This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8pTnvPaPHHKh2w8AW4cbQeOnkyc.roa File: 8pTnvPaPHHKh2w8AW4cbQeOnkyc.roa (raw, json) Hash identifier: fGZXR0Iq/zYyTK9nnM+TKcZ8yxeGPIc8L/UpWNKnfgw= Subject key identifier: F2:94:E7:BC:F6:8F:1C:72:A1:DB:0F:00:5B:87:1B:41:E3:A7:93:27 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BCF7F3A190CF56232E7EA294BF84D7CAF Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8pTnvPaPHHKh2w8AW4cbQeOnkyc.roa Signing time: Sun 18 Jan 2026 05:06:20 +0000 ROA not before: Sun 18 Jan 2026 05:06:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20326 IP address blocks: 5.175.169.0/24 maxlen: 24 5.175.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:7f:3a:19:0c:f5:62:32:e7:ea:29:4b:f8:4d:7c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 18 05:06:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f294e7bcf68f1c72a1db0f005b871b41e3a79327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:b4:a9:b8:4d:c3:d4:7f:34:a5:ca:16:92: 82:49:82:ef:4c:b3:63:b7:74:74:a6:d5:25:f6:f0: 0e:96:93:fc:cb:17:21:08:f5:7b:3d:c1:34:3a:c2: 21:17:ae:60:60:ad:b2:bd:92:72:4e:a7:86:49:e9: 51:43:77:ca:9f:61:de:6f:62:ea:c6:d2:0b:b4:84: 96:ef:86:0e:be:3d:b3:ad:97:dc:94:8c:30:a1:b5: b5:f4:3f:dd:09:30:d6:62:e3:b4:e8:59:1a:d3:bf: c0:b2:eb:67:26:e1:6b:db:d1:62:da:74:ff:35:fd: 1d:2e:db:42:91:70:6e:76:f8:56:cd:4e:f3:9d:ae: 1c:1b:0a:8c:3f:d1:11:b8:5c:8b:eb:b8:4d:c6:27: fb:a3:5c:e2:f3:a8:79:51:03:ec:e2:c3:a6:44:bf: e4:81:30:37:6a:b7:5a:02:4f:1e:d9:49:4a:3d:45: fd:cd:88:5d:c7:c4:5c:2d:f6:88:1b:fb:c3:74:0f: 58:21:4e:ee:1b:ee:70:11:42:e2:e9:b0:28:ae:7a: 80:5e:2a:84:4c:46:3f:32:86:98:df:cd:6d:f3:29: 96:1e:b0:62:0a:90:29:be:b4:51:8d:2a:f2:3c:eb: 41:c4:88:1b:b6:42:05:fe:15:b2:b3:42:b6:81:7a: 75:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:94:E7:BC:F6:8F:1C:72:A1:DB:0F:00:5B:87:1B:41:E3:A7:93:27 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8pTnvPaPHHKh2w8AW4cbQeOnkyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.169.0/24 5.175.179.0/24 Signature Algorithm: sha256WithRSAEncryption 79:4e:a0:c6:ee:40:83:da:4a:6e:41:52:14:3f:40:23:bc:1c: 10:86:d7:a3:b8:cc:2d:74:ac:7f:30:df:c2:50:74:3b:6b:7b: ee:20:02:57:36:90:17:54:de:d0:4a:a3:d1:23:8e:3f:f8:8e: d2:57:72:62:37:7a:5c:31:3e:9e:8b:2e:b2:4f:3e:31:9e:08: 6d:5b:75:f9:30:2d:db:92:3a:36:e9:f7:06:3c:ec:d8:7b:b6: 09:1b:e6:58:af:f1:92:d1:ee:6b:d2:52:25:9e:b6:4c:16:c1: cb:96:4c:a7:7d:c5:c9:88:b8:a3:82:77:c3:40:d1:ce:5b:ab: b4:2d:9a:f7:70:ed:18:28:8f:4f:bf:b1:cf:21:ca:91:1c:77: 1c:1e:dd:9d:47:a0:24:a8:43:54:03:cd:b1:32:22:a6:69:78: b9:ed:f3:66:61:f9:6e:3c:35:be:c4:01:88:0e:f8:08:ff:f1: 59:f4:d5:d2:a4:d7:5c:ef:ec:7e:c4:d3:d9:d8:59:c4:05:20: 45:c8:26:90:57:d0:dc:cd:d8:e6:57:10:ce:de:dd:68:c7:b1: 52:6c:56:ca:ea:43:29:e8:0c:85:fa:c6:f2:93:75:5c:2f:b9: 65:ea:7d:db:32:52:a8:de:9c:25:75:c3:87:8a:8e:b1:99:1a: b5:26:6d:29 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvPfzoZDPViMufqKUv4TXyvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTE4MDUwNjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjk0ZTdiY2Y2OGYxYzcyYTFkYjBmMDA1Yjg3MWI0MWUzYTc5MzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lq0qbhNw9R/NKXKFpKCSYLvTLNj t3R0ptUl9vAOlpP8yxchCPV7PcE0OsIhF65gYK2yvZJyTqeGSelRQ3fKn2Heb2Lq xtILtISW74YOvj2zrZfclIwwobW19D/dCTDWYuO06Fka07/AsutnJuFr29Fi2nT/ Nf0dLttCkXBudvhWzU7zna4cGwqMP9ERuFyL67hNxif7o1zi86h5UQPs4sOmRL/k gTA3ardaAk8e2UlKPUX9zYhdx8RcLfaIG/vDdA9YIU7uG+5wEULi6bAornqAXiqE TEY/MoaY381t8ymWHrBiCpApvrRRjSryPOtBxIgbtkIF/hWys0K2gXp1VwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPKU57z2jxxyodsPAFuHG0Hjp5MnMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvOHBUbnZQYVBISEtoMnc4QVc0Y2JRZU9ua3ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa+pAwQA Ba+zMA0GCSqGSIb3DQEBCwUAA4IBAQB5TqDG7kCD2kpuQVIUP0AjvBwQhtejuMwt dKx/MN/CUHQ7a3vuIAJXNpAXVN7QSqPRI44/+I7SV3JiN3pcMT6eiy6yTz4xnght W3X5MC3bkjo26fcGPOzYe7YJG+ZYr/GS0e5r0lIlnrZMFsHLlkynfcXJiLijgnfD QNHOW6u0LZr3cO0YKI9Pv7HPIcqRHHccHt2dR6AkqENUA82xMiKmaXi57fNmYflu PDW+xAGIDvgI//FZ9NXSpNdc7+x+xNPZ2FnEBSBFyCaQV9DczdjmVxDO3t1ox7FS bFbK6kMp6AyF+sbyk3VcL7ll6n3bMlKo3pwldcOHio6xmRq1Jm0p -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:15 2026 by rpki-client