This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X8absbdf9avt6LclmdqL8mTIlPA.roa File: X8absbdf9avt6LclmdqL8mTIlPA.roa (raw, json) Hash identifier: 0TG64b679wasz2GXjn8SWh5GvCmwgDq4j0AJ7fFUdl0= Subject key identifier: 5F:C6:9B:B1:B7:5F:F5:AB:ED:E8:B7:25:99:DA:8B:F2:64:C8:94:F0 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B34640B4710E69F9B0AB90EAFD398C2EC Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X8absbdf9avt6LclmdqL8mTIlPA.roa Signing time: Fri 19 Dec 2025 02:15:30 +0000 ROA not before: Fri 19 Dec 2025 02:15:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215607 IP address blocks: 5.175.186.0/24 maxlen: 24 5.175.223.0/24 maxlen: 24 77.90.33.0/24 maxlen: 24 89.106.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:64:0b:47:10:e6:9f:9b:0a:b9:0e:af:d3:98:c2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 19 02:15:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5fc69bb1b75ff5abede8b72599da8bf264c894f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:7b:ad:30:a9:5b:16:0d:e8:8c:a5:b1:11: eb:84:82:fd:e1:9f:4f:aa:ea:38:cc:51:f3:b2:03: 71:68:5a:fb:93:f1:bf:e4:52:e6:95:14:32:3e:d4: a4:42:fb:b9:91:14:e3:cf:1c:df:74:4f:30:93:27: 0d:32:6e:98:a4:6d:7e:9c:86:3f:36:96:85:0f:ae: 68:51:e8:35:a6:1d:06:22:47:e1:bb:18:b9:7a:66: fa:51:fd:55:ad:54:3b:0f:70:f8:83:d1:22:86:d3: c9:bb:61:ad:01:9b:5b:2d:bc:31:b7:32:6c:37:10: 6e:9f:d3:65:ff:6d:ae:75:89:aa:e8:07:87:c8:c3: fc:75:af:32:8a:20:88:be:6e:98:ba:d1:3e:de:17: b4:35:af:b9:68:24:af:e6:e1:30:0f:60:4f:53:33: 38:ae:7e:88:0d:a6:92:6a:09:5c:10:74:f4:dd:d1: 8a:cd:9f:fd:86:fa:8f:3b:13:4e:7d:36:f7:83:eb: ef:02:28:c5:60:fa:6c:a6:c3:82:56:ce:2b:72:42: 0c:03:3e:13:04:37:ae:45:b8:87:c6:cd:68:bb:e5: a7:ca:1c:b6:88:86:53:ef:79:da:50:0c:72:4c:2d: 13:89:3d:f1:9d:80:6b:dd:53:a9:73:0a:b6:33:67: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C6:9B:B1:B7:5F:F5:AB:ED:E8:B7:25:99:DA:8B:F2:64:C8:94:F0 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X8absbdf9avt6LclmdqL8mTIlPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.186.0/24 5.175.223.0/24 77.90.33.0/24 89.106.89.0/24 Signature Algorithm: sha256WithRSAEncryption 58:e4:59:24:fb:d9:09:c0:fa:53:84:4c:de:81:b8:6e:50:4c: 89:11:b4:48:2b:37:b8:f6:1b:b6:fd:9f:ed:72:f2:20:ad:a0: 91:5d:37:87:c6:6c:a3:5c:43:c4:87:b7:6b:2c:df:3f:de:a9: ec:83:db:53:c1:2c:6d:6a:c0:b0:df:0f:96:27:81:0e:da:82: 21:64:b0:38:24:15:a1:74:41:6b:c5:a5:a8:63:61:5d:15:30: f2:10:17:e7:77:8a:04:f3:7b:d1:44:4a:4b:de:88:19:92:b1: c5:c1:52:bd:d5:db:b8:04:9e:12:e6:d8:6e:ee:4b:dd:a6:37: e4:72:fa:ab:e8:f0:e2:98:3c:71:cc:b1:bd:10:ad:5e:3f:7b: 76:26:a6:d5:91:f8:5d:93:e8:a6:04:aa:bb:9b:88:2e:82:2c: 50:85:3c:f2:d9:4f:f2:75:06:b5:6e:96:b5:9a:e6:7e:75:3a: 63:db:a2:2f:ce:db:bf:62:e1:aa:b7:74:03:33:3d:04:95:33: 65:85:f4:ac:1e:d4:96:12:ca:c2:23:b1:fa:d0:05:80:7a:0d: d2:79:e3:29:f7:d8:4d:3b:5c:21:94:99:66:54:47:3d:ec:84: 4e:96:45:dd:84:ec:ed:ff:b8:47:0f:97:7b:b1:79:16:ba:c5: d3:60:b3:02 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZs0ZAtHEOafmwq5Dq/TmMLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE5MDIxNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmM2OWJiMWI3NWZmNWFiZWRlOGI3MjU5OWRhOGJmMjY0Yzg5NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseh7rTCpWxYN6IylsRHrhIL94Z9P quo4zFHzsgNxaFr7k/G/5FLmlRQyPtSkQvu5kRTjzxzfdE8wkycNMm6YpG1+nIY/ NpaFD65oUeg1ph0GIkfhuxi5emb6Uf1VrVQ7D3D4g9EihtPJu2GtAZtbLbwxtzJs NxBun9Nl/22udYmq6AeHyMP8da8yiiCIvm6YutE+3he0Na+5aCSv5uEwD2BPUzM4 rn6IDaaSaglcEHT03dGKzZ/9hvqPOxNOfTb3g+vvAijFYPpspsOCVs4rckIMAz4T BDeuRbiHxs1ou+Wnyhy2iIZT73naUAxyTC0TiT3xnYBr3VOpcwq2M2eIvQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFF/Gm7G3X/Wr7ei3JZnai/JkyJTwMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvWDhhYnNiZGY5YXZ0NkxjbG1kcUw4bVRJbFBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABa+6AwQA Ba/fAwQATVohAwQAWWpZMA0GCSqGSIb3DQEBCwUAA4IBAQBY5Fkk+9kJwPpThEze gbhuUEyJEbRIKze49hu2/Z/tcvIgraCRXTeHxmyjXEPEh7drLN8/3qnsg9tTwSxt asCw3w+WJ4EO2oIhZLA4JBWhdEFrxaWoY2FdFTDyEBfnd4oE83vRREpL3ogZkrHF wVK91du4BJ4S5thu7kvdpjfkcvqr6PDimDxxzLG9EK1eP3t2JqbVkfhdk+imBKq7 m4gugixQhTzy2U/ydQa1bpa1muZ+dTpj26Ivztu/YuGqt3QDMz0ElTNlhfSsHtSW EsrCI7H60AWAeg3SeeMp99hNO1whlJlmVEc97IROlkXdhOzt/7hHD5d7sXkWusXT YLMC -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:46 2025 by rpki-client