This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A5-X63PYsnfLhmP-iSn393qAsME.roa File: A5-X63PYsnfLhmP-iSn393qAsME.roa (raw, json) Hash identifier: bbrQ0VhFzQpUspYGNSIaSEC+sVUJ+rBJmnJHxPqj3O0= Subject key identifier: 03:9F:97:EB:73:D8:B2:77:CB:86:63:FE:89:29:F7:F7:7A:80:B0:C1 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C13027B6FB2A150CA1483250AF801DF Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A5-X63PYsnfLhmP-iSn393qAsME.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214033 IP address blocks: 185.13.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:02:7b:6f:b2:a1:50:ca:14:83:25:0a:f8:01:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=039f97eb73d8b277cb8663fe8929f7f77a80b0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:43:69:8a:11:ad:80:6d:96:f5:cf:7b:fb: 4b:72:8d:5c:54:5a:5d:fe:74:16:27:99:63:59:db: 58:66:0d:81:db:c3:55:52:1b:da:b4:ef:6f:29:53: 1c:b1:22:8e:2c:8e:69:8a:81:d6:b4:13:e8:6b:a2: f1:1b:9f:1b:66:bd:34:ba:6b:82:2d:62:e9:a0:a5: df:e7:17:6d:e7:10:a5:51:38:29:34:7d:09:72:a6: 33:b2:f4:dd:96:ec:2b:81:4e:90:f4:0e:95:7e:d8: 38:dd:db:3f:b3:59:06:2c:f8:00:18:a7:42:17:f7: 11:34:71:d7:fb:2a:c3:4f:41:66:88:d7:06:d5:66: 72:d7:d4:c2:32:43:35:88:4e:77:1e:b1:b0:60:a0: b4:87:d4:16:d4:bf:de:6c:d8:c6:59:2d:27:6c:05: 4f:13:1f:2e:4c:3b:29:ff:11:b8:84:c9:65:a1:ff: 9a:a3:3c:19:34:f0:0d:e8:1b:ec:67:a6:c9:d2:b7: f0:bc:d8:f6:3e:0b:5c:65:55:2f:3e:47:71:05:06: 9c:8e:b7:c7:ac:95:b6:b1:c3:f9:ec:90:e1:94:2e: c4:f4:46:58:c8:6b:6f:44:d4:4c:a2:27:89:59:e3: 6f:81:12:77:57:7c:84:24:6b:f8:34:7a:f4:d0:9c: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9F:97:EB:73:D8:B2:77:CB:86:63:FE:89:29:F7:F7:7A:80:B0:C1 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A5-X63PYsnfLhmP-iSn393qAsME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.159.0/24 Signature Algorithm: sha256WithRSAEncryption ae:9f:ca:5e:4c:21:99:46:03:83:fe:09:b2:ee:61:37:98:9b: bd:b3:d0:db:b0:ea:49:63:0f:4f:4c:18:3e:28:52:04:3c:64: 70:bd:6a:02:13:2f:12:ef:23:a6:df:a4:34:eb:b2:36:00:3b: c3:20:d5:40:d9:01:91:e9:3c:f3:39:89:b6:45:00:ad:d5:f4: 3d:8e:0b:f2:5f:05:05:a6:21:6b:4c:9d:1f:17:77:86:ad:76: dd:7a:05:7e:30:0e:b9:6f:92:1e:2d:bf:31:74:10:f1:0e:e4: 26:a1:70:70:1e:3f:b6:54:7b:01:22:89:78:19:f3:58:1b:26: ad:6b:5f:6a:c2:c7:a5:47:f7:4c:3a:b0:f2:ed:ef:c8:96:74: 1a:de:72:3b:52:1a:ab:39:4a:21:f0:71:bb:3b:08:9b:ed:1b: 7a:ca:03:6d:9b:81:60:1a:1c:08:ba:0f:a1:36:f0:bc:52:0f: 61:da:85:a4:de:49:a4:bc:6b:9b:49:fc:86:48:1f:40:64:59: d8:7f:fa:80:30:9b:5e:0f:2d:0d:0a:92:45:bc:29:25:08:38: 7c:fe:f2:fc:4c:a0:b2:de:b1:a2:ae:75:5c:06:89:aa:5f:0e: f5:c3:d3:ec:6d:62:cc:06:e3:af:89:0c:66:96:4f:60:27:bf: 53:b3:a3:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwJ7b7KhUMoUgyUK+AHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzlmOTdlYjczZDhiMjc3Y2I4NjYzZmU4OTI5ZjdmNzdhODBiMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSxDaYoRrYBtlvXPe/tLco1cVFpd /nQWJ5ljWdtYZg2B28NVUhvatO9vKVMcsSKOLI5pioHWtBPoa6LxG58bZr00umuC LWLpoKXf5xdt5xClUTgpNH0JcqYzsvTdluwrgU6Q9A6Vftg43ds/s1kGLPgAGKdC F/cRNHHX+yrDT0FmiNcG1WZy19TCMkM1iE53HrGwYKC0h9QW1L/ebNjGWS0nbAVP Ex8uTDsp/xG4hMllof+aozwZNPAN6BvsZ6bJ0rfwvNj2PgtcZVUvPkdxBQacjrfH rJW2scP57JDhlC7E9EZYyGtvRNRMoieJWeNvgRJ3V3yEJGv4NHr00JxB6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAOfl+tz2LJ3y4Zj/okp9/d6gLDBMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvQTUtWDYzUFlzbmZMaG1QLWlTbjM5M3FBc01FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ2fMA0G CSqGSIb3DQEBCwUAA4IBAQCun8peTCGZRgOD/gmy7mE3mJu9s9DbsOpJYw9PTBg+ KFIEPGRwvWoCEy8S7yOm36Q067I2ADvDINVA2QGR6TzzOYm2RQCt1fQ9jgvyXwUF piFrTJ0fF3eGrXbdegV+MA65b5IeLb8xdBDxDuQmoXBwHj+2VHsBIol4GfNYGyat a19qwselR/dMOrDy7e/IlnQa3nI7UhqrOUoh8HG7Owib7Rt6ygNtm4FgGhwIug+h NvC8Ug9h2oWk3kmkvGubSfyGSB9AZFnYf/qAMJteDy0NCpJFvCklCDh8/vL8TKCy 3rGirnVcBomqXw71w9PsbWLMBuOviQxmlk9gJ79Ts6M3 -----END CERTIFICATE-----Generated at Sun Jan 18 15:47:09 2026 by rpki-client