:e0:d6:1a:ed: 98:cb:24:a0:d6:8a:17:36:5b:f2:4c:ab:50:c6:65:76:fd:d0: a9:f6:c0:d4:3b:f3:3d:76:93:06:c2:16:fb:e0:03:bd:4a:39: ab:0a:27:c4:97:ef:6f:1c:05:95:a4:ba:0a:96:44:3d:a2:ee: dc:55:ea:d2:ad:5d:05:a6:b4:ad:4c:3f:54:ad:96:8d:69:3d: 61:49:2a:30:c7:e9:e4:ce:fb:13:44:6d:a0:3f:62:c7:ea:90: 19:b2:54:50 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZr9WsHXuajM25pbBzpdvKWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjA4MDk0NjE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjhjY2YyMzBiMDdlOWViZTcyOWI2ODIzOGE2NzcwNmY3NjNhOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dL3rpDeD9mFSTyllnx266JfgpUB 6S/VozvuBtWK4fPgCxLMGNCRJ3EnXx17dWC1q0MhTzZLHdva8g8v82r4vbfAoZIZ M2QWZDG666qxHQ3uYzp4bBn0xe03pnhsyVzYxfykfMI/1Watqt/D4nWLQ9pjx/k0 RtaOdMiLR2rP/PL61RD/UCKRvW70l441Fm5Il8PKV6myMdoBfNCr2ZFqbZ/PFcox xDcbj+AxEFAhjdYAelkv7wnL3JcMEPjeaYVXKcdb8OdBezgbl/k4Po5YFBj+mDsW 1xN8d2XR9IbShUAeZ6OnNCKLkS4BnTPlP0OOp3/BH1bkXA9IImcQHQTJjQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFDaMzyMLB+nr5ym2gjimdwb3Y6mfMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvTm96UEl3c0g2ZXZuS2JhQ09LWjNCdmRqcVo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQABedGAwQA BefqAwQATVoWAwQATVopAwQATVo0AwQAVV0BMAwDBABZkBEDBABZkBIDBABZkBkD BABZkCwDBABZkC4DBACyEpMwDQYJKoZIhvcNAQELBQADggEBAEA6oNSwy+zxJVVD PIbTHLZUz2HiCxNOC3FlqPaVfLJSzUzfd3XQSNvIkTY3aZf3B6177IZIbww9mUsL AbxpSGvLbAy1xaCIdjQMOMywfjAqjL879jI0WAwKulnRBjGKrWzUjMJe7/MtBoXl rVJ5mQJO8i6aFGIL1G5q7oWvsULYWt1ATMoFcnxLE2cOZ1oNmI57zF7PhnZTTNhP 4i9h4NYa7ZjLJKDWihc2W/JMq1DGZXb90Kn2wNQ78z12kwbCFvvgA71KOasKJ8SX 728cBZWkugqWRD2i7txV6tKtXQWmtK1MP1Stlo1pPWFJKjDH6eTO+xNEbaA/Ysfq kBmyVFA= -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:20 2025 by rpki-client