This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9Zo3y9cEIVKT_X5l-ICcqgw-VZs.roa File: 9Zo3y9cEIVKT_X5l-ICcqgw-VZs.roa (raw, json) Hash identifier: U8yGQQ+3Of5HzfCLpVVb0bnvnr6V3p3Dgu4ruNFXUl4= Subject key identifier: F5:9A:37:CB:D7:04:21:52:93:FD:7E:65:F8:80:9C:AA:0C:3E:55:9B Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D53D6A70769A85AEA5F547190785 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9Zo3y9cEIVKT_X5l-ICcqgw-VZs.roa Signing time: Fri 02 Jan 2026 00:19:27 +0000 ROA not before: Fri 02 Jan 2026 00:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48039 IP address blocks: 5.231.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d5:3d:6a:70:76:9a:85:ae:a5:f5:47:19:07:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f59a37cbd704215293fd7e65f8809caa0c3e559b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:54:08:33:3f:3a:21:d1:32:c4:d8:00:69: d2:f0:47:4f:b5:cf:cc:a2:78:be:d7:2d:74:1d:47: 97:a8:15:cf:f2:3a:10:ef:77:d8:2a:21:b9:99:e5: f6:1b:2b:ea:ba:86:f9:b4:03:5c:91:80:9f:31:57: 4d:09:08:fb:3f:d6:a5:01:f1:13:c2:62:30:28:4f: e1:24:67:82:78:ab:b9:32:14:21:71:00:97:a1:be: f8:0c:70:35:03:b8:10:ec:a9:f4:46:d5:6c:c9:c2: 18:11:a9:b5:94:36:75:21:6a:9a:41:ce:1e:58:3e: 8e:a6:88:4c:78:20:b8:43:2b:77:79:95:c2:22:62: 4c:40:30:9b:48:8d:05:c0:d6:5e:8a:e5:a6:67:83: 5d:ae:cc:ed:78:7a:01:22:5c:3a:29:fc:81:f4:77: a8:6f:57:3c:4a:a5:04:b7:cf:ff:78:f5:0d:82:a9: 27:c8:c9:aa:ca:56:ca:d3:8b:11:f8:38:b5:c2:e4: 76:16:ac:c9:a2:89:1a:49:24:89:e9:d1:b0:b5:37: b9:f8:bf:1c:8b:7b:48:9a:e0:a2:9f:3b:8c:7e:c6: 50:5d:4c:37:31:05:05:f1:bf:ea:9c:00:d3:a7:fa: 7c:ac:40:49:0a:1b:1d:17:be:b3:f4:5e:3d:1c:cc: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9A:37:CB:D7:04:21:52:93:FD:7E:65:F8:80:9C:AA:0C:3E:55:9B X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9Zo3y9cEIVKT_X5l-ICcqgw-VZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.38.0/24 Signature Algorithm: sha256WithRSAEncryption d8:54:db:de:ae:7a:1d:70:68:e5:3a:04:2a:54:3a:3a:cd:cd: de:d5:b0:b7:35:bb:eb:07:29:37:cd:85:98:89:d4:91:0c:7a: c9:97:d0:f3:81:f7:37:a1:24:c7:9f:ed:c2:fc:9a:54:d9:2a: 35:d5:9f:46:58:66:77:74:c9:df:83:9c:fd:85:3d:66:5c:7f: 51:7f:86:58:50:89:42:bf:d1:b3:80:89:2d:fa:ec:01:3d:c7: c1:45:38:82:6e:8f:39:96:88:0e:f8:7b:08:ef:11:de:5f:1b: 7d:95:ce:5c:a1:94:86:1b:7c:ca:7f:4f:7d:0c:0e:70:76:bc: 83:18:66:e3:fd:f0:a9:d3:b4:f0:b9:74:96:36:14:3c:52:a1: 6b:80:d2:31:bd:d6:e0:ec:b9:2a:87:94:fb:0b:26:ca:44:2a: 09:66:55:36:f3:8c:f3:99:65:d6:bb:7a:84:01:a9:41:fc:73: d8:9c:61:f9:7d:27:c4:ee:86:2c:13:48:5b:09:b6:15:e9:34: 73:91:2a:38:2c:a0:b8:f4:1c:bb:e2:17:86:10:11:f1:a2:89: 08:f8:e2:65:79:3e:22:92:48:ed:50:b6:0d:34:87:5d:bd:95: a9:04:f6:f3:fe:78:06:dc:80:24:96:a7:8d:91:91:a0:41:17: 3d:96:18:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EtU9anB2moWupfVHGQeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTlhMzdjYmQ3MDQyMTUyOTNmZDdlNjVmODgwOWNhYTBjM2U1NTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3hUCDM/OiHRMsTYAGnS8EdPtc/M oni+1y10HUeXqBXP8joQ73fYKiG5meX2Gyvquob5tANckYCfMVdNCQj7P9alAfET wmIwKE/hJGeCeKu5MhQhcQCXob74DHA1A7gQ7Kn0RtVsycIYEam1lDZ1IWqaQc4e WD6OpohMeCC4Qyt3eZXCImJMQDCbSI0FwNZeiuWmZ4NdrszteHoBIlw6KfyB9Heo b1c8SqUEt8//ePUNgqknyMmqylbK04sR+Di1wuR2FqzJookaSSSJ6dGwtTe5+L8c i3tImuCinzuMfsZQXUw3MQUF8b/qnADTp/p8rEBJChsdF76z9F49HMyCbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPWaN8vXBCFSk/1+ZfiAnKoMPlWbMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvOVpvM3k5Y0VJVktUX1g1bC1JQ2NxZ3ctVlpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABecmMA0G CSqGSIb3DQEBCwUAA4IBAQDYVNvernodcGjlOgQqVDo6zc3e1bC3NbvrByk3zYWY idSRDHrJl9Dzgfc3oSTHn+3C/JpU2So11Z9GWGZ3dMnfg5z9hT1mXH9Rf4ZYUIlC v9GzgIkt+uwBPcfBRTiCbo85logO+HsI7xHeXxt9lc5coZSGG3zKf099DA5wdryD GGbj/fCp07TwuXSWNhQ8UqFrgNIxvdbg7Lkqh5T7CybKRCoJZlU284zzmWXWu3qE AalB/HPYnGH5fSfE7oYsE0hbCbYV6TRzkSo4LKC49By74heGEBHxookI+OJleT4i kkjtULYNNIddvZWpBPbz/ngG3IAklqeNkZGgQRc9lhjN -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:17 2026 by rpki-client