This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0fVL8MQBiCTjAHQ2Rp47pdd-iY8.roa File: 0fVL8MQBiCTjAHQ2Rp47pdd-iY8.roa (raw, json) Hash identifier: cAapQWmP0uTPA8TlBd+unq2PAOG7NVD0BgGFTzAqvAs= Subject key identifier: D1:F5:4B:F0:C4:01:88:24:E3:00:74:36:46:9E:3B:A5:D7:7E:89:8F Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12EAAF88F82CF5CF01E9C1F866C9A2 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0fVL8MQBiCTjAHQ2Rp47pdd-iY8.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203446 IP address blocks: 5.83.141.0/24 maxlen: 24 2a02:2fc0:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ea:af:88:f8:2c:f5:cf:01:e9:c1:f8:66:c9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1f54bf0c4018824e3007436469e3ba5d77e898f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2a:11:19:bd:2b:ee:30:39:22:6d:6b:8f:45: 03:41:4e:21:75:68:08:b2:1d:2d:73:d1:c0:55:32: 8b:c4:1a:75:97:b7:a2:72:02:e8:6e:01:9a:65:5e: 05:79:ab:c1:b5:13:a5:ba:8a:af:64:37:12:8c:e4: 3a:74:e2:3a:b5:97:ce:cd:ed:9f:6a:2f:f5:c7:0b: 49:59:fe:c0:91:3a:b2:31:03:66:76:ef:ab:5c:73: 9e:48:4b:94:a8:98:80:d4:64:f0:c9:b2:66:63:33: 5a:19:29:a5:d6:29:1a:e4:6a:e1:fe:2c:df:59:34: 3f:db:4f:99:79:5b:66:55:26:70:d7:88:90:d1:97: e8:00:81:31:b8:22:c5:e7:0d:e3:42:bc:75:76:0b: 5f:3e:5b:ac:d0:6c:b5:ea:e6:97:f6:9f:98:fc:e2: a3:49:75:96:71:3d:35:08:14:3c:c5:2c:94:1b:23: fe:8f:b1:09:ae:2c:80:d5:60:da:cf:60:2a:bb:24: 0a:9c:97:a5:ec:78:9e:31:64:ed:13:31:c2:c4:0c: 63:ae:04:29:28:c5:96:05:7e:12:20:2a:a5:d2:26: 96:16:bc:e2:99:2d:9f:8b:77:78:16:c4:08:09:a3: a3:c4:37:89:89:93:a9:93:b5:2c:e4:63:79:ed:c3: e8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F5:4B:F0:C4:01:88:24:E3:00:74:36:46:9E:3B:A5:D7:7E:89:8F X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0fVL8MQBiCTjAHQ2Rp47pdd-iY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.141.0/24 IPv6: 2a02:2fc0:17::/48 Signature Algorithm: sha256WithRSAEncryption 44:67:21:6b:41:dd:d8:8c:ae:d3:38:1d:0c:7a:81:f8:22:fa: e0:a8:0d:8a:f9:c0:42:56:a7:05:89:9b:17:34:35:a3:4e:1a: ab:d6:41:ca:30:4b:05:ae:35:34:10:a5:be:93:e2:68:43:79: 14:c9:28:fb:35:72:28:47:88:48:49:c1:96:f9:2b:1b:25:42: a8:62:06:69:2f:d0:38:7d:0f:46:69:8a:f5:e3:15:55:32:13: 5f:71:51:02:80:4b:02:3e:e6:ae:14:37:c1:8b:91:0c:7a:1b: d8:cc:86:3b:18:75:70:e2:2a:76:c5:00:f6:7a:ba:92:77:0d: 20:22:f7:65:ec:d2:14:78:ca:01:21:90:64:f2:83:aa:87:37: ab:51:3a:80:c6:35:e5:b8:08:f3:6c:d6:8c:3f:ad:9c:0c:58: 0f:f7:b4:14:e0:5f:73:c8:4c:c0:4b:1e:bd:91:98:93:f3:45: 27:00:45:ef:18:24:44:96:13:2c:6c:b1:9a:c4:e5:15:72:59: f1:8c:98:89:d3:d2:c6:67:b0:4f:3f:ca:f9:f1:b9:37:18:61: 49:9e:f1:30:2f:3b:80:03:b2:77:15:65:31:cd:30:0e:fa:89: ab:a7:35:6a:23:16:37:9b:a5:d3:53:0a:71:6e:34:d1:43:3a: 55:95:3e:e6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EuqviPgs9c8B6cH4ZsmiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWY1NGJmMGM0MDE4ODI0ZTMwMDc0MzY0NjllM2JhNWQ3N2U4OThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yoRGb0r7jA5Im1rj0UDQU4hdWgI sh0tc9HAVTKLxBp1l7eicgLobgGaZV4FeavBtROluoqvZDcSjOQ6dOI6tZfOze2f ai/1xwtJWf7AkTqyMQNmdu+rXHOeSEuUqJiA1GTwybJmYzNaGSml1ika5Grh/izf WTQ/20+ZeVtmVSZw14iQ0ZfoAIExuCLF5w3jQrx1dgtfPlus0Gy16uaX9p+Y/OKj SXWWcT01CBQ8xSyUGyP+j7EJriyA1WDaz2AquyQKnJel7HieMWTtEzHCxAxjrgQp KMWWBX4SICql0iaWFrzimS2fi3d4FsQICaOjxDeJiZOpk7Us5GN57cPoZQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNH1S/DEAYgk4wB0NkaeO6XXfomPMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMGZWTDhNUUJpQ1RqQUhRMlJwNDdwZGQtaVk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQABVONMA8E AgACMAkDBwAqAi/AABcwDQYJKoZIhvcNAQELBQADggEBAERnIWtB3diMrtM4HQx6 gfgi+uCoDYr5wEJWpwWJmxc0NaNOGqvWQcowSwWuNTQQpb6T4mhDeRTJKPs1cihH iEhJwZb5KxslQqhiBmkv0Dh9D0ZpivXjFVUyE19xUQKASwI+5q4UN8GLkQx6G9jM hjsYdXDiKnbFAPZ6upJ3DSAi92Xs0hR4ygEhkGTyg6qHN6tROoDGNeW4CPNs1ow/ rZwMWA/3tBTgX3PITMBLHr2RmJPzRScARe8YJESWEyxssZrE5RVyWfGMmInT0sZn sE8/yvnxuTcYYUme8TAvO4ADsncVZTHNMA76iaunNWojFjebpdNTCnFuNNFDOlWV PuY= -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:25 2026 by rpki-client