This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Et0mq088OEA56eTuThed3raOamY.roa File: Et0mq088OEA56eTuThed3raOamY.roa (raw, json) Hash identifier: fPAozrG24OlK8lqhzpziJ4+XDBC1OE0urczv12U2drg= Subject key identifier: 12:DD:26:AB:4F:3C:38:40:39:E9:E4:EE:4E:17:9D:DE:B6:8E:6A:66 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C1300D64B5F8B4D942EAE1F66AABD91 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Et0mq088OEA56eTuThed3raOamY.roa Signing time: Fri 02 Jan 2026 00:19:38 +0000 ROA not before: Fri 02 Jan 2026 00:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213512 IP address blocks: 5.175.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:00:d6:4b:5f:8b:4d:94:2e:ae:1f:66:aa:bd:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12dd26ab4f3c384039e9e4ee4e179ddeb68e6a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:3f:4b:24:bf:f8:80:4a:ef:01:8f:16:cb: 70:28:52:ba:a4:b0:1c:a0:11:27:18:7b:46:39:67: 40:1c:21:7f:55:38:d8:fd:d9:24:f1:31:3d:82:ee: 78:f0:04:e1:d3:a4:d7:51:a0:0e:8b:07:15:70:d4: dd:c1:b8:19:7a:3f:28:a3:cb:46:cd:47:63:ed:1e: d1:b0:19:08:3c:82:de:09:1e:55:ed:68:18:8a:d2: 44:b5:ce:8e:38:45:e0:5d:c8:07:51:54:58:b6:04: 45:db:31:12:0d:cc:9a:f2:3d:de:b1:dd:0c:60:db: f8:87:ab:57:61:80:a6:53:dc:37:ae:14:1d:f1:57: 94:a7:c2:39:82:6a:19:0b:98:31:ed:48:e0:34:e5: b2:8a:64:e8:3d:b9:eb:11:29:24:75:07:b5:a7:2e: d0:3f:71:c4:dd:f2:c5:de:32:da:86:57:64:5d:8f: a3:f5:0d:d6:1c:30:25:36:d4:9a:7a:3c:cf:59:d4: 49:cb:2f:61:9f:ac:80:4f:3d:d9:01:82:fe:d7:c1: 9a:12:fa:a0:a4:ed:3f:84:1d:f9:fc:e3:ca:b1:d0: 04:11:a0:38:07:97:bf:9e:5d:5c:8e:25:f6:eb:66: 33:17:97:fe:a0:77:61:9f:b6:ca:52:34:ff:44:ab: ce:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DD:26:AB:4F:3C:38:40:39:E9:E4:EE:4E:17:9D:DE:B6:8E:6A:66 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Et0mq088OEA56eTuThed3raOamY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.142.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:96:1e:a7:4e:6c:76:1a:75:b2:5f:ac:b6:83:3c:3d:bd:9c: 02:1e:50:d7:44:7f:60:59:7d:19:60:30:f8:c6:7c:0b:eb:f0: b4:9c:a3:06:0f:17:5c:e6:b5:1b:c7:df:64:66:58:fd:ef:d6: 0f:10:bf:5d:6e:14:96:35:61:ef:6a:97:54:c6:83:85:65:4d: cb:9a:2a:6a:e2:4c:6b:67:7a:bd:85:78:34:f1:af:09:e9:d2: 18:a8:40:5d:d6:fc:d5:16:2c:02:c8:a1:f5:08:cc:c4:44:da: ca:a2:d2:9a:d2:b2:2f:6d:69:f5:fa:0e:18:38:a0:b1:78:55: f5:79:a3:0f:79:15:aa:04:0e:15:c7:be:76:b7:75:dc:e7:81: e7:1e:63:1e:45:fd:92:5b:21:0d:e4:c0:4f:dd:64:07:7d:78: 89:bb:4a:a1:69:1a:bd:e2:3a:20:3c:09:d2:bf:90:e6:6f:62: c1:a6:d6:1d:89:2d:34:5c:b9:94:45:01:5c:b7:57:a7:b8:ac: a4:47:2d:20:29:e6:0c:a5:73:99:be:68:b8:f7:55:8d:93:4d: c1:42:01:f4:45:1a:89:4f:66:83:e5:22:fd:37:81:3d:66:e2: 05:14:2c:6c:9a:73:38:51:ec:27:46:82:3e:0b:96:ea:30:2a: 6d:51:4a:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwDWS1+LTZQurh9mqr2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmRkMjZhYjRmM2MzODQwMzllOWU0ZWU0ZTE3OWRkZWI2OGU2YTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk8/SyS/+IBK7wGPFstwKFK6pLAc oBEnGHtGOWdAHCF/VTjY/dkk8TE9gu548ATh06TXUaAOiwcVcNTdwbgZej8oo8tG zUdj7R7RsBkIPILeCR5V7WgYitJEtc6OOEXgXcgHUVRYtgRF2zESDcya8j3esd0M YNv4h6tXYYCmU9w3rhQd8VeUp8I5gmoZC5gx7UjgNOWyimToPbnrESkkdQe1py7Q P3HE3fLF3jLahldkXY+j9Q3WHDAlNtSaejzPWdRJyy9hn6yATz3ZAYL+18GaEvqg pO0/hB35/OPKsdAEEaA4B5e/nl1cjiX262YzF5f+oHdhn7bKUjT/RKvO7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBLdJqtPPDhAOenk7k4Xnd62jmpmMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvRXQwbXEwODhPRUE1NmVUdVRoZWQzcmFPYW1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+OMA0G CSqGSIb3DQEBCwUAA4IBAQA9lh6nTmx2GnWyX6y2gzw9vZwCHlDXRH9gWX0ZYDD4 xnwL6/C0nKMGDxdc5rUbx99kZlj979YPEL9dbhSWNWHvapdUxoOFZU3Lmipq4kxr Z3q9hXg08a8J6dIYqEBd1vzVFiwCyKH1CMzERNrKotKa0rIvbWn1+g4YOKCxeFX1 eaMPeRWqBA4Vx752t3Xc54HnHmMeRf2SWyEN5MBP3WQHfXiJu0qhaRq94jogPAnS v5Dmb2LBptYdiS00XLmURQFct1enuKykRy0gKeYMpXOZvmi491WNk03BQgH0RRqJ T2aD5SL9N4E9ZuIFFCxsmnM4UewnRoI+C5bqMCptUUog -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:55 2026 by rpki-client