This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/j3ZfN7Z9SFof5EvqaNbKoJRFF5M.roa File: j3ZfN7Z9SFof5EvqaNbKoJRFF5M.roa (raw, json) Hash identifier: ij5cGD+hdBC6iu46+G68MBD5e09HHj1SFfP59ydKwt4= Subject key identifier: 8F:76:5F:37:B6:7D:48:5A:1F:E4:4B:EA:68:D6:CA:A0:94:45:17:93 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B27222C32D1EBA3D3D04119E01D850495 Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/j3ZfN7Z9SFof5EvqaNbKoJRFF5M.roa Signing time: Tue 16 Dec 2025 12:28:29 +0000 ROA not before: Tue 16 Dec 2025 12:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16190 IP address blocks: 5.134.86.0/23 maxlen: 24 217.113.0.0/21 maxlen: 24 217.113.0.0/22 maxlen: 22 217.113.0.0/23 maxlen: 23 217.113.2.0/23 maxlen: 23 217.113.4.0/22 maxlen: 22 217.113.4.0/23 maxlen: 23 217.113.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:22:2c:32:d1:eb:a3:d3:d0:41:19:e0:1d:85:04:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Dec 16 12:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f765f37b67d485a1fe44bea68d6caa094451793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:ae:ff:69:63:19:10:8e:26:c6:25:d3:1c: 8a:b9:8a:1d:cf:8d:9e:75:55:db:ad:b8:32:cc:8b: 14:9e:31:df:3d:21:bb:de:7f:3e:e3:1a:c2:46:18: c4:7e:55:df:79:01:da:09:fa:ce:1a:a8:5b:55:e5: 6b:8d:ad:c0:75:ad:74:1e:63:53:01:9c:83:71:41: d9:6e:44:b1:55:aa:ae:65:80:9d:e0:bd:ca:a5:27: 9b:d4:dd:95:dd:09:5b:54:f6:b5:a6:01:f3:27:61: 33:59:3e:30:c4:7e:e5:6a:d2:8b:bd:f3:02:da:d2: 6b:b1:fd:6b:70:a1:ff:c6:03:89:59:78:49:60:02: 7f:a3:2f:c7:79:82:ef:98:61:98:48:11:ff:07:90: ba:f9:04:93:f7:7a:4b:9f:14:80:47:7f:cd:be:f8: 45:09:8f:4b:5a:33:fa:48:a6:fa:ba:2f:79:c7:3a: 3c:a7:a3:62:46:26:80:23:10:ad:a7:cb:fd:89:68: 21:5e:64:dd:56:af:ac:51:3d:f0:e9:38:11:41:9a: 61:70:d4:61:61:2c:b5:bd:6c:7a:25:d4:ea:01:85: f5:a9:03:07:49:d4:76:28:a7:9e:53:96:c5:fa:94: 6d:f9:62:4e:c1:04:98:ff:a8:eb:73:36:26:1a:50: 1a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:76:5F:37:B6:7D:48:5A:1F:E4:4B:EA:68:D6:CA:A0:94:45:17:93 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/j3ZfN7Z9SFof5EvqaNbKoJRFF5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.86.0/23 217.113.0.0/21 Signature Algorithm: sha256WithRSAEncryption 77:af:5c:a7:ce:d5:16:6a:ee:0e:6d:0d:a1:3b:44:64:16:5a: 15:d2:a5:b1:16:87:68:99:36:2a:19:19:3b:7d:40:49:3d:a0: a9:fb:fb:1c:95:ab:8c:6c:e4:11:fd:7a:d5:07:f8:0d:11:bf: cd:72:89:0b:69:68:77:30:84:76:46:fe:e4:19:7e:31:00:18: 7a:8e:7f:1b:fc:5e:3f:0c:2b:73:b0:a4:69:7b:04:fe:b0:e9: 86:c0:59:03:ba:18:02:8b:0e:cf:2e:56:c0:fb:fd:32:59:81: c2:bb:8e:a7:80:28:dd:80:a3:67:80:a1:01:8d:3b:bf:89:0f: 60:57:37:77:1e:96:53:bc:d4:7d:46:40:3a:35:8e:43:c3:b8: 4b:e9:bc:63:98:ad:3a:e3:64:4a:f8:55:94:c6:31:68:5b:37: d1:00:89:9f:1c:58:eb:0e:e6:b7:c9:9e:7b:72:f6:e3:c7:7f: ef:0c:bc:fb:10:f8:a9:1f:b9:df:d3:e8:84:66:64:71:d3:79: 77:7d:91:4f:c0:81:a7:a8:04:b2:14:ce:6b:ca:85:12:55:31: 9d:d1:51:01:15:25:83:2a:d4:0c:14:a5:7d:22:9f:bb:1b:29: 23:0d:1a:93:62:a7:9a:7c:65:0e:12:22:04:46:37:4e:af:77: 3b:4d:03:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsnIiwy0euj09BBGeAdhQSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjUxMjE2MTIyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Zjc2NWYzN2I2N2Q0ODVhMWZlNDRiZWE2OGQ2Y2FhMDk0NDUxNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Gu/2ljGRCOJsYl0xyKuYodz42e dVXbrbgyzIsUnjHfPSG73n8+4xrCRhjEflXfeQHaCfrOGqhbVeVrja3Ada10HmNT AZyDcUHZbkSxVaquZYCd4L3KpSeb1N2V3QlbVPa1pgHzJ2EzWT4wxH7latKLvfMC 2tJrsf1rcKH/xgOJWXhJYAJ/oy/HeYLvmGGYSBH/B5C6+QST93pLnxSAR3/NvvhF CY9LWjP6SKb6ui95xzo8p6NiRiaAIxCtp8v9iWghXmTdVq+sUT3w6TgRQZphcNRh YSy1vWx6JdTqAYX1qQMHSdR2KKeeU5bF+pRt+WJOwQSY/6jrczYmGlAaGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI92Xze2fUhaH+RL6mjWyqCURReTMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvajNaZk43WjlTRm9mNUV2cWFOYktvSlJGRjVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBYZWAwQD 2XEAMA0GCSqGSIb3DQEBCwUAA4IBAQB3r1ynztUWau4ObQ2hO0RkFloV0qWxFodo mTYqGRk7fUBJPaCp+/sclauMbOQR/XrVB/gNEb/NcokLaWh3MIR2Rv7kGX4xABh6 jn8b/F4/DCtzsKRpewT+sOmGwFkDuhgCiw7PLlbA+/0yWYHCu46ngCjdgKNngKEB jTu/iQ9gVzd3HpZTvNR9RkA6NY5Dw7hL6bxjmK0642RK+FWUxjFoWzfRAImfHFjr Dua3yZ57cvbjx3/vDLz7EPipH7nf0+iEZmRx03l3fZFPwIGnqASyFM5ryoUSVTGd 0VEBFSWDKtQMFKV9Ip+7GykjDRqTYqeafGUOEiIERjdOr3c7TQNX -----END CERTIFICATE-----Generated at Sat Dec 20 15:52:51 2025 by rpki-client