This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TLl8m0ELduQLPbp351ZKyR3AzPE.roa File: TLl8m0ELduQLPbp351ZKyR3AzPE.roa (raw, json) Hash identifier: PWp0YwZ375VKha/6rF25wz6pXCEgva/x8EOXUwzC1VI= Subject key identifier: 4C:B9:7C:9B:41:0B:76:E4:0B:3D:BA:77:E7:56:4A:C9:1D:C0:CC:F1 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B31571A75E1568B4D9758625957573557 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TLl8m0ELduQLPbp351ZKyR3AzPE.roa Signing time: Thu 18 Dec 2025 12:02:30 +0000 ROA not before: Thu 18 Dec 2025 12:02:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210881 IP address blocks: 5.175.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:57:1a:75:e1:56:8b:4d:97:58:62:59:57:57:35:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 18 12:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4cb97c9b410b76e40b3dba77e7564ac91dc0ccf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:73:e2:17:40:f5:77:bb:9b:c1:5d:50:e3: de:19:69:a8:16:f2:ef:c5:26:91:7c:d2:49:8a:00: 8f:16:bb:b3:4e:ee:2b:a1:dc:b9:1a:c7:67:2d:2d: 1e:d3:39:3c:c6:5f:5b:b4:35:40:a8:43:c8:b5:cc: 9c:e1:13:35:82:9b:f2:6d:94:36:cb:6e:fe:71:9a: 7f:04:7e:0d:2a:78:be:88:46:34:39:0e:8c:bc:f1: cb:b7:a7:73:13:d3:56:cd:8d:61:7d:c0:1a:93:d9: 41:a9:56:86:e8:32:5b:aa:d4:98:a5:29:1d:ca:ce: 7a:46:24:16:af:cd:df:c8:03:c6:79:a2:35:0b:7b: 3b:37:eb:c0:7e:a0:92:8d:7a:6d:85:e4:78:b4:ce: 4e:aa:54:0e:a8:ba:a4:9f:12:ab:b5:bc:f2:68:f3: e2:c7:8e:7d:24:20:84:f5:9f:c8:35:0f:70:71:83: 3a:ae:1c:1f:c4:24:be:cc:22:c3:e0:e6:69:b6:54: 93:6f:06:26:60:37:d7:ec:21:01:38:11:26:c2:8a: 15:a6:3b:85:e9:fa:1e:11:0e:89:44:20:17:b6:a3: 08:47:18:a2:44:66:71:77:44:b4:6f:f3:6e:70:b9: 0b:96:fa:f2:23:ad:a7:7d:fb:3e:7e:87:36:ab:57: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B9:7C:9B:41:0B:76:E4:0B:3D:BA:77:E7:56:4A:C9:1D:C0:CC:F1 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TLl8m0ELduQLPbp351ZKyR3AzPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.173.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:be:a3:82:fc:a4:fe:db:87:e7:9a:8c:10:6e:ea:96:ca:75: 43:41:71:58:45:39:af:90:14:6f:00:a9:1d:53:05:d1:dd:0e: 55:3c:44:23:ba:a0:39:56:a0:9b:7e:4a:02:3b:7b:74:a7:65: 5d:cd:cc:90:30:d3:0f:6d:75:0c:95:c2:d3:78:43:05:29:e9: 57:d7:5c:be:00:ab:38:7a:b3:82:3a:f1:9a:b1:07:1e:5a:fd: 02:8d:26:33:92:1d:e8:b3:b3:1a:4a:15:e9:71:50:38:82:c8: be:48:8a:7b:67:20:e7:0b:1c:6d:ca:70:be:ac:cd:5d:69:10: 86:28:3e:0e:cd:37:8f:c7:24:00:9a:98:0d:a0:99:c5:57:cf: 2a:d6:60:3a:98:77:96:95:84:e7:9d:74:de:16:9a:87:fd:1d: c0:20:53:bf:e5:09:8f:07:ed:54:92:6f:87:bd:0e:25:11:a1: 5f:c7:94:14:d5:5e:c2:7b:d8:f6:14:a2:15:47:85:13:a3:b8: b3:a7:f3:fd:1b:16:a1:cf:7a:76:a7:ec:10:05:e9:68:14:d0: 44:9b:a4:67:61:2d:b6:f1:a5:80:70:d2:1d:be:7b:65:ba:67: 04:7b:b0:2f:be:59:2d:89:aa:9e:05:78:21:d9:25:e2:98:87: 61:d2:74:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsxVxp14VaLTZdYYllXVzVXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE4MTIwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2I5N2M5YjQxMGI3NmU0MGIzZGJhNzdlNzU2NGFjOTFkYzBjY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN9z4hdA9Xe7m8FdUOPeGWmoFvLv xSaRfNJJigCPFruzTu4rody5GsdnLS0e0zk8xl9btDVAqEPItcyc4RM1gpvybZQ2 y27+cZp/BH4NKni+iEY0OQ6MvPHLt6dzE9NWzY1hfcAak9lBqVaG6DJbqtSYpSkd ys56RiQWr83fyAPGeaI1C3s7N+vAfqCSjXptheR4tM5OqlQOqLqknxKrtbzyaPPi x459JCCE9Z/INQ9wcYM6rhwfxCS+zCLD4OZptlSTbwYmYDfX7CEBOBEmwooVpjuF 6foeEQ6JRCAXtqMIRxiiRGZxd0S0b/NucLkLlvryI62nffs+foc2q1edyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEy5fJtBC3bkCz26d+dWSskdwMzxMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVExsOG0wRUxkdVFMUGJwMzUxWkt5UjNBelBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+tMA0G CSqGSIb3DQEBCwUAA4IBAQBOvqOC/KT+24fnmowQbuqWynVDQXFYRTmvkBRvAKkd UwXR3Q5VPEQjuqA5VqCbfkoCO3t0p2VdzcyQMNMPbXUMlcLTeEMFKelX11y+AKs4 erOCOvGasQceWv0CjSYzkh3os7MaShXpcVA4gsi+SIp7ZyDnCxxtynC+rM1daRCG KD4OzTePxyQAmpgNoJnFV88q1mA6mHeWlYTnnXTeFpqH/R3AIFO/5QmPB+1Ukm+H vQ4lEaFfx5QU1V7Ce9j2FKIVR4UTo7izp/P9Gxahz3p2p+wQBeloFNBEm6RnYS22 8aWAcNIdvntlumcEe7AvvlktiaqeBXgh2SXimIdh0nSt -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:22 2025 by rpki-client