This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/5CXu0UxRhwNDi1i9NLYtVH_7mdQ.roa File: 5CXu0UxRhwNDi1i9NLYtVH_7mdQ.roa (raw, json) Hash identifier: WcXKi4ED+2Y5l6i/lY2xJGAyFqasaSUW3tQSDUT3XN8= Subject key identifier: E4:25:EE:D1:4C:51:87:03:43:8B:58:BD:34:B6:2D:54:7F:FB:99:D4 Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Certificate serial: 019ADE7C6F0A20132AB716D43F58AF3CFA0A Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/5CXu0UxRhwNDi1i9NLYtVH_7mdQ.roa Signing time: Tue 02 Dec 2025 09:54:48 +0000 ROA not before: Tue 02 Dec 2025 09:54:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202364 IP address blocks: 185.119.108.0/24 maxlen: 24 185.119.109.0/24 maxlen: 24 185.119.110.0/24 maxlen: 24 185.119.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:7c:6f:0a:20:13:2a:b7:16:d4:3f:58:af:3c:fa:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Validity Not Before: Dec 2 09:54:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e425eed14c518703438b58bd34b62d547ffb99d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:f6:d0:27:d9:bd:e6:a6:8f:85:b4:7f:63: 17:e6:30:25:c5:de:7e:d4:d8:44:d9:f8:6e:4e:ae: 03:ab:88:8c:df:02:88:de:aa:41:ec:55:50:84:a0: b9:4e:dd:ec:62:1f:10:40:c6:50:22:84:fc:9d:b0: 2d:b1:03:99:a8:68:8b:e9:bb:b5:3d:57:95:7a:a0: 9b:90:3e:68:8b:5e:18:1e:c3:8e:cd:41:25:bd:87: d8:48:bb:33:3b:37:2b:b9:83:3f:8f:20:98:fa:c6: 45:40:f7:d7:d6:21:07:4a:4c:0e:05:ad:3b:5c:a9: f6:66:0e:bf:fa:cf:4c:ab:19:0d:6f:2a:28:96:72: 1c:df:ae:a0:dd:7f:4c:55:97:39:e9:1e:ab:b7:ac: 1c:1f:4e:2c:c0:56:0d:f8:0b:81:d9:63:59:f4:7b: 81:1c:8f:49:b5:2a:db:96:81:b7:69:92:e1:be:0f: 0a:5a:11:7c:37:ff:df:37:2a:c4:08:20:12:09:9a: d1:47:88:60:c2:43:98:ae:d6:bd:20:35:2f:6f:e3: 72:7f:6b:58:b0:70:75:4a:45:fc:7e:e8:1c:84:ea: 02:5d:3b:39:83:fe:8e:d0:3c:50:08:5c:58:c1:b5: ab:1e:df:79:2f:3e:f6:ed:97:b7:8e:3c:46:37:12: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:25:EE:D1:4C:51:87:03:43:8B:58:BD:34:B6:2D:54:7F:FB:99:D4 X509v3 Authority Key Identifier: keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/5CXu0UxRhwNDi1i9NLYtVH_7mdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.108.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:5a:6e:a3:de:08:5c:35:d0:45:11:30:1f:c0:ce:03:92:c4: 06:7c:ae:83:4d:e8:21:59:3c:c1:41:68:9b:84:bb:e7:23:32: 7c:ae:8e:fe:d2:42:a4:a9:2c:13:80:01:6c:e4:99:d1:ed:9f: 04:c3:56:ed:2c:aa:84:c8:55:a3:d2:9b:b6:29:9b:b9:90:1c: 39:79:61:fc:fb:20:25:ff:07:5e:bf:08:33:c3:31:6a:7e:07: 9c:b8:a1:9f:c1:cd:78:7c:d3:67:b8:3a:42:51:b9:11:75:1a: fb:d9:44:99:10:b2:4f:26:1a:3f:f3:ea:1f:4b:2f:bc:66:73: 90:3f:be:4d:38:18:c1:18:99:f9:d5:de:bf:df:ee:27:6a:73: 4e:9e:c6:48:fb:75:f9:23:79:d3:df:3f:91:09:a6:e3:7e:7f: b7:6f:0d:41:2e:7a:3b:21:68:cf:99:c0:2f:67:2c:df:99:99: 2b:67:95:2f:9b:8a:3d:28:6a:90:d9:42:53:aa:d6:b1:bc:ed: bf:48:b5:49:ad:b7:e2:4d:8c:c0:5e:7f:50:8f:8f:ed:9b:c8: 44:15:c2:c4:01:09:fd:48:c0:84:13:7a:6e:ec:92:0b:43:8e: 48:39:93:71:07:0c:af:81:03:6d:85:49:68:ff:77:af:29:20: b3:74:56:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrefG8KIBMqtxbUP1ivPPoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk ZjI3ZTkwHhcNMjUxMjAyMDk1NDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDI1ZWVkMTRjNTE4NzAzNDM4YjU4YmQzNGI2MmQ1NDdmZmI5OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydn20CfZveamj4W0f2MX5jAlxd5+ 1NhE2fhuTq4Dq4iM3wKI3qpB7FVQhKC5Tt3sYh8QQMZQIoT8nbAtsQOZqGiL6bu1 PVeVeqCbkD5oi14YHsOOzUElvYfYSLszOzcruYM/jyCY+sZFQPfX1iEHSkwOBa07 XKn2Zg6/+s9MqxkNbyoolnIc366g3X9MVZc56R6rt6wcH04swFYN+AuB2WNZ9HuB HI9JtSrbloG3aZLhvg8KWhF8N//fNyrECCASCZrRR4hgwkOYrta9IDUvb+Nyf2tY sHB1SkX8fugchOoCXTs5g/6O0DxQCFxYwbWrHt95Lz727Ze3jjxGNxLt2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQl7tFMUYcDQ4tYvTS2LVR/+5nUMB8GA1UdIwQY MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt MjNiYTRhOTFhMTA1LzEvNUNYdTBVeFJod05EaTFpOU5MWXRWSF83bWRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1 LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXdsMA0G CSqGSIb3DQEBCwUAA4IBAQB7Wm6j3ghcNdBFETAfwM4DksQGfK6DTeghWTzBQWib hLvnIzJ8ro7+0kKkqSwTgAFs5JnR7Z8Ew1btLKqEyFWj0pu2KZu5kBw5eWH8+yAl /wdevwgzwzFqfgecuKGfwc14fNNnuDpCUbkRdRr72USZELJPJho/8+ofSy+8ZnOQ P75NOBjBGJn51d6/3+4nanNOnsZI+3X5I3nT3z+RCabjfn+3bw1BLno7IWjPmcAv ZyzfmZkrZ5Uvm4o9KGqQ2UJTqtaxvO2/SLVJrbfiTYzAXn9Qj4/tm8hEFcLEAQn9 SMCEE3pu7JILQ45IOZNxBwyvgQNthUlo/3evKSCzdFY1 -----END CERTIFICATE-----Generated at Tue Dec 16 04:33:53 2025 by rpki-client