This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ln1M3uWk2BJy0lUG3Z-Jy2SNYBI.roa File: ln1M3uWk2BJy0lUG3Z-Jy2SNYBI.roa (raw, json) Hash identifier: CKxhBbVrbJffFrEB9mTIOfAlYK/lnlDNOK4jWm1gVLM= Subject key identifier: 96:7D:4C:DE:E5:A4:D8:12:72:D2:55:06:DD:9F:89:CB:64:8D:60:12 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B353EDAB25C22C6D592200FF7A7D75FE8 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ln1M3uWk2BJy0lUG3Z-Jy2SNYBI.roa Signing time: Fri 19 Dec 2025 06:14:30 +0000 ROA not before: Fri 19 Dec 2025 06:14:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215136 IP address blocks: 5.83.134.0/24 maxlen: 24 5.175.140.0/24 maxlen: 24 5.175.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:3e:da:b2:5c:22:c6:d5:92:20:0f:f7:a7:d7:5f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 19 06:14:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=967d4cdee5a4d81272d25506dd9f89cb648d6012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:25:f4:23:65:25:2f:b8:b6:ae:26:ae:70:49: f2:5b:b2:2a:8b:cd:41:6e:e1:0d:bb:7e:3d:57:8d: b6:c6:de:0d:5e:a9:c1:4d:38:c4:70:9d:d1:91:38: bf:77:f5:02:36:5d:04:35:09:f5:3a:a3:7c:47:a2: 9a:0f:2d:17:21:35:d3:62:55:9e:2a:c2:64:e9:5b: f8:09:50:6b:43:fc:4b:a1:5b:9e:bc:a4:22:e2:ed: 9a:ee:ab:cb:6c:03:d9:6d:f2:31:a9:e5:8d:37:c5: ac:ea:15:b9:86:ca:05:1c:cd:96:9f:76:6b:da:bc: 11:7b:42:ab:9e:5e:d9:56:57:05:30:63:c3:0f:8d: 5f:f9:b8:c9:54:33:cb:8c:da:33:31:c1:3f:12:32: a9:05:f7:3a:2c:7b:de:50:3c:26:64:50:7a:2a:8c: 55:7e:ab:0c:8f:ac:da:34:c0:fd:45:74:89:c5:b1: 9a:da:ff:b1:21:16:81:52:13:c5:5b:2b:45:ca:84: fb:18:dc:d9:c8:83:b3:47:70:b7:4f:7b:fc:98:d0: 87:e3:fb:0b:1e:a8:d8:de:f8:0a:8d:66:bd:35:5a: 86:bd:99:84:57:26:66:e8:0a:11:ab:83:1f:2e:9d: 1b:9b:74:7e:04:b9:b4:9c:73:b4:4c:09:7d:78:32: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7D:4C:DE:E5:A4:D8:12:72:D2:55:06:DD:9F:89:CB:64:8D:60:12 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ln1M3uWk2BJy0lUG3Z-Jy2SNYBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.134.0/24 5.175.140.0/24 5.175.222.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:8d:90:08:25:8c:8c:d8:52:e2:58:5c:b8:12:b5:b4:22:41: 16:16:6d:64:07:ba:34:78:47:37:88:8f:d0:ab:70:78:59:39: b5:72:67:b8:27:cf:d6:65:48:c0:43:a5:d9:7f:c3:0c:29:ce: 1d:62:3c:18:36:fd:14:25:d7:77:7e:0e:b4:0d:1a:aa:f7:85: 53:19:c8:7e:b4:ba:00:4e:c9:95:45:18:15:c1:2a:75:0d:0e: f1:b2:0a:66:f6:94:e0:fd:21:e1:ea:2f:be:83:79:1b:61:67: 3a:7c:f8:2c:6e:3d:80:9b:04:c7:3d:5e:55:5e:68:16:f4:af: 98:3b:36:50:fb:2d:d8:40:7d:e3:fe:77:aa:41:7c:68:6f:54: 46:ee:0b:c6:ec:83:58:00:a9:47:67:fb:31:eb:fa:3a:0c:ec: 04:e4:16:4d:6e:3b:f9:50:5b:51:f0:12:71:c7:e4:17:7c:9d: 4d:20:22:92:dc:19:20:c7:d2:fc:54:37:37:4e:28:95:68:84: 8e:9b:9c:bd:40:9d:94:43:d1:e6:0e:0b:f3:fe:11:ab:f0:81: e9:88:a8:f3:4f:01:57:ba:f1:64:12:ea:92:50:ff:5d:4e:94: 84:ce:45:b6:61:68:a5:bf:5d:a6:d4:9d:65:69:48:f7:99:e2: e4:f2:f0:53 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZs1PtqyXCLG1ZIgD/en11/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE5MDYxNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjdkNGNkZWU1YTRkODEyNzJkMjU1MDZkZDlmODljYjY0OGQ2MDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCX0I2UlL7i2riaucEnyW7Iqi81B buENu349V422xt4NXqnBTTjEcJ3RkTi/d/UCNl0ENQn1OqN8R6KaDy0XITXTYlWe KsJk6Vv4CVBrQ/xLoVuevKQi4u2a7qvLbAPZbfIxqeWNN8Ws6hW5hsoFHM2Wn3Zr 2rwRe0Krnl7ZVlcFMGPDD41f+bjJVDPLjNozMcE/EjKpBfc6LHveUDwmZFB6KoxV fqsMj6zaNMD9RXSJxbGa2v+xIRaBUhPFWytFyoT7GNzZyIOzR3C3T3v8mNCH4/sL HqjY3vgKjWa9NVqGvZmEVyZm6AoRq4MfLp0bm3R+BLm0nHO0TAl9eDL+twIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJZ9TN7lpNgSctJVBt2fictkjWASMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvbG4xTTN1V2syQkp5MGxVRzNaLUp5MlNOWUJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABVOGAwQA Ba+MAwQABa/eMA0GCSqGSIb3DQEBCwUAA4IBAQA7jZAIJYyM2FLiWFy4ErW0IkEW Fm1kB7o0eEc3iI/Qq3B4WTm1cme4J8/WZUjAQ6XZf8MMKc4dYjwYNv0UJdd3fg60 DRqq94VTGch+tLoATsmVRRgVwSp1DQ7xsgpm9pTg/SHh6i++g3kbYWc6fPgsbj2A mwTHPV5VXmgW9K+YOzZQ+y3YQH3j/neqQXxob1RG7gvG7INYAKlHZ/sx6/o6DOwE 5BZNbjv5UFtR8BJxx+QXfJ1NICKS3Bkgx9L8VDc3TiiVaISOm5y9QJ2UQ9HmDgvz /hGr8IHpiKjzTwFXuvFkEuqSUP9dTpSEzkW2YWilv12m1J1laUj3meLk8vBT -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:18 2025 by rpki-client