This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1xAifaUCSwRN3WL9Iu1qeYW78kc.roa File: 1xAifaUCSwRN3WL9Iu1qeYW78kc.roa (raw, json) Hash identifier: qubKmlD+l7TFvm/1q2VOVSM8mxpgRZoXhkOLIlx6zhM= Subject key identifier: D7:10:22:7D:A5:02:4B:04:4D:DD:62:FD:22:ED:6A:79:85:BB:F2:47 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BC248E806911A785D4F7C2335E0F60690 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1xAifaUCSwRN3WL9Iu1qeYW78kc.roa Signing time: Thu 15 Jan 2026 15:31:56 +0000 ROA not before: Thu 15 Jan 2026 15:31:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19318 IP address blocks: 5.231.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:48:e8:06:91:1a:78:5d:4f:7c:23:35:e0:f6:06:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 15 15:31:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d710227da5024b044ddd62fd22ed6a7985bbf247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f8:e7:ed:98:9b:a4:52:ea:56:85:1b:52:38: 83:9f:ae:c3:0d:a7:f5:2c:69:b9:27:90:c9:ce:54: a1:7f:12:3d:02:98:61:34:6e:6a:f5:04:33:d0:51: c9:fe:33:7f:ba:e3:dd:0a:39:55:af:35:b8:69:25: 35:0c:d6:a1:7c:32:85:2e:e9:a7:a9:d7:05:aa:50: 8c:06:6c:3e:30:03:e8:b9:54:80:82:9d:d6:f4:9e: 17:5c:1f:86:fc:f7:1b:2a:74:a9:08:7b:ca:de:76: c6:f8:19:9f:3b:cc:be:22:e7:21:60:35:5f:bd:2c: 71:96:28:74:2d:e9:42:65:cc:de:e2:64:12:5b:a0: 30:d4:7d:c6:2c:a6:3a:43:db:60:84:3c:17:e0:47: f8:be:65:4b:44:c8:9f:b2:d1:c5:dd:ea:91:1a:fc: 1c:24:3f:2e:47:00:25:a4:8a:74:f0:3b:a7:00:62: 26:00:fa:ab:10:43:d0:79:5b:b3:b4:77:1a:24:a5: 6a:dd:ba:57:de:72:a4:07:ab:09:72:c4:e9:2f:1b: a6:d8:b3:d5:08:9b:b2:a8:9d:c6:41:43:23:75:9f: 9b:f4:91:45:bb:e0:7b:ac:e7:00:bb:dc:c9:08:05: ba:4d:38:55:dc:05:22:57:26:be:22:e5:15:02:59: c2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:10:22:7D:A5:02:4B:04:4D:DD:62:FD:22:ED:6A:79:85:BB:F2:47 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1xAifaUCSwRN3WL9Iu1qeYW78kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.41.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:86:61:06:c2:3d:6d:7b:4b:f3:23:16:6f:54:12:ba:f9:0c: ba:c4:7c:4c:1e:2e:99:b4:d5:32:6a:30:db:ef:4f:26:e2:aa: ff:e2:83:21:2f:4a:e5:3f:4c:6f:ec:de:2f:b8:ba:12:79:a9: 73:cb:cb:77:09:8c:ef:50:70:9f:ba:ad:52:d2:10:a8:e2:88: ca:ff:5e:54:7c:c9:20:a3:fd:eb:32:83:0f:7e:b5:7b:e0:65: ff:5d:8c:58:8e:85:67:42:24:65:63:60:53:46:7f:8f:09:83: f0:8d:a4:e7:34:f6:d3:67:cf:99:3c:d8:3e:dd:74:48:2b:e5: a0:b1:e9:54:1f:47:37:a4:de:1b:27:c0:13:fb:cb:3a:cd:7e: 1c:ef:38:81:11:01:d0:9c:9f:71:21:e2:1a:e3:67:f3:92:96: 57:ea:91:1a:4c:20:73:bb:7f:be:c6:46:f0:f7:f7:86:e0:88: c6:46:fb:b0:3b:50:86:7c:69:f8:d3:3c:7d:a2:93:2c:c7:90: 07:4f:c1:bc:63:fc:dd:ac:fd:dc:5d:f1:c8:8b:b2:79:21:e7: f4:74:a2:cc:84:41:f7:63:1c:2e:2b:ed:4c:63:d4:16:87:6a: f1:73:68:1e:f6:81:5c:5c:5f:a5:7a:b7:fa:c9:62:7e:a3:b1: 94:19:5f:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvCSOgGkRp4XU98IzXg9gaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTE1MTUzMTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzEwMjI3ZGE1MDI0YjA0NGRkZDYyZmQyMmVkNmE3OTg1YmJmMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/jn7ZibpFLqVoUbUjiDn67DDaf1 LGm5J5DJzlShfxI9AphhNG5q9QQz0FHJ/jN/uuPdCjlVrzW4aSU1DNahfDKFLumn qdcFqlCMBmw+MAPouVSAgp3W9J4XXB+G/PcbKnSpCHvK3nbG+BmfO8y+IuchYDVf vSxxlih0LelCZcze4mQSW6Aw1H3GLKY6Q9tghDwX4Ef4vmVLRMifstHF3eqRGvwc JD8uRwAlpIp08DunAGImAPqrEEPQeVuztHcaJKVq3bpX3nKkB6sJcsTpLxum2LPV CJuyqJ3GQUMjdZ+b9JFFu+B7rOcAu9zJCAW6TThV3AUiVya+IuUVAlnCjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNcQIn2lAksETd1i/SLtanmFu/JHMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMXhBaWZhVUNTd1JOM1dMOUl1MXFlWVc3OGtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABecpMA0G CSqGSIb3DQEBCwUAA4IBAQAMhmEGwj1te0vzIxZvVBK6+Qy6xHxMHi6ZtNUyajDb 708m4qr/4oMhL0rlP0xv7N4vuLoSealzy8t3CYzvUHCfuq1S0hCo4ojK/15UfMkg o/3rMoMPfrV74GX/XYxYjoVnQiRlY2BTRn+PCYPwjaTnNPbTZ8+ZPNg+3XRIK+Wg selUH0c3pN4bJ8AT+8s6zX4c7ziBEQHQnJ9xIeIa42fzkpZX6pEaTCBzu3++xkbw 9/eG4IjGRvuwO1CGfGn40zx9opMsx5AHT8G8Y/zdrP3cXfHIi7J5Ief0dKLMhEH3 YxwuK+1MY9QWh2rxc2ge9oFcXF+lerf6yWJ+o7GUGV+s -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:23 2026 by rpki-client