This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W6xMZxbU1ChjdlburtMaiU92Rt4.roa File: W6xMZxbU1ChjdlburtMaiU92Rt4.roa (raw, json) Hash identifier: vdyzU2pbY6U5whTyoSxlOTh0Hwo7e0TKC4SVdGd6EJQ= Subject key identifier: 5B:AC:4C:67:16:D4:D4:28:63:76:56:EE:AE:D3:1A:89:4F:76:46:DE Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B218246864A82E164DE4996A649BC6850 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W6xMZxbU1ChjdlburtMaiU92Rt4.roa Signing time: Mon 15 Dec 2025 10:15:44 +0000 ROA not before: Mon 15 Dec 2025 10:15:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210705 IP address blocks: 5.231.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:82:46:86:4a:82:e1:64:de:49:96:a6:49:bc:68:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 15 10:15:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5bac4c6716d4d428637656eeaed31a894f7646de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e8:89:42:c0:4c:7a:aa:75:b8:ad:01:ed:01: e9:56:35:94:17:9c:de:4d:c3:3c:69:6e:cf:4e:80: f7:fe:18:0d:97:7e:f7:67:0d:7d:2d:6c:ac:93:0f: 95:11:3f:33:62:c4:88:a7:28:87:36:79:ef:d8:d8: e1:10:26:ea:3a:94:95:90:2c:58:fa:a2:04:b1:85: c2:e7:f2:79:06:85:7c:25:0d:bc:4c:62:8e:1c:9d: 45:f1:d2:e9:70:66:94:e6:43:69:af:8a:f1:cd:33: 17:c2:6f:4b:b8:9d:51:40:8c:b1:39:a6:2a:d1:14: 6d:0b:7d:1f:49:ba:14:92:28:79:c9:a3:ec:a3:56: 7a:f3:df:a7:7e:fb:b5:a5:0a:a9:81:b8:ef:fd:54: dd:fb:f9:fa:8d:80:fc:c2:bc:12:fb:e8:32:23:38: bf:30:5b:96:88:79:65:be:1b:ce:32:1b:16:e1:5f: c4:15:49:d1:68:e8:e0:db:7b:31:83:d1:6e:ad:66: 55:66:fc:6c:9e:09:eb:47:cd:0f:47:ea:95:ca:06: f5:dd:ea:6b:30:da:e5:e0:9d:14:4c:41:fe:44:21: 7b:82:df:f8:ba:13:7b:ef:c8:04:66:7c:d6:14:4a: a4:25:96:c6:77:06:b6:86:a1:6e:85:bd:d5:bd:99: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AC:4C:67:16:D4:D4:28:63:76:56:EE:AE:D3:1A:89:4F:76:46:DE X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W6xMZxbU1ChjdlburtMaiU92Rt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.204.0/24 Signature Algorithm: sha256WithRSAEncryption 42:f0:a6:99:81:d0:bd:0a:75:cb:8f:9b:0c:ea:87:e4:65:2c: 14:32:83:6a:12:c2:b6:4f:e9:2c:44:d4:a3:ef:d2:e0:1d:b1: de:3e:f2:a7:33:aa:10:fd:45:29:88:82:aa:01:1e:21:2b:cf: 26:2e:35:d5:72:94:3d:6a:61:7c:8f:0f:00:7b:e9:72:5f:e4: 43:43:8b:87:8c:74:1c:22:3a:68:b4:57:69:e6:ee:95:9b:f0: a0:39:59:ac:9a:2a:0d:eb:34:7b:2a:2d:57:d4:b1:0e:00:bd: 87:1f:9c:de:56:8a:bd:09:8e:df:9f:0c:15:15:52:f0:65:45: cc:e1:0a:60:f7:20:c0:ad:24:eb:b1:df:78:18:a9:d6:07:74: fc:94:65:21:11:9f:08:7e:50:47:1d:c1:a0:5f:02:e3:82:be: be:93:c7:6c:a0:95:80:83:94:17:5a:75:9a:3d:0e:16:50:e3: 49:d8:7b:c3:22:d4:92:c5:38:ab:ec:c1:58:64:03:66:8f:fa: ca:ee:d5:15:70:ed:b8:2f:ba:4a:4a:47:ef:87:03:88:36:23: b6:e1:c9:97:7a:04:c0:cf:30:7f:45:b5:ed:ec:51:25:f2:fc: 19:81:3e:47:d1:39:04:ba:1b:78:84:1e:f5:9a:23:a6:6a:da: fe:c3:61:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshgkaGSoLhZN5JlqZJvGhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE1MTAxNTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmFjNGM2NzE2ZDRkNDI4NjM3NjU2ZWVhZWQzMWE4OTRmNzY0NmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eiJQsBMeqp1uK0B7QHpVjWUF5ze TcM8aW7PToD3/hgNl373Zw19LWyskw+VET8zYsSIpyiHNnnv2NjhECbqOpSVkCxY +qIEsYXC5/J5BoV8JQ28TGKOHJ1F8dLpcGaU5kNpr4rxzTMXwm9LuJ1RQIyxOaYq 0RRtC30fSboUkih5yaPso1Z689+nfvu1pQqpgbjv/VTd+/n6jYD8wrwS++gyIzi/ MFuWiHllvhvOMhsW4V/EFUnRaOjg23sxg9FurWZVZvxsngnrR80PR+qVygb13epr MNrl4J0UTEH+RCF7gt/4uhN778gEZnzWFEqkJZbGdwa2hqFuhb3VvZnbOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFusTGcW1NQoY3ZW7q7TGolPdkbeMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVzZ4TVp4YlUxQ2hqZGxidXJ0TWFpVTkyUnQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABefMMA0G CSqGSIb3DQEBCwUAA4IBAQBC8KaZgdC9CnXLj5sM6ofkZSwUMoNqEsK2T+ksRNSj 79LgHbHePvKnM6oQ/UUpiIKqAR4hK88mLjXVcpQ9amF8jw8Ae+lyX+RDQ4uHjHQc IjpotFdp5u6Vm/CgOVmsmioN6zR7Ki1X1LEOAL2HH5zeVoq9CY7fnwwVFVLwZUXM 4Qpg9yDArSTrsd94GKnWB3T8lGUhEZ8IflBHHcGgXwLjgr6+k8dsoJWAg5QXWnWa PQ4WUONJ2HvDItSSxTir7MFYZANmj/rK7tUVcO24L7pKSkfvhwOINiO24cmXegTA zzB/RbXt7FEl8vwZgT5H0TkEuht4hB71miOmatr+w2FF -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:17 2025 by rpki-client