This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/se_9OaTFi4UxK5RnHktI4RfgdeM.roa File: se_9OaTFi4UxK5RnHktI4RfgdeM.roa (raw, json) Hash identifier: AL2CSR7Wm9JffSlWKIBkOUPVOnEq9pg4XnSbCWEuvus= Subject key identifier: B1:EF:FD:39:A4:C5:8B:85:31:2B:94:67:1E:4B:48:E1:17:E0:75:E3 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B37E2852990F151235D68533360C965C4 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/se_9OaTFi4UxK5RnHktI4RfgdeM.roa Signing time: Fri 19 Dec 2025 18:32:30 +0000 ROA not before: Fri 19 Dec 2025 18:32:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44592 IP address blocks: 5.175.224.0/24 maxlen: 24 77.90.17.0/24 maxlen: 24 2a02:2fc0:1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:e2:85:29:90:f1:51:23:5d:68:53:33:60:c9:65:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 19 18:32:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b1effd39a4c58b85312b94671e4b48e117e075e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:32:d1:48:04:36:98:49:7c:26:01:5a:81: a6:93:56:c7:d5:29:91:2a:b1:c4:57:4c:b4:18:ce: 91:a7:f3:c8:90:2f:48:33:73:8b:5f:1a:c5:43:b0: c3:90:7e:4d:76:a6:71:0b:c9:cd:32:d1:01:7b:dc: 59:33:bc:22:e1:49:bb:74:61:33:bf:a3:9c:ad:bf: a9:96:b8:c0:86:ab:d5:09:c6:37:e4:be:56:af:9a: d7:b7:5d:87:43:62:ed:a3:e4:7d:62:06:f7:c0:70: 06:ca:56:d7:9f:41:b0:77:3b:cc:ec:92:51:b2:69: 45:a8:d0:e8:8c:48:ef:d5:4f:25:04:72:ee:21:9c: 6b:b0:88:20:3f:5f:9c:ef:6f:c2:a2:0b:31:02:9b: ae:38:30:40:81:62:ca:42:ac:19:38:16:de:62:b6: a6:f0:0a:17:a8:13:94:53:08:b6:16:e5:97:fa:cf: eb:24:1b:5e:a3:a9:47:a8:5f:5a:b7:76:12:79:5c: 3d:5b:8f:89:32:d9:68:82:34:ca:e3:03:c5:6a:34: 9d:9d:96:9b:03:cb:21:39:a5:c4:9e:03:d3:ec:d1: a4:f6:49:33:b0:d8:e5:8e:d2:fc:e7:f3:20:41:1d: a5:1d:e3:d3:a4:a1:2b:f5:06:b1:40:26:72:b1:10: 92:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EF:FD:39:A4:C5:8B:85:31:2B:94:67:1E:4B:48:E1:17:E0:75:E3 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/se_9OaTFi4UxK5RnHktI4RfgdeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.224.0/24 77.90.17.0/24 IPv6: 2a02:2fc0:1a::/48 Signature Algorithm: sha256WithRSAEncryption 40:a4:f0:87:64:20:29:c1:0d:ca:36:f4:e4:38:39:5b:6b:03: 95:77:a6:a7:6b:a1:d8:2f:34:6d:8b:00:82:22:0c:00:c7:72: 0b:ec:14:fd:d4:ca:fb:7f:c4:a9:34:ac:83:af:69:47:c5:77: ca:f1:70:f0:bc:80:a0:6c:d8:6f:eb:cf:3a:b5:c8:0e:e4:ae: 37:c3:c0:7b:6f:ce:93:76:90:1c:1a:d6:48:58:2f:75:7f:23: bc:03:8c:15:68:c0:32:b6:0c:b2:89:8c:6d:9f:f5:35:2e:3c: 4a:b7:84:2e:a6:f9:c1:ca:76:7f:ee:4d:b2:3e:45:73:24:66: 3e:d3:13:3c:28:3e:9f:d2:75:1a:48:a7:05:9f:11:06:c3:c8: 35:58:a9:1d:96:bc:c6:77:f6:26:e2:ea:13:71:20:c3:71:06: fc:98:0b:21:8d:17:9d:77:75:2d:ca:ec:43:a2:d2:c2:92:29: cc:c1:1e:35:52:37:da:f3:04:45:fe:29:0c:93:5d:80:c2:bd: b9:0a:6b:56:09:b8:92:92:a9:89:19:b0:ce:31:1e:3a:fa:09: af:85:79:4a:c4:98:7f:9b:86:e9:2c:4c:a7:d2:54:82:d2:b6: 9e:1e:ed:4d:4a:d9:bd:8d:2a:29:2c:f8:b7:24:99:bc:54:5c: 5d:23:3e:c3 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZs34oUpkPFRI11oUzNgyWXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE5MTgzMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWVmZmQzOWE0YzU4Yjg1MzEyYjk0NjcxZTRiNDhlMTE3ZTA3NWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWIy0UgENphJfCYBWoGmk1bH1SmR KrHEV0y0GM6Rp/PIkC9IM3OLXxrFQ7DDkH5NdqZxC8nNMtEBe9xZM7wi4Um7dGEz v6Ocrb+plrjAhqvVCcY35L5Wr5rXt12HQ2Lto+R9Ygb3wHAGylbXn0GwdzvM7JJR smlFqNDojEjv1U8lBHLuIZxrsIggP1+c72/CogsxApuuODBAgWLKQqwZOBbeYram 8AoXqBOUUwi2FuWX+s/rJBteo6lHqF9at3YSeVw9W4+JMtlogjTK4wPFajSdnZab A8shOaXEngPT7NGk9kkzsNjljtL85/MgQR2lHePTpKEr9QaxQCZysRCSdQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFLHv/TmkxYuFMSuUZx5LSOEX4HXjMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvc2VfOU9hVEZpNFV4SzVSbkhrdEk0UmZnZGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQABa/gAwQA TVoRMA8EAgACMAkDBwAqAi/AABowDQYJKoZIhvcNAQELBQADggEBAECk8IdkICnB Dco29OQ4OVtrA5V3pqdrodgvNG2LAIIiDADHcgvsFP3Uyvt/xKk0rIOvaUfFd8rx cPC8gKBs2G/rzzq1yA7krjfDwHtvzpN2kBwa1khYL3V/I7wDjBVowDK2DLKJjG2f 9TUuPEq3hC6m+cHKdn/uTbI+RXMkZj7TEzwoPp/SdRpIpwWfEQbDyDVYqR2WvMZ3 9ibi6hNxIMNxBvyYCyGNF513dS3K7EOi0sKSKczBHjVSN9rzBEX+KQyTXYDCvbkK a1YJuJKSqYkZsM4xHjr6Ca+FeUrEmH+bhuksTKfSVILStp4e7U1K2b2NKiks+Lck mbxUXF0jPsM= -----END CERTIFICATE-----Generated at Sat Dec 20 12:46:44 2025 by rpki-client