This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2NDy_S3RnuSShsBklhAd-P-pr-o.roa File: 2NDy_S3RnuSShsBklhAd-P-pr-o.roa (raw, json) Hash identifier: oiCjWcl6RNRe9gN5pzNYT0T92H5cfHKBu6lSIIVlWJA= Subject key identifier: D8:D0:F2:FD:2D:D1:9E:E4:92:86:C0:64:96:10:1D:F8:FF:A9:AF:EA Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12F74D79675EA702D6E13E48C73347 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2NDy_S3RnuSShsBklhAd-P-pr-o.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210537 IP address blocks: 5.83.148.0/24 maxlen: 24 5.175.210.0/24 maxlen: 24 2a02:2fc0:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f7:4d:79:67:5e:a7:02:d6:e1:3e:48:c7:33:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8d0f2fd2dd19ee49286c06496101df8ffa9afea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:e2:a2:bf:7c:f5:b9:b4:b5:81:13:67:7b: b4:e2:bb:9e:b5:2f:d8:46:44:fc:7d:ae:bb:6d:d5: 26:90:f6:8d:22:ad:7e:fa:4b:27:39:67:18:d3:b7: a0:a9:39:d7:a6:fe:37:2d:0b:d5:1d:86:d7:33:86: c0:04:9e:56:45:b9:e3:ee:56:d9:c4:9b:51:29:a2: 79:d2:b9:c9:8f:13:2f:d5:4f:16:ec:97:b0:79:df: 53:b8:ce:9b:f0:59:36:cb:f7:4e:a1:f8:b3:3d:c2: e8:e5:66:fb:4f:c9:d4:b3:41:d5:12:5c:4f:cf:46: f0:a4:89:21:44:0f:91:d9:36:5d:7e:10:bb:64:ff: 4a:40:de:f8:11:58:ec:c8:8f:c6:3d:ff:6a:e1:01: 1d:8b:90:52:f9:2b:3f:93:fa:7c:21:e9:04:51:eb: 33:c0:f4:a7:37:fd:10:1d:58:9c:e0:b6:45:b0:f0: 91:50:08:ba:41:e8:7d:78:33:e0:7f:4a:fc:4d:8d: c5:81:2b:b8:f2:a4:99:93:a7:3d:c2:8d:74:1f:79: 2c:94:3f:f6:2b:a5:78:99:6e:41:38:63:9e:a6:fa: d7:89:13:49:93:18:84:ad:8a:91:43:df:cb:cc:d1: a8:31:37:c7:08:6e:2a:96:4b:89:b7:bd:2c:7a:5a: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D0:F2:FD:2D:D1:9E:E4:92:86:C0:64:96:10:1D:F8:FF:A9:AF:EA X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2NDy_S3RnuSShsBklhAd-P-pr-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.148.0/24 5.175.210.0/24 IPv6: 2a02:2fc0:19::/48 Signature Algorithm: sha256WithRSAEncryption 59:ad:3b:b7:04:7b:bc:0d:00:f0:12:0a:1e:ec:a8:a1:c7:72: 2b:dc:c0:91:e2:25:ff:b6:45:44:8b:fc:be:93:ec:f9:2a:63: 60:1c:fb:42:6c:e4:b5:5d:1d:d7:6b:f8:06:af:68:5d:7b:46: 6b:90:09:bf:4b:00:1a:d7:19:1d:05:c5:d2:4f:85:78:2c:3e: d3:bd:90:bb:72:03:e7:fa:c4:b0:22:39:80:01:6d:43:b3:1a: 0a:85:4e:73:3c:8c:5a:18:b3:ac:00:86:e6:f4:49:9d:2c:ac: f8:42:af:ed:77:06:1d:51:50:49:3e:17:25:7e:cc:58:76:4f: 57:af:fe:fe:0b:d5:c8:db:0c:b6:6f:c1:d4:44:4f:0f:b9:f2: a1:8f:18:d7:0a:6f:51:06:1d:ee:ab:25:f3:44:61:65:bb:31: 94:78:f5:78:cc:89:4c:79:26:5f:6a:0f:d0:4e:39:aa:34:20: fd:c1:2a:a9:c2:c1:7a:44:52:b3:7c:0b:49:83:4a:4d:0a:47: 55:e7:f1:c8:05:1a:75:6a:10:06:bf:71:c2:84:97:5d:e6:6c: 5e:78:ec:55:75:7b:d3:6a:1e:5d:84:22:63:f7:64:4b:e9:f7: c0:3c:8c:17:e8:ed:a3:ac:a9:9d:11:ad:56:31:91:4a:e6:9f: e6:db:e1:17 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8EvdNeWdepwLW4T5IxzNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGQwZjJmZDJkZDE5ZWU0OTI4NmMwNjQ5NjEwMWRmOGZmYTlhZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy7ior989bm0tYETZ3u04ruetS/Y RkT8fa67bdUmkPaNIq1++ksnOWcY07egqTnXpv43LQvVHYbXM4bABJ5WRbnj7lbZ xJtRKaJ50rnJjxMv1U8W7Jewed9TuM6b8Fk2y/dOofizPcLo5Wb7T8nUs0HVElxP z0bwpIkhRA+R2TZdfhC7ZP9KQN74EVjsyI/GPf9q4QEdi5BS+Ss/k/p8IekEUesz wPSnN/0QHVic4LZFsPCRUAi6Qeh9eDPgf0r8TY3FgSu48qSZk6c9wo10H3kslD/2 K6V4mW5BOGOepvrXiRNJkxiErYqRQ9/LzNGoMTfHCG4qlkuJt70selo8sQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFNjQ8v0t0Z7kkobAZJYQHfj/qa/qMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMk5EeV9TM1JudVNTaHNCa2xoQWQtUC1wci1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQABVOUAwQA Ba/SMA8EAgACMAkDBwAqAi/AABkwDQYJKoZIhvcNAQELBQADggEBAFmtO7cEe7wN APASCh7sqKHHcivcwJHiJf+2RUSL/L6T7PkqY2Ac+0Js5LVdHddr+AavaF17RmuQ Cb9LABrXGR0FxdJPhXgsPtO9kLtyA+f6xLAiOYABbUOzGgqFTnM8jFoYs6wAhub0 SZ0srPhCr+13Bh1RUEk+FyV+zFh2T1ev/v4L1cjbDLZvwdRETw+58qGPGNcKb1EG He6rJfNEYWW7MZR49XjMiUx5Jl9qD9BOOao0IP3BKqnCwXpEUrN8C0mDSk0KR1Xn 8cgFGnVqEAa/ccKEl13mbF547FV1e9NqHl2EImP3ZEvp98A8jBfo7aOsqZ0RrVYx kUrmn+bb4Rc= -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:42 2026 by rpki-client