This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0X2CchnUixk_m8dSvtvSbrZAjBo.roa File: 0X2CchnUixk_m8dSvtvSbrZAjBo.roa (raw, json) Hash identifier: X7WJilf4mo4EcSiCOjXPORlbEvaFt1AH+w98wiGjeBg= Subject key identifier: D1:7D:82:72:19:D4:8B:19:3F:9B:C7:52:BE:DB:D2:6E:B6:40:8C:1A Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12C9E5553C7CF66E115423181CE73A Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0X2CchnUixk_m8dSvtvSbrZAjBo.roa Signing time: Fri 02 Jan 2026 00:19:24 +0000 ROA not before: Fri 02 Jan 2026 00:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 5.83.153.0/24 maxlen: 24 5.175.168.0/24 maxlen: 24 5.175.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c9:e5:55:3c:7c:f6:6e:11:54:23:18:1c:e7:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d17d827219d48b193f9bc752bedbd26eb6408c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bf:9a:ce:c1:a3:a9:bf:5e:f3:c3:4b:e0:62: ef:de:ef:25:75:6c:7d:a4:05:4a:35:d8:1c:a3:80: 5d:99:e8:e2:47:8c:48:91:bb:a9:8c:48:34:17:e8: c1:d4:71:0d:db:15:9e:4b:4d:ee:b2:a0:c2:83:89: b2:c8:5d:06:b3:a7:8d:8e:30:32:90:ee:c0:3b:76: 8c:e5:13:ba:a1:a5:09:75:91:ea:a6:a4:f1:84:cc: 7d:dc:d8:be:07:e0:b0:46:2a:c1:41:bd:eb:90:7e: 59:69:e7:af:0e:fe:bf:67:6e:f7:93:a5:37:95:c4: 9e:25:29:c8:e1:d2:81:53:d9:96:d3:90:69:86:ac: f4:cc:3f:83:27:3a:bb:b3:e8:89:c6:16:9e:7a:98: 84:35:cb:78:89:08:01:06:f6:f3:d9:88:c6:52:b0: 33:28:0e:c6:73:e1:f8:86:52:a4:3d:f3:db:77:d6: 9e:30:9e:12:ae:bb:22:d4:b9:a9:cd:26:b4:f2:7c: 89:eb:31:11:c1:f9:36:7e:dc:38:13:21:c4:ce:de: 7b:8d:c2:94:73:26:93:4e:e2:ce:29:c6:8a:b4:6e: e2:a5:40:29:69:27:de:57:92:6b:e2:8c:0f:b6:2a: 59:d4:32:58:44:cc:b6:73:3c:2e:b5:9b:28:d2:dd: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7D:82:72:19:D4:8B:19:3F:9B:C7:52:BE:DB:D2:6E:B6:40:8C:1A X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0X2CchnUixk_m8dSvtvSbrZAjBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.153.0/24 5.175.168.0/24 5.175.195.0/24 Signature Algorithm: sha256WithRSAEncryption 05:5c:c0:8f:f4:cf:c5:c1:fb:80:d3:26:00:8e:46:d2:7b:b1: fe:ee:2f:70:6f:7a:bd:e9:d1:ad:55:18:d8:1c:ef:d8:09:e4: 1b:4e:e5:17:1f:5b:43:66:f7:b5:83:77:62:9a:5f:f1:d2:fa: 46:21:2d:c1:64:bc:0c:3b:0d:01:33:2f:87:68:62:d7:b7:80: d1:a9:c4:06:3b:e4:fe:a0:f7:c3:47:ce:45:7b:ab:72:9a:8e: ce:e0:f5:82:d0:20:56:7c:e7:74:3c:8c:9f:5e:98:8c:95:80: 6d:aa:8a:b6:1f:87:08:15:c2:56:57:00:1d:bc:d4:7f:97:f5: 27:7a:4c:56:5f:9c:94:dc:df:58:c2:59:c2:cc:6a:8b:01:b8: 31:42:ab:16:ff:74:e4:72:47:27:95:1a:24:ed:5b:1c:84:98: 2d:2a:d2:84:f7:9b:d1:fb:6e:63:ed:cb:c5:ed:08:d4:aa:8d: 2f:06:61:fc:6d:c1:da:a8:c5:b6:07:39:13:36:54:e1:64:df: bb:59:b0:d6:a4:bc:8f:fa:7e:62:c9:53:97:35:7a:f5:2c:37: 75:45:b8:ea:de:96:1e:3c:12:ad:a4:26:ca:1d:c1:20:18:11: 38:9c:b2:5e:1f:f1:db:a7:a4:d9:5a:e7:13:b9:12:fc:83:50: 03:b8:99:74 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EsnlVTx89m4RVCMYHOc6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTdkODI3MjE5ZDQ4YjE5M2Y5YmM3NTJiZWRiZDI2ZWI2NDA4YzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b+azsGjqb9e88NL4GLv3u8ldWx9 pAVKNdgco4BdmejiR4xIkbupjEg0F+jB1HEN2xWeS03usqDCg4myyF0Gs6eNjjAy kO7AO3aM5RO6oaUJdZHqpqTxhMx93Ni+B+CwRirBQb3rkH5ZaeevDv6/Z273k6U3 lcSeJSnI4dKBU9mW05Bphqz0zD+DJzq7s+iJxhaeepiENct4iQgBBvbz2YjGUrAz KA7Gc+H4hlKkPfPbd9aeMJ4Srrsi1LmpzSa08nyJ6zERwfk2ftw4EyHEzt57jcKU cyaTTuLOKcaKtG7ipUApaSfeV5Jr4owPtipZ1DJYRMy2czwutZso0t3X/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNF9gnIZ1IsZP5vHUr7b0m62QIwaMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMFgyQ2NoblVpeGtfbThkU3Z0dlNiclpBakJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABVOZAwQA Ba+oAwQABa/DMA0GCSqGSIb3DQEBCwUAA4IBAQAFXMCP9M/FwfuA0yYAjkbSe7H+ 7i9wb3q96dGtVRjYHO/YCeQbTuUXH1tDZve1g3diml/x0vpGIS3BZLwMOw0BMy+H aGLXt4DRqcQGO+T+oPfDR85Fe6tymo7O4PWC0CBWfOd0PIyfXpiMlYBtqoq2H4cI FcJWVwAdvNR/l/UnekxWX5yU3N9YwlnCzGqLAbgxQqsW/3TkckcnlRok7VschJgt KtKE95vR+25j7cvF7QjUqo0vBmH8bcHaqMW2BzkTNlThZN+7WbDWpLyP+n5iyVOX NXr1LDd1Rbjq3pYePBKtpCbKHcEgGBE4nLJeH/Hbp6TZWucTuRL8g1ADuJl0 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:39 2026 by rpki-client