This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DV2p8PCTRUrJxa0p1TrsuPQEjxY.roa File: DV2p8PCTRUrJxa0p1TrsuPQEjxY.roa (raw, json) Hash identifier: Qw7HYs6V1o2SUIMbtlZ4Iny4QJtBLyRPThT2t7TTVQc= Subject key identifier: 0D:5D:A9:F0:F0:93:45:4A:C9:C5:AD:29:D5:3A:EC:B8:F4:04:8F:16 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12FE147A8E3D7A989A0A86C81A3A89 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DV2p8PCTRUrJxa0p1TrsuPQEjxY.roa Signing time: Fri 02 Jan 2026 00:19:38 +0000 ROA not before: Fri 02 Jan 2026 00:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213413 IP address blocks: 5.175.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fe:14:7a:8e:3d:7a:98:9a:0a:86:c8:1a:3a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d5da9f0f093454ac9c5ad29d53aecb8f4048f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:af:ee:0e:d3:8c:a5:8b:3f:72:1b:26:ed: 70:d6:ad:47:35:52:73:2f:66:15:80:7b:80:a3:0b: 9e:a0:ae:44:83:10:28:12:05:13:8b:3a:30:35:de: c3:32:a8:af:57:a0:f6:f9:05:65:fb:df:f3:ec:81: 7c:8d:33:ad:d5:3d:b7:77:3b:9a:5d:c6:77:4a:0f: 13:bb:02:d5:7d:44:ac:83:bf:3f:c2:20:5a:7b:48: a6:a4:43:75:8b:95:61:e8:24:91:0a:f9:6e:c0:01: af:ef:a5:bb:98:a2:2a:5e:91:3f:cf:c6:41:7a:4d: 78:1f:2a:b3:f0:99:8f:79:da:85:b2:99:39:6c:01: b4:50:6d:6d:f6:98:f9:2a:c3:65:c7:41:ce:49:a4: 4c:42:5a:30:60:34:5d:7b:a3:9f:36:b1:94:bf:5f: c4:d9:1e:ea:1d:a6:f6:94:c0:ca:07:75:f5:cd:aa: 72:06:eb:78:29:b4:d6:25:1e:79:4b:3f:65:9f:d1: a7:51:6d:77:a8:e3:80:92:df:0e:4e:e5:f6:34:f3: 0e:0e:d6:75:27:67:89:32:e4:73:1f:1e:74:6d:c2: b9:99:54:6c:a6:94:53:50:78:37:c8:f6:6f:e4:a6: 38:7b:fd:53:ea:93:85:20:fd:1b:35:16:73:d7:10: 3b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5D:A9:F0:F0:93:45:4A:C9:C5:AD:29:D5:3A:EC:B8:F4:04:8F:16 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DV2p8PCTRUrJxa0p1TrsuPQEjxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.176.0/24 Signature Algorithm: sha256WithRSAEncryption b0:6b:3c:02:fb:a2:32:b9:cb:95:59:d4:df:21:8b:4e:b6:eb: 13:46:8e:b8:29:c6:44:b8:53:63:96:cb:8d:27:22:d2:70:37: 3e:61:d1:84:71:94:a4:0d:f0:9d:99:2e:cb:81:64:38:db:dd: 16:fb:1d:aa:c5:1c:99:e1:a5:0d:15:2d:f4:52:50:52:06:83: b4:7d:08:c9:ad:49:05:bc:af:9b:63:c8:90:46:75:20:ae:87: ce:78:7d:31:36:70:fa:83:f5:3d:3d:07:81:57:45:2a:9c:2f: 71:eb:60:a7:7a:f6:35:9f:42:78:c4:fa:19:b1:ee:81:58:35: bb:22:99:bd:e6:f4:d6:53:e9:8b:26:92:98:1f:59:2f:ba:f0: e4:aa:59:f7:24:de:36:14:ce:a8:08:a0:bd:85:f0:c9:5d:17: 15:aa:62:77:cc:00:d4:89:ce:8a:9f:80:35:24:b4:e6:c3:27: 64:27:d2:a9:e7:2a:52:8e:93:6d:6b:6d:13:dc:a7:68:2a:71: dd:e3:b0:d7:a9:0d:04:ed:cb:66:35:d7:7c:09:8e:45:be:6a: 2c:dc:85:5d:43:fe:d6:31:73:53:ce:39:0d:7b:8d:22:a5:88: 47:dc:e6:18:9a:b5:14:a2:c3:fc:ef:4f:3f:00:db:67:61:28: a7:9f:e8:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ev4Ueo49epiaCobIGjqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDVkYTlmMGYwOTM0NTRhYzljNWFkMjlkNTNhZWNiOGY0MDQ4ZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0emv7g7TjKWLP3IbJu1w1q1HNVJz L2YVgHuAowueoK5EgxAoEgUTizowNd7DMqivV6D2+QVl+9/z7IF8jTOt1T23dzua XcZ3Sg8TuwLVfUSsg78/wiBae0impEN1i5Vh6CSRCvluwAGv76W7mKIqXpE/z8ZB ek14Hyqz8JmPedqFspk5bAG0UG1t9pj5KsNlx0HOSaRMQlowYDRde6OfNrGUv1/E 2R7qHab2lMDKB3X1zapyBut4KbTWJR55Sz9ln9GnUW13qOOAkt8OTuX2NPMODtZ1 J2eJMuRzHx50bcK5mVRsppRTUHg3yPZv5KY4e/1T6pOFIP0bNRZz1xA7twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1dqfDwk0VKycWtKdU67Lj0BI8WMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvRFYycDhQQ1RSVXJKeGEwcDFUcnN1UFFFanhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+wMA0G CSqGSIb3DQEBCwUAA4IBAQCwazwC+6IyucuVWdTfIYtOtusTRo64KcZEuFNjlsuN JyLScDc+YdGEcZSkDfCdmS7LgWQ4290W+x2qxRyZ4aUNFS30UlBSBoO0fQjJrUkF vK+bY8iQRnUgrofOeH0xNnD6g/U9PQeBV0UqnC9x62CnevY1n0J4xPoZse6BWDW7 Ipm95vTWU+mLJpKYH1kvuvDkqln3JN42FM6oCKC9hfDJXRcVqmJ3zADUic6Kn4A1 JLTmwydkJ9Kp5ypSjpNta20T3KdoKnHd47DXqQ0E7ctmNdd8CY5Fvmos3IVdQ/7W MXNTzjkNe40ipYhH3OYYmrUUosP8708/ANtnYSinn+iF -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:00 2026 by rpki-client