This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0Qg8-tUT7Gek4lgVKadqEwbQ97c.roa File: 0Qg8-tUT7Gek4lgVKadqEwbQ97c.roa (raw, json) Hash identifier: Iur0o/qgDigxabGCsZMN0C2ctj1hRFOlgvpRO3wI9JE= Subject key identifier: D1:08:3C:FA:D5:13:EC:67:A4:E2:58:15:29:A7:6A:13:06:D0:F7:B7 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BBAFBC1023F76522882E22A7366AE765A Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0Qg8-tUT7Gek4lgVKadqEwbQ97c.roa Signing time: Wed 14 Jan 2026 05:30:19 +0000 ROA not before: Wed 14 Jan 2026 05:30:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213449 IP address blocks: 5.175.170.0/24 maxlen: 24 5.175.217.0/24 maxlen: 24 89.106.95.0/24 maxlen: 24 89.144.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ba:fb:c1:02:3f:76:52:28:82:e2:2a:73:66:ae:76:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 14 05:30:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1083cfad513ec67a4e2581529a76a1306d0f7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:16:6c:31:1e:58:1c:b9:08:dd:45:ef:6b: 65:5b:49:7c:42:80:08:a5:6e:e0:69:a9:0f:fc:5d: 08:7b:e9:ac:b9:d7:91:11:01:c5:3f:b9:26:39:fc: 35:a4:62:62:77:c6:c6:b1:49:18:bd:e3:0a:cf:9e: b7:80:bb:01:84:ce:6f:6a:bf:c6:2c:c8:52:dd:98: cb:09:fb:2b:71:72:59:d5:f6:7f:1f:e4:df:f9:4c: 59:56:92:3b:3f:86:c9:8b:e0:d0:b0:42:51:bb:58: 23:7a:28:39:b4:71:f9:5c:19:a5:0a:34:bb:fe:74: bd:0a:af:f2:56:ce:ce:a8:75:22:61:e9:32:88:a9: d7:17:2b:94:9f:7f:e5:a6:6b:6a:5e:6e:c7:73:62: 27:c4:8c:79:46:11:9f:bc:0b:90:a7:a0:9f:ae:1a: e9:ef:e2:26:af:5a:25:68:55:93:ba:1b:5d:46:dc: 4d:b7:c7:19:12:fd:e0:03:1d:75:bf:3f:57:f0:82: c4:75:39:00:b1:a4:6f:bc:b2:7d:4d:63:65:71:bc: 4c:59:d8:26:a4:58:b5:72:a5:44:26:58:1a:d9:3c: 31:7d:78:08:90:7d:18:d2:25:67:96:c8:83:25:55: f6:ac:ab:bd:67:0c:be:c7:24:f6:22:31:44:25:f5: 0f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:08:3C:FA:D5:13:EC:67:A4:E2:58:15:29:A7:6A:13:06:D0:F7:B7 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0Qg8-tUT7Gek4lgVKadqEwbQ97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.170.0/24 5.175.217.0/24 89.106.95.0/24 89.144.63.0/24 Signature Algorithm: sha256WithRSAEncryption d5:d3:89:f1:77:9b:5e:5d:a6:7c:af:84:b2:95:ea:0f:0d:bf: 6c:cf:44:8c:78:62:5d:f5:80:31:d0:8f:19:42:d2:94:d0:97: 08:b0:5d:da:5d:09:a9:77:11:fb:ea:5f:eb:b4:13:5f:d4:43: b6:b1:94:bb:6b:9b:81:97:78:c8:47:fc:2b:01:a6:06:f0:cc: 7a:8c:ef:0c:3e:71:91:ee:13:cd:75:f5:c9:93:7d:65:2b:1c: e0:bf:82:a0:39:35:43:d6:63:10:16:66:f3:11:61:12:56:d2: 6c:fe:7f:7e:51:c1:58:f7:ab:ff:ba:30:4a:80:c7:fe:12:bb: 15:7c:97:8e:ab:b0:08:14:ad:92:ba:9d:01:7e:bd:f3:94:95: 61:54:e2:cd:99:e9:15:53:64:bb:cf:d2:a7:a9:7a:fd:ca:20: da:36:13:16:6f:dd:f5:ba:04:f2:8a:42:43:fc:46:61:cc:63: d9:92:d2:d0:a1:dc:c1:ea:4f:e1:59:ae:76:10:f3:c7:ff:b8: df:28:bb:39:79:4d:bd:f0:50:18:0f:44:61:e4:c1:41:ff:d9: 7b:ec:1f:62:35:5f:f8:a8:f7:65:3a:13:f1:aa:37:8c:7b:6c: eb:2d:98:e3:0b:5e:63:bd:9c:ae:50:02:8f:d3:36:4b:24:73: 72:7b:83:79 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZu6+8ECP3ZSKILiKnNmrnZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTE0MDUzMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTA4M2NmYWQ1MTNlYzY3YTRlMjU4MTUyOWE3NmExMzA2ZDBmN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUIWbDEeWBy5CN1F72tlW0l8QoAI pW7gaakP/F0Ie+msudeREQHFP7kmOfw1pGJid8bGsUkYveMKz563gLsBhM5var/G LMhS3ZjLCfsrcXJZ1fZ/H+Tf+UxZVpI7P4bJi+DQsEJRu1gjeig5tHH5XBmlCjS7 /nS9Cq/yVs7OqHUiYekyiKnXFyuUn3/lpmtqXm7Hc2InxIx5RhGfvAuQp6Cfrhrp 7+Imr1olaFWTuhtdRtxNt8cZEv3gAx11vz9X8ILEdTkAsaRvvLJ9TWNlcbxMWdgm pFi1cqVEJlga2TwxfXgIkH0Y0iVnlsiDJVX2rKu9Zwy+xyT2IjFEJfUP8QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNEIPPrVE+xnpOJYFSmnahMG0Pe3MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMFFnOC10VVQ3R2VrNGxnVkthZHFFd2JROTdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABa+qAwQA Ba/ZAwQAWWpfAwQAWZA/MA0GCSqGSIb3DQEBCwUAA4IBAQDV04nxd5teXaZ8r4Sy leoPDb9sz0SMeGJd9YAx0I8ZQtKU0JcIsF3aXQmpdxH76l/rtBNf1EO2sZS7a5uB l3jIR/wrAaYG8Mx6jO8MPnGR7hPNdfXJk31lKxzgv4KgOTVD1mMQFmbzEWESVtJs /n9+UcFY96v/ujBKgMf+ErsVfJeOq7AIFK2Sup0Bfr3zlJVhVOLNmekVU2S7z9Kn qXr9yiDaNhMWb931ugTyikJD/EZhzGPZktLQodzB6k/hWa52EPPH/7jfKLs5eU29 8FAYD0Rh5MFB/9l77B9iNV/4qPdlOhPxqjeMe2zrLZjjC15jvZyuUAKP0zZLJHNy e4N5 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:18 2026 by rpki-client