This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n2EArNYmSGAO_MAuVKQYLEin3VQ.roa File: n2EArNYmSGAO_MAuVKQYLEin3VQ.roa (raw, json) Hash identifier: 6a4iBddeW6CKfx0ONth9KlT463bkCWZO8GQniF/h10M= Subject key identifier: 9F:61:00:AC:D6:26:48:60:0E:FC:C0:2E:54:A4:18:2C:48:A7:DD:54 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B34FFB230E747E963BEB09A5A1CAE51F4 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n2EArNYmSGAO_MAuVKQYLEin3VQ.roa Signing time: Fri 19 Dec 2025 05:05:31 +0000 ROA not before: Fri 19 Dec 2025 05:05:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197071 IP address blocks: 5.83.135.0/24 maxlen: 24 5.175.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:ff:b2:30:e7:47:e9:63:be:b0:9a:5a:1c:ae:51:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 19 05:05:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f6100acd62648600efcc02e54a4182c48a7dd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:61:94:04:1c:7c:d5:a9:3c:13:18:15:5d: 9a:53:92:40:e9:fb:a4:e1:a3:4a:cc:26:34:db:d0: ab:07:aa:d8:e8:e7:dc:e6:44:35:cf:f6:ae:34:b6: d9:ba:48:4b:2a:8d:97:6d:48:ca:da:9c:29:5c:e7: dd:01:64:cc:06:f7:ec:7e:f0:4b:5b:a2:4d:7f:43: d3:d8:44:2f:0e:49:9c:f4:a0:b2:33:6a:7a:0b:64: 89:3b:0a:c7:e4:31:02:f3:01:1e:aa:a9:c6:af:a6: ed:fb:1b:e3:e7:ac:6e:61:df:76:2f:01:a1:9b:ec: cc:fd:7d:10:e0:f7:27:47:78:eb:35:6c:f5:0a:07: 89:3b:7a:ed:74:41:07:30:cc:9f:24:56:cc:41:94: 5b:d7:1f:92:a6:74:56:f8:9a:dc:8f:d2:61:13:79: 90:7c:8b:26:dc:24:75:90:b0:cc:e2:dd:c2:51:bc: 2d:09:f0:14:f0:c9:d6:08:94:4a:f7:a8:7d:8e:83: bd:f6:26:02:e2:f1:9e:75:2a:45:eb:12:98:e3:d3: a4:07:a7:fc:19:53:ff:1a:7f:b2:14:31:16:a5:4b: 5a:4a:6e:56:1a:00:52:f6:29:d7:d0:cf:35:6e:03: f5:f9:c9:87:dc:76:5b:7d:a7:1b:ba:96:d0:84:2b: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:61:00:AC:D6:26:48:60:0E:FC:C0:2E:54:A4:18:2C:48:A7:DD:54 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n2EArNYmSGAO_MAuVKQYLEin3VQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.135.0/24 5.175.206.0/24 Signature Algorithm: sha256WithRSAEncryption 16:7d:fd:83:22:14:9e:07:55:56:07:04:dc:29:a7:f9:e1:b6: f4:79:a4:0c:b3:e0:f0:37:7a:2b:6a:8d:ec:6c:99:bb:a9:91: 31:7c:87:6d:0b:eb:7b:65:56:f9:60:df:f7:33:c1:ca:88:e4: 75:e3:2e:99:b2:28:3f:ea:d4:23:ba:a8:c2:39:5e:6f:bc:6e: 10:84:cd:33:15:c0:66:af:23:24:a6:1b:9a:ac:51:3d:a8:11: aa:e7:f3:c8:ca:21:16:e3:53:25:fa:33:d3:a0:e0:51:b3:55: 0c:a3:f7:56:d0:67:e3:9b:66:a7:c4:a5:70:97:96:b7:27:c6: cb:74:a4:bb:4a:70:9b:03:ff:4a:4c:e8:cd:5f:35:29:d1:9d: 27:01:d9:69:97:83:d6:a1:57:01:4f:59:e4:c1:4c:86:63:1c: 45:aa:9c:9b:90:a6:1f:16:7b:b9:13:a4:7a:16:3e:1d:ea:75: b5:81:59:9d:aa:10:1d:2a:6f:7b:3f:ec:c7:6f:a8:ae:d5:48: f6:27:bc:29:50:94:55:1c:4a:f2:43:f2:b9:36:6e:89:1f:d8: 74:bc:cd:5c:51:cd:39:de:70:f4:88:16:ea:ab:4f:ae:bd:6e: c7:22:54:25:d8:74:98:59:e3:45:b0:16:24:e9:18:d7:c7:f1: dd:d3:7c:fd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZs0/7Iw50fpY76wmlocrlH0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE5MDUwNTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjYxMDBhY2Q2MjY0ODYwMGVmY2MwMmU1NGE0MTgyYzQ4YTdkZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRlhlAQcfNWpPBMYFV2aU5JA6fuk 4aNKzCY029CrB6rY6Ofc5kQ1z/auNLbZukhLKo2XbUjK2pwpXOfdAWTMBvfsfvBL W6JNf0PT2EQvDkmc9KCyM2p6C2SJOwrH5DEC8wEeqqnGr6bt+xvj56xuYd92LwGh m+zM/X0Q4PcnR3jrNWz1CgeJO3rtdEEHMMyfJFbMQZRb1x+SpnRW+Jrcj9JhE3mQ fIsm3CR1kLDM4t3CUbwtCfAU8MnWCJRK96h9joO99iYC4vGedSpF6xKY49OkB6f8 GVP/Gn+yFDEWpUtaSm5WGgBS9inX0M81bgP1+cmH3HZbfacbupbQhCt70QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ9hAKzWJkhgDvzALlSkGCxIp91UMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvbjJFQXJOWW1TR0FPX01BdVZLUVlMRWluM1ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOHAwQA Ba/OMA0GCSqGSIb3DQEBCwUAA4IBAQAWff2DIhSeB1VWBwTcKaf54bb0eaQMs+Dw N3orao3sbJm7qZExfIdtC+t7ZVb5YN/3M8HKiOR14y6Zsig/6tQjuqjCOV5vvG4Q hM0zFcBmryMkphuarFE9qBGq5/PIyiEW41Ml+jPToOBRs1UMo/dW0Gfjm2anxKVw l5a3J8bLdKS7SnCbA/9KTOjNXzUp0Z0nAdlpl4PWoVcBT1nkwUyGYxxFqpybkKYf Fnu5E6R6Fj4d6nW1gVmdqhAdKm97P+zHb6iu1Uj2J7wpUJRVHEryQ/K5Nm6JH9h0 vM1cUc053nD0iBbqq0+uvW7HIlQl2HSYWeNFsBYk6RjXx/Hd03z9 -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:19 2025 by rpki-client