This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M7jE4Q2pLhxj7hShGgn3s7OsX1g.roa File: M7jE4Q2pLhxj7hShGgn3s7OsX1g.roa (raw, json) Hash identifier: AgiMnT4aR4nXFy7A9PXhvpVUJT7Xpm0EGOPVdEkn/Jc= Subject key identifier: 33:B8:C4:E1:0D:A9:2E:1C:63:EE:14:A1:1A:09:F7:B3:B3:AC:5F:58 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B1817781CE1BD40C4BC65DC8CFE30AFA8 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M7jE4Q2pLhxj7hShGgn3s7OsX1g.roa Signing time: Sat 13 Dec 2025 14:22:29 +0000 ROA not before: Sat 13 Dec 2025 14:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197450 IP address blocks: 5.180.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:17:78:1c:e1:bd:40:c4:bc:65:dc:8c:fe:30:af:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Dec 13 14:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=33b8c4e10da92e1c63ee14a11a09f7b3b3ac5f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:bc:65:a1:18:fd:b7:97:65:69:68:f1:fa: 6f:25:1b:31:e8:7f:c2:8e:a3:0c:93:1d:bf:ef:c9: 14:9d:c6:9c:d4:6f:91:91:7a:01:1a:59:ce:44:13: 75:8d:44:5f:f3:9a:a1:77:77:59:30:08:c8:fa:e5: 0d:92:9b:bb:86:f6:5c:37:0a:3b:62:fc:9b:0c:8e: 47:50:7a:52:5e:94:7f:98:84:81:f2:b6:09:09:41: 3f:73:1b:07:62:2a:43:19:9e:1a:ed:2a:ec:f2:93: 7d:ad:68:af:6f:3f:ee:55:88:42:9e:bc:8d:3f:5d: c9:80:39:85:87:bd:09:55:87:fe:8f:df:1d:65:69: 2d:56:80:55:ba:d3:c0:2a:f1:4e:7b:b5:55:3f:c5: c6:19:31:96:5c:1d:a5:d1:c3:12:19:04:83:33:9c: 77:e0:d9:bb:34:01:ee:78:9a:d1:19:1b:7a:86:0b: 8c:f7:b3:07:89:78:c9:6a:be:9b:aa:1f:bd:0b:0e: 98:31:ef:1c:17:5c:73:af:9d:99:80:27:3e:db:25: d0:49:d3:8c:3d:2b:50:dc:b3:31:15:41:ca:c6:2c: d2:c3:17:ef:2b:6e:aa:48:b0:b9:35:1a:02:9c:88: 32:d7:ef:7e:14:9d:e7:02:dd:37:c4:5b:21:70:2b: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B8:C4:E1:0D:A9:2E:1C:63:EE:14:A1:1A:09:F7:B3:B3:AC:5F:58 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M7jE4Q2pLhxj7hShGgn3s7OsX1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.104.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:e7:7a:da:83:6b:1d:66:ea:65:85:4e:3f:93:f9:14:84:c4: 47:9c:9c:29:50:9f:49:38:28:99:b4:7a:d8:a7:d5:16:7b:9d: 4f:f6:cf:ae:2b:09:2f:18:fa:5b:53:e3:83:03:d6:5d:65:16: 16:c5:75:82:08:27:95:d0:bb:2e:7a:66:d5:e1:4d:57:85:19: 19:b4:38:6c:06:92:d2:9e:af:33:e8:4c:de:d8:60:94:bf:a7: 2b:fb:78:9d:d4:6b:e2:40:fd:db:d0:64:b2:b9:ec:67:72:d4: c4:0b:6f:39:1f:9b:5f:0b:99:b8:6b:0a:f7:42:c7:a9:c4:49: b4:6a:72:2e:c9:72:00:8c:38:ca:21:1c:09:40:48:94:86:e4: ae:7c:68:5b:89:41:40:e8:e8:56:bf:47:12:24:47:72:68:43: d6:1f:0e:f2:60:f2:07:d9:f8:a8:aa:6d:05:97:b7:78:5f:2b: 27:95:7d:17:07:cb:98:c7:35:55:be:65:ca:89:d7:a6:f9:44: 71:71:61:38:d8:7e:4c:1b:20:af:17:32:65:76:f1:c8:98:e3: a0:be:fb:ed:42:b1:ec:17:77:b1:6a:ed:09:ec:eb:e2:9c:eb: 6d:f1:46:af:7b:8c:28:52:c4:4d:de:f7:14:f5:c9:66:d7:7a: 83:f7:e4:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsYF3gc4b1AxLxl3Iz+MK+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMjEzMTQyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2I4YzRlMTBkYTkyZTFjNjNlZTE0YTExYTA5ZjdiM2IzYWM1ZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJu8ZaEY/beXZWlo8fpvJRsx6H/C jqMMkx2/78kUncac1G+RkXoBGlnORBN1jURf85qhd3dZMAjI+uUNkpu7hvZcNwo7 YvybDI5HUHpSXpR/mISB8rYJCUE/cxsHYipDGZ4a7Srs8pN9rWivbz/uVYhCnryN P13JgDmFh70JVYf+j98dZWktVoBVutPAKvFOe7VVP8XGGTGWXB2l0cMSGQSDM5x3 4Nm7NAHueJrRGRt6hguM97MHiXjJar6bqh+9Cw6YMe8cF1xzr52ZgCc+2yXQSdOM PStQ3LMxFUHKxizSwxfvK26qSLC5NRoCnIgy1+9+FJ3nAt03xFshcCvSSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDO4xOENqS4cY+4UoRoJ97OzrF9YMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvTTdqRTRRMnBMaHhqN2hTaEdnbjNzN09zWDFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbRoMA0G CSqGSIb3DQEBCwUAA4IBAQB853rag2sdZuplhU4/k/kUhMRHnJwpUJ9JOCiZtHrY p9UWe51P9s+uKwkvGPpbU+ODA9ZdZRYWxXWCCCeV0LsuembV4U1XhRkZtDhsBpLS nq8z6Eze2GCUv6cr+3id1GviQP3b0GSyuexnctTEC285H5tfC5m4awr3QsepxEm0 anIuyXIAjDjKIRwJQEiUhuSufGhbiUFA6OhWv0cSJEdyaEPWHw7yYPIH2fioqm0F l7d4XysnlX0XB8uYxzVVvmXKidem+URxcWE42H5MGyCvFzJldvHImOOgvvvtQrHs F3exau0J7OvinOtt8Uave4woUsRN3vcU9clm13qD9+QS -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:01 2025 by rpki-client