This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Fjz35VgG92mBe0n41kLY9XXl_Bw.roa File: Fjz35VgG92mBe0n41kLY9XXl_Bw.roa (raw, json) Hash identifier: oi9/8WDphLVkdmVfwmYN+Sj6+9+gnB49rRChYzZmbuA= Subject key identifier: 16:3C:F7:E5:58:06:F7:69:81:7B:49:F8:D6:42:D8:F5:75:E5:FC:1C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12E75BCCB3D2566A16C2622C4B99DD Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Fjz35VgG92mBe0n41kLY9XXl_Bw.roa Signing time: Fri 02 Jan 2026 00:19:32 +0000 ROA not before: Fri 02 Jan 2026 00:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200636 IP address blocks: 5.175.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e7:5b:cc:b3:d2:56:6a:16:c2:62:2c:4b:99:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=163cf7e55806f769817b49f8d642d8f575e5fc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:9e:07:ab:a9:2b:2a:2a:ff:71:f1:94:44: 33:5c:7f:79:6a:3e:9d:5f:f6:5a:b4:6e:cb:94:17: 0b:84:27:e1:cb:8a:fb:b9:9b:cf:8a:ab:f7:8f:52: be:19:58:93:c4:cf:65:c8:ba:03:4e:7f:82:df:f0: de:a0:00:90:2b:89:01:3e:07:55:e5:83:d5:d9:96: 50:97:d8:c5:32:4a:51:21:12:79:3b:35:b9:71:e4: 1d:fa:d5:f3:89:74:0f:37:70:39:96:73:55:62:09: c9:cf:46:c1:a6:34:ea:cb:f3:fc:58:06:28:95:3e: 81:08:0c:bd:a4:a7:c5:dc:4d:b6:0f:41:f6:19:36: 6e:7c:0a:17:23:10:66:7b:e7:fb:16:5e:10:e6:5a: b3:ca:87:32:da:3f:11:fe:eb:47:93:6a:30:7d:28: c4:b9:c4:5f:b8:43:1b:8c:23:78:74:d6:b8:85:37: d9:a8:a5:7d:2c:84:07:c6:58:06:8b:d7:b8:d5:24: c2:f8:5c:d8:9e:73:90:19:22:cb:ca:54:a9:0e:83: 2c:0d:55:51:cf:6a:69:fc:7f:38:68:4e:85:1c:1e: 74:d4:71:bf:c5:c9:dd:a8:ac:5d:ca:4c:52:33:d7: 43:7d:56:fc:34:f6:7f:88:7b:ab:8f:be:e5:da:04: a4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3C:F7:E5:58:06:F7:69:81:7B:49:F8:D6:42:D8:F5:75:E5:FC:1C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Fjz35VgG92mBe0n41kLY9XXl_Bw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.215.0/24 Signature Algorithm: sha256WithRSAEncryption af:eb:cd:e2:4c:11:38:72:83:32:fe:e5:39:96:a9:92:95:95: 76:6c:5e:84:85:58:84:87:fa:a0:62:b9:87:dd:78:00:24:b0: 60:8e:11:d1:b8:61:c6:3b:ef:f4:bb:d8:53:77:41:4b:fb:bc: 36:be:03:ec:80:27:9a:8c:1b:b7:f5:40:d3:41:97:fc:94:fc: 2c:ef:1a:d0:fc:e6:f4:08:72:4d:9f:47:81:57:11:da:f6:36: 5b:83:b6:61:76:46:b4:c6:d8:82:ca:7b:5e:30:c1:8e:8c:be: 5c:ad:31:c7:b0:9b:e3:39:bc:0d:38:90:ba:fc:21:f6:76:d0: 1b:d4:43:6a:f6:08:48:6d:c9:f3:b8:51:61:e3:ed:a7:17:de: 0b:a3:5c:df:c9:da:fb:d9:af:f0:43:d7:de:f5:27:15:10:01: 4c:5e:e6:7b:cc:0e:b8:e3:ae:ae:c7:79:cd:3e:a6:00:4c:e9: bb:05:5a:24:d8:1f:b0:35:9b:af:6c:ac:86:66:e7:36:f1:81: e2:1a:a1:f5:be:23:65:05:78:23:5b:13:5c:5b:83:56:a9:fe: 94:6b:a6:d0:a5:42:2a:77:15:a9:89:ff:a1:fa:29:58:7b:ac: 55:55:a4:46:67:f5:c5:6e:9c:59:7a:72:2b:5c:2a:76:33:6c: 6f:ef:1d:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EudbzLPSVmoWwmIsS5ndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjNjZjdlNTU4MDZmNzY5ODE3YjQ5ZjhkNjQyZDhmNTc1ZTVmYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY2eB6upKyoq/3HxlEQzXH95aj6d X/ZatG7LlBcLhCfhy4r7uZvPiqv3j1K+GViTxM9lyLoDTn+C3/DeoACQK4kBPgdV 5YPV2ZZQl9jFMkpRIRJ5OzW5ceQd+tXziXQPN3A5lnNVYgnJz0bBpjTqy/P8WAYo lT6BCAy9pKfF3E22D0H2GTZufAoXIxBme+f7Fl4Q5lqzyocy2j8R/utHk2owfSjE ucRfuEMbjCN4dNa4hTfZqKV9LIQHxlgGi9e41STC+FzYnnOQGSLLylSpDoMsDVVR z2pp/H84aE6FHB501HG/xcndqKxdykxSM9dDfVb8NPZ/iHurj77l2gSkTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBY89+VYBvdpgXtJ+NZC2PV15fwcMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvRmp6MzVWZ0c5Mm1CZTBuNDFrTFk5WFhsX0J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/XMA0G CSqGSIb3DQEBCwUAA4IBAQCv683iTBE4coMy/uU5lqmSlZV2bF6EhViEh/qgYrmH 3XgAJLBgjhHRuGHGO+/0u9hTd0FL+7w2vgPsgCeajBu39UDTQZf8lPws7xrQ/Ob0 CHJNn0eBVxHa9jZbg7Zhdka0xtiCynteMMGOjL5crTHHsJvjObwNOJC6/CH2dtAb 1ENq9ghIbcnzuFFh4+2nF94Lo1zfydr72a/wQ9fe9ScVEAFMXuZ7zA64466ux3nN PqYATOm7BVok2B+wNZuvbKyGZuc28YHiGqH1viNlBXgjWxNcW4NWqf6Ua6bQpUIq dxWpif+h+ilYe6xVVaRGZ/XFbpxZenIrXCp2M2xv7x1K -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:26 2026 by rpki-client