This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/I5zS6NO1vcxwRiLRh_zI7ttMk5U.roa File: I5zS6NO1vcxwRiLRh_zI7ttMk5U.roa (raw, json) Hash identifier: xuUoMipPmMfaXHW4rxnUPo8LYQOAdJoSyVxMAfFFHFI= Subject key identifier: 23:9C:D2:E8:D3:B5:BD:CC:70:46:22:D1:87:FC:C8:EE:DB:4C:93:95 Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Certificate serial: 019B32B790E99CDD6E00066347C9EB50E616 Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/I5zS6NO1vcxwRiLRh_zI7ttMk5U.roa Signing time: Thu 18 Dec 2025 18:27:29 +0000 ROA not before: Thu 18 Dec 2025 18:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 62.182.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:b7:90:e9:9c:dd:6e:00:06:63:47:c9:eb:50:e6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Validity Not Before: Dec 18 18:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=239cd2e8d3b5bdcc704622d187fcc8eedb4c9395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:77:0c:12:44:83:4d:e6:f5:b7:3c:70:36:84: a5:03:25:b5:c2:ad:24:44:e2:5f:d5:8a:c1:72:e5: be:4f:d7:d9:bc:d4:83:58:52:d3:a7:67:4e:88:57: d5:41:75:71:7c:b1:ed:af:ed:ee:13:21:ef:22:71: 61:38:36:1f:ea:28:23:16:85:18:4e:71:53:86:a9: 17:31:b3:71:48:c4:6f:23:4a:92:25:38:07:b3:78: 90:d5:ce:39:2b:13:d8:8b:f2:8b:74:93:a9:29:54: 85:a2:bb:f8:a9:22:aa:f0:e2:3e:d0:b1:dc:44:dc: 90:54:a9:47:b4:c4:39:da:78:d8:fe:69:e3:e6:da: bf:2f:36:18:29:21:87:05:d3:b4:d6:7d:e0:bb:d4: f1:c4:89:e3:f3:31:22:78:b1:d0:21:35:c1:53:30: 71:f5:d7:8b:f4:c1:5a:b8:6d:96:4e:a3:69:d7:59: cb:96:ea:cc:ec:17:96:f0:d7:b7:61:97:e2:b7:e3: 79:24:89:7c:99:25:01:10:cf:42:96:c3:6a:6a:04: ee:a5:9b:47:ac:56:6e:3d:a5:87:fc:07:28:d9:a0: 41:34:44:e2:4f:65:af:f4:bb:33:d7:5a:00:96:df: f4:e6:d1:c5:3b:a9:f4:e5:95:8e:0c:b8:26:7c:e6: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9C:D2:E8:D3:B5:BD:CC:70:46:22:D1:87:FC:C8:EE:DB:4C:93:95 X509v3 Authority Key Identifier: keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/I5zS6NO1vcxwRiLRh_zI7ttMk5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.187.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:a0:71:8d:88:51:b4:f0:e9:95:5b:2d:4b:64:86:c5:5b:25: 6e:59:76:2b:eb:de:05:ee:3b:90:62:85:30:ac:91:87:19:e9: f0:3b:90:7f:e1:74:66:1c:9d:a1:c9:eb:dc:74:4e:a9:cb:61: 17:97:b2:5b:ad:1f:a2:f1:f5:b5:04:b0:0f:1f:b1:4d:69:b0: 96:f8:9a:21:ee:10:21:a1:3e:b6:b7:00:08:0d:9d:b6:b1:0f: 0e:82:56:08:27:89:0d:f7:5e:00:e4:3f:4c:36:bd:84:ef:3e: 33:9c:16:68:b0:63:fe:f0:5b:33:a8:df:d8:78:01:0b:6f:e8: 64:e6:79:e6:24:50:92:5c:59:92:1a:75:cf:e2:61:e8:72:af: 14:16:52:38:56:11:8d:83:6c:e6:f7:17:c7:eb:fe:e5:60:1f: 73:50:3a:29:e2:b8:c7:9b:57:5d:78:da:36:cb:70:8e:fe:cd: ed:c2:c0:59:48:74:4b:9b:64:e4:93:4a:30:a8:e3:1d:8e:09: c5:97:da:12:2c:6f:f7:f8:9a:20:ff:9b:e2:ec:22:9c:c0:52: 07:aa:66:10:e6:e6:56:00:a2:23:98:ae:80:df:e9:e8:08:d0: 61:c6:61:f0:5a:32:91:a6:7d:82:f3:cc:66:04:e6:ae:da:a2: e6:0e:06:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsyt5DpnN1uAAZjR8nrUOYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk YjliODkwHhcNMjUxMjE4MTgyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzljZDJlOGQzYjViZGNjNzA0NjIyZDE4N2ZjYzhlZWRiNGM5Mzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33cMEkSDTeb1tzxwNoSlAyW1wq0k ROJf1YrBcuW+T9fZvNSDWFLTp2dOiFfVQXVxfLHtr+3uEyHvInFhODYf6igjFoUY TnFThqkXMbNxSMRvI0qSJTgHs3iQ1c45KxPYi/KLdJOpKVSForv4qSKq8OI+0LHc RNyQVKlHtMQ52njY/mnj5tq/LzYYKSGHBdO01n3gu9TxxInj8zEieLHQITXBUzBx 9deL9MFauG2WTqNp11nLlurM7BeW8Ne3YZfit+N5JIl8mSUBEM9ClsNqagTupZtH rFZuPaWH/Aco2aBBNETiT2Wv9Lsz11oAlt/05tHFO6n05ZWODLgmfObNowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCOc0ujTtb3McEYi0Yf8yO7bTJOVMB8GA1UdIwQY MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt NzBjMjI4ZWU5Yzk1LzEvSTV6UzZOTzF2Y3h3UmlMUmhfekk3dHRNazVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1 LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPra7MA0G CSqGSIb3DQEBCwUAA4IBAQCPoHGNiFG08OmVWy1LZIbFWyVuWXYr694F7juQYoUw rJGHGenwO5B/4XRmHJ2hyevcdE6py2EXl7JbrR+i8fW1BLAPH7FNabCW+Joh7hAh oT62twAIDZ22sQ8OglYIJ4kN914A5D9MNr2E7z4znBZosGP+8FszqN/YeAELb+hk 5nnmJFCSXFmSGnXP4mHocq8UFlI4VhGNg2zm9xfH6/7lYB9zUDop4rjHm1ddeNo2 y3CO/s3twsBZSHRLm2Tkk0owqOMdjgnFl9oSLG/3+Jog/5vi7CKcwFIHqmYQ5uZW AKIjmK6A3+noCNBhxmHwWjKRpn2C88xmBOau2qLmDgar -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:32 2025 by rpki-client