This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qMNDA-SN9q7RsMcAEzn_uyIiiTM.roa File: qMNDA-SN9q7RsMcAEzn_uyIiiTM.roa (raw, json) Hash identifier: 4fAzsLWsE8ca8OF5EARXzwhZblW+YRc0Kb9ltvxnHhc= Subject key identifier: A8:C3:43:03:E4:8D:F6:AE:D1:B0:C7:00:13:39:FF:BB:22:22:89:33 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B3A26F7B36121501B22A7C9130EBD4D5E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qMNDA-SN9q7RsMcAEzn_uyIiiTM.roa Signing time: Sat 20 Dec 2025 05:06:30 +0000 ROA not before: Sat 20 Dec 2025 05:06:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48314 IP address blocks: 5.175.233.0/24 maxlen: 24 77.90.2.0/24 maxlen: 24 77.90.8.0/24 maxlen: 24 77.90.13.0/24 maxlen: 24 77.90.18.0/24 maxlen: 24 77.90.51.0/24 maxlen: 24 94.249.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:26:f7:b3:61:21:50:1b:22:a7:c9:13:0e:bd:4d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 20 05:06:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a8c34303e48df6aed1b0c7001339ffbb22228933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:fa:82:7f:45:d5:4c:79:b6:e4:8b:9d:c4: 22:83:c5:a8:5b:0c:6c:ae:01:83:be:f0:53:ad:6e: 5c:fc:d4:12:42:ca:42:5b:56:9b:c5:e2:38:28:e5: 94:17:e0:62:8c:02:b3:d9:ae:0f:b0:1a:b0:f8:80: 9d:8c:71:3e:c0:07:88:b9:aa:6e:79:7d:5b:52:83: 02:54:34:93:c0:5e:26:c8:07:b7:98:46:cb:9e:7e: 59:ec:d5:03:ff:84:a6:5c:f5:e7:8b:8a:67:96:45: 49:61:c1:ed:92:c8:42:4f:0d:21:ee:8f:6e:7b:26: 6b:9f:05:eb:b9:f5:11:15:d0:03:8b:2a:83:a1:d7: d0:05:79:7a:e1:9b:ba:ec:b5:65:0f:b3:ed:41:ab: 12:3f:94:a6:32:0c:fa:15:c8:eb:f9:20:00:fb:2d: 04:dc:c8:56:b9:69:ed:ad:81:a1:80:50:5f:1e:18: 6f:fd:62:57:ce:33:0e:9e:e4:f9:46:5f:d1:81:80: 86:2b:10:5c:bf:7d:cf:3b:12:07:a1:2d:91:b2:f4: 7e:d6:cf:72:d2:e7:d2:1f:96:f5:0d:3a:9f:d1:56: 56:be:d7:ca:06:47:9f:f4:a0:65:6b:40:b3:4b:d8: 8e:b4:d6:9a:71:b7:19:07:bf:ab:0d:42:76:c3:3c: ec:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C3:43:03:E4:8D:F6:AE:D1:B0:C7:00:13:39:FF:BB:22:22:89:33 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qMNDA-SN9q7RsMcAEzn_uyIiiTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.233.0/24 77.90.2.0/24 77.90.8.0/24 77.90.13.0/24 77.90.18.0/24 77.90.51.0/24 94.249.193.0/24 Signature Algorithm: sha256WithRSAEncryption c6:9e:4c:20:c7:57:aa:8d:8c:c7:a6:ee:f9:18:86:6d:0f:0e: ca:0f:83:eb:29:b2:c8:7d:8a:f3:71:5c:56:c0:c1:27:ff:a7: e3:c4:00:71:e7:42:5e:ba:93:83:62:13:df:7c:df:dd:e2:d4: 1c:e3:65:09:00:dc:86:2b:ff:2a:c5:0d:ad:d1:aa:af:c5:2d: e9:10:22:98:98:3f:94:60:af:34:06:3b:67:43:d2:16:c1:78: bf:79:21:b0:71:25:b7:79:a6:6b:a5:a3:7e:24:db:46:02:e8: 4a:c7:27:f9:73:7a:f6:2c:55:64:e4:cc:2d:36:84:99:c7:4f: 2b:03:10:e2:5c:37:3b:10:7f:b1:0d:7d:2f:d4:72:a0:aa:f0: cc:b7:23:b6:1d:03:22:40:22:e8:4d:18:ea:77:81:03:1c:0d: 6b:ad:ee:e1:01:5c:5a:91:1e:56:a6:79:67:51:ce:45:84:4a: 18:4a:19:2e:83:13:d6:67:2a:e5:67:82:d8:33:03:f1:12:d3: 91:27:65:cd:65:d3:6c:58:3c:1f:09:78:cf:6d:53:fd:af:aa: fc:8f:3b:d4:49:67:2a:92:12:db:d6:69:1e:f7:0a:50:94:cc: eb:55:5b:43:bc:08:c1:e8:52:8c:94:51:60:e0:1b:e1:b6:d6: d3:01:d6:26 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZs6JvezYSFQGyKnyRMOvU1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjIwMDUwNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGMzNDMwM2U0OGRmNmFlZDFiMGM3MDAxMzM5ZmZiYjIyMjI4OTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSz6gn9F1Ux5tuSLncQig8WoWwxs rgGDvvBTrW5c/NQSQspCW1abxeI4KOWUF+BijAKz2a4PsBqw+ICdjHE+wAeIuapu eX1bUoMCVDSTwF4myAe3mEbLnn5Z7NUD/4SmXPXni4pnlkVJYcHtkshCTw0h7o9u eyZrnwXrufURFdADiyqDodfQBXl64Zu67LVlD7PtQasSP5SmMgz6Fcjr+SAA+y0E 3MhWuWntrYGhgFBfHhhv/WJXzjMOnuT5Rl/RgYCGKxBcv33POxIHoS2RsvR+1s9y 0ufSH5b1DTqf0VZWvtfKBkef9KBla0CzS9iOtNaacbcZB7+rDUJ2wzzsoQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFKjDQwPkjfau0bDHABM5/7siIokzMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvcU1OREEtU045cTdSc01jQUV6bl91eUlpaVRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQABa/pAwQA TVoCAwQATVoIAwQATVoNAwQATVoSAwQATVozAwQAXvnBMA0GCSqGSIb3DQEBCwUA A4IBAQDGnkwgx1eqjYzHpu75GIZtDw7KD4PrKbLIfYrzcVxWwMEn/6fjxABx50Je upODYhPffN/d4tQc42UJANyGK/8qxQ2t0aqvxS3pECKYmD+UYK80BjtnQ9IWwXi/ eSGwcSW3eaZrpaN+JNtGAuhKxyf5c3r2LFVk5MwtNoSZx08rAxDiXDc7EH+xDX0v 1HKgqvDMtyO2HQMiQCLoTRjqd4EDHA1rre7hAVxakR5WpnlnUc5FhEoYShkugxPW ZyrlZ4LYMwPxEtORJ2XNZdNsWDwfCXjPbVP9r6r8jzvUSWcqkhLb1mke9wpQlMzr VVtDvAjB6FKMlFFg4BvhttbTAdYm -----END CERTIFICATE-----Generated at Sat Dec 20 14:06:26 2025 by rpki-client