This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6JkTnB5uKthCFDvZyWk2250mx0U.roa File: 6JkTnB5uKthCFDvZyWk2250mx0U.roa (raw, json) Hash identifier: 5CYh3lrc23Ko08X7U8zkYCcalI96fTQA5OVtxQjwjtQ= Subject key identifier: E8:99:13:9C:1E:6E:2A:D8:42:14:3B:D9:C9:69:36:DB:9D:26:C7:45 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D68E19DBB056527B33EC4060B491 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6JkTnB5uKthCFDvZyWk2250mx0U.roa Signing time: Fri 02 Jan 2026 00:19:27 +0000 ROA not before: Fri 02 Jan 2026 00:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48835 IP address blocks: 5.231.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d6:8e:19:db:b0:56:52:7b:33:ec:40:60:b4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e899139c1e6e2ad842143bd9c96936db9d26c745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8d:74:c0:cb:bd:59:d9:44:56:28:2c:79:13: 91:fd:9d:d9:95:c5:f8:ac:78:a5:2f:67:6e:60:95: af:66:4e:af:2f:6c:2e:ca:3b:af:bd:a4:9d:56:ea: 81:75:7c:64:49:7d:72:f8:12:1e:1a:b9:27:fe:27: a7:77:01:7e:86:c2:4f:20:8f:8a:1f:42:90:ac:7b: ba:71:82:88:1b:27:21:95:17:92:d6:7a:71:78:05: 5b:81:84:e5:83:9f:a2:03:d2:13:4f:c4:bc:f3:f5: 95:40:2c:22:aa:9e:53:db:d0:1a:12:b1:65:67:95: 1b:ba:e6:39:0d:b8:c1:39:42:3a:e9:7e:3c:31:6b: 1a:e9:13:ee:b7:cb:a1:b0:4a:4e:88:8b:cb:bc:f5: 39:59:4f:d2:bd:c8:01:6a:24:f3:3c:eb:2b:82:6c: 96:27:84:b4:49:84:23:53:75:06:17:ad:19:b2:ec: 5c:f3:d6:14:34:10:b8:6b:4e:7d:13:1e:d0:47:79: 7c:c6:c9:9f:33:84:c0:5c:49:32:a2:6b:eb:17:c6: 90:39:49:5e:3a:a7:59:f7:85:a0:b5:98:47:71:a5: b0:11:0a:a6:16:9b:66:47:7c:81:c6:58:91:26:5f: fb:6b:3f:f2:6e:1d:b5:af:a9:f6:5a:df:7e:13:ac: 78:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:99:13:9C:1E:6E:2A:D8:42:14:3B:D9:C9:69:36:DB:9D:26:C7:45 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6JkTnB5uKthCFDvZyWk2250mx0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.42.0/24 Signature Algorithm: sha256WithRSAEncryption 34:00:7d:35:59:eb:48:9d:0b:a0:29:52:40:f4:5d:b1:70:57: aa:17:eb:4b:6d:7f:63:5a:6d:89:b2:96:37:32:16:55:7f:3e: 9e:95:ce:0b:5d:94:aa:22:9b:f6:bd:39:61:96:d7:ff:48:3e: f8:40:30:55:4d:64:9e:20:11:75:46:00:99:d6:a7:84:ce:d4: 8e:1c:44:fd:ef:d2:d0:47:74:6a:65:00:a3:8c:0a:2d:7a:17: d4:75:5b:17:32:35:9f:fe:f8:c3:47:ef:9a:6b:ab:74:70:7a: 6f:44:5f:a9:d4:77:bd:70:7e:fe:3c:f6:38:e4:4d:54:49:48: 86:bd:bb:e8:94:e5:50:1c:dc:98:c4:e3:c9:a0:32:d3:2a:db: 6c:2b:b8:77:a2:3c:0d:ef:71:37:14:67:1f:bf:7a:58:02:bc: 54:7d:cd:17:78:ae:5f:ef:9c:b9:ab:28:2c:11:f2:07:35:b8: 53:19:57:8c:cb:9e:f6:bc:c0:fe:b8:65:5b:c2:ac:f8:ae:4a: 69:08:9d:12:8d:fb:67:2e:4b:50:a8:ca:0b:a8:10:02:b2:45: cc:7e:36:16:d8:6b:cd:b6:2a:a8:57:fe:21:25:98:80:57:ad: 63:88:ef:41:1e:ab:ea:62:09:56:f9:37:c5:5b:0a:23:4d:43: ff:3a:2c:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EtaOGduwVlJ7M+xAYLSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODk5MTM5YzFlNmUyYWQ4NDIxNDNiZDljOTY5MzZkYjlkMjZjNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9o10wMu9WdlEVigseROR/Z3ZlcX4 rHilL2duYJWvZk6vL2wuyjuvvaSdVuqBdXxkSX1y+BIeGrkn/iendwF+hsJPII+K H0KQrHu6cYKIGychlReS1npxeAVbgYTlg5+iA9ITT8S88/WVQCwiqp5T29AaErFl Z5UbuuY5DbjBOUI66X48MWsa6RPut8uhsEpOiIvLvPU5WU/SvcgBaiTzPOsrgmyW J4S0SYQjU3UGF60Zsuxc89YUNBC4a059Ex7QR3l8xsmfM4TAXEkyomvrF8aQOUle OqdZ94WgtZhHcaWwEQqmFptmR3yBxliRJl/7az/ybh21r6n2Wt9+E6x4MwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOiZE5webirYQhQ72clpNtudJsdFMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNkprVG5CNXVLdGhDRkR2WnlXazIyNTBteDBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABecqMA0G CSqGSIb3DQEBCwUAA4IBAQA0AH01WetInQugKVJA9F2xcFeqF+tLbX9jWm2JspY3 MhZVfz6elc4LXZSqIpv2vTlhltf/SD74QDBVTWSeIBF1RgCZ1qeEztSOHET979LQ R3RqZQCjjAotehfUdVsXMjWf/vjDR++aa6t0cHpvRF+p1He9cH7+PPY45E1USUiG vbvolOVQHNyYxOPJoDLTKttsK7h3ojwN73E3FGcfv3pYArxUfc0XeK5f75y5qygs EfIHNbhTGVeMy572vMD+uGVbwqz4rkppCJ0SjftnLktQqMoLqBACskXMfjYW2GvN tiqoV/4hJZiAV61jiO9BHqvqYglW+TfFWwojTUP/OiwW -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:56 2026 by rpki-client