This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v0mNcET8CTVmARJ-wbdUsh_LRnA.roa File: v0mNcET8CTVmARJ-wbdUsh_LRnA.roa (raw, json) Hash identifier: kEW7Kpqr+Bxp+eOg38V+dpvWz8CEu9c44LmbUHGBvJQ= Subject key identifier: BF:49:8D:70:44:FC:09:35:66:01:12:7E:C1:B7:54:B2:1F:CB:46:70 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B2E560F4A454757AEB1D5CB4A661C8CA8 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v0mNcET8CTVmARJ-wbdUsh_LRnA.roa Signing time: Wed 17 Dec 2025 22:02:30 +0000 ROA not before: Wed 17 Dec 2025 22:02:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215039 IP address blocks: 5.175.187.0/24 maxlen: 24 77.90.5.0/24 maxlen: 24 77.90.14.0/24 maxlen: 24 77.90.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:56:0f:4a:45:47:57:ae:b1:d5:cb:4a:66:1c:8c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 17 22:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bf498d7044fc09356601127ec1b754b21fcb4670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:04:85:b4:01:2e:9c:a7:7e:3a:2d:19:a3: e1:c9:3b:84:62:e7:24:79:84:0f:4d:f0:f0:fe:26: 23:ee:c6:f8:d8:2c:fd:cc:1a:36:a1:99:ca:31:07: 9d:f1:dd:c0:bc:6c:c7:87:25:a5:15:a7:90:fe:56: 73:80:bf:9c:a6:7c:db:14:a7:61:2d:e7:b8:7d:66: d0:9f:36:6c:0c:b9:0a:b8:fc:9e:12:a1:aa:66:af: 15:cd:c0:aa:32:58:e8:9c:93:3e:c5:71:98:89:11: 78:51:d4:49:a8:5a:a6:18:9e:2f:34:cc:cd:13:1d: b1:34:18:4b:07:71:fb:11:9e:ad:fa:a9:91:08:f7: 86:96:0a:88:47:75:33:1e:54:0b:bd:a3:00:5b:24: 6d:a7:af:42:20:4e:d6:63:e1:15:4e:32:af:f1:5b: 44:6c:ab:49:13:90:13:56:0c:ea:1f:27:37:7c:bc: 96:60:55:eb:79:96:ed:d6:76:e8:2d:92:06:0c:bb: 91:9e:3c:93:17:7f:a0:c5:91:be:6c:81:6c:a4:71: c3:cb:07:35:36:11:7f:20:04:5f:3e:81:48:2e:f8: e2:d1:35:ff:c4:06:d6:fa:e7:87:52:02:c7:f6:e3: 24:2a:fa:cf:f4:68:1f:74:fd:45:06:d7:17:e8:ee: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:49:8D:70:44:FC:09:35:66:01:12:7E:C1:B7:54:B2:1F:CB:46:70 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v0mNcET8CTVmARJ-wbdUsh_LRnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.187.0/24 77.90.5.0/24 77.90.14.0/24 77.90.53.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:94:56:97:46:3f:b5:0b:f5:6a:4b:20:d2:1d:9e:09:d8:31: cf:f9:ca:01:07:8f:73:47:72:a3:a3:ff:40:c6:d9:f5:4a:80: 75:13:74:f2:ec:70:5f:4b:57:e3:96:55:0b:55:0f:79:eb:39: 01:14:ed:64:7a:53:59:27:9c:a2:63:0b:9a:93:d0:1a:21:6b: c3:bf:65:44:cb:ae:c0:0f:7e:e3:04:0e:45:68:de:63:a9:d8: f4:1a:11:71:a1:52:d4:1c:68:0c:14:1e:8e:18:3c:fc:cc:85: 19:e4:83:ea:59:95:d9:67:56:74:2a:ba:8e:99:a7:83:b2:d4: 7e:9e:44:f6:23:72:6a:09:58:7d:9a:d0:b0:e6:a6:e0:c6:20: af:71:4d:60:15:d9:3d:70:bd:b8:94:4c:51:d3:d3:63:16:ab: a6:d6:8d:fa:8e:82:d9:b3:f8:90:b5:2e:64:f9:87:5c:08:b5: 46:3e:c4:fb:84:ec:77:b8:9b:4c:70:00:77:53:b0:ce:cb:5c: b3:20:ab:77:46:a6:28:17:ea:69:61:f6:76:60:cd:cb:48:15: de:fa:81:c0:c4:4d:93:fe:2c:ac:a5:55:97:88:49:d2:23:d1: 31:1b:88:45:d8:17:23:39:0e:0e:23:ea:bf:4a:14:53:1e:ba: 1b:72:25:22 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsuVg9KRUdXrrHVy0pmHIyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE3MjIwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjQ5OGQ3MDQ0ZmMwOTM1NjYwMTEyN2VjMWI3NTRiMjFmY2I0NjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBsEhbQBLpynfjotGaPhyTuEYuck eYQPTfDw/iYj7sb42Cz9zBo2oZnKMQed8d3AvGzHhyWlFaeQ/lZzgL+cpnzbFKdh Lee4fWbQnzZsDLkKuPyeEqGqZq8VzcCqMljonJM+xXGYiRF4UdRJqFqmGJ4vNMzN Ex2xNBhLB3H7EZ6t+qmRCPeGlgqIR3UzHlQLvaMAWyRtp69CIE7WY+EVTjKv8VtE bKtJE5ATVgzqHyc3fLyWYFXreZbt1nboLZIGDLuRnjyTF3+gxZG+bIFspHHDywc1 NhF/IARfPoFILvji0TX/xAbW+ueHUgLH9uMkKvrP9GgfdP1FBtcX6O5GpwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFL9JjXBE/Ak1ZgESfsG3VLIfy0ZwMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvdjBtTmNFVDhDVFZtQVJKLXdiZFVzaF9MUm5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABa+7AwQA TVoFAwQATVoOAwQATVo1MA0GCSqGSIb3DQEBCwUAA4IBAQAOlFaXRj+1C/VqSyDS HZ4J2DHP+coBB49zR3Kjo/9Axtn1SoB1E3Ty7HBfS1fjllULVQ956zkBFO1kelNZ J5yiYwuak9AaIWvDv2VEy67AD37jBA5FaN5jqdj0GhFxoVLUHGgMFB6OGDz8zIUZ 5IPqWZXZZ1Z0KrqOmaeDstR+nkT2I3JqCVh9mtCw5qbgxiCvcU1gFdk9cL24lExR 09NjFqum1o36joLZs/iQtS5k+YdcCLVGPsT7hOx3uJtMcAB3U7DOy1yzIKt3RqYo F+ppYfZ2YM3LSBXe+oHAxE2T/iyspVWXiEnSI9ExG4hF2BcjOQ4OI+q/ShRTHrob ciUi -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:22 2025 by rpki-client