This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FEwMCYLdcMijQR3qJ6Y5Yr8Paf0.roa File: FEwMCYLdcMijQR3qJ6Y5Yr8Paf0.roa (raw, json) Hash identifier: 82USLk6uAR0fmDPdxW/Y7pNzDz/hJeK/hcY7owYe7Bo= Subject key identifier: 14:4C:0C:09:82:DD:70:C8:A3:41:1D:EA:27:A6:39:62:BF:0F:69:FD Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C1309942190FBE7AB89FF7300B0E979 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FEwMCYLdcMijQR3qJ6Y5Yr8Paf0.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215039 IP address blocks: 5.175.187.0/24 maxlen: 24 77.90.5.0/24 maxlen: 24 77.90.14.0/24 maxlen: 24 77.90.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:09:94:21:90:fb:e7:ab:89:ff:73:00:b0:e9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=144c0c0982dd70c8a3411dea27a63962bf0f69fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:96:82:c8:da:36:5f:e8:a3:6b:2e:ac:0d:b6: 2e:79:12:58:82:45:c6:e3:f9:3d:90:ac:45:53:d7: 16:84:c2:02:d4:06:ee:45:2c:b7:6c:51:dc:36:d5: e9:86:38:b9:26:00:a1:63:37:d8:25:a4:97:f9:40: 23:40:e5:a2:48:1b:f3:9e:9a:e3:26:40:80:81:d6: de:60:0b:0a:ad:3a:0a:b9:5e:1c:dc:f9:95:7e:e0: b2:c3:72:b0:c9:33:df:a2:93:df:ff:b1:21:28:cd: 53:49:40:cb:a5:3c:0c:3b:51:75:6b:99:f1:7a:92: 93:bf:68:54:7c:64:0a:45:24:26:3c:2c:92:3e:53: d8:2d:be:cc:ff:a0:8b:41:c2:11:79:28:d7:87:b0: 26:b1:ca:6a:7f:06:4e:b1:6c:f6:9d:1f:93:da:b5: 6b:7e:86:14:0f:09:d3:fd:53:ff:dc:13:84:36:ff: d7:ba:8d:29:b0:54:38:02:e7:81:dc:ad:69:c5:11: 7e:64:36:6e:cd:fd:9f:c6:52:a4:d4:50:60:f8:7a: 51:b7:83:98:28:30:af:07:c5:6c:8d:b8:fa:66:ee: 80:de:8f:6a:d9:10:93:50:a7:49:1d:a2:3f:5d:41: 6c:f5:fb:8b:49:17:83:3b:c8:c5:af:8a:37:05:04: d2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4C:0C:09:82:DD:70:C8:A3:41:1D:EA:27:A6:39:62:BF:0F:69:FD X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FEwMCYLdcMijQR3qJ6Y5Yr8Paf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.187.0/24 77.90.5.0/24 77.90.14.0/24 77.90.53.0/24 Signature Algorithm: sha256WithRSAEncryption 13:2c:e8:b1:da:60:67:92:4d:b2:e3:39:fd:7e:8e:3f:bc:87: d4:41:ef:d8:9b:57:24:67:f0:be:c7:cf:54:6e:a1:d1:92:35: 5c:d3:63:86:c8:95:5c:b2:04:01:43:5b:a9:b3:e6:45:18:94: cf:92:76:ca:31:2c:20:88:df:08:39:47:b1:c6:ef:3b:b2:1f: fe:49:9c:c9:09:50:07:c5:20:0f:0a:7c:1d:da:f4:2e:82:fc: d4:39:85:cb:70:2f:88:e3:ae:75:6a:02:9c:7b:5d:87:ca:5f: 79:a4:e6:d2:26:42:21:fb:19:36:47:fc:01:38:4e:dd:ed:f5: 7e:51:37:ab:91:85:1c:90:b2:1d:ef:1e:71:06:fa:c5:67:6f: 73:84:99:8e:9e:fa:be:0d:be:ee:e5:ac:e1:99:cf:e5:fa:9a: d0:6e:b8:41:02:26:c9:52:38:85:91:86:fa:85:70:e8:29:15: 15:25:49:1d:82:e5:5d:2b:19:2c:ef:31:ad:04:3c:a0:d8:c3: 4a:de:e1:3c:69:d4:cf:fe:77:2a:af:d1:16:56:28:7b:a8:6d: e5:7c:52:a7:9e:03:a5:ef:8e:c1:ff:ca:54:31:90:d4:49:2e: 86:ec:04:cb:68:b4:17:5a:fb:45:59:c0:58:bb:a3:74:5c:cc: f4:ce:b2:90 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8EwmUIZD756uJ/3MAsOl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDRjMGMwOTgyZGQ3MGM4YTM0MTFkZWEyN2E2Mzk2MmJmMGY2OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpaCyNo2X+ijay6sDbYueRJYgkXG 4/k9kKxFU9cWhMIC1AbuRSy3bFHcNtXphji5JgChYzfYJaSX+UAjQOWiSBvznprj JkCAgdbeYAsKrToKuV4c3PmVfuCyw3KwyTPfopPf/7EhKM1TSUDLpTwMO1F1a5nx epKTv2hUfGQKRSQmPCySPlPYLb7M/6CLQcIReSjXh7AmscpqfwZOsWz2nR+T2rVr foYUDwnT/VP/3BOENv/Xuo0psFQ4AueB3K1pxRF+ZDZuzf2fxlKk1FBg+HpRt4OY KDCvB8Vsjbj6Zu6A3o9q2RCTUKdJHaI/XUFs9fuLSReDO8jFr4o3BQTSEwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBRMDAmC3XDIo0Ed6iemOWK/D2n9MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvRkV3TUNZTGRjTWlqUVIzcUo2WTVZcjhQYWYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABa+7AwQA TVoFAwQATVoOAwQATVo1MA0GCSqGSIb3DQEBCwUAA4IBAQATLOix2mBnkk2y4zn9 fo4/vIfUQe/Ym1ckZ/C+x89UbqHRkjVc02OGyJVcsgQBQ1ups+ZFGJTPknbKMSwg iN8IOUexxu87sh/+SZzJCVAHxSAPCnwd2vQugvzUOYXLcC+I4651agKce12Hyl95 pObSJkIh+xk2R/wBOE7d7fV+UTerkYUckLId7x5xBvrFZ29zhJmOnvq+Db7u5azh mc/l+prQbrhBAibJUjiFkYb6hXDoKRUVJUkdguVdKxks7zGtBDyg2MNK3uE8adTP /ncqr9EWVih7qG3lfFKnngOl747B/8pUMZDUSS6G7ATLaLQXWvtFWcBYu6N0XMz0 zrKQ -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:38 2026 by rpki-client