This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hDhnj43HSCjQCJX0uGpXjKzZjGw.roa File: hDhnj43HSCjQCJX0uGpXjKzZjGw.roa (raw, json) Hash identifier: O1CTuAl0Y4Wv2hxurNZuhx8s1NvC7mjGUDi+CbtUn8o= Subject key identifier: 84:38:67:8F:8D:C7:48:28:D0:08:95:F4:B8:6A:57:8C:AC:D9:8C:6C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B312CFCB54D6474D653EAEA3AB6A151F3 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hDhnj43HSCjQCJX0uGpXjKzZjGw.roa Signing time: Thu 18 Dec 2025 11:16:30 +0000 ROA not before: Thu 18 Dec 2025 11:16:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44486 IP address blocks: 5.83.145.0/24 maxlen: 24 5.175.220.0/24 maxlen: 24 77.90.3.0/24 maxlen: 24 77.90.28.0/24 maxlen: 24 89.144.33.0/24 maxlen: 24 89.144.42.0/24 maxlen: 24 94.103.172.0/24 maxlen: 24 94.103.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:2c:fc:b5:4d:64:74:d6:53:ea:ea:3a:b6:a1:51:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 18 11:16:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8438678f8dc74828d00895f4b86a578cacd98c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:cd:8d:a9:76:52:b4:4a:15:63:e9:52:e0: 8c:4d:18:ec:2b:e1:5d:76:13:f5:09:89:20:8b:91: 36:52:9f:ae:b7:04:a6:af:7d:1e:4a:e1:41:2d:78: f5:f2:7a:53:44:ab:37:18:92:36:ad:c5:9a:c0:3e: 87:45:dc:44:c2:43:bf:ca:da:0a:53:78:98:ca:53: b0:e4:bd:9f:74:57:8a:9f:33:ea:52:9f:3d:39:72: f3:a9:e2:57:bb:09:bd:e6:97:d9:c6:12:56:63:7c: fb:c1:a4:fb:7e:62:0b:6a:48:8a:6d:e3:05:3b:4c: 83:32:79:87:46:59:a9:5e:51:d7:27:d7:8a:ae:45: af:3b:81:da:c7:1f:2f:c8:d1:29:ed:7b:05:3c:90: 8d:c3:dd:93:2f:ea:75:db:f5:d3:3f:de:28:98:d4: 11:33:a7:c8:24:5d:8d:fa:6e:f0:e9:ed:53:49:1e: b8:08:fb:fe:f7:fa:7f:7a:a7:82:58:48:72:06:cc: 0a:48:18:e2:0c:db:49:c5:ad:d3:19:21:ea:b6:1b: b8:fd:12:b8:8b:b8:3e:2d:9d:6a:e6:61:81:1b:e1: 07:c4:a0:62:13:ff:fa:44:68:ba:69:a3:2d:ae:f5: 64:46:58:02:fb:1e:9d:aa:c7:67:05:82:5a:5f:6d: 7e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:38:67:8F:8D:C7:48:28:D0:08:95:F4:B8:6A:57:8C:AC:D9:8C:6C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hDhnj43HSCjQCJX0uGpXjKzZjGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.145.0/24 5.175.220.0/24 77.90.3.0/24 77.90.28.0/24 89.144.33.0/24 89.144.42.0/24 94.103.172.0/23 Signature Algorithm: sha256WithRSAEncryption e0:a1:fc:f2:7d:92:88:32:ee:45:dc:ba:df:f9:cf:04:f2:fc: c7:2e:cd:6c:59:a9:b2:e0:82:93:38:a9:c6:58:f0:30:85:19: 6a:99:2c:00:9c:9f:13:d3:8f:ae:49:a8:2d:20:bd:1c:16:2c: 46:1f:f3:ac:78:f0:d6:f8:84:ca:c7:65:75:69:7d:53:36:8e: d5:52:d2:85:84:62:4c:81:57:78:c5:f3:5a:f6:62:80:a4:16: bd:04:12:5f:c2:ae:89:dc:a1:95:60:5c:11:2a:fe:84:89:8c: 71:72:8e:f2:89:fc:03:21:ad:ab:a9:94:3d:40:22:01:15:08: 49:76:a2:ed:c8:a2:86:28:6e:a4:73:2a:6c:20:2e:28:13:8d: e9:b2:68:5e:40:9b:16:a3:40:7d:f5:7a:8a:a0:8b:b9:a9:db: b4:ca:9c:f0:84:2b:96:d8:72:ce:a0:49:fd:c7:f8:77:5b:94: d0:60:7d:80:7e:f2:24:55:cc:f4:24:b8:8c:68:f2:17:ae:9c: 0f:03:ef:4e:cf:77:65:3d:9f:97:7e:46:1f:41:ef:2b:c5:75: 7e:dc:9f:31:b4:ac:d8:be:11:d4:ef:56:4d:b5:db:84:10:ac: fd:c0:0b:6b:a8:23:29:28:0b:03:78:5f:e1:84:03:6f:1a:c0: 98:a1:14:27 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZsxLPy1TWR01lPq6jq2oVHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE4MTExNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDM4Njc4ZjhkYzc0ODI4ZDAwODk1ZjRiODZhNTc4Y2FjZDk4YzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLLNjal2UrRKFWPpUuCMTRjsK+Fd dhP1CYkgi5E2Up+utwSmr30eSuFBLXj18npTRKs3GJI2rcWawD6HRdxEwkO/ytoK U3iYylOw5L2fdFeKnzPqUp89OXLzqeJXuwm95pfZxhJWY3z7waT7fmILakiKbeMF O0yDMnmHRlmpXlHXJ9eKrkWvO4Haxx8vyNEp7XsFPJCNw92TL+p12/XTP94omNQR M6fIJF2N+m7w6e1TSR64CPv+9/p/eqeCWEhyBswKSBjiDNtJxa3TGSHqthu4/RK4 i7g+LZ1q5mGBG+EHxKBiE//6RGi6aaMtrvVkRlgC+x6dqsdnBYJaX21+LwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFIQ4Z4+Nx0go0AiV9LhqV4ys2YxsMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvaERobmo0M0hTQ2pRQ0pYMHVHcFhqS3paakd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQABVORAwQA Ba/cAwQATVoDAwQATVocAwQAWZAhAwQAWZAqAwQBXmesMA0GCSqGSIb3DQEBCwUA A4IBAQDgofzyfZKIMu5F3Lrf+c8E8vzHLs1sWamy4IKTOKnGWPAwhRlqmSwAnJ8T 04+uSagtIL0cFixGH/OsePDW+ITKx2V1aX1TNo7VUtKFhGJMgVd4xfNa9mKApBa9 BBJfwq6J3KGVYFwRKv6EiYxxco7yifwDIa2rqZQ9QCIBFQhJdqLtyKKGKG6kcyps IC4oE43psmheQJsWo0B99XqKoIu5qdu0ypzwhCuW2HLOoEn9x/h3W5TQYH2AfvIk Vcz0JLiMaPIXrpwPA+9Oz3dlPZ+XfkYfQe8rxXV+3J8xtKzYvhHU71ZNtduEEKz9 wAtrqCMpKAsDeF/hhANvGsCYoRQn -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:18 2025 by rpki-client