This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rrBlmrhouq7SjktYvkDUBongTNk.roa File: rrBlmrhouq7SjktYvkDUBongTNk.roa (raw, json) Hash identifier: d4X6uO4nedgEQBoPUL7MMy7dpxTCAA2cSCUV3Q7rHbs= Subject key identifier: AE:B0:65:9A:B8:68:BA:AE:D2:8E:4B:58:BE:40:D4:06:89:E0:4C:D9 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B379CEF2A711F93632169076E4C0D9F20 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rrBlmrhouq7SjktYvkDUBongTNk.roa Signing time: Fri 19 Dec 2025 17:16:30 +0000 ROA not before: Fri 19 Dec 2025 17:16:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211066 IP address blocks: 5.83.134.0/24 maxlen: 24 5.175.140.0/24 maxlen: 24 5.175.192.0/24 maxlen: 24 5.175.221.0/24 maxlen: 24 5.175.237.0/24 maxlen: 24 85.118.162.0/24 maxlen: 24 185.47.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:9c:ef:2a:71:1f:93:63:21:69:07:6e:4c:0d:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 19 17:16:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aeb0659ab868baaed28e4b58be40d40689e04cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5a:2f:e3:76:84:5d:57:a4:62:8e:dd:d2:51: 19:b8:21:73:59:73:09:fd:72:26:45:5c:42:41:45: 73:b9:be:e7:2a:64:c8:1a:d1:b5:17:9a:bb:83:13: 18:b8:c5:bd:ca:13:c4:8e:cd:cb:30:3c:f2:1d:20: 63:62:8f:e5:13:12:aa:4e:de:0e:41:36:43:b3:97: a9:e7:ef:6c:aa:52:47:1f:68:5c:01:cb:02:40:03: bd:dd:27:29:05:70:31:70:5e:c1:f7:55:90:ce:5d: 56:e6:7d:25:e6:79:07:54:2b:10:05:b3:5c:ff:e3: 51:6b:40:87:97:b0:19:a0:8e:71:2a:8c:04:a1:f1: e0:34:76:9b:d8:21:cd:6b:2a:2b:ac:5f:bc:2c:5b: 48:db:68:24:ea:1d:6d:83:8f:0f:6c:42:a6:46:5f: fe:3c:5f:1e:56:f2:e5:d7:3d:b1:50:d4:83:be:33: 5e:79:e5:d1:95:75:7e:eb:a1:4a:64:e9:83:56:b3: 5f:d3:91:fe:bb:6d:b2:ee:cb:54:02:de:9e:d4:eb: ed:0c:3e:75:43:98:ca:b1:7b:5d:f4:2c:d9:e3:9b: fb:04:82:97:ac:3c:ef:8d:14:19:3f:83:1f:0c:b6: 44:45:9a:af:27:4d:a9:70:53:0d:ca:7f:5f:64:eb: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B0:65:9A:B8:68:BA:AE:D2:8E:4B:58:BE:40:D4:06:89:E0:4C:D9 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rrBlmrhouq7SjktYvkDUBongTNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.134.0/24 5.175.140.0/24 5.175.192.0/24 5.175.221.0/24 5.175.237.0/24 85.118.162.0/24 185.47.142.0/24 Signature Algorithm: sha256WithRSAEncryption e8:ce:59:d9:fc:6b:59:ee:27:89:6f:17:be:b6:0d:cf:4b:24: 10:32:56:aa:fb:f2:9e:5a:d5:43:30:db:5e:1f:69:06:03:1c: 22:3a:85:c9:4e:e8:bb:e8:90:b4:34:1a:c8:58:58:9f:dc:cf: 4f:d2:4b:ca:f6:fd:6d:bf:39:c5:df:a2:68:1a:59:b6:62:a9: 0e:ab:5d:2a:1d:7f:0a:57:95:50:e5:8d:9f:91:d7:2b:07:74: 06:b3:5a:40:44:de:78:e6:c5:70:48:db:f4:10:4e:1c:41:da: 02:6a:a2:7e:73:c6:00:f0:3d:2d:1b:77:e9:14:7e:02:af:6b: 29:da:84:00:0c:19:9a:4d:49:f8:b6:9f:a5:d6:85:b6:12:20: 8f:ba:ed:77:f1:5a:b0:47:0e:aa:60:38:27:50:34:80:01:7c: 1a:d1:e3:71:14:96:3e:68:f3:77:ce:0c:bf:db:31:cf:bc:7c: 8c:7f:96:16:6b:86:74:52:78:71:3d:50:8e:18:84:d4:ba:1b: 11:b3:9e:7b:8c:ac:49:e3:2a:f4:c5:50:5f:78:6d:4f:5b:16: c3:4c:00:7f:c1:9a:63:de:cb:fa:89:0e:76:05:a5:61:fa:fd: d2:49:2e:85:ea:a4:a5:ad:83:b6:fe:e0:4f:9b:8e:bd:83:c0: c3:6c:44:3c -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZs3nO8qcR+TYyFpB25MDZ8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE5MTcxNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWIwNjU5YWI4NjhiYWFlZDI4ZTRiNThiZTQwZDQwNjg5ZTA0Y2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1ov43aEXVekYo7d0lEZuCFzWXMJ /XImRVxCQUVzub7nKmTIGtG1F5q7gxMYuMW9yhPEjs3LMDzyHSBjYo/lExKqTt4O QTZDs5ep5+9sqlJHH2hcAcsCQAO93ScpBXAxcF7B91WQzl1W5n0l5nkHVCsQBbNc /+NRa0CHl7AZoI5xKowEofHgNHab2CHNayorrF+8LFtI22gk6h1tg48PbEKmRl/+ PF8eVvLl1z2xUNSDvjNeeeXRlXV+66FKZOmDVrNf05H+u22y7stUAt6e1OvtDD51 Q5jKsXtd9CzZ45v7BIKXrDzvjRQZP4MfDLZERZqvJ02pcFMNyn9fZOvmmwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFK6wZZq4aLqu0o5LWL5A1AaJ4EzZMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvcnJCbG1yaG91cTdTamt0WXZrRFVCb25nVE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQABVOGAwQA Ba+MAwQABa/AAwQABa/dAwQABa/tAwQAVXaiAwQAuS+OMA0GCSqGSIb3DQEBCwUA A4IBAQDozlnZ/GtZ7ieJbxe+tg3PSyQQMlaq+/KeWtVDMNteH2kGAxwiOoXJTui7 6JC0NBrIWFif3M9P0kvK9v1tvznF36JoGlm2YqkOq10qHX8KV5VQ5Y2fkdcrB3QG s1pARN545sVwSNv0EE4cQdoCaqJ+c8YA8D0tG3fpFH4Cr2sp2oQADBmaTUn4tp+l 1oW2EiCPuu138VqwRw6qYDgnUDSAAXwa0eNxFJY+aPN3zgy/2zHPvHyMf5YWa4Z0 UnhxPVCOGITUuhsRs557jKxJ4yr0xVBfeG1PWxbDTAB/wZpj3sv6iQ52BaVh+v3S SS6F6qSlrYO2/uBPm469g8DDbEQ8 -----END CERTIFICATE-----Generated at Fri Dec 19 20:48:43 2025 by rpki-client